From 2521feb23c0bcb82a5da9eb010b3371eec8991b1 Mon Sep 17 00:00:00 2001 From: Keyfactor Date: Thu, 19 Dec 2024 19:21:11 +0000 Subject: [PATCH 1/2] Update generated README --- README.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 380aa62..8e0634d 100644 --- a/README.md +++ b/README.md @@ -38,7 +38,7 @@ The Keyfactor Universal Orchestrator may be installed on either Windows or Linux |Supports Management Remove|✓ |✓ | |Supports Create Store| | | |Supports Discovery| | | -|Supports Renrollment| | | +|Supports Reenrollment| | | |Supports Inventory|✓ |✓ | @@ -148,3 +148,6 @@ To create a Keyfactor Command certificate store of certificate store type Imperv - Store Path - Your Imperva account id. Please refer to the [Imperva documentation](https://docs.imperva.com/howto/bd68301b) as to how to find your Imperva account id. - Store Password - Your Imperva API id and API key concatenated with a comma (,}. For example: 12345,12345678-1234-1234-1234-123456789ABC. Please refer to the [Imperva documentation](https://docs.imperva.com/bundle/cloud-application-security/page/settings/api-keys.htm#:~:text=In%20the%20Cloud%20Security%20Console%20top%20menu%20bar%2C%20click%20Account,to%20create%20a%20new%20key.) as to how to create an API id and key. +When creating cert store type manually, that store property names and entry parameter names are case sensitive + + From 74d4af68086a580ac0178ec7bac1ef08293d6e2d Mon Sep 17 00:00:00 2001 From: Lee Fine <50836957+leefine02@users.noreply.github.com> Date: Fri, 24 Jan 2025 12:15:02 -0500 Subject: [PATCH 2/2] Ab#66561 (#15) * Update generated README * chore(docs): Regenerate screenshots --- ...low.yml => keyfactor-starter-workflow.yml} | 5 +- CHANGELOG.md | 4 + Imperva/Imperva.csproj | 16 +- README.md | 331 ++++++++++++------ docsource/content.md | 8 + .../Imperva-advanced-store-type-dialog.png | Bin 0 -> 41691 bytes .../Imperva-basic-store-type-dialog.png | Bin 0 -> 50811 bytes ...mperva-custom-fields-store-type-dialog.png | Bin 0 -> 28294 bytes docsource/imperva.md | 1 + integration-manifest.json | 65 ++-- readme-src/readme-pam-support.md | 3 - readme_source.md | 51 --- 12 files changed, 272 insertions(+), 212 deletions(-) rename .github/workflows/{keyfactor-bootstrap-workflow.yml => keyfactor-starter-workflow.yml} (73%) create mode 100644 docsource/content.md create mode 100644 docsource/images/Imperva-advanced-store-type-dialog.png create mode 100644 docsource/images/Imperva-basic-store-type-dialog.png create mode 100644 docsource/images/Imperva-custom-fields-store-type-dialog.png create mode 100644 docsource/imperva.md delete mode 100644 readme-src/readme-pam-support.md delete mode 100644 readme_source.md diff --git a/.github/workflows/keyfactor-bootstrap-workflow.yml b/.github/workflows/keyfactor-starter-workflow.yml similarity index 73% rename from .github/workflows/keyfactor-bootstrap-workflow.yml rename to .github/workflows/keyfactor-starter-workflow.yml index 6d8de53..61ea7a0 100644 --- a/.github/workflows/keyfactor-bootstrap-workflow.yml +++ b/.github/workflows/keyfactor-starter-workflow.yml @@ -1,4 +1,4 @@ -name: Keyfactor Bootstrap Workflow +name: Keyfactor Bootstrap Workflow on: workflow_dispatch: @@ -11,9 +11,10 @@ on: jobs: call-starter-workflow: - uses: keyfactor/actions/.github/workflows/starter.yml@v2 + uses: keyfactor/actions/.github/workflows/starter.yml@3.1.2 secrets: token: ${{ secrets.V2BUILDTOKEN}} APPROVE_README_PUSH: ${{ secrets.APPROVE_README_PUSH}} gpg_key: ${{ secrets.KF_GPG_PRIVATE_KEY }} gpg_pass: ${{ secrets.KF_GPG_PASSPHRASE }} + scan_token: ${{ secrets.SAST_TOKEN }} diff --git a/CHANGELOG.md b/CHANGELOG.md index 4340fb7..9ae0bf7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,7 @@ +v1.1.0 +- Modified build to produce .net6 and .net8 compatible versions +- Updated README documentation to use doctool + v1.0.1 - Bug fix: Individual site timeouts will no longer end inventory but will instead skip that site and move on. Inventory in those cases will produce a warning that certificates could not be retrieved for one or more sites, but it will still return all retrieved certificates. diff --git a/Imperva/Imperva.csproj b/Imperva/Imperva.csproj index 1137685..44a0582 100644 --- a/Imperva/Imperva.csproj +++ b/Imperva/Imperva.csproj @@ -1,9 +1,10 @@  - false - netcoreapp3.1 + true + net6.0;net8.0 true + disable @@ -11,10 +12,13 @@ - - - - + + Always + + + Always + + diff --git a/README.md b/README.md index 8e0634d..c0016c7 100644 --- a/README.md +++ b/README.md @@ -1,153 +1,258 @@ +

+ Imperva Universal Orchestrator Extension +

+ +

+ +Integration Status: production +Release +Issues +GitHub Downloads (all assets, all releases) +

+ +

+ + + Support + + · + + Installation + + · + + License + + · + + Related Integrations + +

-# Imperva +## Overview The Imperva Orchestrator Extension allows for the management of SSL certificates bound to web sites managed by the Imperva cloud-based firewall. -#### Integration status: Production - Ready for use in production environments. -## About the Keyfactor Universal Orchestrator Extension -This repository contains a Universal Orchestrator Extension which is a plugin to the Keyfactor Universal Orchestrator. Within the Keyfactor Platform, Orchestrators are used to manage “certificate stores” — collections of certificates and roots of trust that are found within and used by various applications. +## Compatibility -The Universal Orchestrator is part of the Keyfactor software distribution and is available via the Keyfactor customer portal. For general instructions on installing Extensions, see the “Keyfactor Command Orchestrator Installation and Configuration Guide” section of the Keyfactor documentation. For configuration details of this specific Extension see below in this readme. +This integration is compatible with Keyfactor Universal Orchestrator version 10.1 and later. -The Universal Orchestrator is the successor to the Windows Orchestrator. This Orchestrator Extension plugin only works with the Universal Orchestrator and does not work with the Windows Orchestrator. +## Support +The Imperva Universal Orchestrator extension is supported by Keyfactor for Keyfactor customers. If you have a support issue, please open a support ticket with your Keyfactor representative. If you have a support issue, please open a support ticket via the Keyfactor Support Portal at https://support.keyfactor.com. + +> To report a problem or suggest a new feature, use the **[Issues](../../issues)** tab. If you want to contribute actual bug fixes or proposed enhancements, use the **[Pull requests](../../pulls)** tab. -## Support for Imperva +## Requirements & Prerequisites -Imperva is supported by Keyfactor for Keyfactor customers. If you have a support issue, please open a support ticket via the Keyfactor Support Portal at https://support.keyfactor.com +Before installing the Imperva Universal Orchestrator extension, we recommend that you install [kfutil](https://github.com/Keyfactor/kfutil). Kfutil is a command-line tool that simplifies the process of creating store types, installing extensions, and instantiating certificate stores in Keyfactor Command. -###### To report a problem or suggest a new feature, use the **[Issues](../../issues)** tab. If you want to contribute actual bug fixes or proposed enhancements, use the **[Pull requests](../../pulls)** tab. ---- +The Imperva Orchestrator Extension requires the creation of an Imperva account id, API id, and API key. Please reference the [Imperva Documentation](https://docs.imperva.com/bundle/cloud-application-security/page/settings/api-keys.htm#:~:text=In%20the%20Cloud%20Security%20Console%20top%20menu%20bar%2C%20click%20Account,to%20create%20a%20new%20key) for more information on creating an API id and key for use with this integration. ---- +## Create the Imperva Certificate Store Type +To use the Imperva Universal Orchestrator extension, you **must** create the Imperva Certificate Store Type. This only needs to happen _once_ per Keyfactor Command instance. -## Keyfactor Version Supported -The minimum version of the Keyfactor Universal Orchestrator Framework needed to run this version of the extension is 10.1 -## Platform Specific Notes +* **Create Imperva using kfutil**: -The Keyfactor Universal Orchestrator may be installed on either Windows or Linux based platforms. The certificate operations supported by a capability may vary based what platform the capability is installed on. The table below indicates what capabilities are supported based on which platform the encompassing Universal Orchestrator is running. -| Operation | Win | Linux | -|-----|-----|------| -|Supports Management Add|✓ |✓ | -|Supports Management Remove|✓ |✓ | -|Supports Create Store| | | -|Supports Discovery| | | -|Supports Reenrollment| | | -|Supports Inventory|✓ |✓ | + ```shell + # Imperva + kfutil store-types create Imperva + ``` +* **Create Imperva manually in the Command UI**: +
Create Imperva manually in the Command UI -## PAM Integration + Create a store type called `Imperva` with the attributes in the tables below: -This orchestrator extension has the ability to connect to a variety of supported PAM providers to allow for the retrieval of various client hosted secrets right from the orchestrator server itself. This eliminates the need to set up the PAM integration on Keyfactor Command which may be in an environment that the client does not want to have access to their PAM provider. + #### Basic Tab + | Attribute | Value | Description | + | --------- | ----- | ----- | + | Name | Imperva | Display name for the store type (may be customized) | + | Short Name | Imperva | Short display name for the store type | + | Capability | Imperva | Store type name orchestrator will register with. Check the box to allow entry of value | + | Supports Add | ✅ Checked | Check the box. Indicates that the Store Type supports Management Add | + | Supports Remove | ✅ Checked | Check the box. Indicates that the Store Type supports Management Remove | + | Supports Discovery | 🔲 Unchecked | Indicates that the Store Type supports Discovery | + | Supports Reenrollment | 🔲 Unchecked | Indicates that the Store Type supports Reenrollment | + | Supports Create | 🔲 Unchecked | Indicates that the Store Type supports store creation | + | Needs Server | 🔲 Unchecked | Determines if a target server name is required when creating store | + | Blueprint Allowed | 🔲 Unchecked | Determines if store type may be included in an Orchestrator blueprint | + | Uses PowerShell | 🔲 Unchecked | Determines if underlying implementation is PowerShell | + | Requires Store Password | ✅ Checked | Enables users to optionally specify a store password when defining a Certificate Store. | + | Supports Entry Password | 🔲 Unchecked | Determines if an individual entry within a store can have a password. | -The secrets that this orchestrator extension supports for use with a PAM Provider are: + The Basic tab should look like this: -|Name|Description| -|----|-----------| -|StorePassword|The Keyfactor certificate store password contains the Imperva API Id and API Key concatenated with a comma (,). For example: 12345,12345678-1234-1234-1234-123456789ABC. Please refer to your Imperva documentation to learn more about creating API Ids and Keys. + ![Imperva Basic Tab](docsource/images/Imperva-basic-store-type-dialog.png) -It is not necessary to use a PAM Provider for all of the secrets available above. If a PAM Provider should not be used, simply enter in the actual value to be used, as normal. + #### Advanced Tab + | Attribute | Value | Description | + | --------- | ----- | ----- | + | Supports Custom Alias | Required | Determines if an individual entry within a store can have a custom Alias. | + | Private Key Handling | Required | This determines if Keyfactor can send the private key associated with a certificate to the store. Required because IIS certificates without private keys would be invalid. | + | PFX Password Style | Default | 'Default' - PFX password is randomly generated, 'Custom' - PFX password may be specified when the enrollment job is created (Requires the Allow Custom Password application setting to be enabled.) | -If a PAM Provider will be used for one of the fields above, start by referencing the [Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam). The GitHub repo for the PAM Provider to be used contains important information such as the format of the `json` needed. What follows is an example but does not reflect the `json` values for all PAM Providers as they have different "instance" and "initialization" parameter names and values. + The Advanced tab should look like this: -
General PAM Provider Configuration -

+ ![Imperva Advanced Tab](docsource/images/Imperva-advanced-store-type-dialog.png) + #### Custom Fields Tab + Custom fields operate at the certificate store level and are used to control how the orchestrator connects to the remote target server containing the certificate store to be managed. The following custom fields should be added to the store type: + | Name | Display Name | Description | Type | Default Value/Options | Required | + | ---- | ------------ | ---- | --------------------- | -------- | ----------- | -### Example PAM Provider Setup + The Custom Fields tab should look like this: -To use a PAM Provider to resolve a field, in this example the __Server Password__ will be resolved by the `Hashicorp-Vault` provider, first install the PAM Provider extension from the [Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam) on the Universal Orchestrator. + ![Imperva Custom Fields Tab](docsource/images/Imperva-custom-fields-store-type-dialog.png) -Next, complete configuration of the PAM Provider on the UO by editing the `manifest.json` of the __PAM Provider__ (e.g. located at extensions/Hashicorp-Vault/manifest.json). The "initialization" parameters need to be entered here: -~~~ json - "Keyfactor:PAMProviders:Hashicorp-Vault:InitializationInfo": { - "Host": "http://127.0.0.1:8200", - "Path": "v1/secret/data", - "Token": "xxxxxx" - } -~~~ -After these values are entered, the Orchestrator needs to be restarted to pick up the configuration. Now the PAM Provider can be used on other Orchestrator Extensions. +

-### Use the PAM Provider -With the PAM Provider configured as an extenion on the UO, a `json` object can be passed instead of an actual value to resolve the field with a PAM Provider. Consult the [Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam) for the specific format of the `json` object. +## Installation -To have the __Server Password__ field resolved by the `Hashicorp-Vault` provider, the corresponding `json` object from the `Hashicorp-Vault` extension needs to be copied and filed in with the correct information: +1. **Download the latest Imperva Universal Orchestrator extension from GitHub.** -~~~ json -{"Secret":"my-kv-secret","Key":"myServerPassword"} -~~~ + Navigate to the [Imperva Universal Orchestrator extension GitHub version page](https://github.com/Keyfactor/imperva-orchestrator/releases/latest). Refer to the compatibility matrix below to determine whether the `net6.0` or `net8.0` asset should be downloaded. Then, click the corresponding asset to download the zip archive. + | Universal Orchestrator Version | Latest .NET version installed on the Universal Orchestrator server | `rollForward` condition in `Orchestrator.runtimeconfig.json` | `imperva-orchestrator` .NET version to download | + | --------- | ----------- | ----------- | ----------- | + | Older than `11.0.0` | | | `net6.0` | + | Between `11.0.0` and `11.5.1` (inclusive) | `net6.0` | | `net6.0` | + | Between `11.0.0` and `11.5.1` (inclusive) | `net8.0` | `Disable` | `net6.0` | + | Between `11.0.0` and `11.5.1` (inclusive) | `net8.0` | `LatestMajor` | `net8.0` | + | `11.6` _and_ newer | `net8.0` | | `net8.0` | -This text would be entered in as the value for the __Server Password__, instead of entering in the actual password. The Orchestrator will attempt to use the PAM Provider to retrieve the __Server Password__. If PAM should not be used, just directly enter in the value for the field. -

-
- - - - ---- - - - -## Versioning - -The version number of a the Imperva Orchestrator Extension can be verified by right clicking on the Imperva.dll file in the Extensions/Imperva installation folder, selecting Properties, and then clicking on the Details tab. -  -  -## Imperva Orchestrator Extension Installation -1. Create the Imperva certificate store type manually in Keyfactor Command by clicking on Settings (the gear icon on the top right) => Certificate Store Types => Add and then entering the settings described in the next section - Certificate Store Type Settings, OR by utilizing the CURL script found under the Certificate Store Type CURL Script folder in this repo. -2. Stop the Keyfactor Universal Orchestrator Service for the orchestrator you plan to install this extension to run on. -3. In the Keyfactor Orchestrator installation folder (by convention usually C:\Program Files\Keyfactor\Keyfactor Orchestrator), find the "Extensions" folder. Underneath that, create a new folder named "Imperva" (you may choose to use a different name if you wish). -4. Download the latest version of the Imperva Orchestrator Extension from [GitHub](https://github.com/Keyfactor/imperva-orchestrator). Click on the "Latest" release link on the right hand side of the main page and download the first zip file. -5. Copy the contents of the download installation zip file to the folder created in Step 3. -6. (Optional) If you decide to create the certificate store type with a short name different than the suggested value of "Imperva", edit the manifest.json file in the folder you created in step 3, and modify each "ShortName" in each "Certstores.{ShortName}.{Operation}" line with the ShortName you used to create the certificate store type in Keyfactor Command. If you created it with the suggested value, this step can be skipped. -7. Start the Keyfactor Universal Orchestrator Service. -8. In Keyfactor Command, go to Orchestrators => Management and approve the Keyfactor Orchestrator containing the Imperva capability that you just installed by selecting the orchestrator and clicking APPROVE. -  -  -## Certificate Store Type Settings -Below are the values you need to enter if you choose to manually create the Imperva certificate store type in the Keyfactor Command UI (related to Step 1 of Imperva Orchestrator Extension Installation above). - -*Basic Tab:* -- **Name** – Required. The display name you wish to use for the new certificate store type. Suggested value - Imperva -- **ShortName** - Required. Suggested value - Imperva. If you choose to use a different value, please refer to Step 6 under Imperva Orchestrator Extension Installation above. -- **Custom Capability** - Unchecked -- **Supported Job Types** - Inventory, Add, and Remove should all be checked. -- **Needs Server** - Unchecked -- **Blueprint Allowed** - Checked if you wish to make use of blueprinting. Please refer to the Keyfactor Command Reference Guide for more details on this feature. -- **Uses PoserShell** - Unchecked -- **Requires Store Password** - Checked. -- **Supports Entry Password** - Unchecked. - -*Advanced Tab:* -- **Store Path Type** - Freeform -- **Supports Custom Alias** - Required -- **Private Key Handling** - Required -- **PFX Password Style** - Default - -*Custom Fields Tab:* -None - -*Entry Parameters:* -None -  -  -## Creating an Imperva Certificate Store in Keyfactor Command -To create a Keyfactor Command certificate store of certificate store type Imperva, go to Locations => Certificate Stores and click ADD. Then enter the following: -- Category - Imperva (or the alternate ShortName value you entered when creating your certificate store type). -- Container - Optional. Refer to Keyfactor Command documentation about this feature. -- Client Machine - The URL that will be used as the base URL for Imperva endpoint calls. Should be https://my.imperva.com -- Store Path - Your Imperva account id. Please refer to the [Imperva documentation](https://docs.imperva.com/howto/bd68301b) as to how to find your Imperva account id. -- Store Password - Your Imperva API id and API key concatenated with a comma (,}. For example: 12345,12345678-1234-1234-1234-123456789ABC. Please refer to the [Imperva documentation](https://docs.imperva.com/bundle/cloud-application-security/page/settings/api-keys.htm#:~:text=In%20the%20Cloud%20Security%20Console%20top%20menu%20bar%2C%20click%20Account,to%20create%20a%20new%20key.) as to how to create an API id and key. - -When creating cert store type manually, that store property names and entry parameter names are case sensitive + Unzip the archive containing extension assemblies to a known location. + + > **Note** If you don't see an asset with a corresponding .NET version, you should always assume that it was compiled for `net6.0`. + +2. **Locate the Universal Orchestrator extensions directory.** + + * **Default on Windows** - `C:\Program Files\Keyfactor\Keyfactor Orchestrator\extensions` + * **Default on Linux** - `/opt/keyfactor/orchestrator/extensions` + +3. **Create a new directory for the Imperva Universal Orchestrator extension inside the extensions directory.** + + Create a new directory called `imperva-orchestrator`. + > The directory name does not need to match any names used elsewhere; it just has to be unique within the extensions directory. + +4. **Copy the contents of the downloaded and unzipped assemblies from __step 2__ to the `imperva-orchestrator` directory.** + +5. **Restart the Universal Orchestrator service.** + + Refer to [Starting/Restarting the Universal Orchestrator service](https://software.keyfactor.com/Core-OnPrem/Current/Content/InstallingAgents/NetCoreOrchestrator/StarttheService.htm). + + +6. **(optional) PAM Integration** + + The Imperva Universal Orchestrator extension is compatible with all supported Keyfactor PAM extensions to resolve PAM-eligible secrets. PAM extensions running on Universal Orchestrators enable secure retrieval of secrets from a connected PAM provider. + + To configure a PAM provider, [reference the Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam) to select an extension, and follow the associated instructions to install it on the Universal Orchestrator (remote). + + +> The above installation steps can be supplimented by the [official Command documentation](https://software.keyfactor.com/Core-OnPrem/Current/Content/InstallingAgents/NetCoreOrchestrator/CustomExtensions.htm?Highlight=extensions). + + + +## Defining Certificate Stores + + + +* **Manually with the Command UI** + +
Create Certificate Stores manually in the UI + + 1. **Navigate to the _Certificate Stores_ page in Keyfactor Command.** + + Log into Keyfactor Command, toggle the _Locations_ dropdown, and click _Certificate Stores_. + + 2. **Add a Certificate Store.** + + Click the Add button to add a new Certificate Store. Use the table below to populate the **Attributes** in the **Add** form. + | Attribute | Description | + | --------- | ----------- | + | Category | Select "Imperva" or the customized certificate store name from the previous step. | + | Container | Optional container to associate certificate store with. | + | Client Machine | The URL that will be used as the base URL for Imperva endpoint calls. Should be https://my.imperva.com | + | Store Path | Your Imperva account id. Please refer to the [Imperva documentation](https://docs.imperva.com/howto/bd68301b) as to how to find your Imperva account id. | + | Orchestrator | Select an approved orchestrator capable of managing `Imperva` certificates. Specifically, one with the `Imperva` capability. | + | Store Password | Your Imperva API id and API key concatenated with a comma (,}. For example: 12345,12345678-1234-1234-1234-123456789ABC. Please refer to the [Imperva documentation](https://docs.imperva.com/bundle/cloud-application-security/page/settings/api-keys.htm#:~:text=In%20the%20Cloud%20Security%20Console%20top%20menu%20bar%2C%20click%20Account,to%20create%20a%20new%20key.) as to how to create an API id and key. | + + + +
Attributes eligible for retrieval by a PAM Provider on the Universal Orchestrator + + If a PAM provider was installed _on the Universal Orchestrator_ in the [Installation](#Installation) section, the following parameters can be configured for retrieval _on the Universal Orchestrator_. + | Attribute | Description | + | --------- | ----------- | + | Store Password | Your Imperva API id and API key concatenated with a comma (,}. For example: 12345,12345678-1234-1234-1234-123456789ABC. Please refer to the [Imperva documentation](https://docs.imperva.com/bundle/cloud-application-security/page/settings/api-keys.htm#:~:text=In%20the%20Cloud%20Security%20Console%20top%20menu%20bar%2C%20click%20Account,to%20create%20a%20new%20key.) as to how to create an API id and key. | + + Please refer to the **Universal Orchestrator (remote)** usage section ([PAM providers on the Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam)) for your selected PAM provider for instructions on how to load attributes orchestrator-side. + + > Any secret can be rendered by a PAM provider _installed on the Keyfactor Command server_. The above parameters are specific to attributes that can be fetched by an installed PAM provider running on the Universal Orchestrator server itself. +
+ + +
+ +* **Using kfutil** + +
Create Certificate Stores with kfutil + + 1. **Generate a CSV template for the Imperva certificate store** + + ```shell + kfutil stores import generate-template --store-type-name Imperva --outpath Imperva.csv + ``` + 2. **Populate the generated CSV file** + + Open the CSV file, and reference the table below to populate parameters for each **Attribute**. + | Attribute | Description | + | --------- | ----------- | + | Category | Select "Imperva" or the customized certificate store name from the previous step. | + | Container | Optional container to associate certificate store with. | + | Client Machine | The URL that will be used as the base URL for Imperva endpoint calls. Should be https://my.imperva.com | + | Store Path | Your Imperva account id. Please refer to the [Imperva documentation](https://docs.imperva.com/howto/bd68301b) as to how to find your Imperva account id. | + | Orchestrator | Select an approved orchestrator capable of managing `Imperva` certificates. Specifically, one with the `Imperva` capability. | + | Store Password | Your Imperva API id and API key concatenated with a comma (,}. For example: 12345,12345678-1234-1234-1234-123456789ABC. Please refer to the [Imperva documentation](https://docs.imperva.com/bundle/cloud-application-security/page/settings/api-keys.htm#:~:text=In%20the%20Cloud%20Security%20Console%20top%20menu%20bar%2C%20click%20Account,to%20create%20a%20new%20key.) as to how to create an API id and key. | + + + +
Attributes eligible for retrieval by a PAM Provider on the Universal Orchestrator + + If a PAM provider was installed _on the Universal Orchestrator_ in the [Installation](#Installation) section, the following parameters can be configured for retrieval _on the Universal Orchestrator_. + | Attribute | Description | + | --------- | ----------- | + | Store Password | Your Imperva API id and API key concatenated with a comma (,}. For example: 12345,12345678-1234-1234-1234-123456789ABC. Please refer to the [Imperva documentation](https://docs.imperva.com/bundle/cloud-application-security/page/settings/api-keys.htm#:~:text=In%20the%20Cloud%20Security%20Console%20top%20menu%20bar%2C%20click%20Account,to%20create%20a%20new%20key.) as to how to create an API id and key. | + + > Any secret can be rendered by a PAM provider _installed on the Keyfactor Command server_. The above parameters are specific to attributes that can be fetched by an installed PAM provider running on the Universal Orchestrator server itself. +
+ + + 3. **Import the CSV file to create the certificate stores** + + ```shell + kfutil stores import csv --store-type-name Imperva --file Imperva.csv + ``` +
+ +> The content in this section can be supplimented by the [official Command documentation](https://software.keyfactor.com/Core-OnPrem/Current/Content/ReferenceGuide/Certificate%20Stores.htm?Highlight=certificate%20store). + + + + + +## License + +Apache License 2.0, see [LICENSE](LICENSE). +## Related Integrations +See all [Keyfactor Universal Orchestrator extensions](https://github.com/orgs/Keyfactor/repositories?q=orchestrator). \ No newline at end of file diff --git a/docsource/content.md b/docsource/content.md new file mode 100644 index 0000000..fe8fb14 --- /dev/null +++ b/docsource/content.md @@ -0,0 +1,8 @@ +## Overview + +The Imperva Orchestrator Extension allows for the management of SSL certificates bound to web sites managed by the Imperva cloud-based firewall. + +## Requirements + +The Imperva Orchestrator Extension requires the creation of an Imperva account id, API id, and API key. Please reference the [Imperva Documentation](https://docs.imperva.com/bundle/cloud-application-security/page/settings/api-keys.htm#:~:text=In%20the%20Cloud%20Security%20Console%20top%20menu%20bar%2C%20click%20Account,to%20create%20a%20new%20key) for more information on creating an API id and key for use with this integration. + diff --git a/docsource/images/Imperva-advanced-store-type-dialog.png b/docsource/images/Imperva-advanced-store-type-dialog.png new file mode 100644 index 0000000000000000000000000000000000000000..2b71e8ce6f47e0b32fe97f5ac26c1e77f438c5f8 GIT binary patch literal 41691 zcmc$`bx@XV+XsjRDxfGJ0s>;tCEchJam9Ha@r&caTT)yA{XX7(BqStsA;AyQNJuvW;r|79k>L|ROm`V1 zq~}ONAKrbmkKUNHv&NFWZr(lC?RVO~@e3*5!~Z}nNeC0;_M?|0d>9x+PB*Y68@_to zq>zpL{psfu;Ut{Zd+8X0g2dHk5z|Bt1&?J~en}F#O%Jm*&1vj`993aRUz<>xfo@^z7o|m-2Gll-^zoMq>pcJG*uF)b#bcCh?gQBBfP)VX;d_IeM}vwg0SD>wFjJdeGzKBO46xcI7moJ)#XguMB5j06Z21otQu@p?31}?AE+s;m{#n>BY3!$DwuXIa<=ft#Ox&g1Nj|8zW^@WIvPU z&%GuF69o@abl1)m+Bt&k7fIqeCjP|7gk{KH@%ZvH*c+pCbX*^o$U+oVYiVeFNlz!o z^F#iF@yg63u!`wzC_NKXV_jVW|9Xyvh_*$1D1(5OcYrAJOv}_=>BkJ)`ig`1J}>Ig z=bRj#L{ZthyksC!mm_(5Gl@iJx6`wh!RFv`-8E}KO4*SziH#Ch>I1&QgL%oT37fw? zXX%40tUJvPy4*ECl8HQj*}lw7suJ%`ukUrxnKu-c+rP@@!WubDLPLxB{KlS@@5qiStHj}DG&K*w z3!c=K*a0DkLHnM;bQ#YG20cw39Uc44p(m|AH(mpd@K7LQt?J+DZNw;hG(d4(CocXV6smn^v6z9C% zh0a&v+|CvRX0C@%W6l`U4?}YY8mMZ{?NJz({C=yJ{@O{EPB*tGt?z8VA;CjRMb&{s zM$u!wYJKyxoX>e@^0p&a-(yTn>^EV*^m``oodk@Gjj6Y(KFbFskS*vg?~g}n6>ZAJ z5#IW0l)9ZjgchN|1=FfmMKJ8zl5?f z_ZJHT<4;EfL;Lr}zUS%E=@e)`Lk^=D`TgD}iD#0oUD)_<_>=9Q^;SPB+8)9nWvLWi zmW8Z~esSPHBsk|x@-5j3u`;~Ka&mrk5cN%VYHQUqc z=iT&SSy8ORuk-R*2)X?m_$K~zPorbnoYGo~<@;A{+|1gfdQ+MSW3o_;?mPe54GH%7-4O@mr~XQJ;AOo$7fd8 zZwITi+1i$-TC}qlZ4-X4PQ*UMbDWTh5$zmQ7?;akRm+ucX{TwZYs;E=Qxi0AW~$-i z86Xp}sO~3pDQeRTW7NK}@Do~*Q zD$VFby2peTSgv^I*`)mA=hub$jAF{eT2oo*&qncEXDnJ-%SJ-iN}{p&A69E_fb(H;*GVlz-M~(6!w@{N-6S-{MA?MHKP))rjJ~|n4&$M4BfgFg*h_P zF3C+y67n!5r?IZ@$4}f#RtLIBGwzA51_PJ7=Z9$b@(qxv!iyvB6f!edC=ro}Z}K*j z-=4DH6F?3y>;8`8^r&L@HmdrxW?Fp`cigR=(e9w#?DaMjnc=w=SGtzZ4>-q%36|@;Yd!DSZ{Ts79T6u^@`jGz? z9eon!Br;>FZ1b7N&rI^6-SxG4XHJt_g*g6o?cEWw>hAHws}5GZ3eLAw{MfIU;-M0i z(Eb|5l<%<;q@%4pzT35Rq|=7Agj1+7`mV-)U0&^K<`Mg$X$NT`bHdr0C zfJSR5&-bq2qX~*&+B+}kQQyn3{5@1tEGT&*i_<+Nxa8Rnj2lX=c-e3X#S)*m>L|G~ zHnP{1#LRa7jBBG>Z`ty)%#KL5EWEF{FZOiWr7E#wy*7*0c!firHf=4GJe$9Jao_t@ zL(<+z;ba=-jMQS-JWu^w1GnmOnc*OeAmQrg4QaO^p2a&X%?GhqL2n zb;HL^hBqe+aGForTdAD)!z@|MgNJn1Jb7_U5R@#oB}C>tTco#S%n1EoBcvkcC3-PjC|4HJ)pP zV6UP#B$w!16Uil}w%E6%V{akzdEe3a>Pg3x_T7MFW@?Ux6dh0dtL%3_94n&Yv8x7} z`D2e+-5#Xu$pdqHf|SDmZtqob+hgETG4{BzXzW*ZOb?2m~|~( zwLNBTJH}Wmf%$eST1W^72Ij{ln^d`71n=I?|8k4e*v;9lG z6K$`aemlMTdwDJC6Nl9sNNTRvkIwvz{bH(_hI5m4n^R;i%FOK|Y*wrtyPo-K9Lj6h z58Esy9}~u_4ts=$hhx~Rvg6lswB)E?RhXzU@hLsdO}X`&n&HV%lWLAwMP%0+ZGDe{ zO@})6dx&|uQbxYaUWO>|M znS%B~2GYdO)RYe`^p{`5gEY?59wn&VdU(L@UhChqGgw(WyP@l=Wb!qloP231g>ygd z1}A3*bq?Xt!txW#HAysIo{_HI%dqk@dkR0LlQ%|JWXJ&~-LQ*26(Y}r)HXd6ebL2p zY!|ejN^IaujA+PPw&c7Kq0rM z)08G%>Yn(})TzSlvWXMgJ>HlYRM}Iad<(BMO-rB6+O{yWLLB$C4LcM);($`U4J)pl zL%YN>$$IY{vKm)6d>*O^u}j@4>$S-w6&HTaLGM^zrJ3bzkEm2$KmY3(bIaoS_$j}U z!*=y(&ZlDYPi)Yxf2YNilL!b9Ezo_qPTjcVQVTU#tHfx1$c%_z;0s zUy_6d692-r$UtoXyCJdEKCaB&r9SHQ$S~@0e5!G`9^s1CVjJ=G2qpbgPTN zZ+T8#9?gyj2Pb5r(Pc}YQ!8$}EAL*+&W=UhSl3tNPUmpOY+B;Nvk*lASKCJdM<0I1 zDK{j^pZA%(wR)yvoM%;#V3T@Qb@7+Z@j>||IyQTD>_zl1*Bd2Aq5SBRiGcB}7(I4) zXy^?sp&S`%uYA)tOi2+-MTRoY0^2n+x0 zO%}N(;k+Kgh%BPGM^y44)Ouqw+^nSLZS5nIygd5)`eARyeStT-AvGswm6~vp!b+|f zN0#_)FS%E0LZloFL=09koX*cIj&1)8_1<^VGpcfq*@gA!P!TiMe(Y3o(fD(B)8V9- zd4x?7ca5lL#J4$iUEEanhCuxb@|Mi9%A22)i`nW)ZFNs`F-~S*XHf9^9j5v&}+vXJJfGUTD{co=|G{xM=a|KcOF}J758UgF%Py_CB$`I zBOI$vwmzwyeqtqXWUfn%MI|vDBp|xx(9z9FQH*kAG*J$FsqyHQdOMwHdnd)r$dw?{ z*zw)Ev8(OSD>>Dh5hudxW3~ofiJ8>4{&LnUqv5T&TxfsF=XaA*7bSlxH+<>YpAhX@ z+Qo5tJTNhAex*3B*yAK90?o4xzEbfMD_^&}LM8s5R^GN%m$Q+xIc6?EES)-tX~Fzu z{+y;CqUk2S6MoJ2jTmG7{^A=*0>}Kn914>{lE~C~58OW>joBC}EVV!U(@}@Tfs#p| ztCO;9xhi@S{hN#a)KKk&7@C~i(#V*6V#o(~jVdlbe!YR@xvvwNG_k@b+a-!Yq0yZ{ zF+2o>rBmYFsg|T4^SR^ISBaaJjEqfBa-@nFFga?{ybiQ~9mA}OKXVpvWoB4>Pu$ej z1K$>_x~_BJ*^o_i+=*S0?`QFZt2-MG2)>E_=JpW`a4>ol>Np1P9yN;`K?9C z%}PT`P2C)3w76f^Oax;2C1c-MjTrHGjRsL@v$6|}ZTY#`J1783(rXWRfav20_^74Vs_v;JQt`8D0+V#OO@OB?q}cBcFv<_H zHT+V69v4+F_6ktF%flOd>ub_2r#3pAfw|!BsoW(d6qV0a%VvBVs#cO?d=fWWs3()F zR?VSS+Dj}gg_YBgWNvLHqFJ9d*1sH|I?|1nCb`aL`O}|!m@2f+9)kP{QsVrm{S8G( z8%FqjRG-X?Iob}&rJdNjk8_h4w5IMN`+&p=9 zqN8pAW5G{DM@zi@!Iv@zc4?I?o$I506^~V!5zsKrPR}UQlG6LZVkIZ<( zMCqVj?!dM)@T10qW8+#VS$cMM^SigwR?ib?IcRV0SxJJ-p%_h6z>;&4jw) z>5w6UTbbA|22)7vPeX2FK=D=L#`-)@;BONi5!&AC5?HhJL+|#9lX~LJJ@3{r&D1 zXk2Xxe7=&IgCSF_Rz^Pu42wl$AXw1x2J|QS-SAU@9BG>g{W&oo#XP_r%cv9a5R&hY zV6nP2>!z|W;mzuNIjN7ef%<2A-M{~L`a>K1GW?o941Jbm&RdQVIwKrP{b}w*D7>_J z>tQlF$l7vP?hW6q6KF|fGpDw={ePgXcAR3$pIFSA`uH;ba48Xp$lrm^b@%)dEv}{{ z0(z6$wKF3E{aJ|cATc}Rh*x_M7Huh9Z~y(n#18P3FIl>GF8=cx`tIKJwo$d(jbv@y z3_MrwOffP2o&ir=F1*JTTd%U&hf-yxNj!!!I*L@TCS1OR60B)$D?EM$p&t|&s!YuT^~-ZxMA zQ4-9hroFB2qD~Fx(ZVD+V|<~_&+|3%95*y5PNpHA3uiR{>J_jI4|U#*EOGRxQv|jG zzVIRDYzxg{W1FLC{)K6tuEkSt`9256B-AchG_QxR=RJnbc5_LJ)9?8ypY+0S3^`X5 zk)666L!k<-j3Rozrt;#RMY{b7EACW~!>Iel^(B?wgXTBR(gG?I8+k>{sRrW}8>5aM zakX5ZD^p({e!U_*qTosON<4qDW45BW`NRo?$zzE^-Og|(qbEyCOR`tN8gJhs<#{!?v~^zWae~|N)Syo- zpM^wao$K(_dr?jG#ow0) z_*2M;DABOUOaE( z5SjIZv(8TC`9^6WG~$%*9XWuPiLm@ulBit-zNGLu0!cgyVwcK|M^VIecsAwYeL3FE zpkYW$BDU@sqt!?~2ATljvq5xso3(-TVjDc{7ljOatax&JcdjLm_v~t>+B)8gnV%y; zvo*JuxZR6`>5!)PGB);<4q!V0zW83FaxGq)MC>J<%~~ZcGKS|bbE(>NmVO?*F1_6A zy58zQkD71*+_?LI-8XAK>>YL(4o*+>1=rLo&(9fj|6;4P+R}F}w;+k)`4|9#k^V4K zi}`5Z)M(^x_ih*u|A^>ACuLC{vq7H&TB^Y9 zMoRmgmN^)dfIpkHlMhT6SLZ);|NTpK^@(G;3%zk{=<5;J*PYC5{%H-9yrP1c{?Vv= z=bKa-wK3ET+Y7@)uk!-!lEXwhsl`?=1w}wjR6J}Xtbap($rma8t*Jz7qmT=25+fr+ zCUr_IywLeY`_lDaSQH)CKvHcv9)9t&=G_cUx8bGTT3H*9uKYauMA=j%sO*AXLW}Wg zetEe`X6ev@D$tFaLgOBUt(wjO3_A$mN2D09NV?f)N*SJ~9@Rli%5Lm+Al$T5WuE`m zJs=uIj#~TS`W$50>({cz##M9M>JI(O*`PZBdjGwGy|Iy|^&TVL~fvyRRzF8=^pJ{oZf=uWn5BP+_GL4Z_7LGp)h6qlN7mx4k> zU|^`PTw;B1W64$z8eriV z(!F`}_wT3&`;9GVA~ZAuzhXnb3Cq%(Tl2BJ1tZ{*-6^u%(9+3iT+@dW8Fb;0~KiF@6JCL|-Y)`9G8DH1HW zoOeyIAiq+VoAND_oqaoj#9m2--{h-2b|RF)DGJSpCyWL3dkFg4+5Q(p7)as1E}?uv zP-{2!P2sbmGq{TlQ~AxBEbxqyGFM-bOi-0~QmWZRw+BmMxx<<*EMsdJ>AAJsWMrLb0x%8q2@ zlHHeD#ys6wEFNK3*p2IMn!%q@N)cV{Hda!MVlbK_%QETk_7+V@d;2Y<_>RqbrMx4W zk8hDmfXK^5ei9|W2Y?+}Bv39cCJ9?=Y9Xb!YRgVCu@;u`aRA&O%K@ZWujTj?wtdkw z@X(WG(X93nNtw6^jn3mQchUNg zq!J23d!}2!7xF^+kr0f=TXb@{=~0s|A-d`3_H&u*^zbFLp#*mD^>&dgEef^vHm<_c z#O|7|OF(-J@&7)vV%)wkOxOf`ygG6BRs|4447>Md|Js0FhLoF_icT+IB0hcZbO)4`kkulPWP7+ zhu6`&O-xK2R^mPN$4gB7LZhOiMb*>@Z``=Sl&zWFvwo;j;~cR*oZFwJ$iN9w8&zCn zr0|Cix5c8E8%IY^2?zJO$bH_cs5~PlCoj_Py-7)#=~OaBz+r1X*Km)Xo_=K{|0S2x zQN!TiVQf|{^D{Qf@0aJtVNR3H&7QmS&6tlKeev`}5f>LPRUOKZ&Aj{I0SPN>S>0-U ze7u5^QeUB7H{Nh1$<=8MEtBJc{>A0xwjvkUUW(&dJq9`*5N>GV=7X>e7 zb845f1C8MvRei=tigwc1uiv;`IZI1RZ%LsW@#hX(U0pcHWhuOKb-m(J)RUHej5vDc z&lkkmH#UsboOk&mnN8Ztt(FaoHnf`k-{^LPD`glA*45X8dFVgOC3)uM?~nZ3Y`Vtz zbTMpDX{aw*gbf}hx!>*bQ2sqH?;PW}>3?PcjFP9Ap!d0~CbBP!n-E5Q|9)GyJGL{< z?W(mkh;+2Zg@f1gfzF@LHx`zbhT7P-Lbq$LV__$!w++Fw{L5wLefy-_?W+DKF)vcj zsx=xBceFby&Jfw{n&T;_W2%k`{{*rR0s@6r%i>73+f!oGH7@PN{7-OjfRmHitzi(k~{s+8Vm58}H&4R+h{F0KUv9XE{#u#w{ST~=9nVFf->FEX$rv(KC zd3kw%y1E{O2+QhDU0gU@T3Ny2%o$xw$z=D5iHRGU5j*`(QW68n-QAt@XhbVZvCt!c z`)tKO3<9bxp4Zbbv!Zlyd%OGWaGf&xsF}!ZW^vJ`d(AR;;;e?HX_A$h=VIqueB*V4 zH)fI1uzydFB)=b?Z035pSZ{AH__CA#E`ZB6X1ZLa!9W_2%O_+8vu9`PxdvlJAzb5Ht=2VWwLf)!ZtiPlCZz<=CF7enZ&s|?yJET8y&kh`}fOhkvE)+qgu)D`-Ga+W(^A|ip4Ai z(mm}X1*}^Ams==k?TQ83_heGV7n8%(>ZYb*;cH7scL-DyRvH2SXXS||mk0e4=wX#M z>;(JE-K2DMu%eCM?_svIw4|AHSF3fyI`8i9*TXL_$2$2#9@QUsdEF%u4gU<=^6uR` z=bgVOSU5P-QUpdp{E6`}c9Er2>@!vE1a7VUL9YPJfe5=dFOB4D9c)cT4Q9&sC-9-B zh(^?Hj25<2SzTXU7MV@Q*45RG=hT{vmy}gjS^>r#cfI=l{re7-fW4FXfc*)pZrRL> zDu?~2%*Ib4Lg3jRV`DdlztPGoE!7*z(@085!E1xWoiy*V*%%3gJ48}*+GKh{tJYDV z)2`p2;x}8ERIrCVh)r>Qf%V>t!$SSNwt~V_qv0H#!?nSVNG4y{n;nS3TNpSv&11zz ziWS!65H!|n1Ktqy3H__At{1HRsS=feN~{Y}Zo zujc0FUa%jF5zc1TGY}vtzEJs_OmY#{v|yj##d!t;tHO zjgdDcCgc42`ecZZ$;I6 zG!zsW9buLl8pL|tv3JrAE>?%K@gX1T;ehR$bAJ#p^58!C{hzfmbaV24{D{@feNHu5 zX{UF*HTkyn^r#U>y$5Ecj<%-*{QS^2$BOGaJN;BEZD&_j6c%5v;hKILO~=@rkdzn znttH2va>_mfrIhAe0*Ne(&k1A{9Y2CJ}%{kCI@XYn#(B^3hiDO$F}*wiWFi|19+|! zX7gLy+qJf*sJJR{8)>Xg1z0l{;K$vn~f4t`FH2636p-R%N9p z{#I_ynPG988?-FW{SF4il0(Hq?TDEmXoW`UuhO>npR z(=}YMj5>P@t!M=7!Nj~CJDn`kpENb4bxwWOlm?eUE_zDI!$YL0H6P-1PZE#WIL&%% zLUDDXyiik5FBKAn5}utU817pJb~9yTtXRa`-(L>tH3|a4aGP>p4 z)yJ{)rW34uQdl}uRSrHeF)`8~KUzzaib-MdCH5lXKn@}=^8+6rxl*>=>3jfBFd>&C z84j)5#{s zSm{MvV{bXmjpC(%|3^(t&9;HkygbR%)zr9Pc{K;Va)`n3(f3Wpii9HQb$ot>hT0AvuS2B?8Om0kE>QvO5Rxnsh8G*hZXbTs__7U{;o)6`r!u=)_Zarm&4pCnOjhhnM02Ajm;yy^kB0nlL zBR>0#Kn?cm*`;m9-}n=ykaRjDnLHe9*kk6_*E1m)YA244R(cafW8hlv-@gwAph4l2 zK$fjsD(CT#C?}f3E~oF(uJmHxMI8Y?#n)dPVjbmN?(?kkxX*E1pIyl2K}6auWM3JWH8|Lx{^2 zJjNA`szmyDhwc=91h5|6&duS^+Q3H)*VGGCJK@BZ#Zq$(U_62 zprBxcj;!oeoK5!H1dX}d4GX{Y94XOHwGa(!xL zweM7I0E3VDcH3%SzkVg7pqN`5%v4ZRgc&|W;f3A|^>7w|4B&nZ?qVfBZ=u%NH04qn zs3P+_v-OB->2~dUcCh*_Dhj{ZpCHlg`l{+|Ewk$S>KswTp`Fl&g$x?nl-EM90}#y0 z%KAx9PcPim(9lOb^(8U!mu{ZxXHbEGmKqjE*0`Kop6=<;GcX8=iY5Vi^>C1-kd3Gb zwo?wHQH6f{(T}E9?)c)%uPuzrvqQ>#B?DB8bmh|PIJ?y8oI6yktRp*wWG;xy>$JTh zA-PEh=?Co|0L7p7c3+75kn$om3RnQOYR3?V&W?_bonrvjbPNoM4*S5WPj>#<}&t0vq>5N;q;e3%(x_=J~cyMKyMzaum7gg9vZ^7 zY$_YGS2{EpzOR0l*tEH$9rxkkNnkT^Jc<`w^mTP0GI?5M^wlAI+1@?qgB6cBA zfKUV2kMTrVAfh@L+2e-@y8{ksZEc0%35n2!z4Y}(?dCdu2DSAyGxN}nLbW54tE(%7 zQeaS!){3%2uFY!So!@npGL#kHRRh;zd60kvQ4Oc=LY@v}D<6xq{ME0isTmm^&DZV3 zL)4Rpd{XxNoh2-w5wW{HMmB`IH zPHDem3?jgZwKXFw@;r=#j1oCJa{^*9b-#X&{*3kK;rg)ELdzp?OF8VewBhlP^oy0$>}T(EMYDYa z7#_oJQ`gnC73;TsPiOi#IbaPfbH7_l<`FDOtlO1ClRtsTyLUGbEQw$+KchQtj7&X5 zfXF2nT1^4qbSUZ&ptI1DN!i$NPn>w5Sj7(-nkiq!Wt^YFJoTWB`uhdwkm$Ew@tiIM zS+5WIL3KrNDH7}Nr1|r2h4152M8x;&{YKxaD*Z*1^`&o)YNokOR{ZzJPLvsZ>!7oY&8{t zmsRn)v`lHuwg{1Iadha}a(;RT0_cj1Kgg}x6HcDIXIi?Qd3KTRw}%~rnXDt=ht~)J z_(4$cuAH14A_HdY?(oK-pgsKqQThe?6hwHX$*Eh$76R>k45MIXR@*(UwF_IxpnU!M z4lKH{v2mMNdsi2KV(-k{oaOi;a8@V+_7X}emX?-4(*Crzrcbz?_#~L`FNr~*Sy)-s z4-5o@5ES(DCxW7>si|Q-c>+v9GtJ1kYZsFN7qa04T#WL9K6m4ychy>3 zTRV7_@b{o0y!TMo-o74dHlOX|;{zq+@A!D7Xxy+5906a$Gf}dLrS=B~2Y*jZU3Qry z)RMI}zFLL50r28+a&m%a$B_mlmAOrx4|Jf*Gn|wuI+Lr$QmfUhy+$Fx6KAA3$ef=E+8^V`npOO!u<)RyS|37|50u;h>j&o)?KI*b* z*%NuZ=}%3UIbRX4Q5e2`zhJWAHELd)xs&_qAK~+4S}qX-7soESWNr7YFr#-;PSEvb zPE&1P?d1eQ6DG7~x@@eAbZjf>Zn-2|Z4&b_l!=S@od z=He%J_1oyvC>|=R@42d<+iQW%+VhD=bJJ~oZTBffPF1kp572!mF`Z0+i+wh{fmS;m z^3U5H_A@OQJaDn^82=w%5BZ;pqrbw!NdH^^O_u)8izrPNmPKLzc^Bos5BNX7i}F9c zn66{#lPafn1I?GFA6cn?2a>vY6jvx`KKbXt?G&?1Kai+a3tc0dPnsVCwqH)6wyO~ z@<1WcIyn31B^|?zA>|hgeft?U=@s31a@tAD^6V~K6Xl?G#eygcsH#I=-K7zMO1!<} zf$OKsq+0GTRU5TlEJc~In$I8w1_mNXF<|r0-k7A8(Ei4|oOb8i6N|`2bc8 zvsq|p{99TCU%Y&Y5S5^z&~tXTwN=b-B4Y4+nzxdfHzxt1)`!uR`|7n8^T;3!S6!X0 zBSgB-@VI~)y~DzA@ccaBj8ZBpDwH-kIZ&Iw0tUrjV*qf>Y&y{bO)xW>mVqG%#Hi_B z_EfPb-IGf7TGt;?oUbm=r+W*)d4McwzvW<8!k>8KZRQ}JT47<~{ONKWDHm4^U^2qb zKoi|TEk^$gV0Ec0rX3{KmEl|>0ITW5+J?nSvCex!AUK7y+fYDeqs;Wg^8!2Qfpv{_ zSi;RwDVN@49~&L*Ew|DGihKJHtcv~B>GJAWG387CAD=)EK>F_Pp8x6ZO=%e!hrL!( zkXLU1hNT4wi4GbVs1Wr4^ZdpH0Gq>d7l1HDpPQ>(>JPvkx8(GA+D#8=zxC!=2xuHX zV`ELpqJo0zFHZN-&y5E&WI;AeT>IBziQ6*tnkYP^wKZc?UCP&6S1*m}hNcK|3_|-x zfDg!3!!qm5wY4@Vhd1nJ-Ek1A1Y8&*$^t4O_vL|1&Dk2Irj}L&Xho8b%Yaj#?6uQ6 z0GeKzC}#i&I#)cbrZv~#Z46itz+^NC*qE3y)u98K^0@`T$Zp=c1?8Gby(U^Jkv|`y zJi-ccUtd_kNey}v?j#BXH1+ld!WCzimr>pVC4BJUf%DO*9vUHMI4FXFQBlg9E=HP~ z?*To+Ihm{ER8%_l7Tcl6GaK)NlI#HYeFD_FrL%Jp{y}~#g*9bAj}9uqDX3{6t`L=( z&)&3J?#i|$Kt#aq^{^`b9LlGo2JA&One>m(+D|S@_92wQKt(_Rh_82074kmaKmc#p zj@x(c+~|SH8)yrxc3aOt)zEJA!5+v}Cn76H;{;Rz$Q6JK(oA9iH+@GX;C@1fg+~=O z>&OV6vND*7Gdnwb8yQ(nAr-`;rvd^3Kr?_BHo#t_#yZ|FR_X+x-wK@8+s7vXZZiuu z8;H=^@wNnDA_N)%jmkskaAPzmU#t1%%;sh%@Gfs(Uj)}1oUBGH6p`!67f3LmzX)P< z1L%lne8;$1tr$pzNVGL4F9NuZo&s3L!oo5?J1_tk{28zy5^eRtW38qi8cQ7!(2nIQ z2@&ada=o16(J~+5yJfFdtRx2d+v-#`2ao~d>6#djzxqIg<=vqSiH`me5)wlE_9i?W zygt4$MnWRM3V>9FfZ<3`qwb-hHFR|Rn3zxj z0pTmSJYcIJ$Qh&)1uc5!pke(qjJoh|MASOi+xKKEv$%qhqT3bS3h9CSM)P)PXsCzC zDG7-i3-kHO$;`@13+NJgB_+t8AU_sE@xh7!!GAkV{NHDqg=gYO9$qhZy{wq+%XN3Z z1Nk@uIZwjQUZLW3aD1E!gbb?H?D{(DA3*iwfPotulk034jfT)bcz{bQZaOl7K2)dS z0Mefr=%@&z0E#dq9nc%e&BdVxkP{-9P4Ix#&jT^3+HJxQ2^A9&dC93y zn>TOn?C)!h7U(Q2Ec}d$Y6pRO=jbTsV9y*l@9E*N`aM+C#Imw*ux9|ANG&x5ty!9z zBhejt|8NeHA2-2!3?2M|`f=rv@GpqN-P6eTEo z_b4eTl}e1gYioIc3OgST%6n+|Ah}=zCPVK9P=*(LS#xk=- zAWZ;ku7?DLn(sY(2!)|PQQ#r4aZq)aq2_|x!(FxC#X+T370xncUr+Z+GLhd8p+CdE zV?VevP^c#{<-9Kj)ad2?`}fguCml~qD-bpu6x|3qjhoPI>RVgyF)%RH7r@6piHR>k zTBM)YuuA<1a?3K1PXwz&h(|#ALn*f*bHGnQ$}1?)gf0i5`c@t|HB%1D1cYuE7Fk(Y z;Bb{~nj;|DcMPPAkrDgG=~~llYP!`mvDl4ETxt$vjFE=QI{G&_n5XOJR6H9I{_-(C zv@Bt5&}x7GM$*$;w!E>u)ETu%BMfUc?2;pKpR^(l5G>ms7WnuBA+UZyqJOB`K0%K$SeSJmTiP>0K!V(e^glRAT zanOT(d~1cluG}pB;5cY88<57fF=ZJUE+T{-y2_DY6T)L>Px%iApfJtPB0KoV!Wl{r zBN>yElW7hVTHpqkX)MMK7}{i`v;+rZJs{%lfX>pLnOmb|K$)SG-PGBc-M2V0Hl}H0 zq?~E;{K#2$|32#L|9UleK0G4wzd_j>CRvgHdQ-UR|K?3$B|l_*b?oBb zCI56ez|Qfz=(+>?uK$goGo?hd#W1t}L7pemuc-f5UQGUop*0!8L{L5CaVcgjs|$sH{AGu3F7;1X>$n{XYLo z>~fXYQKu}_+6AJDI-Z*P)Mno6tP*35OCzP>>#kBSs^V%2t`XZZ^tg;O2cpPqHr0`* zQEzTx0c#&I6p0^wexw> z9T>ZMz_%{g@o~rYV{dv5o`e&&j2zakz7x}BmUTaC}tD=zNA*JEXB?X<w5xxM$W=QlY^-2ul1-`9fTuJfo%ecGAeI|>ltSI zgIVxtAWaHkoPdQmJZ9;Ks5X##nP^H#m?WZ~KuKCyTnurj&bT}Pcf=f^jZ*qDzFE~@ zC~KC4No zM$1oPkYFZDCbEl^r~!|p0K!DWrT-3afljaM8RU1l?Is>H)i;I?Z?g#n;CT~D1|1n@ z!YY|y=Y;ud>MrgDMLhh^EP$9&(O3boRHl@|j&JCc-yj^*hEvH@#W65Jrvy&YYesrYmMhQyyZVqf3)49_c@t5)_g4BS`mo z_EL^k`I{HN?Zq(O(W+q3OiUA9mA$NgA^$FWs=Ilf`@ps9G}?-Ld5W-xBW`hN5hPj3 zm-AGcsTHP2Wk|rnTRJ+l!F8|(v9t^?Qsmq0;fV3|X;(Ik1Aty5RqN^!$zmoxSz(ju z@X8;-2(HhDYZag~9#2?31c0@WT{@)+;yj3r(~?mDf->^Er9ON}N*T2OdL}P?uk$j7 zO_w5m$0xgvJ(LsQvpX1L;!ni4REh^sTWOy9@t?Q1wt9mmjgXHRV3UtF$6?INTT6%UqHK5b6kB5QjSNfwkBW+xC;jD77T=- zX@;=x5%>&njHIOG9}uBV#;33NL2%{uK+^z8=Ex@xbaf0tv%Kt1izk0Ce06aqH&$@WD{V_1(KpPeHSX zq+96bOWOQ{lnQzUCPkI)xU|PU+kI*vp2569K`o71l^{%)fMB|SzyUDqg7BX^Iz(Yb zxDeD4@aZ4G7_ghVKv#=Q#zV`>SiukKMobrg92z38_7_}-VRg3{r>$~NP&gl9VKspD zTnES(+`IcgOe)x$81w`sB=mOY8o}^{jK&2EMWND`8ir(O!AsWxr5d3RBZNE9JPo^p zQd9Mc;eG|}vxV3dr^@L$D_=&o1>Iw?_4^@)?Ln0Xs9z&;Z(##)` zFwxV|3HNNA|?6y?SpYHGNZA>p$ZdLe7 zfJ+Tptv84X6t&ARcu?HhxFWqzOwTgi6p->*i8-rc^*Ilzs~|0L?(ez5Hn8Ksg51dM z%X_2W^E{Ht$m8#)PvE97noUK6<7u_GAcO#BAg9wsh=R`8TV|nEbA9E6*lD035cLi9 z^|xT?1vF^{R}&N$*M;g0@^4?YlU;?~b{9y>oAXb(oms((I68)>X@toDU}F|AR)Yzi z4~%;O%Sziht7%i93bl++r3cp|oAI|CvqUn2db?ii3IGWI6U}C|v%8yaJp~ANwA73U z?yebnAUps&hz(;CYT1(9~B%2Vd0c`8hF3dF4wr!Vtc?p`(GBYyUt)lDoDGK6m1h} z(!EuS%ggh#vlcSLaYF+ZH#qlNUS2HHx)DErKI363YVjQ;c)85t4(4xv-)d;YyTl?P zd|%UPD6K)k!3{tl?%uy&U{*S6tdk>8ZL?`p*45Poc{e@{veb=WT#?mf4aU&R?&6AR zt4EIl$0X+|1Kn2V>#F?ZE;wVt4^Uq6YmK^n@Z%>X5y0QIwVLx&pqzJ=cXdyza6H<8 zwR!-lf@rn~cQb1G!sE}Mw?K!;$jRg3L-78;!T$C@gQPzX8-l+H(+DXC_l2YG{7yk( z1U(?V0;XXa5%@sX4pbNriMCTAQgy znVBR3ncxsWygv(S{g|VMVCE5`+Io6gg`*UzE>>Vg{QmvBqmwxqF>nVEK8#kKgoY+Z zg$NwN25ov+a8yXM6;SQquh!_urQCp7vZw6UWNOtW#F`ZyIDAqVTgjntTx%F@d z=KF#WRpkDCg;G-j2txG;?8UzARTxeIhx-L7sVB4q*>fkF7cZpo4V_>2O^iLiM3Q&nuSv9VMtWk1Pf zQbx?eSAgipaM(2s9>lagJ-`?A9yhlQon|8kXNnOIg4|bVf|B zoUJ5=3^_rT;&R&4!Py=h??O?xf|(9rpa|mzG(v=#4t*-K&mjtQq}=KwJaEux&;h(0 zL^dkhsKB|RSuJipeE9GjofO*9QU4^kETE9&_RS1{lml zufD^iSQxq4NFFgLetOVVAv84TBkaL&IqfuamC1?gO%#}4UTzklt=6u!Epa;DLg1yg z<~xV0{hlCj(%bKRg7DWL%EE>6LLt9Bw$1Pd#-!eXOP_Pjh4bi9I(6}pFVlE{LPYh} z8tu?+7W0%z)vk-5YVR#|@0m3yIl$spj}LWdIYHNKY-|KSA(#@t$KU?`{fg@}HLx-v zB&YUJJ`iy^27{`AiH*$%Bo!?A1<(hyb#)62`bl7>LB)ttB&1Ur-j~xYjDSd;G#@Wr zE9=l@fEAT>HPtOFhrcJX*G9>CGV{%Pdy1fN^ha*4S@QX~F*DRyFZl1`8X~yuy7BSx z`0YLzYXJ|hZ0n^Lh0{+5n}13?OQxJ#e#$^2C%*5zFROjVZCX3hz5B-2Xtuf=yey?R zPep>l!UQxmUjQ?)x3~Wp7bgLd8)RKgJa!95V~n#(GI0SIW2H9FAd-1lN?(2OnMenF zixi4Fg-Z1kNb5E*KgRd#2Vayb&Num)9b>=@rR$Jsx7n4qmzP&dcjWsd_}7b7lvox5HoEuj*fpLf%}1-$ZK zv8D;GT(x6s?-9=rf`OijYRrw7TU(|{Nh#9W#g_7)-fkW$;`?1$bAKz;6SH@47~@h$XbFgd;5%TJ9M$D`yv}&lA&AZ!&_= z#59@p&w{r!H~SV9F%;h}*D3h#X2z{H1-d|D5>$-<`~A;!Wz+{|(~_DN)#n z5J4F=e*M(1Ny(rRz9|jEk<0uiWLh?Li=WJIZpzMYF5zGeIC~u&?k6WDmHp?puyMj9 zb7Rf?O4l{5(@!xRV80iZ76+{h5sy6gd!mXnlF3AAeiJN+$cKSlUE<$8ib%Q>p8vb_ z3yOPXEJf(z;>G>0*%L97X;Qpf73(w|x>hEPw1_jvmKihm7pvn_%1uyGoUtXgzW&25Kd+!0}6_^VUy>!6aTg~h#c2YLDDMhtJ?Q+o)0=10fx z$@{`XPM+FY9$c^Uf3)|WQBiK&wrIIbOB69-Km-FOP)rDtmx?H;pyXUikPJ%BuuPyN zK>-l~C1(UACljJXK?@`&$w_i3!tK+w&w2aayZ7Daoc7LZ@5gOzuib1ERDCtSImhUu z_ddp#wk=+suZi4+Zye!OZcs=VS!y~KZtO4|++-CfVwk%WDnCrWD|q4ulgRu2*j$yZ z^WSlh{-eiO%a~_&O6S3cq=k@g5o65$ElqLjtGws^-%3x!c@B|X7vWE{ahs#3icLD2 z`__uucx*O?U#|Pxh6{t;eJKcG~uQ+2zH`e+Crk+qZ9tL+j0(Hp~iXzlfqgyp$mw(dbLSAAS<1$SpbPn6x$VdUVf}6Q72a7q?3T4)x?z0 zeEWO96&GCakw?4kxzvx)DY9q%C-vI@t|Hys#$=Ch6qw18yQ+cG0jeN zai(&vpSl>AuC)#qldXKRU_;RO^BBahu`7elHfr8MfoWji6r9n<XUE(QF31?=I(OpH3e6;`FxDX^&Ac`4D ze@OWZ-XDOZ43`Cm{&xBmaxNAM=WgFdSYH*yw7#(STA<>)uCujG!@!7?xyj7J#8-K! zHHg2T*v%K|g^TZNYXgYTwQ19`Kfv6fYhfvHoYv$(9Wh*;bxoSIhxS1vHaIma-~%B@ z4+PmVq*e+ll>6|gz`<1V;`E)8i6%I%zzjfcY6b7n4ssiWRzs<|nVC)dgZ){kR-yH1 z!A?Y~(8H=3aGg}*J1-$Prx#p$;FNlf#mk6@yV!Psiv!M!KORfl45Sp3yF5KrxL6JY z>);rCSR5eoKR;yV>S-wy% zK_SjwLY<-LMnh0E02l?}B^bDE4EFpDtgLI^q*aQPvM){-Gtdiw2?^FkS-D3B|E4b0qZGt)7a}+^0@q zM$}eVE6>5MLKrv@(K;r1*){34GR+BSARz(?U`5~yW#Vc=3xU6Gi0yrtD2eYs#iU7q zH0fxO@a02|799P^;)15HG@L^6o-mNX`~$4(3VLRPsi`TJdxZne)DE=yxL!rhAX6i%p$tHNo4M64AP5J71|nKBcFWc^DV>8?tq%RA52_`usv}D(rqB% z^j3whB&8gJ1?N=rdSWNVVM4L#h1Qh?Fsap8O?nDc+2f|oLZo=s*5&|5p(B+>_H^Tc zXxV5PV+7^+log8whkWK+LbS_P`-$Gn8{c9mAo6`Qr%-9BB76Mf$B*w67CPU%o}87n zHLcF5P$E)5Qc{wL>2UUC<>V;X7cMrp6c?{#V)AC_hi!AcqM{;^5dAPr6D;q%WQ$@z zozX}50>i>~!&e@NaEv{QEu2<%3WXQvj_6;j9T^d_uSFBMYt^gCK{4I}#R*eg(c|rz zG=@hq5OpiaQOC9szjkdWsP5fRmtk=vRdVA{8`k>Mkt>P!FJxO1`m?>GR;7rF9_*<003)ZH3iU0(_Y8b7)X^LeWFXJ5hHE_*pRuBfREd=Vk-k9f7sd2z~l zrfJxz80mu_9gd6>p=k6pGaF?bR8>b@BIZ%3`2KYZb-JM`=%Aw@b&*CC!(S!eXz4W` z7L&_vLf{@jZS5l&w?DbC3)a{oM9-PgPSq+$KSG{E1Bg=>J$B58aLQJ; zqqKH)-N(_eZnE5hY`gT0_VE!wE3(O34O-{Wi$;vUpspbbKS0?^=pVRAD`4TdX>J~$ zn((?DOmiEuC%mq`Xj!G;6upEuo!H#rOr#JIm>j>)+U;OX+W{uRK=}|!9sv&V7{b$W z+fi+>m1|vGT~`vuA8ODW8s;1Y3yfepQV7iokya1B77*R-;EHifU}W}0l7LpU;*AmS z38%Sf$zqe^fuxZThfo($i4fd?XQ>7>POz5SM4f~X7P$DPHoM>Z{#^-@+GqGjiD$lW zaelaz)==myN+HMoJ(H+5vL#rkuV7KZev-=qddeG`BYQ9T{bA(?YZw_LL6CWDJ$9QI zx$$Ra@MlpH6u8iOF`0vm^7PU^3c5Rq`}*ze<%H8AkrvH>^2)?&1Dhn6z4ph_BG&;8 zF9jaIhg7%ZCg^nJF6BI%V^CF=T>I?17e<*8(g+5`25|vqmUq{VKH>L*hZA2ks@ahpHXJBojdUwA)RKu8$lP#mpFMYv=E#HxZ93iC$mO{c;@h`PiTW7*`279 z@SOdY^|xgyKD^3j#hpK)g{0l;5C?#*%dmGs`g;=1k9bLC!!#f;`3Vbe_y$*uS*7?}p*T-=4EZ>TghBY1_ zkzeUm?Iv}@9VQXCDm`>fGlPypcuW?Yba5e4BP<ju`7G^YWy6wFVm zx=vbKT7n=|P*%thuo~nHgq=7$JG<7{87NZ-5CFUs!S>*G6{8w~brlj-S_UmYt`zj@0v0Z(9~7 z`9i=W+Ku;|HZX|GAFvzSgBVuG1}4b_-Xh!(^T`2aBi`*`WI*?|c6Sq3_`mb4r%;dt zI-*zN|KV4?L>y=3ls9kPN>m17Do#}J_4S=@cR%v`>ecZU4zNtVgdK)-6rl~^C_)iF z@Pecyr{WZnzb@JDu*L&#%RBDLgRt=N9S2;!rwad5w8no>z@BUy%+ zrOnL3;P?nCw>qnpTmoKsu$Bim^%*eP2?z}fq*~z(;%e-Mwg(512Wg*eahxJNaI3-5 zq>6t#q1h>2xNnEizT28o%(e$jdoD14vDx+PTC-v)?ji9&ii(P=WSXeop#HDyCpFUu zU*S@SP~cx8mIGN{(6m?Dz9ULWL75^-I8=$enXVv^59`pwjE$*~w1B<$i7Pqp9lC}{ zGZ1BmfWnT0lbLqxF4u?I*PrEX*56jP_8$;1S84L z^X{M<6$B<1o$fwLGpEh80Cxhd`*W+K3(U>Y9wBN5Ew9i%GDAZahiBYS&OrG10llHG zk4$Voc<9g%$nW`oJD+#H#>&QKU`d;NE3g?L2$NadTRnBg;(wuuw6fSn;?qRC*(1nC zTD(Cc6BCIF%CXf2N!Cl<@H@aHSvj0=Dd;&<{osWH3>-L}A_rRD*47qY$LL0py1F{@ zkFuwd@9WbW;sht_VQ9JI?Jb?Xup^NDSLTtB5WZYcWM-(a`yxL-KLIohrEv^$PX65Zx);q*pQ` z{NL!(HBaUJ2qk(UuXAqj-@E{WS%&EOEUV&wTV*w)E z)AoW*zo6Hg5kIDn85lO_)fsPp1HBmSOJr~X2}y`$C~HZ`Moo+gqdvpfzTu;F^w&9g zlLl`EjfQJF?R&(Z(FM&-T~3HTlf3Zx!1ZQvt|M!CMspttwl9X0RpXVBk$!BN(%8Jt z76lxXvP#I&oQY#_bymm9?uRI8()P)T&A?y*I|cU?C%1iIt~Bf2b$kTx5LZ|5dXqVe zx{no)i=LVpEt?joN{{^Wqvi8y=p=I^OP031Wbj2upvklBHdWO;8dMGuRbiV8h0SsN zYE3d#8Wd{aAie{jQDS5NC!alQJ&7`orspRO8pw`-5@@+}xJO64_CzgX)*u}s^clam zgXO(vR^7}}a4y<6=PbM3?ii zV<}}BzP=ksZG2i&Gi+X7mdhX6(Ur~44T{>S*Hi#A&v9pAK0#-SY2L^RS0?rwFd93c za&nj(DF*mBVLST6U`H{+Cosg47jUJ5CuvT(6SMbXyZh5=HydX;5@9bz-src3r}a zAiGS{>0e=(Jg!9m1L}yqf`UQV*lhL#$2`RM5afC7D11h{q_72m&C0-Ss3y+11cesD z4??=;0bx*OQeMCtc_~yR7z`rO$NHx`s>3lpe81}=WS^_z;cb(NVs>_R8(=L; z%zINf9x1k;w*NvnaY1&v$`4gq^x$XlSiVm7X>r z3L#BuHS9gHNOk?_Q3p*%M(M$$d;``?&_*Ac7qREy%GO4LPEbnu&AmwT2r}F-A*5g( zX#*$J2?z_n$Oh6HfDXy0Cv?|h59r_xBBG;PQfCAKGtmV-Nl`ArXaczZU%~Q2XQd>l z=lX*;B6SM6kpR*X*zk|{T@C}30V@gYeE>!m;8%j6(YQ-s3Yl_&^fWLCx|b9HFuo{d z7zNHhD|_|oD4@&-T#POFJywBxj)(u*>H^FP* zi&aHk-cGs)FeYP=j)^q{HPh*^VgWh>tA(RR8EDGQyu=QYFcSBPfM1{$1Wer{bhI20 zPKAeO6Ywyb)AV(FW$2XPLP_T%nVUd>Eow}ASjA6)oFE4k6H+j>A?_sm&9Sj==xc=> zt%ZJ1o;=Cs#*a7PtpT)uXJSHt5e7$h{pi-8<)P3=C9G%t402V5YElsi^+_ZT*t6vU76k`^op> z4T`4)Y3f_5prK_^qkuzsiZ@pGC3~FSM2)-ZA(vSN~ zIsW*|!J@al)gxZDsFuafM&K6p(TUH2doA>?It{Vgv@WShQZI!tf49yE!=S#4bUhT2 zji*VX(1~nW{-XMeMqpflC@xxlaxb*c1`}1c0kl$}do@X+3AHKcv`~Z0CK$?*rM>Hn zx-e^obPwRz$*DNQAM=JLn>aEua`*my|AWJDT@bU`^hgJVRm9=DMh!d#Xnr9b#JoY} z%?kR;XaWX{PWTf9m@g0}SZqBi$}2)qxFZRWuGPt}JqTc=D-@*hSnD08`hNeU-60~5 z&oG;%A(?)Nk-xTCnf0HPB4!>~pclAspzud{dw=DFR^OJ_d=D_%K5$^TEx36oieBXJAgs5} z2Jn)Tvft%n`{-Yh(UAIa7NcR~hnJ%9lN?S^}Ev~(xz;J?{MnW-aAqBb;r|iZtKBqYwh%@iO)2vm?-_=VPD)iW15A^#03s{Q7 z45$M$z~mRm5pQUZPS{Txp^2Xf%set>)n4?cIHox;aIu+(8(utnukwL|<^;0_Tl?)~U7EGH^z&0b7%ozc{lqEy zb^RXkpC7lIet{%|^PpcdAX-Uv#E_+@;Ar7EegXE}FUg1+A6Kw29xY1xs6h9iT+eXc zhxm|LV!T-N3|S==b7u$-^yS48l%&D$+!`x|N+h)Jz9^AF$k?-%}$lCdLiFgrb5~(8VC;!3@Y)!nRVWEyvr|CuuNc z+f5jdX74(q&UZ0&MoBkCD8zUN5~(y@IS}BEoC>Y6*Yj?Eb^S>TnwM`b)va&pEMw~3 z%c1N4Q#`>hz%}bjuJOdj$reufC1c+0q+d5)(Hm{)zXz3nL{rP3@z$f=ot^x1-(zqt zw{WWw3{&{j^@F?Hr{H0)>7r*c038T~Xd3hY3pFz{1K992*V@!oVW)GVf%$^u*&pT4 zH41{cyXur!sUP0T?zPDl^ijMPuJ!7K7JJSD!;kV=oT`$$uzL7VZwqpYl?0=c`5r>M zhxk0ti*V#gw9F>?G3((M8X|ebIJaH!gOS)N*Y#(bJgTz>;bnM5C46-(Du@4e^T@x@ zymtX>|INL!bxXMW-;66C^>_~aWpU~F7Z#TR|GThJUjp%U!}*@8YZ{;rScg&?nu)ZK za=sh!y3#?}k`{us!+bYe{~){sF<);5eTb%vc1F)O6-?5ArTJy!By4a#&T}2?e6-2* zDCy7&L?B{~#e_Qw?ind%S^9qoNh;uC{GU9bkYP-y2;Kr_5Ems_wF8QogjFA?+Xz>I zD;>ZBrrnaZd3+=VJCC$Ffk!z3T6sIm`*hCLFTtbm(T1G4f?KLZmk`4@=2RKJCZ)BH z%tzI_Kn&ZUB&wvhJ1=xQlNn_D9zOuBPpCX}E6kKq7f{^&1~`uSX^&w~qbM$|BaQ#? zXAxH!!eJX|Y~lta2p*%MFp`hNC+Jezs87Hj5uObdqco@?@WtWs@d|!kkZ+nh@OOFh zlMP6ZOMp(U6ImEV6T#m=W$l;=bSa28@lrni;A*mlFo8d=T^wMu@f+-qKZ^nAlO8X^ zL;pj}zxoX#lP!29V5o3FM9?R(YPsOFo+DX+R#B*{0kfu@ZomwJ7la;JXME@_V3M9w z*ttJyJN-2_28M)4AuAE#AJYaRVY~vl1%>%6R1h%lZ+=;d3F5}LSqV74H0gf!>(@LW zipqh)2z~+Y(m`0Rws-d?=T*}Uif}XknWZ}RrV+s1-2AXJ`E^LT6h-OxBsQX^N0ZrR z0qdbMU{F2G+(SuB+Q5jQ4q>@?DU;BZq^5`n4z$avc3EOQ?QM})Q6zMPF3#y zG}Dxt5)s9i$`C#hj<#vkydfY}~Mc7{?L%JL@MVCL$qW>1cp?&j^5Q{tViqD|&Y! zp{rlo_c;HMkPs`==ikb}9fOEhLnHruI7+iXD%&AvZ0gd+_I^==jTCGDv z6~oSp^!^OOp#GLQZ7~U&ct;#NCfgAMBNRV?A2PMj1%(#69p1re@EwBpJ-UD(wY+$< zdyx}MKE@m^TeeJ2X%XJnH=ucmtP7w|h6`e$APwLa+vit*?MHw2PBP-};K2tlZK7@F zDMN!X5Np2O1ZUb|5fL^QfRTODAxQ4#Kc}X;F|H)pf?LviKj=)DI@hc?8)=!`U7ukR zwS(NeiJWlu5i)EPl`nDY6K?<{6v`at_04th6~07?2*RaYqXkM1lphGRFidjn-06Z` zhKc|nSvW>EdM#@4q*q7q0V>$sKxX8SFF>4+s2R&a_6#%twMwCG#@FnI2BV1s zMxZL><8?cBl%ttLzD?_1(gc#o;*o>LXd^XNIC%VK}+0f_~y~o_^}|T z+YNaUA5V-WhqryUg?o|n-NKRoIF{F*Q zJjb&#(@&Z<4_JA>zm7YNCXphijhABKcqVCPSv=bAVQ;);X_^1B;4c#PLv3wlS#JyW z!C0~Af)Cm%6B(laKIcadW{6+^B3{5k40Fqne zg2-o=`uW;Db8zph(b%Z`7y|~m*4zW7+F0^DIeGZn4p0O?g8426Ibtqr4C^Q~uS%=EqgH};;|Jg)hIZ8z z#V+Y2$c(BL=Vd$EikTkcB6j=D)Fq2Go1k9LwEz7i8B_R|R!nrW%Ca5KTAuiqTchp2 z$kPA9{djhCHN)TD;TX60mcLQB9#wi-C!7Rf-Nl@hKMV{w;qk>ugH!J`x~4`ZCkvY1 z=XU5Xa0d9uetLIVpY=k{r5&bQxVtysat_MzVE?jdQ6MSP-UeSoR8=ZkDzYBg)v95| zO)#VY{TQi7!8X{xb0?e;V#tWte%LhkK|nQUj5PJ~IQ!9!T9)5P68Y?L{*HdthdWl~ zc{95X2gr7h2F|~g=<+Z)*Wxu{I&~C=JSR*o{I3zPZE22MrpFt`@&vh`gr=^ZnbhOe zO-ov*)Z)3gY9u@*lxxrC`A@BEp1loKi&jjENPD{BJYvlmA0V5c?J4m%WeM??Cr}GR zfNhUApv@OHFV*Z?WF%IW^N4Ujp$9VaA@7jU6F4snQ=s&Skky$Hin+b`JprEk+i#_f ztt7Ku;r!^uP$DQ{m?i9u$pTm9J}TXep3XE$A3nlDRV3QG8SAHVDKSu8WM5cI4R>PWv zU3>Q~cOk4?funu#+A#k^^-n(HE@wYg{g6PDP;xI>@jC3?2923kj_l<{Wm}z?OiiS? zWK9rYSFhfKv^YI&L*h8X)+t0WPw(`9$9&O22Hgsd!@wt!^Fh5JnWlKay9|E7E zQWwV8R_VPiL@o2FvQig38rs=5ZrcVz%Rw_)6kT`(EkKNiF`aS^{jBuL;yKcTG3-!GFN1-2dky|IR_vAn)*P{-kZv)I5aST^Z(&5hHxD#s}WO~ zpJNp2EuqD^F=D`grI8HfBa~fhUpHpEvDwoBAUd%-h+hh`qFeh6hH!&yF!yQ(Nh5Bc zAHXgTq9^H8#5ykk#kKr&Aoadm!)B=3!mED&Jw~Ak9Wx-?I1j1*T_4^j*a1&D&ho@7 zB({6T@u5J14vm2dQTQi-b!(-#br^FP8tJ7Afpzy&WW={^K= zN(QasIntWLi)g@`be>a0>qn7hN&vE|HR+c`()|fy!3<;Ez-F#eVv_od3wR%ih)b9W=zEis$X!4X+VAeJBD0^JF5f^NM`xWTdMwHCfwjT!3KS4r>rak# zwd}j-HzB3lW!};xVq>3!Mvn6GBJJa7!LI=2gBGMNw38-}p72C>5f%h~EMgyonK9d8 z=J?Htv4Tn8+sKZOLqol3273<=_DRMdQz0giUMkG*izz99$bjvSnifzVl%LPc7I9GbH9?!fYyr3&$j$HuwuNhEKp0H8;O# ze&QT9AIc2eWwgo`-0p1!jE3oUp@UZ<| z_uOdcI;(#~qozU2un&ey4S<`>*#^Y{1%~trf|4a8brAgs5cAXUwi6C8cb`U5vj0se zKB4yYpDSHu%YUepP?y3za1{*CCr~NMg-*h#0|{J|cZ$MkCev`CZ^JOS5x>^<^E(}2 z5xfwb_KB&d8i-beF7DG z9|pzuJBKXkfyN7BMS%)A9LN4i-HjBbfq4JL!$*!V@$qFclwzO>85p9OaxFy(e9#Td zRA#=^^zE#*NRbb!*EAR`4MB{w+w^?`~RgCF1p@$3LSJn z4G`0_QOH0aBg&6oO$&-jOyp7yxQu}cgd9iGvJ*gWGjR?tHeS$rAW%$Lq zAO#O@sk~ERdz**uFV;5C7uTxsEwDR>1gDkX(BdiLP%}Sv_NtgHk3q?CQG*#j_cIUr zcdx%(%O}S5Lsv9u&Wme9z^z1S8PCYn>La1+(&r@4W&|ddSJWk&i#SgY{ZOMzqZA3E`l4)MTQFj>}@pXbMG*frfrG zm_r|WdeQ)mr5U#!k9ao$5iAmwLP<;EsO;lzSm8Yos$*dql@ze9w*kw;oD}No8wNS? zz@9y4k-uO~Z4ho|TD!Iea#Sqhc?kw0?r{U6w19EF3C5{7#pDoh34>0UJ!K-`G?#_^ z8IItLE>T0Ek{mR+#0dpFRC60P1r}FHyWvTUBNDz%CbjSbCPDM=hnr->l~`Fy+tMX{hbm=sUKf#Tl6Zzug7h?GWqP&*yZP^u3`d$0$Sp^=7ZL5 z=e-2o?&_sW9^jq7WsMxUWmmkzy63_EkS`!#Xefsnyp2MWQyqn2B(=i`sc*<8%a<+7 zTHJ?a=A*J6*67ci4Y8kO%i)M0);J}=?hGsLPIRD~6p)?1mFB*7kikFWFj zkt0W>H@lyM&nw|(FnlM_n+~8uyUZTS!RXY~)Tv)&?gcQVcwCTI-LkmWGY-z&0T+?N zK;@6RotGHOt->E43@DY~Cl2|pbY6txAQ#s~Y;*3k@`tB_rBENKy&CRqN<8yLsAO}+bp8IajA<==yH_@Hz8VfwtWdDps=)ki=kvN#&d&Vgq`RSsAuiW24)tP zIEcF2cKn$qqh27K{Qk&m%ix{zE9e1&zcx{YkmwwS^1vNOx?*e$QZl1=3~44#$zr38;K}>@4p8 zGmP`j%X89ih2hx%0Jo3KF;`$Wb0N2%@xmgGV`$ixiUi3vD z6>;0@1CV2f1kr`vi`o}FXa+QJt_&)u-6CzudTg(JmN>rM2#w;6TPR5c!TIVDN5hqox2<&qzr6Vg($&; zaVzL(hzE1jY0`p0`ZvY4GFsZI8-tJf<1=B_}7th#w2Xhan0hP;~)d z;ggVW4WW*69yoB**#ssbvXaFaNCwPXwqQ)a0YscjaA(OcG+@s^ANCd3R#AC|VN$O_ z&gTQXvPCO(mj^||Oq)x^7V?e2FpTpkmA)ZCo&-rJDJ|XoLLr55$jr41w2m`4u?K?r8+D0Ke(;0&o+<7g|L-}ina*fKhI_>h7DQ^HuEJ!?KqTj z^(k7e90x^3sW6{MnH0?2n6d&E1@?~yh~+$X>?)jzwIHdV1P9NnE5#OG4cknUqJD_y~N6B}C+Mi<7yMUd0!ueynqH33SUM0ZlYhlj_v z!&A zeDJ`BgApVAK^yyXK(w%bcIs9bV#*N-2rkuNuS?5fL28qg2jq{(QW;{N2@4*lfOpyx zPveBY0tcxdDl85AjhUI59Kcu%4Z!|>X)lOU>IzJ_m@=4*VIX3@n>K6+Lo=CqKH}fe zRP^3l-0lPIBJpQF=;kN6bC866GBYz#jK#xuc?C#)=m1?BnS=%)F6__Gx)$~Y31Dyr zfC{)u8%eiOKU|$OOtU64@DGZJXpkF}j)QcME3v}cO$gKx>X^?r~&$3J&MV zB4Vi&IAq_xb4Pghz+C?kwA3_RoehOIzO%nywQcH_2v!wzRvf+&u*hT7>1tgoo&%Tm zgUKde3-dr@P?p-~QSBJ@otz559`2RElmUiSt75B3pq3N{w-hk7#|g|m*{4{_%aAG_ zdV7a(7law~l>B}< z@c22r4Prp39L5}-G-*_V_c%4jqBjgXsvplQ_@Zi>ABiiy=$m6T7>5&nfR9fRr3X3t zWJ1YM76fj;M~`;qHYH(KPU-iJ;oj-PFAM)<5Y7$uXgcHpf=F;op>Ys6nXQ&uX9P?r z@8FO(V3kYenWQ9Qr8zk`#H6BSAyoyCk3*~?yI6jK8v!N4AS>nL2Vg%Q$61T==lrr{ ztWbn`v{kXkHp~z_h5Vl(*?^}k`GkdspM>`sUUxNsK|lwd8QAX=;JwyE_`(X%2;|Gl z6FLl?8HT)Susq*#EDfh(CxI7YvFRBY8U2bhuWD;YAWX?AoQr5J$JILtVW zqZSqvcRZ+=f~)TU&>{-h8Zcxf`GOc|po$?bwTN3$WOHD^KRWjs$VE%Y;3!W3P4?g! zMZO&HK=#8*gJn2uK9yrJl=BsLH5O9_Nh*fO_7aXCPDgLt{q8hyXy0hB^*j35iq8dL zOmI+n6!>bJLq`rAxB{?^89>7R-CbQJ#l_Jj(a#sh(%=(uRM#cXbRa;-d zc)5Q4#Qa}i9rewH!NDQ@)nQZaue)PpmpE<<~>YF>?M_p@NJ9b{+@ThXXUO&LAHN!0Lkj;)6$ytlhel z;!^tFC%jl2ZnI{$#++oOpn?Nc?bi!tdvyb3*82B|WnA2Kdhs z_n}sGFIWSg;YcQf#VM_<99EnvgsUze&k7^Eo;0}5Oiyq1Tm-z57ZbaS^PdjxvI)-? zOI1mfUvM~c<~Gj0>h(V)Wo&G+5CzlGfsPR-(Pea)aceL#>NSWJiSB|s0A+FD3dPM2 zPN;TaDe9Z+3PHwZ_dzXt!xNhp>UTogWY@0W1A+T2h zj0YCq7mt{Z!&&x(Pz^j&n6n53sE_zYa^I~#Bz;RKN^LM)If_i9tl{QDL5U`fS=t0C z9x(?hnBV-P)(na_9&jy|Jzq|f=Ld;Qw=NY1tqP692V9TGN149NvZa81fpLd-7mBpY zeZ6*M$Eh|sO!{xM9IecG-F-g#Ouw!E)OFqLej9uH(%M=@>>?VeRuROIJ|%pggoGp^ zOaYL=Ja-*Y$dBXl)1#+B_f&%&Aa(2xA)70}wFCl^JcryT;R|nHI{K`p3IJ%+F?+>( z9vv$(zT@aa?*(@$AL5L_9+#IC8X5{4Z*PhbN>e1`Dugr`BljcmAk62ZodN~2Mx+)M zh41|}+rlvB$q>38pxl8IObFe;WL%t_k`PF%u?3nMScL6f1EoX(dg=o>kGc)sM6yg zugixlhQijwncM(r7A>5%hZ=INlTC65GZ;i=tG<5)@I^*Q?dBg zl|$798>LR>=8W#*iPNfT=83KlC=pee2?f?dc}0Q?82vab-YodtCw_jBU?K*a^HuQy zqZ1SIfTcR=Dl}a7-u?UgW1~aJSEXMSl)q{>uhW|m*9Qlayv7ue3TA(q1kU@1RP$ZU zwKA5d_Skmf$@Aw4swUaz$aE_qzyY#vNr{R`OIQ};*8ia;%Jq*g1#2e zh=KjH+d+XqYjk@K? zbbDv!rL0`B!T^Exp_f+;%DX7Q$;uA5&Y6lrg>OWmwZ^eZQloA5aqb^VtP6T5U)&P5 ze<=O)jj=TnLFHi*^F|Cm)Agjzq_E|F&21dS7L0xI;tvu?K(hP!`$wTOlL}lShwq5x zCxc8Z2kYg39U7A!R9CS;T{#%&BrLTaokhfy;8)rybNck3h!L`F4!B<)x5u6tCRIWB z8IA8BY|NI09qdvU{sU>oUHc$5J{Dk5f@GUtLt~L zGC=MG_saK*??leiiOD!Ww``@-xP@~N3G#cHW;w$G(;K_RywsFmY`c@k{DZnsRRRVi=e zS1~dlRTl<;kYGIy3v{VTCgHv8&_H2XezG0H!lK8O2?5ZD z<8;TN$ncFIWg+XSS7oOp3(t}Th@GS+*bWD23XgSVQxjGtc1QBo+Uc73i`d_+$+=Qud%RL#-f(daZ2d|y88zB ze9~e1C)IJQorJ^#pia+^AwfZ0FuTmm&MF9aqt2-_%HR~X-$+?nDcP?HKp%0vJMAHc25+kTif^?vUq%I$1DVv;xU%;f0 zDRRBCF<%WZPwUj*W0-$H{jAS@fBF|Y97xq}W z-uZR4{J*}j_?*GFoxjK^ufKzA|KRKXXPB;kz>R&L;Sc!xk2R=e;Q0UGWB;pM-9PvS z|M#u_vxMjWUBv%5IsE_6wJK9+LN2Fl`S_{l+-ys*D=21KoN@P+!;ba|#i?sgcf{%Q z1bA1bZPEB?OqlGsw^?!a6xs)w&-TWGixPvT^J9Crmv*+72Cqz~cesyX*|Od6TJ+g9D>=KPFs_j{nHj zSLv)M*CVSk@-Ejb+sXE>{nhIa!p?+NySQ}=i_kURDfX@7k#a4Z|Ex9BBXXp_$&;G1 zn6Fi;F_EhuwR^jCjqxsNJ-Os9mOK+rIC`^-TjX3{++s^EoU}jZ`;C6Tch;`9&Hbe1 zFChSrBQyM(r90d6^~cgahw^1bYND6-dj;2A&g3;u{@Q-u(9-h4BZk!vC%%_8`$kwU zPG8wuBqcn%7$%%CRU4cCBvkRmkIczWrJ7aIpIiEBR%~oa4r!C7R?o;s#Jmy<*VK@4 z()crj)kZv2_sBP{2U@QWj~GUB3|c2=YL&9pIV1?!9=d2RD%!3wWEQfz{K1`o&rTV0 zdpsn9towUi7h_YtYK`l6ISgJ1N^}!c;anKulb0EIlJ+6?{9?0gsCJoo;pQavPPUfL zyX1zjIT+fMYNmV&p~k=h6f9&V&eWXp$D&$RQ+~yFUCk$c3uy|6FUUlH@=vYLlam>c zE6JFD*k}FNUf7g9zP_bKZ86Oxz&;Rf|C_xJU0&&mgG9HY&*6Si+3TlMZXDVXXUAx8 z(f3(8L)9~;{jp=g=$B2TPWrG-t47SO8I17cva&M@Z%TX_XK(3p8=fVrg(69KoZ^*%3p_|dGmOY;&mQf*b6lB+udf=bQhD3llVKf1pAy|&HN zTwz^ZA!|NSqN=rNJ*|4az&rW!ps8V!rIVLbCnUCkn*3XaZ zn#e1>GrQ)&mj+XZq=7P_DY}RVuW+tWjBiVQ_=l6Bb`F!@MotKr3smm8P?{z@Vp#qx zt9gF5a!`$%XjNCl8(-CKq759(AMw_{ml2bEum8OM_@e0L`PRFFon|@XvtfgrhYr*P z2o~15xaM9E*rL4OTStF-qcDfW{CTS?J}R5MiC0tpVB>R#!G#}>=;_1m?A-IqO0T}h z6!!Y!QI3TA*xcbliPLYF7_cZ%`5LR`ObcfMiv?gwseUp~wmG!FE&oCeVCmZRBvGvmY?foF!7G#a)^DQfR*XX_@vm#gYOk>jiy=`Ha-&` zq0){;N?P{RtBpk))x;dEVzZ9ORpUnQ8UN_&iD6nOXHVQSyXlZ~z7ZSGr@eOie4b@m zFQPcZq`yjq$;0#8#B z-+5{S6g#0t);cxz;HTjlcTD{=z2(arc;w!Hd^^kEkhI;@II3Qe_N`i3b>iLQ#p>14 z3l}TB?9a|*FQ09Ay;Y+6BlAH{&O=qVExiv2o{*+GI(*ThV;?%q=QSmlNU>8TcbFI^ zwXR4XAAcY3ckB3hUkklOiKdobe#hwwjlJ{snGTNm%!QgUA1`}XW%V9=NadH?@ARp< zo83wAhJE;A^Tj3U20d?v*qch(9^|T~?KhDdRi(y9d_Q>J>7_={VgXy8d4c3ZC~>}; z(GT4v8?n=U<-S8EPa#`(KxKAL!MpNxR+|bVt7R^}g8a23GNX$Qi7`%m2Jc6`ON|OU2CvUf z|5!cbtgGAATX92Ly-`B`G@~>7VHHuyu@K2Gt*W~HWxYbQY|cOC&s$a*Tc_82F)^n( z%WX-|iG5JqJuAHFFQW9iR(8WoGPP3evNc%8K7#G&hRFNv-^ce;_SNyRrl$MtGrh2zQ) z@k>Kj8TZU|bZjw13csQgS*Y~>KlTCtqI%J=wbhNcUxPQD4*pas7|-H#@`qpWSX%Yh z6LI!J_;FTQWV9|Q^z*0F4L_TWMu)2HmyU{$h!Ddw0#uu{u*z?AVlWmi)y_87=}vrS e$6(^((z}}mCnb7sG~@3n66d7ElFnSa{XYQ7xQWF8 literal 0 HcmV?d00001 diff --git a/docsource/images/Imperva-basic-store-type-dialog.png b/docsource/images/Imperva-basic-store-type-dialog.png new file mode 100644 index 0000000000000000000000000000000000000000..86967944f6ae56bba8fe7a8b93802d7c9021178e GIT binary patch literal 50811 zcmbq*1yEM+x9*2@mvjj#Ac}xUcL<0`iHIN_BHbX3v>QhxujguKb2Cg$U&MYmHv6O#FA?K% zm$zS?m$yr?zf)sEjfdhgA=Z=6Q)iDudXWyc^5*iW`vQkUWuwiIw9r&t|g<4B1R$}#lgp`!DPa+^N zP>AE_O@r<4bkfN4FGLBVkiWkO1S!DdSbovTT!Sx?{tjn;2hR!FYbCjlTz5APxrSV? z;gKbS%TZI*EXaElZ2xupg&i&~uEK){Rkjs$0yZ-z`)lEaDot`3fygr$Lq|rmvh`|c z)iW;dF82iI<=N&ezKf0~B_q3(t{ysC^gK=tP=U_z~zdyee7tAPA1ncN6_Ad^0U_4^q0|GFRHz=l)QBY9e z;NnWDtE-1Q45AfQSJQKRz{`4)XJZ#>;_tx{NK$^X{P1l0=J;E8PV&6J(+Z-09rR;k zf9z#`Q%`B^wpE_pb@grvj@PgERbyc0t9EVW?Br}&ZSf#+WF~x2=S`F&;x5S&HQ}mn z+JYyWSQ+Fma(iaPwr{MB;aN5}b2$~(n^l}1$_Q@mav$CBj4R(TeB`b*O?EI&<$PxT zpvmC#LJgDX+yRZLXA&2+!t8idlGRLd_N4<7HP4%e$8{hIx1TPsop) zcb{&|n^Cq>^Hk8iVs*Z^7Lmw(_nmm7rg-dL@iWgmK5X6ewc2@qZ1WNWqM|+O6%Kkt zG+9_Igj-u%x$oW$P|v_XS--8WlK-=bdfL_7O9G!0j=928+`Op~5}_csTB3xiubAIy zSLAX_u3RNYS&HAUn=5|Y7Za5;9se)|F__0y#N(XOaX{ z*C#&9-def|uMg2r19;^x#;eFE5<{~31ZI~^eWnwezq%}IiVyjeGo^^68kiZriJ>Hv zIjrTJU44NauI;arF)Bzy8)hp*H2?Rh#Ox$jl3e|j3%RZ1pUPa#t&zk=Q{U$Ma#S84 zMJrs(cYNQ}(1O>^$j{Bse+k9@^Fz7&Z`PlRm$ho`@vz=(;-I7BzRNXBz9;fTOFO<{ zqH&?&lA9PVv#PpA&~%x6s%6sB3e`Yu-(i$<6-pvk#Babd?x^RN+6r$r1N~&Sn%dX; zuJ`l-8)2=)mdZ2Rc`>~ePw?H!oZMHeEtC$rHQhW0AF1BRy4{7(OyVqzwso=0hJjVm zu!q@XU}{W+daHnP#3!ew71K*%VqtL?Jw7@zI6pfUHY^ZUP`vg|8{I^Ao^`)3nIuE= z#aj{&y5)%0HBm-;QO3#BqlQ)~y=BKh684*#l4+#*`FHxnU3&gz@Ue4d`$iQoD|KB| zKGW+VDla6%l=cyi>}60}5lQ9L^K!jbts}hltni@B8f$te*Uq6xPVtPv%}u0UQhPV- z+0zWU7ivPC3#@NxhPSR~XRAu7rJUJTUC3FO`}#_qA1$7VyrrSD@XyLr51+_paXS*O zpByKWyL00j8LoDzYunglo)k;ez{?v|C;NBqzH1zi)_mT3SvvVk{w0odJTppGZhpSZ zVV+6LB;n;1@w>Es@i#^VeeR(7Nm+9*{J3rBQii7Ld}Dm5j|`kS)noc&eldSwOj193 z$q!Z5z_@#VD>wOQ{eGq5QODB`3bqkDoSU`=!6f=JF67iHQT4yZ2yQc$<`^G12-gvT-Yr0VKwNhwuXdLmf;ED_-HU9WpfXZw=dPuMtUij{(@WCU${$S$* zuSwizHBRIxZX0bC0{Z>}y_nB|BnlBKZCm44X9s`b_Ae0ysoY%FmibVSLE0)hOpbD@ zRT{J){6$u1Xa3}}_sQxtu*vOhXUX0#xho>o44yhw<{i^YKU@EdN;Hl%<239BUEvTV z)vu{z;_9Rc$gk-ukNb>{(kd_z(7ZJgPPIhPh+l-wEWX4#6<3LQHEAv4MiJJPy%>D0 z{UJtcy03&M^r-F89mH0Y1YP;eoDzfRo{HCzLDdu7aP4n_jxb%xtfSLtt>fC8)SZ0O@*}aS>#@O z2gj?ltdedIc{8gJuq~8o9zQO#-Ljc@BXQf@k!@cHo(cv^l!o3{Txz2?RI~U(MC}Q~^hVyCr;W|;r>7aN znP)uunwm`}A`mzqc6cziznDhKozEx!bQ@nok&m@{1m9jwAm3O<5LMqaj25lG5r&o~ zT;F}aEKxBKuRtwhQNpV^4)%r@>&+3i!TN( z36jI&-UWu_ubEH&K)0@PYv}4=6gw$vJRz1LbrvSg5q4YIJ7d2&h%-(V?&@DRoUu01 zcSKtgH>ikrGyiWEx7FEEa`$|ljd&J=$nxNyDX~W!=~%!=v3-{VJC_!AD%g! zc~F06%sZT2XDE+*Pnh>n*?c&MCRevMoRBHdX!-!BdjI&*%21n%2+fjro3jM5a5K-o zJF8~Rsbx4W{h)Q+-*f6WNn`jzu6R2w7k|GJ{&7A1o%M*FE2r6VD?EExyq~Nv-+hNM zAh@-mwfj<2(&p=Rk$WQr%=9As0midGajEx}B8C0G$X*f@)M*%=#(csx*-S?+Fw=tR z&tsq=FIcYio53W2M4|GXA4QnUized|-S}>U;jg^0$5S{;pQq%<@%1+5g+xj&Hpxcl z>;021u$e#5)|ZvwyA#@kx04S?y?cvm=~1Da-2LO0wCo6Y6wk>zcT<0V)81|vvsz+}4fS}oZ?K6niY@o5$<*!7 zv?O5y67u0Zg?7{+7Ht zXU~6|JK^v7`}v`fDsG$7H@x*SRxzOUprl{ zz0?4M;7@R8GYRDB<)*y(qB8H62*PhOzvofIW-h`#`}?j9&A)5AiY~aSGi~5*L9P4-ob=}GC)Z(tked=sEm!K zTDS}4a*T1$5U-%)5l4{dC~i+TEh>*vx%WHf`5T4CmCZy$6o4LAepLx6ahh;*zpc-z zAg|oF_KOYCcy`SDP~@~+U5zhHgq4LN`uRc2$PF~ebAE9X)SP3LhGU-_aP+ukpEH@> z!}}~k83}3rYmE@K*Q>FHpWXBhbdQ{f%p-`rch+!4~ijcZ{_g(4(Nqh+IOyKvkKhx=iEd@(A7yL}uz8Rbq>up;u zV+nAHl=Bz)*F;mG>W3OG<#w$bESo${!|te;yhP`LFIY7yX=9B?&PzkDn=>=kN$FtO zPiv@zrIL-q7aOm>K`?*!%0V_jSLWr5jV2g)vr>>f*Ir|p{8VpZ z|Jei?gxo87jI~%j#9DsSr3v@!y^rmvY=p{{d3(q5yW(gUJNsu;5NNtA zAqiT~`z8(`-vFjJ_w1$Olts)qX+i})M#@B<=gcgbVxwm)`1M@)-+6bxuQZHm%*i^) z(Qv1|`a|BNrn*){d-O00HF;VR5Vz>#aU!yR(1LGEAU8baonKn!J27?{5=QF-{9rVc zQTI0%u5Z+f*YQ5%h2OI=BTY;gWa1pJu$=ZWb1){LA0&-7!mSM;c9!(p%z{35vP>v<4W65rUN-k=2T(1kmNFnd+}d!7@*}b9k`vztb^k9} zGzuymGBNd(`4{6y0vQ7+ej>KvuSoMI#pM|*7ImXWBrXAUC}fXI(AHE zeFAXEt)3HH2~TJG7EI^iG`KvEv{IdGSayw^v=KuObB_kKnS z+SyoTN?WpKdBQvYv(H8grc_t?IS6kjmI6?o1CW$p{IiGC??aA|dY)z)Nis_|g7RQzn zQ$<#4-ZTS0P$L5WeNYf`sbi9ZagYclVT4^2J+rDUvzt)O?%ns z*<-{%q0cDFu1Lqdytt3A6(pw)N%+;12W+B3IRd#Y6U`C(-|Qf<6}VbrRPOJ~v@w>r zwpb3(TDKRwmS#H_hE+^p97KF9XN-^d^Xs(-)}p-g`NK}r6-f9VrCQ8?nw|GnrfHWP z$j@H#S6JZuSo>>etbe$Q?aIq55ab_yJy*99Gf+CTP#se-jN`4-b@ZZEZ|9z6N{aVV zX{0mnmI1_n13_be=1LZq&Tz?DPwKs}nZ?EZ`qLp1Sv=;qAKwRt%s*!S6U@i9-Smmv z`D3K0J%hE#ODQ7*6nX~Q`wtcy+Aj~U^1YYl;PaJEvFOd&dh>>Gwtoy0WydUv)|9yJ zKK(;*kl@@x0Hvfac=lAa;byoaRyE9kA=BYLzzQ zqc59pbuL`#=T|RIbM(kxZB8wR{Fv;uH8~Y-s)#B`;cs7S8h92IA?7(dV-@~WkwSSh zvL)v|eev3=*EIi!7|o%vwQTiFH9b9Cu&ggZhvNE?t7ml73N!P|Zy3>a=A2e2-ne}g z`TWev?!ZkH2`vYco~t$0Z{^bb3e^c^;w}dTsZ-NF_R0nG*`BLz7^6AxVT)3jS+GDy zzwz9hoK!6LG9IP|$A^Q%F*CzqeoLJkP0KBZ-Q>OV)<*!Jek;8z#a{DfY05PmiPoI~ z((OTY)8zSO7J)1r+7jP^?J0d_NL%@?rOjOn^bnP$aCRhPg3{H|i>;O;0CHblKkOJe ze01$=CoSq`)u$A>rx~rI#!poBv_pOU&fmsSzhHYXBB(VJTARbzp+lfZNH}xwL?n8i zS5-|D_iEgW98(Is>kfDDW+8(BU^Zt{riSTnT1R$^d96{fqz7Ty?R>|(@^$HslV>CL z5OMjCp_DQ%i}Ev>n5izqEvv`IRe=+-RkGnrj6SLplV1bM$JseKhF?U>U43iMOPn!$ zXLhuaRFmKA&{IY1=dSGw;|NA{?fFCNsH1sR`ibgw`}1aJ3@++avDOoI4tDw09MKUG z9cdd=tcnjeo{3r8FUyIGdNTCpsC2N_wXl(r@IjQ|;oEJxJ+622>EETk`}I*y3<0mr!fgMsh&?3Y=4T3iRb}Yf zC9c>g`lH{X+Qs%VMU)X^T-y**o<&yVJPJ-Pq0x5UmUJ_xk2rHzdoE?hjPc8MiFrp+ zu4ZflBq}z459R}D+R|*{*NTB;(fYr?6;bNhdkZxZ$r>*UMuDBfH_ zLyc7I+^s(Q+*|Q{_u@8IuEtg2J2Zg97!tQLrpdT`y!1ioB6;krKznrkHs4*zFn*hr zp&sHCiF+xJdX{jg*Yh@VINEPCFv-vN7RWnlX+OaXg)F_W{C)+)y+qOf&!11^2ATR- zKd2Li%b}MjqK8TiX0Hw?8Y%frAQ~@XG|+#M zz>`SkgFQYR$SlT5O#aHF>3|V`4*l_35dX<>9vgU*w(GVea!c*OHQ&tBD%Z8OC&v5| zsB6t%=FJrOKTlW{C;b3r;j^e6P2clJ2$>%dYBw}um5I;ovRf}RKdU~!OrMZ5JNT!r zL+=B{O%i(+#wqXa{mlY4mQ?v~*5jpG`37hvcSgl*O;_gU{mZ7@@$mvv8_>vld1W&n z(>@EY4gJ0?>$JKNrnw=u`pjUoyN^tTz&x}+IQPoj5#Ju|1lC5ChjH_Q&B(?4%L&D< zmX+m1-{44e#n(RzY&}fE`Ti<(nIiZ@ndx;?DOclLlK2QeW1y;iWM%yhJN-}Cq7pwo z$>S1+)SBRax6S8cMB^OI`1X8d^pXAKeFDZ|((c4kg^&lszr8%Xj?D>ZhA|O8TG{k} zv5RHA`}(Sz^`5YjXNJI->tT>~j$G%l#`>5O7MhHw4E78~;IFIWu@R zNL}0Lp!8{Kxwg$t0`eX8p|nc1m^J>AL>aEJ{)(S6TCFO_AP#YO3&jNPSMo5PN9g77l&Y~r)i-xiQ+{L>bX})?CZ>}1J(*x$e+5%T zUtV4IL|M22 z0}1}`N71>hyGhz}EVuet0T;-7$)tSy_B?IlQ69VNOMYo!NMAmp?c5v`^6U zU??v{(EFhXWq(N=XQF!raW{R<>&|h^eTzEao&IgkK?z0IYtLs;Ml9-<*}S8hxLg=L zbgyjuI7?zUIjy_4Cpyu%%eY%(9vm1hxAsHyC_WIXJ-;1GGNB_9eWaI370vj^gbi8C zWtC_0;4<8HN^A)Z#CKB0dlggZA=brH2uU~}x9eZhShAxu+w*F`^x7;KN+ z=H}sR{dunnS=@lX-cOe+xN7*&YIB~gRhw||@-)}?G0Z~Vu-2#VPmEp_`K3VzNXk_1S}(MCX(DFuz66m!5cFTMefzuNIXS;?)4A(Yc5*Ah*vcY68BH9- zx%#dzR-!z~6t~u>byguac?FfVByRPr5(wDa6*Nvnwx&IbTpCMMcV+VE)Dx%t$ZvME zaq6gbVfbBH*Gs;*rI)R$zFItsiG;MT?%g#Zp~r3>!;||j1@2Xly%cI8p+&1mr@58A zRpS|6s2*Ou&hq^+ZR{tyrk_LfSXgB5V>DSfd5SD|wP13oPLdqRO*EID5FCury zx!X!Ji?6*>*H`C-(D!WB#`=1cX6e%Qp8denw-um`RDU*7xb_%dewZJPMI?>n#_(4C zfD#t5Ewxl@tw7EGjN6e;lYJX2$qa z_&N&E7|5>**T}R+V^f|wvL&dhK24FH8+2M&zI-uAXHGN{=!D$sfz`Ij|qg_-Xy0QbtAbWLP- zoRQ%wb(+|@6#4mwIfsXe99od8I)~LS91&bz_|Pb6fpX>YD0drMeGiZ0F1u_B>Tvr* z=CX_mqHp5Mb+sVFscNX=U5#V5Vpu3SSjA^XLhPab1u3QGSGUumZ!??5d5^xH@W+2O zyL0QviKVmCRH5=C8tma$vsUw=iGprN)eO~H7e%7N&C8PM8Zs8_f&N7lqSXwH9R+o= zvU@A(U#28qK8^E+D&8l}drz;sScwMmT^x#-)k$EH`=eXF;j9sny-g4|!tUC|%)*lS zz&XU^33{LL3Q&n>ICT+k=#EFW)!5I*s#0{ABo2tkNc)Warxj!)X_zxVGHaJv)wx)$ z?iOJ;R;4>ePyB@{-*<5+2{OvK5IIyAo3j&q!7`s7q)Y5#SbK)sFgA3Fi<2G;>L9mr z_Vs%cpmHN+r}R&uaZqPJw!Kw{CJr7Ea?bZZmlgk;RmuOn{eibP+P~|X@>fU5|5ec} z%+ELYS5fot|GudCpSS=2)kOaErk=KLTJ=oj1+y)+AfdZ@ht^ej= zX!sYq@$m6?mXmx^q4sx*d!@pWWQ_?kT)?@7~eLTHX%)G&MJW3Dq9qwzszz^f?#(s+=%pa(Y>MW~RZv z+-~;LpWWTQqUS1mThmMj2L}&_f`WuyH|doVMW4>w3kV2^9!@xhL`DWjN0VDwS#9bJ zms*ea)_Qpq+fLUGZKR~6aP#m;U7Y`=o7fD3s;!?~TE@=Nm;2E(8yk}*8wx5aZ9_Ra zC3O$d)sK#k4cp%`U&Qt>koL`|-uGbH-QC^!!IpG|ogGI?N{X7_irW2fGdzMp#0Va! znxR3gVf*r>5Wn?UK%~Subzop*TMk|ziQDmFOo4eHi|78}lS58@Ev=A1d@2j{0|_Z5 zB?8SH?Lm{%j`sHYWGR1c&m%k8d-qblf5#~@>ynP=pWPcW{EuD$YZ7wu{^ZK5SFi32 zJW}CPf3UT&_q+dS#-Eskf+Br4IyM#uMJ?*aJ(T_QQC=m#)rc>cw{Y3kWEB<6I{epW z5Q5?W%|Dut?fCg~^K_zBR6xLXsu>98b{mt=6%G!()5EQ{SRP}N%a;S*y?ZA&+Sc@^ zOJMrSwQCD%0{$TiSwE`Q2?z=8w`ZgX7)7bEu&~;@yIaRfEDN6ZFz&7Np%W1ikw_;O z7hg6tHO((9d{t0Tpv=(H(xS?K8ToHi6zQAra2~@(4C`Zy4ir?KYdo`&G6`}QUg>{^WAplXxpUr*#ac(?6}n*JtAddiu}l_a|y-4!Lhy9uVQ?9 zuyM4K7RgwCzP@htS;+Bg!6y&>si~=v0%Q4{aUup`3@WM^R?7#EUY>50@mLJ7*CZWs zcXzo?dtvM7=%DIh8+vne1OkGBjOLm{!z+_o-^a#=eE$4dev*KNB}ZPI_1DjzczSwz z-?Os=ej4O zl$4tD4V%D;dea|J(F;4_ppyH{x$R~o*T+g8d^`L3;UOeizTe|5tib(4pWNM9dTs5D*~e)wQ`eknsqIkgx@D3Mk4eDJkW{ zUR(PT5D~Q|ig^@|=jqkFhNU+5(J!%}sC4>$>A`~s1a$laF}HOayAwoqe%{QRft!&h z-`1=xV^Q6HRu4v5yfyB)+%48y zko&Ac-J=5N{MBpMFluXS-zr>-y<>_8fxyx$Q7)|^^Kll;0uAo2K3UCT=ivBd6AANs zf8&wCix;6_GDgRL7GV!Plll2sq5T7fYcO7FO)Y451t!a?6zf}DT&&&m(8S~#77=|2 zllKuCgRoQm8yenxaN7i7l|<3d&B>~?)YQ4!)2*?RoAe9}_B(Se?q0P+dHRvhle{SN zYELX`e)^pJ{zfh0lHI+$l<_U`ReJjM)(D0$Fiz{^zo&u2eO`?q9}ve#z3ty z8wMm)+}5o$55^jJTw7Xtsif{AG=x#h!6DO}pRCKxLvZTQ!z z4X@r|RyHe0VxXd8 zV%R9T^lnu;uYKjzS5sqNaHtq5G!0WwQo0PLPWDYDi4r<@<~}^pBXy{F_FaR6Ie^5^ z&rkYxOqjm+@xA8O*4J!Fp6VD_Sa{3&OQq}XSVX((yi2hY!iyS7kQUy$46XOS64Oo zleP}dgNfStdpI3-bmX?vLZuHAgJue89A>#U)XZjGpRN}c7Rov~6@yQ_Ztv*uc-x;M z022FWA-)J9E-n=f4GkPrDtOY|!jEW3_tHm4M703oamwahL%qe z;K)Ror?qv?+FupfFL?{^@7kY4;`A*r-(hE0K=mH~9?FTw!N(_8Ojid}iHeG1X1RK` z1%}@o$NL=Iv(nF9_wuCcN%<$7JWlvxO;6Tm=` zQczqEAVK^MvCm(>)M1Cy)6@TP#`dVIEId45Huvw}mk!C~ipZ-w*VeJ!rwS*L{w(I9 zd3ybiD>E~5V_Td2_d$ydW1TV^ioYlOOJQcx@&Gc}#y^W|nDbXt#99wph?oLWcf^aY>6cpt8#p};1&1aQP=Hv4% z>zd)yq!0zBA2(jGu-s9+d%U>5$`fT#LMx4P`SN80NNh)QVO(~n2iDNXXas4-ZMRFH zz-sgk1_s8=Qdc}Ai!zWVa=In_cn?k7GxMTOj5fw{I%Z<86>grcwI{GRcmuWYY z6%-^L9PT`O_N+Lj@_F~?P)QOn~7Et z&v0(tYbrEqc}?54zP6S%>3w)wD$d)VrSF4|j^3FdLZ$DygL#*hu=ekPj?>x@;bf(A z)^0@@6;~_7@mIEWe<`2jK5KvkYG`h*mDdv!7Z-Ohed5jdP)W(@oT>8E3kKj%NXKv9 zQv&z|QsS50#3~)HpVO0?UQ>E#6>zz-Z7QlB9pPVjgp@8d

}{63nitREB&jg9>~JC)ckzh;$4?Ej_$acNBu zcmoz8ZGe_E(GBQTQ=(*#f@}1W- z_f`k-v56U*0gdf+aMcY|S%XY^5AMp-m@t-QIJWl8@T+AH9d{^jL@5GEyAqnQN-%ZCa9 zIArsD?Q4 ztIk^t&@CMG6=<<6hgxKjX!7%6&AeD?P*(8UO1@go#O;r7nX z=DC(I=hffiWn5=xXWTG!1RYd;OsuI9yL0DG@q@H$*RK!$vo`<^m;jf&IXm-w|M8Mq=^8!h&SF`fSx!t&E$SAj+UOSqg?i38skgK{4>=lia(%9jYL1jx zQcZas>LNzZ!^4Aor_^ThHG<&u>wsq(LAnG^BkAs5+5KiCO+FF$^vZ2EkSgEg2U$RH zundkLbe!ILS}40Lrf+?;Jqug{8vr&o0NSQt;`v}EZxjkrWc9(AC7`z;aD_{kF2P<{ z?j?&Wg@%TPgogGVXY>>b`$!0s05NOmjN|2b`N!maOpI}3050)>oR@??;j!rXWB@KX z5D={Oi3)O{F6_5&w-%aqyp4;)ovF){*koc-Pn0oqj&JMpk{i6psuWLUM6r54_{{?c3Y}0`l?v z*7+_Q+SbRXQ3}@ty-w~H78MyRvVMEF^eEvK*$@}C! z9Sb%AH45lH0W~*@$#WYm(dYbFdt7sTO@DaN+w0>eZ6I6-Qxo?(sRy14#20d1$pH?~ z6`BVhZ%OqeiZMt3C~lI#U>wR2j#;sqc+ zb~qSdLe(_57eJi)mX^h+Dct*T+s&K!F!r%SS6v{ZDe4(BGc&5j@laoqlf(L)kiZl# zA~Gm%y}Yyq)Heje#1%fil7=Rty}zD(d%JD|5J1PvY?~SyQsk&_b8-ffNQ-ozcrRK$ zLLkrgT6J~X3uZ!RAnlDFI9sIfT<;#@YKo=rFS~x}Cl|67|7)(x(*rdO9 zJ6}^7k*8(b@NSDcMLrtibl)8`IX=F8?}Lf)jHDGV=fNe8~Sr3;nMg zFZs{gAG~;R<3EI4mMHFjokj7s%I2i`*Krh||K@3yAmXgKG>_ZNLg&gktGyi+*!2<<^yXIUD1xL`1^=B$;+7>wUh- z*hw5`H=WoDPlE#`hcnSz{+5%qUZ*ZN%qY~?uV2mkQZcoQ&C$roqg!nXhk*G5fyd6! zcnuDm@^W`+dw<`{{1iFjbMnn%FR}fs`j@+ICga^w@;|#jS0~N~pXkqm8dUDGK?`VT z2Z**2Ah3|Iuq;;{kZ4{3-yP1fGBaZZJny%%Vveexs`1z#qXNp@S9c%As3)B8MSir| z!v+G`a$nXHE|jlgdLtlnL?klU7%PGB`PXZW3ou)wq@Ij9kCztdwN8xP&Z zeu%s`*4@0Q2o28M_*k^@X~F>vYQeAb=)*!*Bix>Qee$4EAnE1-S4{w*Ypkv6T_TVq z5E241A2Z;mXx4{~#1dz|nD~_Sz#C|2Xn?Y^Q{K`-(b3VJftIONY)%STD5cN*?fdru zuV3RO{QUrV8GwJRi0kc-x1PR&tT+nyY-|qn3PeQ*8M%0z0uK}5r`pq}PvBdeab8#@I+*D2S#;hZLF+JgqR>CGA(WG z)Q9o>+g_Q-j*zj-hA5*6rl9O)+=GxWm3$492B*tQTVaXvmh&4f_PeiaEq zz)2`%qF|T)utTsynL9Dw-rjC&Ib|pmqW+eY@PQEI2M&x7qJKCIF(U!sFEV?|7g$0e-jmhjjj?VI^uncqwnYKjn z?S0pr5~W`soS=`5W||=$pGu`lZq!y!j}az)>((tN#=OK9YY=X{Zb9;d#0s;^as7*^ z`WzgYj+cm#^{taqTqS%T^MTJhB-_QQ=lV6>uJ6wAww5vOlY>D>>|*317W*fp_FW{d zk{m}?7!$&Mq+&>A4=yWkEmBbYJHRqsmAU%w6N8Z{DewP%Sg`H?a9EJmX=~jY_aKx`G8R5sLKKv1#3dCK6(6ntbJ&qF6>CyNM;|G9h-_8+gOM}<%73l{ z00-(g{&0w}5j+>9nHF*tQNR3rZV;9zffxyT9NbEDU%gRYQDL|?l#^dn)a0>MgRP>1 z$bAN&6bX7Baifr(t_Mqv|FexO_Br1tC#8SzI)sUA?UKyaQh*=Ez%~Tkwy)@U?%eYP zWfbLGSa?TPULH~9M?ehlK0kiWei_edx|RVTCPLa!2K`?jB9$Mgqyz(HGlcLe=(wcx zh>`K1O_z%fQUGudTm^$o`7^v9+o_b#c8cE6&=7&os+yWXz#BJ8*%I9@+1S{a4`tIR zJ$%Rm>IED&O$ILp4uwL|i@K4(3(Gx^?|?u6rNdBI2EN5v#6JF7-aTHo0y!3W2b0$x zX|8@ z+#myxLh;1w7C%2FgNRE&TG~|*hWB%efX~2C>V47BxgpYn>m&n;4j;8bV8_XWXyxpR zap0TVQ1=8mYw^RAZ3vuA5L(qUG`3F6K+uU4Kfy6>ed7n5@0qUd?8XKmFKJ4V(X}{ardqe*16UOH3rvEN8i|z45(S~Ea5U@$j&!@hA{rdN8 z4e@o|e*#ceyNTRe9j*FbiV<6brjb#eB+AY^MCwnKY4&$cK@@#FQ+}$ z6|C->7Tn&LN(M=d-=ze(^o7ll_t9la3bFTm6^Ke)aKOJz6(jo3 zB~49^iZ{gYai1~BE@H)el`q?9k)8g}1Ijr+q)ot*AZtC^h(H{QF_jfJ3Mevg%Qldt zKN-0qZ`^ykqNG-21 z5Fh9VlD$AYHCi7jKwtx8toS8N1SFqeTl^u(P-V}z800`|Wah)U43M}GT?X+Wq$~x( zhxqXVIZ9Gnn|7%uDUz%1j11IjgeO&3SKIB(-9t$NGj=~%$A#R|`B{h@_Y3dB5Yhz1}OfWl%|mp zY7hxDcXlN)PlVjF-H3zgvkgh)6tU}ZpP_K{` z2l?qA;0#-i1a$y=C`nV(MHxW{70eXj4k_I$2S=AZt zrY&M7<#*rd7wMIzdv=d5d*sy&jg2cWn{JdGoS)t-B6*n=!6^1RCWZ zQLIvd2J(p`Nwv1BDoJ8uA{^xBu^hT37fy>Q3D#2Ovcba4jP~To6DUP~*D1^0SCIqj zU$9+`&`+p=BJoEqePytowc)(yus}|~e_{IS)wmbf%}N^?8GYBtAj9(a1A~A_t!||& zmloCAs|rA-0m$p`{%^$F%iqm4H7QY`S@R3>BHmiZ6(6J^A|gV7h3OlOaU= z12|TJ)QePJpls4#>1+wLam^DpF4zVKDjqIlHY zc#teXZeo9uJHfZ;;OHm>ohne8zPF^J%>inthsP;PiYBrgTiJJuXzD{pqD^9ze3FEs z0(Y;38Qa=MCM8WZh@&DRh};#*kUJOv_l}=Q$NVy}wY~M1^C>g( ziyj=fI=Z`A`S=K~38oO=#RcaExHCPM|KRwZC{$_+}WUOL;q9mG;@xtW!vR2W3 zctMm$1SD&ChMW7xG?`P$tjWgOPlMB1#@y66IQiWH%Kr?L&fPd1SyL?~X7zuj^_AqG zC8T^5f{cVbzKm3XfI9sIHMkozN#Irs(7JBYM#v`hRlQ#7AYa;+QAU(&p@2?^xxAy$R5=!q%VAdJM1;Fzm-e*AEjoJv@ zuiNbw0j?hG>+7rj0-??edS=liaUVWl`a+Eb91j%7B&auCvV+>K5-WL<&$$rb$fmZo zV6`;4zGNwMkk5|}>n^$=wAwp3Akwbr>3R{$6R3N6Wo4mp8xgI5O(&Gph$Ss7IG~a+ zyq5xBQu=fk`Rxev;M6AiPEL2Bk7*7fB5)C2_dRp%QY#Q&FaUM3UB4a(wKsBldZiB> zkB_!|E*?OW#>>C^!x@@6v{29h{WKDaLMU$VQ(@;-lae)L&(w#k97In2uo-7U*%F~I zDF6a|zQdv-=xgRvN$=iCr^$swF9T+db_o=$C{Sn15*G+L%!>NMiyJ`0)x8|GRbx2NbqzzP?G&?Yk`` zEd1$W^2d+Rfq?-Xn`yA78;`zjZ&qzNKs(Cr0sP*T`HhW-=H}+1YXZ~+_q>%sC@{GL z<1&Z0!+a|jy%A5G__4kbUWyw<$8Tlu>&ty85(m9{bqOTs1~9FigM->x`$*A0IMZH- z3{dHOR&Iyn5j}y=Gz3_nyV#x_B}3_^_nQj*@(GsCaiIJPz=$B@GjntI&h1))NDni0 zS|5o*7zl_FV98eYV(?`aA1eN*T1YAY^3w#&S?$%M%2P)&2yaYn+`#1G}>#A{6^gE6M;9i{K zxnEM&&6s!Ppw1B1SyxR#`w}8xlt{xI zE=o@J)vY?{D_29$d|Wk6`w*F%0?*mstY77Q{vhiNXKrX+m)(@Gi`BlM@(l|s;>$!N z$0#~Gd;1i#9Ml1mpj8RKqL^$V)E|V1T{+&@@sbRfM4)I}w908|4Bi_ixI-9g>u_VY;h1e7va#l@%isgNyQux(#rzH{?t7!9u( z!i#C|noELS0pXP!=uHZQSgX;(K&08i7pmBL9vgg65PS&Dn)ekIQz3V)j}~G3PFA@h zZkG8ZuN(RfN6YQ60_V9m_8V$oP*H*24Q`ipE%125%?`+zNUiSW%a_o=#R!n}M z+Ot}rYtVeG_=auGJ|!#|>)pGTeL=UIpP!epvbqIu7X|MPg5jd|mRLRkskR>SDJ1hd zj!T_}9UnQNwb_1eMGe|y+kgB(l0{cn7j1ic8&%)e zM_NyRjt8?ayi409;kr2y2UP8j^Qwl+`bYzG?Hz5DO?RGxL^lfD0(vOWlhxA|m%N}n zdPPt$_D3`u(!;SjoY&JtETIH)teE>A(h^;4HTn)38&E*!a_p86gYmJYiHkF(VzC_r zUbge+&!uEY>33}=V&T73H|Br;enIr=2|iT&`}?CoQGyP#mhWn5DBv#7feS%NZf12= z5vU$)WXbst#Hh~*g+@dsjI@v=zr>E%p`SX9!_T~XS?(M$+*RWW|%w&oz^AI5- zWf?POCQ^n5Q=%v-m1W4BP$V*hSmsdDY-*NFNh3{CN<~T2d0p08=lsq-`#JlZ{X6@Q zXFvN1eedsmf9~sZUGM2rx7(O8sSV6}akVAow5xZ`_uK`-S~gg5qPCG^+KWL0tnNvN z0^*sOkuer6>BrQ-5s!8^tG5j18^P`ipaH}nSC}H`o0#3&CpRC92wU24S^#zbLx7qq z{MoZZmf6uu=MEY%;yANHW`6z>MK0j)uhwdf)Q6g9Q-^xiIkjiZl-*HZ%RO4_ zk5uvhkP2se+Zb zhW7d9s%ue{pKdL6sb#Y70*(IPT6i2iI)3rVuE@;(?%*TiqVE0d;KyjCOqnsG|L30< z@^~DjXv>!SOMZ6g*+r$j{y)vViLt3=`nET=Kc-)C)};-Y|n-CD7h`jk23_OLCtyk5V%_0CFl$uNtDHT9hL z>>q7%y_c-=EH(Oa-`cR{i-%dPd2Kzl`ku4nX02ZCJ9n0%azvMV=;+a-uiweu7SJA9 zIB>@#YwPB2{VV2p@BZd{I?m8;(Va<~*VO-h^rX9Wc9yU2^;BuMBgb4k<=k+7Rlm%_ z!rkG^ZcXvjuw8jDeA!uknysa^F5#4{%tc9Estec2JqsB6|EP=qdk9eFCHi{~P;O|~ z@b6LJKydKwb>obuPL&tgB;oE8UOS$|z`usJl-cXrsajcC$v_H7fJFQ>3JqHEqGjqH z>#u~M_BnFw*u3cAs=2%?2)HgFgORb7l7xI@!Kcr(fF~i5SCj)Lh)%w7q@cU`>fb1f2V_}(OMlO);cMIJ)O_y&Qe+C)VGpQ;I2Qcm$dW%Tppei) zoj+!0I}zn^y#`H%I$8Jj)^=Kc59w0$bgGZha?COBucK4@pfdWnnjW=!NQb5{9g1bc zI@&^T^<8+Qvx4H@y?1Y)d6hq>wV`ExtFkDGC^kgn<=$`ppNfTbU+|Od{m+>*sn~xB zZ>T_~CDPTQ^t$La^orNNxHo$Zw|Fj^cH|k>R2X5(kq)${(kG-`z0EF2r)*F z4**@g`SPd_PRo9>?c01D7f+c>R=>E==qIPsy!pf*l~92%yeBL1bF;KJmu7V0m9IDU zUrivRtqU@c4gqSPhDa|iiBX$NPYZH&VvL;zf2fd}>sXbkqBt?Vm*8R)h-t6?oUc4$ zedl{?6LTnn>)zeni)|uEw-)h^uvR?J`WZ|KXOUompASVAqTu;;7_)WQ_}xv<0fSxq zQU3F-I_esE`Ennc`L)dtJGyy#PBSn#RgnvM@F6p^&X)328|C3^+Vo#=O*&7SM#HUn zJx`9Xc((Rt@FbL|*h!2QvBIFZ%n)^Pfg zpI-Gv+`D0hBmZ~ovSk^>4S+?WNIn51Amfg9&G(fVQ#&wh^rps&lql@=Yd1FZ7EbJF z^3iOTa%X@_vcbB-+%(T4wdg%yzyS*8&{fa7Sz21&2pF`BdpQxv2l-0h4JOA%^y#yQ z|93CzvhFR%S_hDx%X5969jvvK!m)n)jByw4+$n8lk({Q>Zeoi7Oh3e4le_FaZdYUW zS2oIxP+#HU+Yv=Q=h>bdw)zhj7bUi9QyTi5W3S-p>$Ej$J<7hBT2 zn}(@cHxuIHU3e=$6ckKHGDD-D$sju-SOYPU0^Viz4TGOUJ)f#rgcOJVrNhCeM~tKz zxwi71vS;0^%Po0anJo8-e(j%?2D+|(d1(k!FvB5l!F#5NK*pxiT>uMn&YV7V%Bg>k zQzKTGEv(A(U-Nn&H`wS-@U2k6f0L6vpFe-z=|;++pc#gg-Md<`1^A5#t8bq^8Rwk4t^f{`g2nxl zDVU`b*JHCgf4>tF+06W#p}mF-1v%>ACQ?w8qH(bV@1SdI#+35KFPzYtJ)2!gFn?Jq2 z8Ug7~-{@>xEWM!a>N`;nJ37%&efa!2j!Agr=1*;SWb!gF)MnD#(B(A3zLK1rtmUFM zdbB4E0$m-SWWT}M`jTU9jY68LD|3Bb1l!pdI#if|0*q(Q!;r?zdf)O?S8Y z_N}I}$gD6W066?8Wfe%__ivwGEAz&K1vc$6>KG8q9Ol}!>)QuDc%V+RJjmca2+UF2 z+s|c==NTlSDLk%bG)VoAyzFezLkq*kcq%%+d4JB^3v8Zt_a=8b)5FY*E~3$aajVl;`PPxw|NGc@HvwImnCfOIrp=h~tIApCKAHHuPIjo4jzqtW#4{leq1e@TifW`@M9H44l6@ZBl64T}tC+0KBc? z8C*6?DotV6@>jaX4i4HId+Tk?o6~RgY7oTy(=XXSOUiRUesppU9G$H-=F80m%|-_v z8RME`oien$`uh~yLtU$PoE%;cjH7Ya!u2BzI!Gs0V&lrpy=KiQWo6|mU)xUK@?Sqq zOnk6*SmE9lwq*sHG{Wbrdzi;O=+9qPz4$C4!L=m2OC5{C&~%r24VC69=J~ET9F(6s zq1UO=dUIY(>^SVQ(Hp_}THfBqE!8&Mvbk0L z@Faizz{fGpzq`a|CGPPaTU^KT=?Jy=AMN#m+-CEovn-yZrLC%L5%BTOnUPh`OBfDQnETY(Q!ximL^*cqTE058{!&`A`|T4ToKA;w00 zbjiwW;2^qw*U|gqirSAJl~kH=KKwv+MEiBM#d~b+mOCBLw%?s~Vc0wEGN-s7ZT?GU z_Z#&;qE_<7|AU(;8r~J*eRGU#;UJVi8ua255b3bd`oKQ2^8rqp-&re*(Xxk$uU5cd z-FAm`4ad|~?pUSrVvxzZyEF z!VI!y>(*B7+KCdn13jezl|GQ!ehh->5ug;#!_mIcQI_h{Sh$+I21alqS)=^*BX3=gtErB))dRrn*fBaH(r9qP zVuX^4_9>=_mx2%2+lzl(0G^79iYI>co`*U*B7=Ga+7bKN`qQhuJhaTBqWF4BT4Mn& zrdGttT)+NI_g=mHx^)W+y;ixr?f)O{@9~_A9?putQP}EF1%bc6*NXfAgqxY0Ym;og zs;3{dEG6n|$;VdUV32<)-&50N^_4e1IKh1uh!s~l>96XYb?B_?Uu@LdrCn6Jbm{W- z@OmCvfSHMznWxeDIqwQT{ZEWv`6bFZh~@P;<^27>8NX|RQaR@IntrLN)|l(1_rusD zek{Bit&%Y0FN)Dsz4*T~e*D?HB<0ISH#HhI?>Z>|2G_dh?JH(~Vdko`ciCRdxzXHJ z5fY+350zWJhHZZ1?q#LjstxOIzpej=%()3`%u`zb3(9ZFbr~X8Okd!gWRlXWcl{T4pWPi+cZi(r===`p~w2@qX&C8~=>_c6Q!> zvwk!G_y7JsA`N5HI=VTO+Sc#iZe8!Pw*f247vB6lt!Vr8ywTTo3_mH2O3VIWJr!}e zEvx)`o-7aTs(bK(+x~&At-cPhs=2rOkGfmdfB&|_*ubDOJWJ2v!`+x&p8LMP{Erqu z*dk}=$*XND4i(dL(^l!ylUXcUFCgW}k$4WSdcL7C(Z?$^6E~T~VvT_V52F4xvZ+PB zv5OIGMm|^J8fbJS{h8tIWutqfeY8$hG@9kT-eh-Z+CeuX^U(Dk%r3<)j#WD_GFyQ` z0O`hA#gB<7&WxBA7<2IhAg(au{_`b1p#smR#p3l`#=5kifC-x!N!%T4E7N=S^JLg% z-pAMq3hXRD6Lm+9xu&LO&p&^*91a(?TPfQWq%^B%e6Hi>{zm22Hsi+C6%m2-z9J$( zAXihFUOOkCBrbnY6Ix}IVz;gZZd@X)9U_qpCT+f})P8R$@(Z|8lN3=81iVafZL+rU zkb_vp=04b z1|>K+F>|*Dcwe@x8{;0($HSnTU%o?AwrJJrAv0$Mq%ANg80t<2dzdtm2Eg{?%D?c^{jb zzHSk)`kS`Kjdx43;xE0fT))+T37e<+1;5~a7lTT=jP^GRej&cd>5AtuN(_o zR|l%v7$1qiIG|WxlFZH&13!N$j!-$i$`KNkneP!J5jZUtu?~Wg!wK%|9Ew-dpaP*@hZ;w=DE<6h#j(njk1TyLO-)?RGTh-I zUR69iMBk_me3vL1Ykwq$3a838hIQ!Cd23u>sAEkq>ExJW_oIA2zq@)aIIZli)O4(& zAp#js_tNsHtuAs@j0o;}W?PvuCi($O{0_)1V}gAUnSN7BvHmsRQGw6D*J*Mi$#igs zw;o!hmm+3*Y8+%hECE-McCMKJ;NCRD*uUhw-%}F6&W5|Xzum2oEbOU#0EJodm??Q`sC;U1VR(8XN4QBy`6ezHE%I=RkQNegSnMpV4 z!RG$l9b?)E8TWvhQta(FZQ8W=+2=JqKj&l6qS`6s9zxm(v2Im6?L4rPU~U9AWKaVT zz;oF-45$sy(q7V{Mc8X&E;nX2*Q)uR$&CQ%ra*|aYt5T$QLy9#L)uAI9=)KMYv3I1 zfb5kAC-DSJewF_)LXtP(4(Idy^6VZ$8t>0vOK-^(go*vrrAnBS)vPR6r`P;BNE+jQ zyzQwGjhA5z0;uqgta}2@%t;ONXtru0bO3MqSpukLJ9g>$dF^ti0V!u(UBmf8#pUH{ z8<)t)i&$3VTX%s&V0cStl}?t|e%m_C{M{?92X=SzB`&5EI7}V?YQF{7BB^H+8Pu5+ zdYBo=6D_^gQPpBTqaXI#b36+Lu##x71h2p{uQ|bRjB~LmOEzE`7C=)%dB6Kq75k4G)R?aC-! z3x3`3C?6U-f>l2q{FdE**sA9WqFnL~*K$#P?bspogZsGB|OVx06m^&Pc zkE{A-?F*_YFIi|+$^MFWZPx&7i`fpCZdkcD!9_V%p$XqE&pKC^+s8KYixaS`QTbMu zif+=-zw`pf>BI zO171!E;O!WZ>EH4A+_i>bZG0NQS&au#+9}2*QZanzJ19aC~p;fr6=e+f)3Rl_Pi6Q zE$T4zumEprqSkU_)Ac;mI43(Bm-@thV0Ok1-aWU?m@z{ZH*-SzSA+G&JZGB3+mWh1 zIABC_lxAN#Ll7l=x+uUCJKK57BcIHU!j$H}D%?fhf@goJ<}T{AO0rqhuyNyM2DQJ8 zu(v5Y+Wopk$8L3)?)Nq8p+NcfWOwLQ&C#RN2P@K6g+dVlACLIFvb%S}mKhy{SB!|r zeGqZ%>+nMqWK_0>HjYz%Yz@45K#MH}u)iA^Fguu$f6Bp}#c3b60^@cv>@Q7&)gqJS z;2NWk_35^FKbbNW8lSEg9RDzJ@?8QU9vHSI(XWv5FI^;26AxbXew zg3*?nrN`fslJp<3O0)m&GJXDqG;MwU!Qr*PTIesX{wc2RwD{}eL&>9R{KjQ{))*vx zuA|;RGJ*d<)pk31vFHgb18d5w*M}J0a=U-I^lg&z)Qiums_ItdfB*6|%-Oao&-CIP zpFM3Z%H^2kJWi;uy=~?2dJ$Ta_FHe>u-WF}22V}jvx@1f^$Xs0e&S=`{abg2W_-$-&JRw!xHI*-Vatl6(uN=F>z%OGXyTh|OR@}o^p49d z{a?gimNe!92K{PmcYo-r{o zW);VmB;6SfcztR`%w5}SUE`atpZp$+xdFDsZGn zy)26*wcXT4oC!+NTJxs-&cyZ;*A-R|i6M_y>)xk@PwO3DTQ+*+yO$ML+WqDg{CNLT zo$O7qzZ_DTk&)R`t)Fi6(jv$7BGa-ZI?sK_cj>pF-@cNvK?kxt!j)duzMgz@Nv{#T<2!e& zbL835oPsO+d7>ICj%vDkC~J1OvGteV4cBWQueG%MaI=oD{YA@R=B183*Y_AQ#5F7| z>_y&&Mi(z!xMh_))6=i7jdM&?p0QcZid&VXJ-#QuSvfJfYWUb63yN11zH{BO@Rrut z5XJ_Ck3TnGcOp$%A!k{8yAlV+lxZ*3tXFi(%~V@{|5Jc#rOngBr`^`pRNSodB0M3| zd4I!%yXMzh`AZrWe>=_*>MsJnf zZT$I$@j1DtiN5SWXHrEt192tYxmmo%$fMZ-N&;+ zmm%WNDto&!s3f|7R#qFG$@&xa`Bpssv-Rvo22-atT&9<`vF@6MA0FS{ncVoWBj|28 zeaK*s=_0rrw)(|RxPuZz5UrJ!qhL6;_cuyok2EEbjv~9AKI|4Aa{AvBBR8r-Nutm3 zg7b4hY;YTyJA@V)MSbXVrS&Dq1&-`7Uv{sHi$q!!B>THGZre{pHgsfDAz5&S`&fT| zC%G9%qaNd=nN9;%hfJs}(3KVJb^f-Svx`=h`{^vw)@kJw@bZn-kRfiLJrB80b*e8} zR(R3Qfe%hUqkS4jI>d1uVhC~|e|s~Vz*uj{d(pFWBhlu@cr`(EiO$>RY1Y?rEkz`# z^pk&9Zu?u+5j_qRR;nB*v!1YiWZf#|ZYs@v2aIi}-tnNIChy;e6Gsw-zz(AGEc(uW zqYQSn7~B3c}~ z@5`#sgQIBE6j-fFb=CWKLBnp}smLwLF&}tO;X!xBAQI2roI;oa0w%F= zsFg>KCtFv_eWV*wVA($ zBVndb+vnnv%Sx4W40_%_7hI2K!A+SyJ?rYt5Xqwwo+vW1e`o=ne`A!V*jgXbD@FnZ z2;oipo5{NStw)a?@XV6e=e4a&Ux;_I#$)SA@EMjFwJ^7$tC(#{o{v|OKr_M2361;C zpcAkuuNA)}Fs^@}6x|@%*L5X>qylH0#1HY)2m}{mR6wtsOB;@|=eA9ep@Nrg74tKV2SF((nbQwU z>H&upin04EX+K|WO1 zEg5y7gd2o`c8jJ>((73Ns9Qgj&775`are`#<9X@L`TdoknEMZO z8SRetE5l$lgUT`3mwj&O=kqyE2DU8GmK`dV-8CiC2)fG8@-iNVZk$ z+r98H_}aexZnPuob&tc)L%+|oHtg$Po-0W6(V~z_q6q7Q1n7dX$5qbgb+kgyrR$h4 zrGaI|;}#}vzV|SB$FAD?q#O3L?oQ*^b_;qHMw5CvRbT3%ZMj?Fw>u^9M)M;JUB)_m zd1q6#@k{K$*8#j>FJ8PL+0X>BggCHCkFo?L6JaeDx03XAWM}LI8#6!cqPzORD4_uY zO0Jq;Tk<1$VB%=zO;+zXbO8+F6Kg`xczLa_nfbShx!=a%UGyIvDIe!gjbX|V1ahg*$jB)?KmfB1}4 z4nO8x;QxT z_KGKs#hwDGED|B!Znd(vQsHQLTSK~(7p7j{_@`w|M=T*wnFHsJ5+Hj;PPZy{I9MqRN{5OPtFL8ndMQ{m;~NrE_Mb5 z?IRhDVx3{lCUyyG(RZze$Mq%Ob&t#)vUg-)o9bJ3TLLVL?fWS_l#?b#FNwit9Y@{r zKqh6I%+wjn|IjBZ705$W1Jv8JTV9~9C~PF7g%Ts4*{aerwZr1~3R^SdREL5+nS;ELtj1npaEVw znJ)n%H^cQaYoiS!a&2kH?+P6vA_?g=y+k_M`*n%)oAyGYZo{B zY@JZErGD*V?TKAmE?hP3`|mU}d#Z|my*~PN;ODZG)KrnRh%}e|peg)_{8q+3iB}*L zi8=_U*G}`s{g66@_z1{SLKtW3`<7;Fz?KOCQ%DdgCdL>cPP(&-4?*|u#>+*1gmaYf z2cQIzxBG8%P<^wEn4y8c{(8UW(V=P6ELZfK?4UDo&D5uxjqE%X@2pIkITQ+ z80djU0KbkLG~jS=$es0)PaGuf>%aE!U22X?LXQ(I{(|?|iA>JtyZU z{~54^N!Vnzt#`tr-^SK`;-G9~PRSOIilDHUK$H6```9?|a~tCkykd*KO}&NQ^KkX_O>xzHxLA#RrGaivi18sWkNbGVig&- z?(HnAr4zEejvqG*-qqu;!KnV+2C_BLUhTE;*uN*`x?K11Sdyrl9_n(@Q&h`&!Gw>QiJB;c1e=|fUCI5Mj!Dv9`iYAlGPpgKW%{WPn-DYl?zrlaL|Agr2hKAZPp()W`*At9QbJ{F<>f_s6PpR<*>mB_x3Qy}M zCAV@oeDG?SW#6QE1r9b!W?etO-dUE~@!fqh)w+K#`!D`$dIV_NYNZ#}`}6g+JqvC9 z^WCS7IzH9lt8GZqsIHUEJhPX$st+-L-ME@4qkA0 z*{QZwdGyOOcM1d3I}~pn(dpaF3kBB=Iz$cKp>nDAs!Q6fl!qQVzMt|xb8Ah)dReKq zW(YI0Ic?Ol_TjT@fqX)a%uIwr*Ubz$GDj@i%SzH6b^%Uiaj}ezaX3O z+LZ_BqC}-7fbiI{W5o>HFVk?}G0A`0-Bg+LtLrmcWZsVGnn`|b-_qKM_HFL04}14D zwU>KzWNeV#xGZF2VnCBy!BqAX3OmH!R^$h0^=0^iw-66sqt-W47NjGJM;h84og{6N z>yaaM4FcNMa5G*aJR>OO8N`#K137gH$!@_ZNSL5H1dvq#@;JA+sQoF_h{xz7rMUQ8 z7;#heQFkjyU0@cer;xe>!_cyG=UBGHz-n(d?b7&^6Qs6Lfp%tS3nj6=>g5N5I8A+ot@)IXpcm1@D~&%omn ze_g*@_wMg^*9Lp(IC?c|-Ai0j!hIa~rB&vWqxgL@Suqm8hft)!jRQZ(XxlL&ZOab0 zuZ~V2fMN@T;VKF)H*}4UGiv*0%*v-tNp{>qg!0|7;VwZ#Zif^9;_4w!QScrej-SH#6baiP?jV zUL6)oL7`cl7Nkidv4R#Xw zIFq>J9FTYuin8!L7*AGU&_il!OJ0N|PgJnqN(??2`FjMoWa924P}-ff^8z`DEINAH z4K_BpOtW?H9*SzZ>(-CwIyo59k1(GLxGFs%uj0`&XOzPD2>H4UBqr8zS%q%Qmw#y} zMW`s|gfF#4h}Wfy11rD{ISHIVtV1|5as8APrcV3YL`fqj2?Jqn@ehGkY)hhg3#$P} z-Gp#YQ*jL~zWXa+0m&masSfSlbb%@bUKIjVOY4-LcE!&2hFi8v0BFYUGk4%S5UqtV zy>}RD+Efgug3;N_a|#YFE^Oo~GFY|K`S2Ql4@$S0YcY8MTuWScZG76ch(vph8WqQ$ zz4H$rKHPC*!{3Mdot@O;{M5z%OAjWTw+=Y?X4Uh+``(hd! z>}}OEcJfJlt;Yr~aR;hLj9jPBqFdeY&eB8+7C|EDn3igR@ z+5mLv}YpReMFJmd3Bhhu+)8$kc* z6Uuqm;WP%IsGA;-Id|pSwbOX-L9GTK&!(&6 zldY{`S4-n1kR80A=Q`<(_O`cpwr=C^ndTrHOb?vLmzr!tI=!yR7Ff-AeTf^H%T^v#SOa1zaFTh2>Gs@%u z{2q0rX8Nc;5BHd5r(+IUy?OJ-9zgXaclP_sS`^28HG%I`iHgNCI{X0M%M6NAU!8;>S3uh<#h$OQj4kL8_~=B z!7L}24+%Bn%AAW#jKj}#R9kSZgJj=4cwo9%16>|Xr@(YfSG<#t;^UP-PvC4w#+f7)^NYJbP7;)a}S zfGHr%KH`%g76_&I0lDhOncI&1rCH-?UZPU+j2QW4x9;A3J5;Y?(JMpo1cdKs=%M4N zjS5#O_;X33Nt8pz@-pS}{Pa+r-g;ifj7ejkr6=+WxP_A-=FnmYtVum9hU3?tX9(aT z;~eVeUO>k{ZgYWIOD|_U+Ip;d&eMu|B6V?MKwycU$c+ ztr@@v_u#3EN<8o1;Eo4Tlt1S=4sg-!!@Z-{$fSDz{(abzaOS|v`geNqv?Wjwt>^KgQ1R|Udp1A;BiR-f{_CI00sHQNz69D zd>)gh_L_N07Zf74X#9^pq9+jqGN|T9zMzoMwjPtU2CP>5rE#0HY-jdZLcV|3s`865 zTDW6jzuUPHbB|q_H6TWJ$!=CgS=E+(4Q|fcnpFZRC)#sFD!Gv2&%RZT5@@_`-9@-X z*k8Cuvu+xW*&l7k-gDnFyYbQoo5EKOn{#QpGO*;~+-$3kQ|#YXzX-0>AkcNc-^7}b zlI-?t6%I+&orXTOpZ4~4|D>*Yyc4r;Z|$4bWZmS?yVbNUZHfJtH2v*~HWw~lBrqLC zk<}$zjEn)~xtqLK9=PAS z9$5j0EfXL2?y=)-yAqxCxnJ%$?=oooWomNA13&Jz*6`EISsaoQaucYOr>Phn=&aIc z#?+}Kwid(E_DvwJY&ioUik&!#<_r+^Nm5e9>V>2h6uP!l z-E4AwkJel|9qA7sn&&#TX=%GVJ7&22yKHjAeLCZo{AJZ||D`z-e{+fdr!f^%bf?ez zE9fHT?Yp=A{+_kgt!w)C*!0iH^-s)2Y|fNxo3c}8{n5Utr&hsYzn3u!2F!G}>G(W* zX?pM3K|;Q1Eq56+;l`;>(dW*@t7qri^vTs%Pquw_CM5dQ-t?pH4VE^{>H1qd*$GIN zS>%oBBIqePf+c7buF+{H&|KSo^Um5=lqAi>_LD9q2-;izoMU(n9zFVUW#7^L`t5_Z z08Qx{^8*TIf@SGjJ+p>tX)$MAYCKjt)#o#hY_F~9o$p={x3Mdg4^NZyCum&iOF)^p z?{Gi;{6O}>T=wInnN6BD&ARTN_5u9gAkg|CdZU-1vEW5edhfqiRJNgGq^oMchJ0wY*_}b7Z;n*jNlJZr&UK`@;e$Pa#J^~^D6mT>(<7dha92L4K z;okTQllgX>P7;P`8I;@f$4{-U*T>YP;JX~g zG61dNfJL{QdQNlS@ZoVIh{Ek(2XFoUWx3efv4TYc_TdJ~VMQo9Yule7Til6Hl}_X( zhXX+zt<`>F&m}X%ks~z!Bdr*wSngH=7Gq|Tk4blWBdE!O>j-%BGBvde+pKo=*SQ=e z15NcSo*<8$3Mjn_7>WvjwekEADnnX!1SpIB*Uyk}3Q$yJYBXEDUJ^64_Pn=uz}9d5 z6lmI*Od6P(nGp~o2EeBXxu)pqDl(AOtz;GaZ88#~(2AotFc9*m87NW2>TkktmbfDZ zB%Lp{(^<-%Bs*I0w&F(YT>7ZfxN1DmfPo=`oGR0o8xh5idCv|RyINo)I*XB0akf_1o) zx$cocA>U%8ZOLz;)n%QKOBy2-lVx(O|H46u=8c;+HHLqxf<_?x%#8`U1Rb3O(G&Fq z_anzrNS~>YSDL0$v=^dSYoZq9bp853lwl1bOMWV4{crxNzY&QC`s+Sf)y5TScYq`R*mlV$GE98St>3z6N?+ zopc5!W9t{^U293cc8=gg&qyJ_jQ1H6MrI%-QXT2$;kKz!m5$X5q<<;?{ zUFR{^Q`p(rmEOg>$`s{HGr&k-k4G2lTce{G-&#~Z9&$-vP%+XVHX;>G0k47ZBQe9ol`vN*SYeF=6reL0f`qkjjY z5&#iqvIqv=*dbLr)GKPODn`REU%&q3fRO!G15jkEq{Bt`BP$|usM@1k27t*?7>rB$1??u0HH z3OoJGYfKFB0kU@JGf2yCozpT3FoFS$V8PKaqd72h3b6)?nc_-QIv1FFJ?b$u0cyEB zTZ&hdu1c+znQU2z*ANnF2y$%bE;3#goj6V*mU{4Gp_;&-km4UAQ&rT%ti2CtlvOZ{ zaR`AM@4UxkP408R#>@shkQ37{4Y*lKuw-KvJy=N;W4-(li2);w#%(CgnIScUQA?&f zY6l?6wQJW(3?v3XtF~*Uu5r@7Cz_5wKGjnxwW|3#KYGCcuhOm2?gAFDnK?@vXwmoz z!#uh@AGFU3`6>3v1PT*(m`O5-__F}_(=GQfCs!a3^x#Ms+iKo~MN7=iTxaQyV{*3T z__MxC{02~03Fyrk>A0I!)Us2j7+zEY`@AZuQB9n*=-LrLM$YmOl`SnbDrQM`C=KGq znlX(D*-2!DsqN|Z%E@C$>l6lz3e8^?T{fy#C(Nt_Tbv_)gYQZLgdCAa4;wjGnfeX;+U{4YMpST*~HyU9l-Nr%17x@81}>uoAI`t|`_ap(V03f86(p ztv+O`IPR&xXh`p4o2OaUel92*(5qHnw(y$f($1+NN{4l!~vgk^sG`2FrxNxg`_f1pLhbW(Tp+!>UaG`GEb&F1YI zddsZruRH@=>;Gh)0qvgsUFUU&+oiD(26MjT`yK{@YL=7em$I0|&-zTHC*WbjZ9@g*%MGlU@%A z{j+CD>=2JR`hlz3JKLP@Iiz^KUum2E`X@$g9dT*Jy*U*Iqg`{)lr2=XUHQ)f>b)3s zRO?iG?Q@$d+HV-NcyL68>dhx5l}Y*6QrbG59v=eEZZAP;x=EJ{qa-J2ips=CMj`R~TPtT5T`lDQ@ z^oq4=yw2yFCC+7g9k=}2Hy_*U*RSshu#G5DU!QW8HyM9~=F3V} z(n_|Wb~n{VP-J`Yp6Znv23YQL(f+ZAWg}5z5*J0sQnM((N4!gNf(?SU@aP}mGhQyc z)hoxeV7wbfCOs;BoFnr%bG^cen!(R%XXW3UM==DkbI7o#7(6mo&mLJ#w2=2X4u*mvOc*wcw`GFN-)}26Whrv;fZO zI+?B)le5*Y>e!MmZlO0%y?c9fJ@a5C5cO_M2EyFYtgP5s>-s#lE5ZX9QLcOi_XwA`*QZ4#Q)LW>W4Z6 z+r9%p%%f{WTLvt1fZ{7qFOGs~06d4a9|~kA&JY6r@+W_vkZo%+xWg@eHBMrXH4il!rHKj|krl#~W!y7##$&gI1$*xc`0SmXXInVV7?B3Pep8wZ{YwLhEMmEeE*%xz zBkUHu0!sAr461Xl%;`z%5D%O!XJhhox&uqmfel9OL8ISCza-wXi|CC+9f$M)(45C@ z-1iQItVDu3)|8$RTT04ctE);EM!eyxmJ-AF^8Ut^WTCFt{_qaDJIPWUai~snivTVT z6_y?kp##*);gFT7OpHh!e2_o6d>iVX`$%Fp=moLH456J`!Gxe6@`#BdC7?7n?*XVZ zDG!I&dJ1>I6~DT^AZ7{iY~tvbMQj)o%7=Lgb& zJL@7qye==gt;&VTVwQB12dUiSl@P0Pkd9=IhyjrtZi zf`}Me-$~q8+J`u6$NG6YS^y2^Ah{6X7|w<+4Efv+$PhDNP;tK?%0RnR8)>eJ-~>%R zFQf`8eYbq=mM`?aHEhtp7o87PXEMmbjp~D1OXHXB;U!%TcY(xz2gTO(q@Qi6Der*9 zF7T#bq?IXP@MIq+)}_zv^Yu~Y_2g(=PIqM_dI;!w1%n73mYnsPn`>s6j$t5@F42h7 zr6jF_(I#fj8QN!=b>U3T97Yf*@;UC2<#oN?43`qHMUQ^_&YevD04*e|OPC|(+q0Z{ zOCuxNPOKTo1cw@Be)#Wzyxs?I_fU|#=-C05Ceo-94G7*5Tk0EdPgxG2MVhb?TM_&y z*ry2XyOkH2@K*8yJSEbF^0Be{$7Xs*1@}MJI)cMI7UTC&g!R7}G!9@My6V~OLOGHM z?HYX89OjzRK9RhDt5WXYt~hxOPf;uE-w>qtLHESxjpKtrt~tc#kX0DT1R>LsMCdGI zTNBGitDaM51#Q{LtLvH@Kd;82P-ole;s+bvKU7RVHBwT436OINUl#c-a3S9ca`qvw zW#6R_hM^Bha@YJTa`*|YZ(pMjExIjY!25IFo1A-;QBZII>ja4q1)PiFnp}S@y*!bV zO<@2i231K7X#$UdS<{TiH7pxZ@>T12d{04$Wm7?WNXYqd0BH}O)Br1I+R1KXG6L@3 zUshdfu>$8^#G5zmoRF?&0ARC%4%xT_^FjdloB?@M$FPswLgJZxW6cJ45QrJi)&)=w z*%(-!-6DRZ#79T(gM2=U%8pjGFY8H?l%1WAo;tP8uxqz&-7=PIt5v6^rbi4Lj``^4)y1^;|1*kBzcn`%3lvBf&QoW)s`7>F(*~ z@7}#TS@)O5ASsi%O$>vDJmd>ZEfUnmg7i@OjrIdU<}m-!MB~Y92rN&hjB;_w-P0xI zbin%(R%MAMwt-4>747MOKqN4!!cVj5-y!o=qL7$$Jo0VSpzhHOmy*sT*{PHk=JuKH zzP&+`O~QI;XjC@{wo`fmR!WmBfj(i6{Pz}Q`RN5YYTpV9b*(z8*25Ln;^0pGQI6KE zTR1MOOQVDTJ)UEV5F=JrJ%$f&i~f)lpmFEM?UEx}E+dY`P&mY8U5ee@ST+%~dlJzi zNY%|wQ5$IXMfppGi)~gw1<59!DQwx`tVL%EhFPSYLZd0zS?TFj|1K9}sa4m_?97e? zU&V?6-@j~sVyy0=H-w$Fi+93_?7+-|f>U`NBk}2U>6WNbFRzE2NPS-rvv^Tr)Ct_0)d`~3VSA|1X@1|e162S5Y(bhmiNWQHc)AGM?LX!`rk8$Dzgp9nrD6W@KE4PV>O-=9S(hahk zP>nK?#|?9SK6!QP@~zLci+}$Xb0yT(r?=50)!-lH!{5Y@9nX{h-czlasZx zxlpy2af7fe8587s*F3o$SO}Odk%(tu=0q$`4VTIZSI%oJx<0Z{;VeYQl{#!EVRz*5RJd=Gb)^Z;MXATyyBkap_ zeT}20_t>I&PgzRU%ucW;81e9#PR9hp(xBLB-zGV05GB*Yt;SuF^QkMPl)z z?`IR8{b18-@`nZrvOqV#5rdq|he)Hz4xev|(+!$7_V`?eZ8Sv>9mqhFqK zAL21R1&lZO<@0hi0-KNIz1nK{>1cZ(7EH$P3ks@qN3XHf_%{U6F9rXDAnI+XLLUGQ z?ps|r?u~{OwlfixfJO#z%HAaJ1pCIHX47J6Z|W3vD9TtB23mFEzGWtE{<(G2@=*%G z%$X#YS-|nTs!lA~G}X{+OhrH_@IWSinB?HXqhn`|vD`ahW_mFFDRo=r%4x1{_Wcd- zo!=eLdef`$c(V485t^U9dpeo`U4$T7tFXI20%|3)w0DmQp9bqs=z5iXZ!o02&r-tM zZ67jCXWd5S=*^3+7s$a9B|HC<1OC4nw4rlioWD5zqXhtE_`gmt|Gymh@7T8Lzf^O? zv5Y5njg$i2KY#UYyZ`0;(+xJ+CYDcWBRTr2dT&=Mx%SW9ZTT_x&h&~OU7~H>W39bP zeQv6oeJHBYv?53A5->Y4hOc{^&Xi=@oy&X|!cIwLlIx{JAJ&O|yy^q4}9 z$fe^KOh5o(PVi!{An8q-0-CSFwBTu6T^_7GPTco=B_WS=m6k%G$q_)*5{wGUP~60~ zhSL>_R8Bg2bTVSOM%G5?d@luFfPtLf@#N{#-AE9`JOdX&-}p0c2eU05BiLK&I{%@W z)pkC|`_A2MlV%%HH40*k3M*0{ih-Q7C8YGS!Gj4Eqyd*~B8fN7jXx9rbt{yQOqZ@BT^cL=i1%8OEfKt^rhSidcYxQE+q^d zbXm+OJih$#)wP1F8pX8kvbX8S+aqJ_I8C?n9xo4{Y@{MYZV%;m^8REL7S3c`mj<2Q zGM5*SWQqjT=Okgsxr2x#XmJ2af2Uo*Gk=cZLm^u*U^eW-mD%16P%+i*hVs=r0or2n z7Q!-rD(raaP-DqqAhZoHINyLaX%T1C&~u2w$w{(4nIX;q&3MMFCb^N`u)&MTZAPqn zE3Pt$QCl4mI;Va6=@_5mSN1>M5YioU?b;G3tm98ui)1R z)WN05gv8(lz5?RhuG`CeY}f-#ns*$w2kfgZb6`X6WaA4ik({E!zR{-ifh2&Tlv2o~ zb-3#Uo`&F4rC)3NQRW=C=?$CE^*}{|tGh+&gL@T=L)hg+YYMvEs7VuVS|#v+_6UH1 z4V%ju4ct6gEn;nh6Op7Y-ZmCZ4um)-ID61tKt?~ttR)Ez7;1#Rk+dk#G>D(alo$DY z5wY@LLEqjiQD6q&&ZcShrx^^|BF>1fxW~x_73n|}3et^xyi|wb)m-n-nG=F*FqTS^ z2urF2Tx2d<6uyW8B+9})8|#L-_Vx9RIGeRJlmLae+7O58QEca!P_JFD?HqIi9z>W4 zIV&QD1Pn3TP=;fNh4SiZo$<8@nnLO-BW%MkP?afBN0dUg=glUj>j=#j zMdr@7Hm=Z5ptw-3Ruv^CV!XI8<>(0=JQ>%;`mD9hG0Ny#UxWLDxy?EGKj;xxcv=4o zwh1#}Tfu91|8d~EBFL;m2d-dhm`JP++tCvtZ6VFT=_asUNCIc5KadFH-vOvT);<`u zhd^6NZ(cKC0tDYSjqAvPYwHK~SUI8Cf%Y;3q$7v2C5$RXuN1{YJC2*MxyR%}FT@*^yw>XgnlH<}KedCKt5%aLKq=~lw%XgxGDF_B}W|2;nHELtqt zNT?k6RC%}0Q)m@{)Z!uHb(zUo33Xz<&xV9JYPU$GX3!}xPwxCWHwF=#<{KOEMxo-^ z)9T8Z&ZWAU)zsac3?(%Dy?XU(pzHX2>(kU%3JHscy#@wp=AE#I12r#2bOj_hAkZi4 z49xXZ-Zxh2fFIX*N>-5kGui)bIrjT+JcyH>_wizX!J{;UQI!IMEX_k(a-(b=^iS)k zc;&pGopby81_V0}Nt@lb*FLM*o~azVXztbJyE;4G?xlv507xio)i6^J_fw~0c@GKI zjZ+^8ro|ll+0xd8V?hoaxWMtSwl&$uK}U&?Igx7#vy8W`%^-u3$$9wwD8#dodklCf zhnIUJPgq|b`t0i4w~HvGKqWp*bJq+4#8xKxf~8vAcNE1vBewn|)H44Cp{6y*=~!^ zC;y?&{)-M0`lk*57u4B>IiEwVCnNV$A***+yqqZS+}}+t)C9*W$Fc-}(1Vx2@Ek(#U3Spqp-} zQ(}qtK2_BURkiBwW50W>{aWT36}`01Tg|NG;*dSMUfI*)Hx*?3a%1OY->pR-4RQlV zjIG;Qr;V4&Yr9^=l_QWQG+ZyRpK3{m?0Y)(SIx7mKe_DmMZ>xA&V!2Rap-@Ro0xoi zp5LNn)Xb2bk)2xl-}0-uQ!mhJwCl9?>ofEprBg)j;0PH++7KcWoF`-U*6krtvIi&9Cb< zk8V5Xv%R2R)&aNbfunXE<-ETzZih6LB441wlAlv{+hROn-niHERw^B)kwUB`QC3i8 z;q(FGtl&#G6tE+O4(7JI?M<{vYjhrAECdKGYl2L}?D-Gf;!39Ta2JL-M?Rh0p?+WSkpnk){Q7D+x1_ z5iiCS1>g80bxQg?ly?H9NJy$c*2sNfbIvhDCOJ4X*inaX!4f)zJrW>J6=wwEJzsW3 ziYcSha)=n_B1oNQkfc*)&Xg=^gLE<(HqiR9NEuY>v45E`SlNGn@2n7uk-ACrb7JWc z?n7T@V!iKzFL0VQ^+YNM;7K#3h-&p5Gy%RM%tuV{Jvvh|2l_Hop`u#u0v#-Ze};OepfWg z>%wuJ^`##XYdA=`&}Om^;vA6+hh30ws{qPGq$3VvNs(jnj+>nSH|=%h!e6u(hv@FJ z-82|f3_-p`&vM$wskQn%E?Fl8_Ynb_Jix~a0NNHG5r@DuW;T`+wRbxE7`6XF16nWd z^g*}^3Hy?f5x!dVoO0Y2u%&0doMEW_J)@qSQ3DAjH%2Bp@W+)re|iVw%8Jw=+oRBY z(7&@~H3;pCI!r@DL(D$Z5V4f=u1C<=>C=e`6bHsYw+G1dhzsQObg|gbOf*E}M^7%p z%6*zf*hf))%YPJqWpZFfhZsH(o|<}^4nm3#D5>bp6wC-8VAXQsR}hgXv>3^PQ{4wt zJWp44&7A?@M|Qn8!(vlr4JsKD?OzUGsjaI!bEd`_zk?)v@KmP*YRDSLWgSvomTcf- za_aY}X@PuHyDw%sWoNaA{7pvgt|$VGy>Q`zEOm}B`5nTJFKWuoJ=SmjJ`N2y%+QVR zu3*6CRm@S`oe^h(|7JduymA&g_Bj%0PclQ9#`L9cB0B#z)VO}+o!&QZRYtT{3a%j^ z_c?TeD8dAJ1ggM-BWgng41_;~G9f;r?NR`w_U9wLsXoUB=pR8lx5(fUuPY`7`nc@H z3%IM|S!b~brI%#5L?&FnbxGqw9jYaLPKpB5+2d8i>dv~g?01xgOmlKJ62mZOImM%7m`3Tj^yG3M{dYa5S^I8n}?^j1x+G+7Cc}Eo0=$j7cCJw zNY15M4U)g`hJl#G(16NvVM6&rF#>ML`SA^%A;7u#jOgM;H5?vZ2eM>;ZTbYSh3JH7 zVSUMk5ds|nDql*@uuw91gPDY1MMUv5`NrJ(8!rc}_Af7AX`9!&4r9t>Ze*O}#C>h* zgvG@*V|!)3l(XV!KtYr{ckax9G~~FAMHkk>cKU7M4vp1Y;`sx&_8qve`kZc|SM;N& zMM_7?4~-4Ut?jwdzm>|?R2(+Tco`Kk4DSecV&q}T3q_%#;zAr97?K@wdpr+k7VNUu!;#efvIR+`tdSDt5~c^!C=h%^0bph z3uWagyiJnt3@&HFkkGV~MpGG{tP4|Q1Cty8NSo#0Cn9FW<`t>ccw^Bj*@S4J^*<@A zsMNl)Xwky&VdZ0*ix&(erAE+SzOhFW z636WMcT7unLMxZbO)lv*gM-EDZ7?C5dkjmp=h`b*a z6?w;~tAiMi2oX+sMR`reE0Nb6&m?JPl1IiPBb>%#7_Ym3oVD(~Yn^r0y?3qq-}SFG zYko7czkBcR=d(Yb4SWY|zulY*gfS4nnBd2Fp!fMwkOGG19gFzk3;Nn4F4HZ#RYzjupbjN0xG2$1hl0jQZ5i4<2Bp4xDr7O2`o3_gaPPLn`u74ozR1! z&t{#i$4)`n3>-u!_kQ^72(bSwEB7A#NmDc_g5)-7-qvo z!5|?J9Z1$j>H`Eon{S%r^l@##sH74nZ-qE+2Q4U+tL0fOE*2E!@jA>2z?mihIt8_l z7#_cIf#RzPwG-c-B7C`)VTn2r(B@@#*hICroO$2SdpKVa^>K-Ak+&?S3ykbC7>(kH z&O4Dd0uCr>0J-4;4QMN}oCb1u9;AAtkRiAh(7f<{5fJ2Z6M%^z>)vXxM-mWB8^gGO{gKOm#!^`( ztHHTK<`ZCG3A&_i-v~*jTw9T5EhT$CVz-deFf`k>bFYz6QPdkaejsCug@J5%0svd! zo$rl>VIZnNC%Bi7PaC2Sk}i!Se~dKHn6*ZQ7t=sxT^!>03$!F|L2F2^fYdKiIRr~+ zz{nGx$*E3i&F)`hTT7!=nGYEy>*pmh`j+QDd7#lQX!VIhY`A@O3e3raip)9qhP#W4 zZVMwf;Ap8RNw{uFhk;Pn;Li_mOxt`YgdcQ2`(#YR5l|#K89{f$<_`@+{eob8^qZ*# zgc=~Is@Snrqy6#g4;A62BG;e{eMm168h>2zTAODEJXOHw30HD+^YG|s(%1+KF7ME* z5-;%Y0k=o_L#yQ1`tk>6*4%R0Izojd@#f=tuc7UX1{EK z0duo^HQ~dy60`KiEw9svBvKbIjO* z|9Jni>s+}kK%L@o`a>33J~vp^`L=}oLf0my992Q0H~8oYo)AM)pq~hU^JOJwh_UA= zHgU0B_V*;KF-(zbllME1dB?iGG2GXVndc(31!r!#O~fZtvHDIy{Zlo9UCzd5N|v88 zb08&AMWbv_!R5bPOubsaIHRF9t{6vO3UQpb2cqmEDZ$S-V((so<5-#)v5TL7J3E4Q*rZ^lIv7LlykMI`PxT40(#Xmo&(OHyeU2k(&qHV3i5Fz@k~1}?D>A0^E(Cf>?Y7gNDy)}Yw4_IR zDkYCSub{IwmiT5|a_t<23Az6Lf_c^W{&`N5PX;0zjPe5fd6qx5?t1-Kc5ivpygT+z zDmy!}Sn*zS73ZkP3659u4pULP&S6NDAh~acY5aWHs@Z@*Q4RY|jilqqwO`_u3Qhzo z#xk9|J~gZ0qs^r8zq-8G;dF-1&oawCtC}l`w##D5p{520q9}ByVX>MAjF-m`#)|vz z6tv-XAX!nfN87&Blb*&w9TRNhnPkiKf&wrmnAVBeU>vkND`cbd{8I8_J0lqUjh< zYEUg&>|{yYEqV=;R*em5U?rhYoNNOfEpt6117oE{e`%9Vn3T`$iD-1osp}>(@NIdY z8}BWls}CB{9AX63WHRU6j+S1sQ!8>xbNsGsWMPRq*S6O&xLk=$6FrWOiydtOhs={% z6n%s14|)uZ)GHTmQWBHdSor)>M<>O%A8=g~v^bU1fKy3IxV;&Y9}-<5lDzj+m{oz>`gOE<2?yi#r#NK;nv?_ma-`6)N$~53GH%P@c7X3=*IAI z&bOCoWy=TJ4w(`b>wRbTZH9{X{hoSTgDcHe@9WaFvdN^=2FA{B@b!5!Dz$u}S>Urb zq~#G6vG!o-%?o_+uy<>_Mqp-&zTfs=DNm=Dz46?4I9v3l8*htq-%R!_$AfL;wC1pK zxW%>9nULCKExbWXmCQu{`Ji)jHp)=5t*)j-+qmm-8d zSBI6d0+gyO^}4FI`}@Le5v;LNHOUN<=fQ6olVtNET-33nC78ao#a0>DSn8gbLu)xt zF6v|aJ69xPCtZWY2WDALWmZ+@=IvZhS-f@&Xtt)JSeO}h!oapRdV-6bdP&zmH1&rF zvH~;LCH&`IoCj*H1roZZh(7%XYZkm*gzzrA!=&QgWnV6lZl8Nn8D6}pR&L`vmheSw zL4Sld^VLl0UfQ!GzEhU;+fP$}`=EQinxP?QFi3u;qM|U>wfl^*wULR#PVK?FT=sOP zM$-MD2bEr^Vs({^U)JB75Ai#;;2ONjv)Jq2t8AO*5_-`O;mu!Np%;yY}-k$-vf#V#J;cLMa-+DR{TRc);q5X zR1R~J>l0BwIfNd|UMaGF_hsU6=TX<0UWrt(v*x}K zDlk!WXD69MDLOB&%$*U(im#ZVhI0yU|0bR~?b$1YD^9XuZTq&>8*W~(>Vd7*9|jH3 zN1+nG^lnYe^Q#_RL4-n|gY}WO=YF{AF~DTDCK9ZOzE28{{-_>hspsqZ>T|J*?QgRz zdb^KVF8ieldR1|MwNa_He7MDpq<*1jx0}uP1pB=_sH;aNBwBQJx4t?GD`c_S{_4TQ za{NZs+fRqxb$IPvbaC*;Ib>gKF#b2lt!dWLP8Lc?iQrGTUuJATco6=ySux)q`PbHpa1ur*_qvM z_uHL!MrP#6JI=Yzb*^(BLgeKn(U6IeArJ_fw3N641oA8z{QNtj0u&(-N{F<$ zh>}an{-U!Q?(`DE@e#h0sf;ckgA^7nCKkzM#EY&ZFC4KqA>7;&I5OYwk_bOo8PuAE z33k!a(Wz#ApD`4HMWN&pk6wb^DQ#iV9KJ))Uwg0pmi^?)l{`(-X=orNan`meCDA@m zRo*5N4;NRon~;I=Go?SKC?eH{NL(EL%9)Feot=-A5v;z323eYT!_P=LG$=RN5eXy7*g?Z)+ z3B_j?y*gYZVUCZE_MI$H6)RFPe7wIozPhrWc1ypGlM2@eJ^gN`^g~H3Ys$&VF{y*l zuR$Z^+jp}soOMIRLt>qTem^Aw#zcvJ_u-A0JuS`4fYDYco0&0iSFJ5SCwz~We&9w#Lw^os64TTX(pA^E)%ZO|aj1jKLBQOzntC}TL zLf4zMy0%fSU?A{ehrZj(q!E38h-d26GF8*9Fo~WnNMarN0t&A z6wSmmt0achP`Y}DZal#JNt1u+uf}9GT{pjoo&S4s#mxf#&mrzJ2urH8#3!$J$#IiO zkQp1g_HWCB44p|=-mO0goOa=)ATL?+I^tp_*}bP!I#OzoDu1tQ(p3_Z6>CYgUk*pE z-uKcLUnpixtu2HktDU#WSv=hnzCTo+ik;rI*)$+-(z+ypv^0BjOOY`}#pw7yG0lW3 zA3b~x7=b9B)@ijP$Y);9O zC8(j$K%A^T#9HMkBG&pL%-j2d2|oOC?>Mex?f(7#^*zs$CMOz|*j^h&WVc^YBdh|w z3{Rc97!%hs$V)u4g{CAFFl0uj2LI@f7x3xBVz&p+TyFT=+xl>gx4JA*R*E_Z#VTbZ z#N5|Lob%`dgWw#l`Mw>htmF=wL_6kUK4}OMiFMz#FLfeU+P$#jkim4l=JQ%`!EdH$ z_$HL8V{>Ke^4D=!$|)l5T5pkKByZ1ZkfSRKGv-_D(=Cx$o7-At=eoYBB|K#11j1o& zh!{>@aux(#u-^9e=fDBSP(m+6zIU&45>qC-S&d;HAV+J2qvvxUt&QayH4YmN(`GHp zTdT>u_%PHDyzf0yYDDY8Si)W5?1iagUVdRfv>GB#xv*7y^&c2HouZDir_S}6C0Nwt z85HYBckBgE(hDo~yIF^K&blT%HEL8GH{=To*()f-Iz5vN%w|T&3Gc(Gu&b>Iew%U1 zPyK!>ym}5RDg>6eo%Mu5losEvRXJSRbJ!CNdRGUynGv$G*+)%okC>TBQ?~W zDQNq5Yu#rSrMo37$S^DOy@i4QD^_$^NMmTeN`aV@8J67s$ChEupOhskZAJCC`sKF< zGqBzcSB`6a+c^Y=o%iXKTwJ2p?uOBrse#Olkt>^USy(sojvK~5Ado30As^0A4Ct|w z)B8~=xq;505|1Eh*2{Jo>+p^;T^7T|J1i|S<47G0$o0|FR!e08naaQuk_wlxT7w%M zK^-LHW%IM`k94a8nIu{*6l`?}ISo9J=MvX#3uA;~?6{k%D+^`GJg4>o-&vk`nOe%N z(L2jaFoI;bH5d9ByMMpC!}MednXmGzXE8YD5oXd6#F5jsfJ_J?L*3!hldN5Ej?MfK z6E%4wvIR2|-!K1<3L5ac7gt6v8NatK&AvaXr@=;H|58B#srW4iV85SP^8AR~c58Z1 zDp>A0L>7a>KU4n^k@#`wb)+`>WwRc&1^2?ZxZfz2mQ{~1Dl)3-FAsh3xbbdYJ;3{@Kk`!7qwJdC%Y?>& z3n#8L67NjCATeZRO8eXP5@}#`%ya#{jAqhU1;1n@b)I`eCiDkF1PCJW0$Eo2VK|kc zd+X@nZDy4XFr^)}aJXJKGBQeECx59fLOYI7Op?TB%aq*b$cOOpR!)R$KM|@tolue3 zP5)y3&6z&UQZdB>i}OhK*tqnECH1}4NRoO<-5-4SDshAE?d}U9;hH__t9>o*^exSt zH)doCR$DaOjfBHZ?6}$jq)ClDLWJC<->k2)JU1X;G`3PUN|N;+ac#PVt@PY9(#S7rCUqs-JD*X z0u9&RkITPQia7Wy5lQ0SQQoRy7g`Roug*5TY@%;pIv9nnkj&Ij%f>ds8zNd)fw#L~ zLJqy;poV`mun?h25ZT((+eqd3=M7H}TUV4<0mMA+aJ$X0@qwRJ?`a4n;mR9_{j4%m zi_xVKY~lJNnLr25+xbXuO+;7^VDX}V33WSCKZqEcQ5Ejfy7|`qk`J8e;fMOqiu^~y zkX^a;ju|G}F5?|$Rz*zX%a`^LpK4)OWW(Gm-;Oq1=W-bvgC{(X>cbyPd=(mG#ogKK z-6hnk3zP6q8jrZ5fi8Z-+cX!K+V_8Gi0LtO%*%?+vf*!dKSOpkj5~4y7mJyDUbRP( z&}2@2DZ34_K_xywh%Un|9#%SApclSw0BfL@ueJxp;p51Ur@0@HGZn=d;t3NYbY0M+FZ*TVpz`$PC z^LBe{^q_)z+}|3UEZx5h#_5Aj4(b$-_cy~tvhIl|Oy&yw*bM9_K{Siv)2Q0Jt`4Y7 zg?*5`XzBHvj>1fZ2M=AKFa*KW*=mF8a)33-}IC)6?t6vmqVQ zM_%-Df-pNqUW><(BxlP27UR-Cq!!Ub2xC!z4D zN=TV{jU#jNo@b%L)Ww=y*kGIeS>WnUJbY_wCvgrodxKl8-sM+zL|p+DYcjh;?07kP zF%Z@FoxAnEBnUHE4pNqJiKL69xwvu>n#Uy_Z$k5!HSrsZO*2S?B1t*UGe z%~1FeWFS7_6Qo1hmil{oqZx3a!`rQML!=QbQ&DP(Ei+26?j|xk&Xv9$eZNEq4a2Bt zvLVsUi!Cd*Ucm2TRtb~{ga(+y*=>HXR^8uz3`@mFEepXS)ha4;xsYwRA0h-40`PlS z5_c3-;>{rT@vl+o+VJWDq!QFrq*{e~M;1u-j5umD32nWT@aQa4Y}iOqwz-g8nqvLa z&<8dz2{vG5S`UIAsmJ@t?ef~0Z!I>+UYZemYr#OmKDg4wtlwm z;@Ku~Z@58xf7|{}DVFikrKxm>FZ;#zxq|T1_T;kjZM8jja1}=)Hs@K>^BaAg9ZkGq&WTJat4lr)# zD62AH5;!72MyzWvWSJi=b}&E`VQuDs_e5}S?;9e;X2d}yTn*)w>3R;qUN4tdQGk0_ ziM<`MC~lgG%G$vBOz5$A;c8fkx+|}@ksZX+6n-ZhUZQsxjoZRh{!y3azX_Za8>{$5 zlSO~2WQm=IYjvc55b0rK1(3SMB8op{3``Xc5-ezsfS2u9MEky$*i`xk;uDp*lKPt_vbjxKtPPNg0u3i#rIIEDK2Pi?ROoLw?$5oU%=8#*a7e3 z!Rm&YpGcPH#Us>q>9Y_|KIId#^Fo#yway=}+1T+o2~`y+H`?ptQK0Eyed3Fktofqq zws=-_M(z2bXyOJ`hnul`mWr;XoJ^JjQ6ND8%abv#08;R%Zguo?r@AKfc=oSc*c zQq0k8FG~G>YJ}9QXD>J~l5j|+GTH8&lgYZBkX!6CXQ&i>($4p>S0z!KOQ`zIS*nux z^```!JAJ>()o;tNXsH&obcHBI_{#U=yCNx*W}MR+m22t3oSG^sEI}%Zyw<9trjAju z)02w3UuO49#rd=s4-P(V9f){2X^)Wb3nGG`v;&%BsqFwakLM57{87&&j$p#MJNGL1Sd8X)HQvn4cFG!{ z^1Gw_S{MlWnNu~Jv7p|)3_x;)DlPbW2;0^~kxkE^b%3_3#)&=a5bJxjWXoLf&M3yA zi5XqsMC&u>;w_PUB{7{W@$f?YooeLcsd3GuR8RKB!~?!AKrTIm1P-+oZutH1-#F6T$rD3I?D%my^w6_ z+(zEO?sZ$=e3eYI%QjujthUba-kxEWcK3oD{kB4{D7A+h()GYdFH7a1jJs*xlUhvF zbledm9&T)uT1sm~91biujKAplS$IkeXg?zs#C433?(gcV)#%@a{~lE_3D-ag5QX!N z!tgD$wQ+wV}-WDNLWVTMck5s&R|0&yjTxQI74H(6;!y>NN41$wlvO)Cl&@+G82UZm8|Wk_a_Oxu11GoM^U z_k?${Rt|<pgSfAe-JVR`dtVpfmdKD`SJ`Cnk!R zO)gB;;YCyh@)?vRs9>H^YDuC7rq8xnxN71R(Lplnk9y&{QF0BmvoZFDh6Xn8N00x= zVi~;=99Ia^K&ZMo+ivggFVNoOx;9h$q3bJSviq#7FZHSA?<S}m6JU;As?CnVU*+Cs9yzJU!g}3V>s#`RrMp%bek9 zx%VaEuxwM1U@}cK2qZ+Se){7BKG$y-Yck2a?lq+W9&?YNwTcOpnJD7=)LqpFp`KZd zBvU{XaL%HW)lq>caF|jUJxRU$7fq`b(tzO1u}^Szz3jt%)MmaJ-w=``qX6y0qi)u`&bO zUS%e;m6%LQ-HhID|MQd9{iD*qovALjn=pvP6J%zU_@muc)Vn<&29o$;SC7KQMlues zUH5qRXYKF-OHI+TkpH9-j*@G|?NSxpy$&cHsy&LK7M~}=khTG3L6qTKf9Bt@Me^YW zAy|s$GKBP|2VpH9SCY*2dp!$kQIM!!dV7-7ZBeVuCQ@ajOJ*_a2#{l_aBZ=166}Q+ z@dA-3EIj-?(AI4?`|)^3c{;f!pRd+2el4I{f|9<7aBnHH<>;=&VE>#Fh!-}II$^2g z{+|@x+Gms|_I)m%!8992Hv0nXL?m19P9=FRaof^9UpD%n1|YDL)yq#6KP)h)1c#yD z9MfI^DLTlirM3V~;v?GEjyc?CFcdU&@YL)qDBw8djRtwnAi2NQ5_%p}No%KKHJ0NB zolcT4HX#229luZTErALj895c$#-d&4FvEw29R25%xIbJkBXbpO-KbV*txqzr#M>e0u1LO)qy4sB?K=3)A6SXR|sxPK5Hrf%oM3 zL}@U*u$tECaA@XdqC@cwta#S3)w_aS*4Ow30~11}jukCaA0w&Rxe8i&VjdsrsqP!g z5Q)~>7pp2t**ineB-#eF!b*gM!aVs6O06YPxj#A!(+?n03|!D!$vx~gcwr`6=mC`zq*P)a z$Gbnvu8l8_u1yAvi^D)hJtj=fUz45{$|)g>+_HryS$a@z2zE4U*@mLV^*#I6jvirh zaGBE%3^cy^e|zfIXY(vNbSc9B<;1` zm`MfW8K1na&y(ZJ>@Scy(rUA=B+`yM4cR>}pLZ7|J}gFeKY0}q@ks*hEklIdW{>5a zl^gqQ$O}P`AirK*Y+9g~u`9w8WUda=a*QzsLL7-ZqEZ?B$I# zFT|fyU8s-auD@`umr!YZ{v2%ZM_L^T34D8J>$;sYulE7OpI<2J@xg}#yc#G>ylU3cIYf zdYk$TR0R?ezKu?fH}x83D45xBm&3lhV#xSpPKAj~=~&^PTz_8XaTyPd4E+OrzM?GL zOrX+6UZhcr?CzY>-W7?i|Je5`fk^0AYkBrnP|u436Q>?cdr0)+~+I%=%b1pPuQ!k>fbq^oHk9=h*8fii*zt+g;U zD5Yrlf$Co*m1aIHD1+En+VQohX%Sd8Bp#GX1s0sKgff#?~pv5*gL7e}T z4>gJ&6MG^^h!X$R`2^Vim-Ru>|EWTwD5`>vj>vx(EhW11Ui?@6vS(o-<-bdqr2l_P znE!)Al%V=Uw22p+stpINmPU1B2lN;#{ZMsq!UMlzijvFxzZX>hH%HSZ+1LgxqUMg< zHYX=1XL&z8{++M3u8-4HQwvT?B6e|csi^)&wzWT79vmLtiNe|dQB|Eb?(Z{tZLwH~ zXWjh31!5k>C$xF`SFeyxPEK4lV^zs#`OMACFbN2Pe*D1w>%ez?d)qcVjG>T^D?ok} zJ(*Pm!o7l`VsvaQTvx)<8*_8>^Zi*IS6A24(o&!Da{Kc6U-B<)cE(=J%+I$^PZM}F zJudqbhr>%tO9T8kzPJdGzwY_yJmk0S*{EJ_+`72<5IspFEKE`Fe6;07fCzhhdD%5n zX881an+)h&Eaa{-8*81RSXfxT{{FDEw6rT{!@`nMQix3tm-9}{&a;0$N4^=T@MjO4 z*7YU>HNnm}W=#zyU3K-47cy~gGvx)o&N+s4bch#fRv$(em1JZ<(mhU*BqB&d8r`p` zSy<3n8_%)3!ifA55(vLk&T%ovvj-L!e6K3{?_L1alC@;(CJ``2glUa*xm+;|3#PWV zHa7h>*v520_e)AvRt)GPsi~z| zPFGxYpJ?LyHB-33n}-F?WP>JXxVZ_S;|AnEIx5PCMlwRL@5d`d6cjN>N5`PTb^V*$ zy^=Dwi`}7Ocq)GzzHHMqKMbLkjouiTiOK=lR6e}DsUmY#M6D(d*8&!)$iB`{g6Qwx zzsBphA(3!fb^Q6ygLbB#MU+#plnTXBu2Ner9E1 zVPZmLWcu;rm6es@vK5eIWMl}5h0)+XC2Sdx@}%(C9T0SfQ}6Fk;#1FK@Iw2L}f!O!p2Rwi~Iwg@)R$wgsRU^;a)@p^%V( zI`U?JJQgVT$8+ zxsOC18PwA9R$M~DZgaXwGiYT+Pfblt@BaFv#_fUuLP<^ijNkciqwmFw7y4k1D<>|; zCnv4B>0WbR%m>^578k>`vzW{@s=-7IdDIo1Lu>ZUkHnHz^4BU>=?g8I%fcTAh0Sb1_oqc zFagcY!p?hBU0v`paZIh>U&v&P@08lCitf)>V*rN>W7n#4KmsO)`kI5|ld^Ka!F+Xl zXD1x+Otaonj>qCYPC+9=^$$EFKXF@_kut~Zn zJ~)Ptj}Jfq0a)6cx6hn(kqQkP8>aC6@pFlAVmPp!L>$JH{QM+$mj~@6)(yT54Fa(6 z@N0dsjKQIy?O-F0*CU0g!7cXNL!D#UG8b_~cz6L`51_VIRn>VhP0`M%T3oSvKUZZ* zqT{j(*Ko6yT*T09Hpw9Ha6ay~J;*UE@EipN1^U}d7M86(3SK+d*49?A9fUkKl;2}w zU?9*{-x^FVv)`73ML@9cZq7dqpTzre`}9#1(KIG3jOp?vj2;R;lb-wKzCLv5nxI=D zMvB$~bijnMca4pWseSqKGBhMaKR-WzKb(6>4?D!)^bIjS0YNvUv_GD;{O3>VDqwt< zld8JxU4)uV9=z^gxrq$Jz}iJh(_(X3FA2n@qzwH0`4jr6{+=GTykg5mZeYi#kh{bB zBOp2srtrpulk$E~E>_4-sIKM)h(KCzyAB^35n)V4MTH7sWMnk#k7G6jzi8cn_8Gcp zsTt>G&*}X~{jf4Bu|T#E@iwoUO#&y-#>3@#>%e8ygV{xBs8JLb5E%GpWJDgHf?^mO z2WR%jE5#WQQ@Xx=`<5V1tq+AnMkXdB5LX7~=aW4jE~de(fguw?s*HNET-|%0l0MYe4_qyLTVrpdW&~6>|0x3pAAGKnYmi_9=2MjX^msm9Re0T^HKPr}(dC9#kpT z>cz&!o*B)OoCVgauAwp4F60r${&4pAnEvO_YZXn+en_d1=WS_T-b;KEl70aJftl0I z{#g*xWFVXn6SN*NI`Ny!L@GdiwhMz<&+*|BhyX9cO0VoZ@!eRl4kBEP0dH zoh=i8-e*>+fscjN3MmB>souSR*3xu;DifEKG`D+p0`6jBVE6_DHBd4h8z1ckm+0B~ z`EoLTC$=uaYHb7zawA}K`z^lDWvQb}_ohqACnl6G*FstU^v2Ma&&L0L<1M*bLN}*aS^vwm6ZsQd1f(wg^K7*;6Kur_`)(>&!uf)^%9KS)m zjZDZR0csKXlV&-iUlLRbKGVyk=#?~_A~U{xsRsh4#m-o^#dNXuf^%L@PGFICeH^n+ zLjpKa24K4UbAKE=FeN1hy!l3VZp|7SDn?dT6XNi|cjDruy!KnA-@juw@=XOvLD0Ma z-RZKkv#YU`l94e4$ZnGRF?}mSMp_!leLK}zO-tOdDvH&z!Q z5CBEPFm~uBL5=nUzx`I&lJlp6$=4Vd7*$>mZeWdTYim&0*x3$dxyzhE=+$|{i1BZfdGrl#HT2Q@zd~8!?(1{G5 z1wdARb#>LP->mrF&(ZP_3a;$p62@Gi;WB!ucKq&xNu0qUAtJJ}sPEsuKRzG-Xt+C( zuZ4iX!NFm%P=nPSLDnA1+Ju;K$aPd>yMDa<^hm&{Qs^U2-TF&9#s)Aa`2Lb+<%NZE zLktu{R489cU^k5V@x#BSh9@C8`8fmxGq{YyRj&~7uR4uxwr7jW_EUp{XdEU(9aWa| z5D4@ZP3uNDMa6OBtB;L$?mHUl>b6fq0|Wlz)FSCZp2QRUoSb+>L`0yebIru+tSlNRkHW>p zee<$F{$*5rJVL%wpJkRBQ($~N0RW9!6Kl9+dnBN zJnJI7D)+dtJFI^O0VXE(;X@|~ku{F9v$OgSw-+y8z8u+O%94L6FE0=I`0?YR`|$P| z6(%BN;^N-xYSB4UA%ErQC{j9xZWWLfW~ZecsjKv>3t?d3+d0cmjg?hZR<^Decge%s zhJdhLpZ2q6j_(`~axYWT(!zqc@?ognV)nJiNhiVeR8;EFTsq*&p!*Ca| zn-J*S+Y=0O^Nu_QOx`Wo`$?UCP3k+^z_KKHc`M|MCoFD+2IWh z4bKne2?$uUzP!d2lm$(hP!1(0ht8tYfLN(f#NAj?QK8)UJ3Krb3m-o)hW_IkSmPS6 z2R@Y&okcyJXen3_25|`p?1y&&MF05lqouEJH`+1kH7934Xei3%(Q+ifNFyU7N*bEy zV6+KBo^?9iM49r4Wolu&ySoyRSdrag0BOpALm3$x8_ZRhCJ4H7fynkGm5%47mgfEF z3T|Hk;b8{Qi8JIz_)duyuZ(1czR( z1JIJ1vh$>QVP>fA-q6@s25j+1e0&zbU6Mm15Eemh*76OHQ64x7sKEdVgFiYt3h@EK zmjshSNSqLOzF=Q-$i!AyBhP zNlDQ&HV%Xi7jS;iwxmExMrOOx0+W!K*g7{y3}R#ppztJ2%b-;?o>jLCa5_B;3si1y z?w7dVRM4Kr$e|f52#J7qPwTC0gG^5k#Aaxw09gUSALLMhwY9w9sU)ZuZR;n;fCEEQ z5bMSZ{3};`;IcsUXJ=;zls+ Bp85&~|Hph=-rQ9lQ_;2?_e>Uka~4I$CPGF2Ta) z>f*8jQ0Dr$9Yf#9$RC>I@bJ`V-}PhC(a}NGl4C&4^+5=VdY{e4$@xxCk5WKTkR4R^ zz%vd1j%3dK`HaHE%)Gj`_Vr?K+P)t%L>%g5;?!9FqEsN(g#u>U1~NFHs^PeDNelvbe5h*4rvzI>Ud z?6`yY56%GrV;Jj+&$3)-4LIZh9&j%p*RRji)YV%%IyzSP07|XvACeTQgf1*-)zsAylga}3 zE&Ak*Qe9>;jEsV!Z(*_UBtFlOd}&0TBv(H*kD<`ZXp72Po68 zUWw@FkZWmcg9NubmKnTDr62%2=h{Q4ufHEWM9;(oAyYmWxa-8k1c=@`M>DUx!gd7t=e2IS2v4Cq@rI6r5djbHPdB%?5IVUN z=p?B~2LM;BU0>?Brvl>M>Rw6n;XVVFXwR~SXYl@c1Scq2lfO zK%Haf+pG)%CqG$OSYTpdjm}O|`bW{DSN^ZQ6#2guHZO+gQrCheIDuk1Cc)~~I6bQj zK886Z%)pf9>pVI4{CE7HXbL$%jZRFQB~y;f8Uq;pZYN+^`DGeVzv;i}- z(R$NdH+Z1Wbh_^exsQ>7zaH6JX0~qtdQFz>&GJ(NJs6=#ZlDySOsG@Qy=^xEV#c@` ze?76cOnX2Kxcpam;T!Lxv$QwEGaayWU29NjX@h;F7;`rFqn_lXpMd_YPZK}%69io% zv=h+w3I6*(Cvg8ieUhW^ZY(EN1CN3d8u1$i`dUO+SfHPM^>eRweN0M9x(w)fuZ|}> zI51z12-Ti3PlJ{Fe$R0VM|OiXfrXfu#9y*}{f}BN3I_*wkhDD4_cbl#KVS0%{@2$$ z|C^IJAYa=qp<`sk;Y&paFqEntD=Eqn4?0w{G`X*g`;}EyMRLbQUV6N4!Ukd#kQukO zz8m+CdO^ocd}X9Xbfl=QjV9cjwsMx9A~BQ9jibqwrI4?0X^BQ2d4*_p?(&k6(Yy@x zfB;P8m+eQn@3&%}GW{{)S)&zd61n4opG1)I=C`JPWIjOW`sUmy`_;cmk5T$Y(nX}Cydf=}DBD1B z^#*w}45YNQqAhrp=49eWK5)s@Kg?vSQ$@5J+uI_P*Jpb#V&9Jzs6q@3hCmyIZ}+w@ zC{6>VZ)r(L%X+2F{mO=07{kk}(dJ~$72=~&1ilFIdrRs6ma=6evz`BQeNvW6zRm8r zG$9Gea|oaU7M2Gq2b*X#(TI@qs>ZbVTyCw!1xy@!bQqY%+9T1%oGmQmfSObf6i9{= z0~K}%z!g1nbChLrFE_`00_?F!H*FkIDICBnShRvo?cBcnjY8j3jQ-((qmVBMBsfi` zg7KZGq@=GE6-qVr?k(N9-G(t(FU6gFfT*fB@wW_c=scZZSRVqNYXm?UOd)S2+=!=& zH2waJDTI*-!$2?>xM3;0uCX8)g@w5MRo0z#PsLsCp>aZU;eYkg(w07;Gfr^-q5#wd z3V2#d{?|2X=V&_!AsfSx&lVP8Ac(@`@y`wnz5w6p?9t@AYl76s)^X~~o1USewoVxW zwl5=kR>2v!mfYfsXFPnoFc84IN9vs^q-Y&sJ{2kKOa_2jS^pbiH0t4$XY$;yyDQCA zF-b|E`DU>2ppz2LSp+ZC*a~h9dEyw9)pR-@JZ*Xta(NhqQYjQnt~Hyht~#AEpYQHO z>e8UMOitn*d6%L}NJzk2EVheOm(RcA;CK$O&bsLa9~;LyqoHAE^^-uIJJ8(Y^{0zd zf8K>3$ZT+Vvqdq~+&3nc86uV%F;`oNnUAs_O3E@N;H&Z z?XVIqOEGnIBCl|sk<2|)Mzau$+;y-|3pH%OU<`YrGI<<#od;5GEMhiOQ&RK|4gD5U z_9b#b7ufkBnLmGT^=MYmQTy*pF(CEAn3Gig>gKc*S7zs?z- zeMPowL;#X(xl$tRFXX7y~^F=?N&e7y@?sXw|}$%<5^e0}=n z^63u&K7O29*{MCa!Q=WUl1;CL64FweCpD0G2JiHA%<*_~S};?wBeSu&$)#2mB%^X_0mY|02((i-^xHT8kdRl?-L12;a2&=$eh2eadR+r1P+)+RR#o|igdjmy z!nv14b#z$1ThXV{jrT#Zo`SZe06}S*k5m;Vtd29r%3zS_t z%teH&oj3(T7>+*SjHZ^_K0|=K_3B?)$gr&QC2km6M`3aK1 zXr9)MMcGx zqbHX)a`M3zS%+ylGiT#X@adWw8msXS%`lLyCLs)a-Sp{=*YN1boxXlS6dGjwq3OCG zuWv3a9OhP9#gbE}TSv=UEoaiMD$j+A!^Elm13p+($=c5^O;p5P5w9mIaU1>VlQ?=S=e29fbk}^vZZU&+jQ~px<_h)W7c#;wdGqrc|5fx((l<8` z^?tfDEL<+dr>4OInePY)7LO;9vs#H%VnOSR0Z(ng(OK;7m*#{NTv#Xs_b7|??%=b) z=V6>6dEMx-u8Hv=(Jj2S_A?c9yI#|^W^I|P)P2hm55B;ZaJeQ0{8f13z>@jD+Gpk| zhfJumut*oG{R+-)wCkNJTkX-jor`9-fP^|TJ1h8;Sdd(!e6T_n;PXNWFcj<%SnBA! z)(T*WjZ`y0g2hF4EpPt=stIJ5i;;a8gz!rj+2sL9AuqreMJ>1m~sk`g)j9w+>OR{%8+HN5T&fz=b& zU!u+UDXCEM4unHQQ>jmycN+mxpu&nu##gxc^&?@l6e>Oa_E2$`VbCR%E{;V-kNoYe zPyGO;hN5$lFLCAn>qG89^XUT%a}smhcw9#%?SH3xX!I-%7Y{#IFp8@vDYq}_%pJZL zU@{Abmk4jjN`ej&DD=s?Bj5^t{lsL)N0gRiyUi}gb0immCDwoIaOx~N{QoHt_&+yp z+z%>GD>;Ln30J0(+P6}v5qt!I)}3;zYHN>!{9vQ(?e;S&N4{MxkR|*ZFsj56tcQ;l zi=@T=yF=&9w}_y4UE{d(%-o#h&^}usq@#o6?>If7hu3_$%X#g~8GatXeI)C5J)2Po zhCnKu;r#^TmQH|&NBwGt?*8Gqp2^j9Q}K6)CVwR4u)qJ^3*g@$)yqJVYHVs6AmsU# z!ZsXnhqS1Xu0ld#?88DsA|lZ0{Qb}UfPEzI{zy#p)s&Wo#;pzm+n7zO<)#4lD`Y5B zK|y(_?gthH^q{tZ0aBpBTH6s}tP?vn?@bp|GYg`P=MGyqxEZXWfhZ|LSKyym%bSv_ z4dT#S@bx)Y$=Tc_qm6^z*Q_kXe?D zXrPV<78ID*HwBN5Zes!uZ>4$-4+svBB3oO5vY878VxH z`*s|jmX}hyHI)h6D4xiNcu8S@NW&n!#ioZPg)w=Di|{O0e4@|8V|VT#r#j85y=cDi z1J^>Gc6qXKoM}GVk1Z|JpQcGGJ{kFxD;)xn2B2bI&0 z2M2TJo|kjxN8<_gM~{ji{jnQh@8+tvI^8g_yIS<_!;&Pe9le{wzROd+-4pZvFq|f+ zDQj(J)@ND0^u1Z=Tu)=VY6xAs-Wc?LB(klR37nlP5_wMXlA!%nt-H+?mR|O}{k+m5 zqF!mH?B(8W{pV`Q(|$^Q+u|_j%vn;rDKN8}G&w7R{Ci+v;6Ms52ZrFeUROjTzoVn2 z-Hd+FcFS{&zN&evc#v1WP_J$qPUWXB(x`kN&oW;*9jn9;j-qqFB*F0@*VFAWcJ`ReG7R?Xn)@J(_+7vfEaIsI`J6DhVoRyU~e8foiO)ki|6^&jTLD1?jO?F-!>U(@zx`0hoB7JD~>x(O!` zOycp#l(2>;#Or9FAxf4st@-r{XjDe5%1{_{JYL~Cg8pPkV0#(?kr|c9ZEQK0&Y9 zPIqTXzl|S$qp1So`*)+kInEoHt z?)zmX#zQHI{VaE0Lpm1BMV;5XCUyNvsO^v-%-34W&qEf2$BM`8t?mT4R<=Qg&5>-mOdz36)D zXbQywNn>at`RY0io3G7vdwpQ;wi;<9=%mSAH&z#1)~)SV1D;Y2s+TjbD+O)GIvjxZ ziaoi<$;Gu*%>R@yl*(ta(VP1QWwaebn0i>4TQE}SRw{yT_iv#_C11Su<-0OO^BHug)i$-n;l=c)=RpUvl?=ATp_7kA1i6Jb| z^tuUn#a3c&`jFS%(K59}!SCOvX-h}F!C3Srk6&+UR|A(Vj?0!Fa_h%Tt`<4m&S!~) zJjAyK)8qM%?hVUb`JDEDfUX$EMz@2c5FCo(zT4X{a!;qr1;gPmk|%j620`b$o30ZJ z%1#YejWqUS(nlYF+ZNX!ZZoGzF3sv#YZrRCYHL+_s7r+L@aCqvxy@Bt$3vZdAWg8p zu8n^v=MV>qb9==Pu5RalqdA6nI3&p&9YBvx!2RQu^DpP4E2EP5tPSA3gT?iiUV{go zA!JT}lb&DdI-5bw!Z_XYwlZNm<2eGIbh+mc4MyZg;BD~e#3`oZIa}F8teZ84L7V&K z%jw$Ai=56&7v08pwI5C-bmn8|J`8~3*RsLwSGcqCI(^5>ooQ=7$=7!md+D@^?1mDb z=K`yEL0{8A6jk>xW#xkNzoQ&M6i(uwA1@4V7muuZ_Ib-WjC$CKIL#bDyI$;GNj+D& zF8UZP6r9k7*Md_Vr+9a!8r=_T9;yn}%jqzLuHUA)-tMH>v`G^Q-tM0tF7ihToZ5_@ zUCPl@>wbP%eMC!LAFHygr`?mQ@X7{Vg~p&sMSXE3s`2VD8Aa%}jMQPIrSIbI$op*s zxt;9o#a{CvqLJf=G>_8|{C?rX8hz*{f>L7Y|Iyx;Mm3pc>tb_S+Ji{j9HCT%7NeGe zP=bKSkgi5WWU`8a7#U*8JVrqXLqe>g)UI+sKx7CIZ3P;cWHwB}i8%xr3}Hx60tkcv z2@pc2yFc!__x!l$o^{SywN{-U=g<3+wIJX3z3<-pefG1T{Q-NjvWWgOD1Dqr@S2-F zC%=R;c!!po^ZB&9`pOGA{Wb5k{;sw|_aXAlQ0k5R>Js`oM`AT`L$&(ys~>@~Hb-_I zibUp=nVJDkCTVRplO!HDag6FZQdEfNl1!JTq&`(~j)z={HtO2O9X}t|U_SmjIeO{U zZU5or!~P%m*lat}NZ9=pLZJ&*$L*xz?RMRhUrHCqf9bV}9#2gz0_THBbdu8Gwl1PB zy1>4jrN+2!i1i;lu}|sVqNbO1yFJB;ncrO1-n}!vWB+Z$9Kx?B(u*5n7cN<$X@KD} zo<6D=eB#&6=LCsujOo=|@ znoZ(t3pS6bfVR7tN55V_56k16RujfbN*32HbQk^99EEFo645&tR1^rji(?v`CA=j} zo{|Q!*E#3JakYIXzOuiy-G!bckDl&!h*AnOrG}yfx^l~IQ~%&KP9uKD$%)p|2yeaA*1dDfHm!tY(| z^%D8-$C5_N*kq+@)Yywj#LIztg}MP|x~#ak^S<@M!vLqux{C^irP3H4HMl|0XKv_O z-tm0H!|_A2-$*pGxxa-ZwXsR^22-J4o76i`9p4CF8YNW_S%i_0#cna3>=@a&`banF zZ3E$Z2umTs!5t|TO$MNHIaeP!Zn`EwHxu*yL?&aU`iYEgrF2ds)cr%AdJc-^EgI1F z%Qg#gO%NwB&r&fQtVNx1IoYQs;oT{^;+X{EPvFp8%zRDEO+qpT9KAP>QhP5D>#5fhJJW!nTq9deE{g45Yg``D$2ez)~9AzAEl=m!UIYOGtR0;9A% zalc>Q`qQ?Qg6N{&y*5E)c~bDlZol|ikkVRGOyUS|42)9Mj z_!I;m(}V7AOsH{2DM{jhvGv>Ex_hN-xt=V37X=yyv*@FR?BZc&T^V1Tc1RKbi2H? zhN&_>q-<1O=zC&6=WDlr975`NiFg|bwR(DXn+X+~#24=zUI6HP!lvW!iOOGgTXtV$ z(UOaXMb0!9*Xb{?oEWiA*x_`^yIdw4~n zv6WeDQ{1)4mme*$)v+#c(AU2sd15g5m2vJ5Y8uWlC3DC*{|qQ_iY#5-HescsvR%W; z&)qLzWP=c)p`k&kxqEMRlt2w12&6bCP0s>HRhTH=heSpj2`_!NuX2*&YllZy)EnD@ zbAe^2gJn&(?ZuyiFJGDGa$zSv%r9u|uvvPH!~hT%pUOKGdmi*jX7NHZY*X+zckrS^ zd$}9}$Z*Yv%;N)vX2lg1OkO9G#||nAUy`-1&g?hAwKTEgi4{ac(07n*&Sm-Q^ zPDaot>ewS%CEk6puQm(;d9`7zzz?O_yU|JB0TKY=;1&T8h2giS9N6=D*ZUKztC9ke zHU_9X$xObJy}f-PBPScqUTh#UJ8$y7bqjkZoi#Fznz!3B)+ZXM4XfwBoOIo7z2+9b z#y*0rymBUzCMh%mU0Cu=Xv>JIrtF~jZnHID@XjZ<^&V}J3NqQ%fpVWb?!q}r#cT)J6e;s?vfABL1vR* z%yca#Rwrco#CF=|&dWYKWMcA@58Ssg zb#ZaQ&pCY0-T)K2B(o$o$6R~&%P!hVzf)SNv~IE^-K|*mRW-!1G?($i{5mh{-7l_1 zC6U_~;+J00QCRV*_{Btr$gA0VM>(vap#UyP-2EoyE)zo4L9F;^mLb~Hrvg;sAwHuG z!qk-@J5j}6qOO|m)eC~%))x0%?(L52d)&41^!9cJlN=kmHu_GZf8j8}f1jK^X(Cbget`FR!3EMH>72?5g zbBV%YMv|%(d)*>v29^ZwCgAl??NJDH=8@~ef^v@^r7MO^qF0A79&JQ^-=xLtpBb>& z6fXhInjoL;?W*y!SSHwWk39z^A7`+UP{E=`s|s2cU+KR1;Xo)}C&k9@NgNRzhLPk? zD=&A69lO@9ZTJovIKWk8&?#aFaTrUB3dm2I!(&H>L9G;9p?e6YO#g$!K3kNVo#Zs6 z#Pxyb6*)L<2&=^>Uf=zRj^^P1a4TAG}NjPw3M)J2_kX>qZWA zhESmu!b|pt4UmzTg?;FO?73O^iE0`U1(uxw!jppX@)$^PDIjN{y_*ENF&6PvpV-+{ zNUcjRRvJ_XG0%$y)}D5u!H`RX_xVeNQ|!dWmSc85UY^e~hcuHgzjh0+1a)g6SjRi& z)$m{+Z{+~$>Dha(kloKfntP7hBCWZIDKiY$!1HQf6ia_votvK*z12!bj^CBp>coSx zM@HB*aL59Ol>7|bU|jQp+{vW*;p{+BK@igyu&S{k=0g$i#@H%c+ zY>tO~TgUzWHoum|sgPXs1zFvR6Qz;Yl0LyfB7{qP%W8;$;7ZUozLW*dRRE;tv9)gi zxAs1B)Ea<8m|ru{n~f&>2GAdbkAz9zJLq@9CO0~wZw?F(XX)UG$Dt+W3P7qHSTJ*G zXM+oSdXU8m`t-IP`Gv2Ox6UBpLK-oOF{lH=n(0E#r-`QPUM@rr6j@RTAZ^XI#79mY zukdNKVA@$9M6#AdjwqkdgL{69$MuUFgms(`bMTV^3Xy^d5*tt#RFWDnGmp12| zoKR%8LWbkN(U6+4x@zzzl^dqD=Czx%x%m(>MbLewq zo;nS~yI*T)^?C+@24Waznt{oi>vgetbI=&r1Z8baAD?8ni(m?eW2#sd( zpME}U3ffkqOEtmjDSIw=|0%Uq+tR<|!OHBwVXB-TWEr=4D5M^62m}bhfQw{7E21PO zlTC}B(Iv~4cU#AXr}5zR5zPI!b<-dnw}ix!0og(Z%1S8{nO*zz7BzqWOFiP!tB}yp z^Jy|+CcTHyBFY0eeJm*V+Syw>_T>Q3GY0m$?-07qu>7TgbfF#xa>57EOj|;-K8D3& z6~Wqr4&6Bo7>@(g^|yzQvVhLE1cFqppH5b8*SE8Qel(Xfgdo%Lx&96E*IQJ#^1^V^ zO9(OlZWo3JttO>oiY&kToj@X`qp~d`Ef(9+%!kg~yF+YmIkzx)x zXFV_>epKHLVo6Ars-U-R3Q)Ln+St`M8b}hL7dP<(YTh6UG`JFuxFu8Eyhx(Wmp4X1 ze-e_FQ&zGBkimHa_bw4pmAUQuWSd4oLzr>H=f7)<^2iDa9B)ntuE_;KEe+Q0=za>y z&35%WV;V0FkO!&$ z*HHig4&Ii{tM_QhF&qMcxC^dzMLLOhKkR!`r<)&UwmP0=0(7pPW7;;YL(g0&7C_LPgEpc}WUasiTuMC4 zqQEr+K^qQ0%;oIeFH&*J4Hji3&X+`oG)j)DHqtK3fwx zeu^-5%^@vjMlBN7H{(DGQXax5i74CmTJX&?-$N;dDCx%aN@l23AboUW2ERefRtW6; zLC3Zfed-LAY=^jR8V}Ujy$*K5)LdZZV41tNsOciPf)ldmX(*sM&jXPogg9ghEyA;h z$YHXdv|KyPS>Enex0k_Bdr}?rvOUXk@RyV#w9*W!9T5kOA+yeb*0~~Z^omAVw+Y<_ zS{9H571>NA6ghq%HOdhOP7n+7!0U4%8=+17sBTJJUvk-F-AXwK4-0v#M>%ae=Q=E{ z=>qgMGa>iM1{&}yP?s|xN@gYRI2HV~+iI~%)DJ~0#0_Vm$kHMmUkn5dyw&it8_)~srRwDldhsZ*{Bvo!NgK10QLf?~F8nempAEkzG*&@r&Djx)V^U_zo>kzByj5XzBa75;ObXokrIFS$S*MO+c`jttQr z9Fmq#GpST~J(;<5cw-guklNbXj4!vwRdbx*xKI>CZKI11Eb9uk4*$+~v14pLWa#D5t@PW=cjLe%ue_!99kq@Fb z`ict(ET4X=FaHPf`*%$~sHiO6`rH36@A%hTq_ng`2mZIg!{V~yU7K@pu{JVm!SFA? z)qus~Og5j^%iVBuc6Z-=`pu{Q6%(ER)K~qVtY|X}@~2otAfWYEgs*3`O|VD*b#K3K zjQ9`WW6sb{E4f6ce(jGcDx3`DlM5I^_|C;SFoVn8fBdiQVo7|pdX_?VhvKK}by{3* z-Bi}Drn2O^T6q8Tnt;|ly{BEf(uLBnnVQz;G2UOr&z<9y<3*d-yz2UEBKlu3IryKi z`nA%m|7I&0TDPX6a)UAX<_$fwT|kZv)ATDDS$r`reClNqZV_?0{Z3tfFvqU#Sc8AH ziTml_wKh5re9&w4{I)iAe$AS1YxQ|)oLg1d$+C_ObQaYL$t>iEA#7yErk|v)Wp6^AKeG9jYY80@`qA1ty z7&~T`k6KXhi>e9!V}Ext^?!RqCVa&VfS+@G1jMyZ_55qi`Da9rrn>bTEz}5-)3+8B zH@A;2h$Nl$WB`Lo`8M&bp)j-XdS=kd6K-(qC|b6bx}6{QO`)B6344WXGes6kxi;Ps zv2DFePl#HQxqSlZkOP0kgm(FDLAIiYkLm>VNjLH*)!pd4wPaLhr!?t^mf}>5lkEyZ zEd&?F__!Ev2#>@s3FuQVB9$fw)MO5UHfXe(9;e8ZnJ*Qjm0QR3%z15l-oV1VXqN&YTqG@!t=^C0?e_b$Q z$CV9MSj6dbH^_d%3MDDlyo{Y=7!5{Y9^*&NYlkwrH)ipc zc;+`-RJ<7d?+l}7?xh6stkh-{Y;LD!q~hX^eRYJXjSn&AR-gZ7E4*VUV7MvgQ;I`9 zGBg#UK2)c;CC>eak%Rq^RJ4C6MbU|@|Q+A^`%jy`48rjk&KyX0Y#tb!m=CY z*Hz;#W!)5InydF~NCsTAgbX+N^QidMD2_2ivcA_db}Iwh=S324GJBjI!4%MV7#*HI zPLZ|Iq$GIf?4bxni}E8Sn6l0{Vz=JUDZ1JIKK=}1($~Gp%*k|AP||vb&GOQUkxx@q z6~EvPhWB1Azs&p4J+h#Td}D84Amsz2mo)Z(>q{cL>c(6?70I=07SH9AG-va?$dU`y z@eK=OM{x3GHBm;24>gFIi_P}MU?`}HM1AX3ey&25Q0ASmI=it||NWy?u{g$1<#M`F zZoN^aLdu}6aPhrEIu#8u;;L1h^! z$gUcC&Jb8OS@(TLrVcF1ebfBgR(>xT+C}cg>hJ3h$2#b8O%~}_&nc!<(XP^k5tJkH zn2Fnmt;C$=xLYZDW8sQbaVjctfpy?;o>j1u-5}$2>N%Ci*;1`@e4ri08E&VLZb53>=La9rQHbD_vhNJF)aP+ba3}(WyK7v_sKB#;$2LQeMy9 zQ|t3I@!HQc5h10pyxc-Z$s6-tDM+P#b~+Hf>@gGA7Oie7;1qcoE$Y+1GFYe&OQ+jz z{54<%g7{nFygR*f+|sQB9J3f#c?vBT=tpy|agh+@m{uFMr@HX_h^eZigftM|e4O=4 zK9H*N7c)&|{CT|=a#YLJS+?YpGB+KCZMYg>N8otCru267-!v3G#gDz`TO+c8Ysv`dIfhk{vxjfACQ7KwV6WxI|ru zqbehMtz=%H-tjHDi3V_KG5nV_52*N7XcXvZo+_ete)a`aK$W11|ieo9y&U$lCr zrr(G$-Y0sG>iqp1I+wqBGKy@s-2A`gx-ttDmCK^_rKQEGN-1@`w3}Z!x&vEv6)@_> z7Hno?0iQ4&DS2O}V?nWaF?mKpr&`%5muTr0@m5e0#h$=pPc6Jym}knimR+nnT6W2! zz-9D<7vHXYy=_7A-cm4JT4@!rA;QwG+=K;g4NLsUrggeglh)sQZc!U;{-1*H4ppByw7GoOVZIN*|4_k@^?j+S|T(b-6) zUsP3TJ>;d-3Cq>`FER9$o}i54j`*plOzgYDu9^yg3Qf(Wnm9*z`%hynycVK$bS&2@ zx;ps%r|bL|KFP`Rv literal 0 HcmV?d00001 diff --git a/docsource/imperva.md b/docsource/imperva.md new file mode 100644 index 0000000..ed37e8e --- /dev/null +++ b/docsource/imperva.md @@ -0,0 +1 @@ +## Overview diff --git a/integration-manifest.json b/integration-manifest.json index 9f251cb..87c7675 100644 --- a/integration-manifest.json +++ b/integration-manifest.json @@ -5,6 +5,7 @@ "status": "production", "description": "The Imperva Orchestrator Extension allows for the management of SSL certificates bound to web sites managed by the Imperva cloud-based firewall.", "release_dir": "Imperva/bin/Release", + "release_project": "Imperva/Imperva.csproj", "support_level": "kf-supported", "update_catalog": true, "link_github": true, @@ -13,48 +14,38 @@ "UOFramework": "10.1", "pam_support": true, "keyfactor_platform_version": "9.10", - "win": { - "supportsCreateStore": false, - "supportsDiscovery": false, - "supportsManagementAdd": true, - "supportsManagementRemove": true, - "supportsReenrollment": false, - "supportsInventory": true - }, - "linux": { - "supportsCreateStore": false, - "supportsDiscovery": false, - "supportsManagementAdd": true, - "supportsManagementRemove": true, - "supportsReenrollment": false, - "supportsInventory": true - }, - "store_types": { - "Imperva": { - "Name": "Imperva", - "ShortName": "Imperva", - "Capability": "Imperva", - "ServerRequired": false, - "BlueprintAllowed": false, - "CustomAliasAllowed": "Required", - "PowerShell": false, - "PrivateKeyAllowed": "Required", - "SupportedOperations": { - "Add": true, - "Create": false, - "Discovery": false, - "Enrollment": false, - "Remove": true - }, + "store_types": [ + { + "Name": "Imperva", + "ShortName": "Imperva", + "Capability": "Imperva", + "ServerRequired": false, + "BlueprintAllowed": false, + "CustomAliasAllowed": "Required", + "PowerShell": false, + "PrivateKeyAllowed": "Required", + "SupportedOperations": { + "Add": true, + "Create": false, + "Discovery": false, + "Enrollment": false, + "Remove": true + }, "PasswordOptions": { "Style": "Default", "EntrySupported": false, - "StoreRequired": true + "StoreRequired": true, + "StorePassword": { + "Description": "Your Imperva API id and API key concatenated with a comma (,}. For example: 12345,12345678-1234-1234-1234-123456789ABC. Please refer to the [Imperva documentation](https://docs.imperva.com/bundle/cloud-application-security/page/settings/api-keys.htm#:~:text=In%20the%20Cloud%20Security%20Console%20top%20menu%20bar%2C%20click%20Account,to%20create%20a%20new%20key.) as to how to create an API id and key.", + "IsPAMEligible": true + } }, "Properties": [], - "EntryParameters": [] - } - } + "EntryParameters": [], + "ClientMachineDescription": "The URL that will be used as the base URL for Imperva endpoint calls. Should be https://my.imperva.com", + "StorePathDescription": "Your Imperva account id. Please refer to the [Imperva documentation](https://docs.imperva.com/howto/bd68301b) as to how to find your Imperva account id." + } + ] } } } \ No newline at end of file diff --git a/readme-src/readme-pam-support.md b/readme-src/readme-pam-support.md deleted file mode 100644 index dc11c4e..0000000 --- a/readme-src/readme-pam-support.md +++ /dev/null @@ -1,3 +0,0 @@ -|Name|Description| -|----|-----------| -|StorePassword|The Keyfactor certificate store password contains the Imperva API Id and API Key concatenated with a comma (,). For example: 12345,12345678-1234-1234-1234-123456789ABC. Please refer to your Imperva documentation to learn more about creating API Ids and Keys. diff --git a/readme_source.md b/readme_source.md deleted file mode 100644 index ab3aa54..0000000 --- a/readme_source.md +++ /dev/null @@ -1,51 +0,0 @@ - -## Versioning - -The version number of a the Imperva Orchestrator Extension can be verified by right clicking on the Imperva.dll file in the Extensions/Imperva installation folder, selecting Properties, and then clicking on the Details tab. -  -  -## Imperva Orchestrator Extension Installation -1. Create the Imperva certificate store type manually in Keyfactor Command by clicking on Settings (the gear icon on the top right) => Certificate Store Types => Add and then entering the settings described in the next section - Certificate Store Type Settings, OR by utilizing the CURL script found under the Certificate Store Type CURL Script folder in this repo. -2. Stop the Keyfactor Universal Orchestrator Service for the orchestrator you plan to install this extension to run on. -3. In the Keyfactor Orchestrator installation folder (by convention usually C:\Program Files\Keyfactor\Keyfactor Orchestrator), find the "Extensions" folder. Underneath that, create a new folder named "Imperva" (you may choose to use a different name if you wish). -4. Download the latest version of the Imperva Orchestrator Extension from [GitHub](https://github.com/Keyfactor/imperva-orchestrator). Click on the "Latest" release link on the right hand side of the main page and download the first zip file. -5. Copy the contents of the download installation zip file to the folder created in Step 3. -6. (Optional) If you decide to create the certificate store type with a short name different than the suggested value of "Imperva", edit the manifest.json file in the folder you created in step 3, and modify each "ShortName" in each "Certstores.{ShortName}.{Operation}" line with the ShortName you used to create the certificate store type in Keyfactor Command. If you created it with the suggested value, this step can be skipped. -7. Start the Keyfactor Universal Orchestrator Service. -8. In Keyfactor Command, go to Orchestrators => Management and approve the Keyfactor Orchestrator containing the Imperva capability that you just installed by selecting the orchestrator and clicking APPROVE. -  -  -## Certificate Store Type Settings -Below are the values you need to enter if you choose to manually create the Imperva certificate store type in the Keyfactor Command UI (related to Step 1 of Imperva Orchestrator Extension Installation above). - -*Basic Tab:* -- **Name** – Required. The display name you wish to use for the new certificate store type. Suggested value - Imperva -- **ShortName** - Required. Suggested value - Imperva. If you choose to use a different value, please refer to Step 6 under Imperva Orchestrator Extension Installation above. -- **Custom Capability** - Unchecked -- **Supported Job Types** - Inventory, Add, and Remove should all be checked. -- **Needs Server** - Unchecked -- **Blueprint Allowed** - Checked if you wish to make use of blueprinting. Please refer to the Keyfactor Command Reference Guide for more details on this feature. -- **Uses PoserShell** - Unchecked -- **Requires Store Password** - Checked. -- **Supports Entry Password** - Unchecked. - -*Advanced Tab:* -- **Store Path Type** - Freeform -- **Supports Custom Alias** - Required -- **Private Key Handling** - Required -- **PFX Password Style** - Default - -*Custom Fields Tab:* -None - -*Entry Parameters:* -None -  -  -## Creating an Imperva Certificate Store in Keyfactor Command -To create a Keyfactor Command certificate store of certificate store type Imperva, go to Locations => Certificate Stores and click ADD. Then enter the following: -- Category - Imperva (or the alternate ShortName value you entered when creating your certificate store type). -- Container - Optional. Refer to Keyfactor Command documentation about this feature. -- Client Machine - The URL that will be used as the base URL for Imperva endpoint calls. Should be https://my.imperva.com -- Store Path - Your Imperva account id. Please refer to the [Imperva documentation](https://docs.imperva.com/howto/bd68301b) as to how to find your Imperva account id. -- Store Password - Your Imperva API id and API key concatenated with a comma (,}. For example: 12345,12345678-1234-1234-1234-123456789ABC. Please refer to the [Imperva documentation](https://docs.imperva.com/bundle/cloud-application-security/page/settings/api-keys.htm#:~:text=In%20the%20Cloud%20Security%20Console%20top%20menu%20bar%2C%20click%20Account,to%20create%20a%20new%20key.) as to how to create an API id and key.