From 65b5a11784a714c805cff2adf54d7dc04082c10a Mon Sep 17 00:00:00 2001
From: Alistair Mackay <34012094+fireflycons@users.noreply.github.com>
Date: Mon, 18 Mar 2024 05:16:56 +0000
Subject: [PATCH] Refresh and add Apple Silicon (#338)

* Delete CKA stuff.
It's covered in CKA repo

* Rename nodes

* Cluster up again

* Update issue template

* Update README

* Begin rearranging docs

* Update links

* Initial mac instructions

* iterm2 image

* update ssh-copy-id to be cross platform

* remove vagrant specific

* Apple scripts WIP

* Add var for architecture

* order input files

* Apple build working!

* auto-locate docs

* install sshpass

* Set execute bit

* apple done!

* install sshpass

* edits

* Corrections

* kube version output

* Adjustments

* Adjustments
---
 .github/ISSUE_TEMPLATE/config.yml             |   6 +-
 README.md                                     |  49 +-
 {docs => VirtualBox/docs}/01-prerequisites.md |  53 +-
 .../docs}/02-compute-resources.md             |  26 +-
 apple-silicon/delete-virtual-machines.sh      |  33 +
 apple-silicon/deploy-virtual-machines.sh      | 104 ++++
 apple-silicon/docs/01-prerequisites.md        |  64 ++
 apple-silicon/docs/02-compute-resources.md    |  60 ++
 apple-silicon/scripts/01-setup-hosts.sh       |  27 +
 apple-silicon/scripts/02-setup-kernel.sh      |  23 +
 apple-silicon/scripts/cert_verify.sh          | 578 ++++++++++++++++++
 docs/03-client-tools.md                       |  76 +--
 docs/04-certificate-authority.md              |  56 +-
 docs/05-kubernetes-configuration-files.md     |  14 +-
 docs/06-data-encryption-keys.md               |  12 +-
 docs/07-bootstrapping-etcd.md                 |  45 +-
 ...08-bootstrapping-kubernetes-controllers.md |  76 ++-
 docs/09-install-cri-workers.md                | 102 +++-
 docs/10-bootstrapping-kubernetes-workers.md   |  88 +--
 ...11-tls-bootstrapping-kubernetes-workers.md |  57 +-
 docs/12-configuring-kubectl.md                |  14 +-
 docs/13-configure-pod-networking.md           |  26 +-
 docs/14-kube-apiserver-to-kubelet.md          |   8 +-
 docs/15-dns-addon.md                          |   8 +-
 docs/16-smoke-test.md                         |  13 +-
 docs/17-e2e-tests.md                          |  30 +-
 docs/differences-to-original.md               |   4 +-
 docs/verify-certificates.md                   |   6 +-
 images/iterm2-broadcast.png                   | Bin 0 -> 137563 bytes
 {docs/images => images}/master-1-cert.png     | Bin
 {docs/images => images}/master-2-cert.png     | Bin
 {docs/images => images}/tmux-screenshot.png   | Bin
 {docs/images => images}/worker-1-cert.png     | Bin
 practice-questions-answers/README.md          |  56 --
 .../commands-and-arguments/answer.md          |   1 -
 .../configmaps/answer.md                      |   1 -
 .../liveness-probes/answer.md                 |   1 -
 .../rolling-updates-and-rollbacks/answer.md   |   1 -
 .../secrets/answer.md                         |   1 -
 .../cluster-maintenance/backup-etcd/answer.md |   1 -
 .../backup-etcd/etcd-backup-and-restore.md    |  79 ---
 .../cluster-upgrade-process/answer.md         |   1 -
 .../cluster-maintenance/os-upgrades/answer.md |   1 -
 .../core-concepts/deployments/answer.md       |   1 -
 .../core-concepts/namespaces/answer.md        |   1 -
 .../core-concepts/pods/answer.md              |   1 -
 .../core-concepts/replicasets/answer.md       |   1 -
 .../install/bootstrap-worker-node-2/answer.md |   1 -
 .../tls-bootstrap-worker-node-2.md            | 182 ------
 .../install/bootstrap-worker-node/answer.md   |   1 -
 .../answer.md                                 |   1 -
 .../managing-application-logs/answer.md       |   1 -
 .../monitor-cluster-components/answer.md      |   1 -
 .../networking/cni-in-kubernetes/answer.md    |   1 -
 .../networking/cni-weave-read/answer.md       |   1 -
 .../networking/cni-weave/answer.md            |   1 -
 .../coredns-in-kubernetes/answer.md           |   1 -
 .../scheduling/daemonsets/answer.md           |   1 -
 .../scheduling/labels-and-selectors/answer.md |   1 -
 .../scheduling/manual-scheduling/answer.md    |   1 -
 .../scheduling/multiple-schedulers/answer.md  |   1 -
 .../scheduling/resource-limits/answer.md      |   1 -
 .../security/certificates-api/answer.md       |   1 -
 .../security/cluster-roles/answer.md          |   1 -
 .../security/image-security/answer.md         |   1 -
 .../security/kubeconfig/answer.md             |   1 -
 .../security/network-policies/answer.md       |   1 -
 .../security/security-contexts/answer.md      |   1 -
 .../view-certificate-details/answer.md        |   1 -
 .../application-failure/answer.md             |   1 -
 .../control-plane-failure/answer.md           |   1 -
 .../worker-node-failure/answer.md             |   1 -
 tools/lab-script-generator.py                 |  33 +-
 vagrant/README.md                             |   3 +-
 vagrant/Vagrantfile                           |  28 +-
 vagrant/ubuntu/cert_verify.sh                 |  68 +--
 vagrant/ubuntu/setup-kernel.sh                |   0
 vagrant/ubuntu/ssh.sh                         |  19 +-
 vagrant/ubuntu/update-dns.sh                  |   0
 .../ubuntu/vagrant/install-guest-additions.sh |   0
 vagrant/ubuntu/vagrant/setup-hosts.sh         |  25 +-
 81 files changed, 1400 insertions(+), 787 deletions(-)
 rename {docs => VirtualBox/docs}/01-prerequisites.md (61%)
 rename {docs => VirtualBox/docs}/02-compute-resources.md (77%)
 create mode 100755 apple-silicon/delete-virtual-machines.sh
 create mode 100755 apple-silicon/deploy-virtual-machines.sh
 create mode 100644 apple-silicon/docs/01-prerequisites.md
 create mode 100644 apple-silicon/docs/02-compute-resources.md
 create mode 100755 apple-silicon/scripts/01-setup-hosts.sh
 create mode 100755 apple-silicon/scripts/02-setup-kernel.sh
 create mode 100755 apple-silicon/scripts/cert_verify.sh
 create mode 100644 images/iterm2-broadcast.png
 rename {docs/images => images}/master-1-cert.png (100%)
 rename {docs/images => images}/master-2-cert.png (100%)
 rename {docs/images => images}/tmux-screenshot.png (100%)
 rename {docs/images => images}/worker-1-cert.png (100%)
 delete mode 100644 practice-questions-answers/README.md
 delete mode 100644 practice-questions-answers/application-lifecycle-management/commands-and-arguments/answer.md
 delete mode 100644 practice-questions-answers/application-lifecycle-management/configmaps/answer.md
 delete mode 100644 practice-questions-answers/application-lifecycle-management/liveness-probes/answer.md
 delete mode 100644 practice-questions-answers/application-lifecycle-management/rolling-updates-and-rollbacks/answer.md
 delete mode 100644 practice-questions-answers/application-lifecycle-management/secrets/answer.md
 delete mode 100644 practice-questions-answers/cluster-maintenance/backup-etcd/answer.md
 delete mode 100644 practice-questions-answers/cluster-maintenance/backup-etcd/etcd-backup-and-restore.md
 delete mode 100644 practice-questions-answers/cluster-maintenance/cluster-upgrade-process/answer.md
 delete mode 100644 practice-questions-answers/cluster-maintenance/os-upgrades/answer.md
 delete mode 100644 practice-questions-answers/core-concepts/deployments/answer.md
 delete mode 100644 practice-questions-answers/core-concepts/namespaces/answer.md
 delete mode 100644 practice-questions-answers/core-concepts/pods/answer.md
 delete mode 100644 practice-questions-answers/core-concepts/replicasets/answer.md
 delete mode 100644 practice-questions-answers/install/bootstrap-worker-node-2/answer.md
 delete mode 100644 practice-questions-answers/install/bootstrap-worker-node-2/tls-bootstrap-worker-node-2.md
 delete mode 100644 practice-questions-answers/install/bootstrap-worker-node/answer.md
 delete mode 100644 practice-questions-answers/install/end-to-end-tests-run-and-analyze/answer.md
 delete mode 100644 practice-questions-answers/logging-monitoring/managing-application-logs/answer.md
 delete mode 100644 practice-questions-answers/logging-monitoring/monitor-cluster-components/answer.md
 delete mode 100644 practice-questions-answers/networking/cni-in-kubernetes/answer.md
 delete mode 100644 practice-questions-answers/networking/cni-weave-read/answer.md
 delete mode 100644 practice-questions-answers/networking/cni-weave/answer.md
 delete mode 100644 practice-questions-answers/networking/coredns-in-kubernetes/answer.md
 delete mode 100644 practice-questions-answers/scheduling/daemonsets/answer.md
 delete mode 100644 practice-questions-answers/scheduling/labels-and-selectors/answer.md
 delete mode 100644 practice-questions-answers/scheduling/manual-scheduling/answer.md
 delete mode 100644 practice-questions-answers/scheduling/multiple-schedulers/answer.md
 delete mode 100644 practice-questions-answers/scheduling/resource-limits/answer.md
 delete mode 100644 practice-questions-answers/security/certificates-api/answer.md
 delete mode 100644 practice-questions-answers/security/cluster-roles/answer.md
 delete mode 100644 practice-questions-answers/security/image-security/answer.md
 delete mode 100644 practice-questions-answers/security/kubeconfig/answer.md
 delete mode 100644 practice-questions-answers/security/network-policies/answer.md
 delete mode 100644 practice-questions-answers/security/security-contexts/answer.md
 delete mode 100644 practice-questions-answers/security/view-certificate-details/answer.md
 delete mode 100644 practice-questions-answers/troubleshooting/application-failure/answer.md
 delete mode 100644 practice-questions-answers/troubleshooting/control-plane-failure/answer.md
 delete mode 100644 practice-questions-answers/troubleshooting/worker-node-failure/answer.md
 mode change 100644 => 100755 vagrant/ubuntu/setup-kernel.sh
 mode change 100644 => 100755 vagrant/ubuntu/ssh.sh
 mode change 100644 => 100755 vagrant/ubuntu/update-dns.sh
 mode change 100644 => 100755 vagrant/ubuntu/vagrant/install-guest-additions.sh
 mode change 100644 => 100755 vagrant/ubuntu/vagrant/setup-hosts.sh

diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
index b16c8aa..ebc6a4e 100644
--- a/.github/ISSUE_TEMPLATE/config.yml
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -1,5 +1,5 @@
 blank_issues_enabled: false
 contact_links:
-  - name: KodeKloud Slack
-    url: kodekloud.slack.com
-    about: Please use Slack to ask anything unrelated to Kubernetes the Hard Way.
+  - name: KodeKloud Forum
+    url: https://community.kodekloud.com/
+    about: Please use the Communuity Forum to ask about anything unrelated to Kubernetes the Hard Way.
diff --git a/README.md b/README.md
index 4347883..86bebf9 100644
--- a/README.md
+++ b/README.md
@@ -1,25 +1,25 @@
-> This tutorial is a modified version of the original developed by [Kelsey Hightower](https://github.com/kelseyhightower/kubernetes-the-hard-way).
+# Kubernetes The Hard Way
 
-# Kubernetes The Hard Way On VirtualBox
+Updated: March 2024
 
-**IMPORTANT** This currently does not work on Apple M1/M2. Oracle are yet to release a compatible version for these systems.
-
-This tutorial walks you through setting up Kubernetes the hard way on a local machine using VirtualBox.
+This tutorial walks you through setting up Kubernetes the hard way on a local machine using a hypervisor.
 This guide is not for people looking for a fully automated command to bring up a Kubernetes cluster.
 If that's you then check out [Google Kubernetes Engine](https://cloud.google.com/kubernetes-engine), or the [Getting Started Guides](http://kubernetes.io/docs/getting-started-guides/).
 
-Kubernetes The Hard Way is optimized for learning, which means taking the long route to ensure you understand each task required to bootstrap a Kubernetes cluster.
+Kubernetes The Hard Way is optimized for learning, which means taking the long route to ensure you understand each task required to bootstrap a Kubernetes cluster. Note that the cluster when built will not be accessible from your laptop browser - that isn't what this is about. If you want a more useable cluster, try [one of these](https://github.com/kodekloudhub/certified-kubernetes-administrator-course/tree/master/kubeadm-clusters).
 
 This tutorial is a modified version of the original developed by [Kelsey Hightower](https://github.com/kelseyhightower/kubernetes-the-hard-way).
-While the original one uses GCP as the platform to deploy kubernetes,  we use VirtualBox and Vagrant to deploy a cluster on a local machine. If you prefer the cloud version, refer to the original one [here](https://github.com/kelseyhightower/kubernetes-the-hard-way)
+While the original one uses GCP as the platform to deploy kubernetes,  we use a hypervisor to deploy a cluster on a local machine. If you prefer the cloud version, refer to the original one [here](https://github.com/kelseyhightower/kubernetes-the-hard-way)
 
-> The results of this tutorial should *not* be viewed as production ready, and may receive limited support from the community, but don't let that stop you from learning!<br/>Note that we are only building 2 masters here instead of the recommended 3 that `etcd` requires to maintain quorum. This is to save on resources, and simply to show how to load balance across more than one master.
+The results of this tutorial should *not* be viewed as production ready, and may receive limited support from the community, but don't let that stop you from learning!<br/>Note that we are only building 2 controlplane nodes here instead of the recommended 3 that `etcd` requires to maintain quorum. This is to save on resources, and simply to show how to load balance across more than one controlplane node.
 
-Please note that with this particular challenge, it is all about the minute detail. If you miss one tiny step anywhere along the way, it's going to break!
+### <font color="red">Before shouting "Help! It's not working!"</font>
+
+Please note that with this particular challenge, it is all about the minute detail. If you miss _one tiny step_ anywhere along the way, it's going to break!
 
 Note also that in developing this lab, it has been tested *many many* times! Once you have the VMs up and you start to build the cluster, if at any point something isn't working it is 99.9999% likely to be because you missed something, not a bug in the lab!
 
-Always run the `cert_verify.sh` script at the places it suggests, and always ensure you are on the correct node when you do stuff. If `cert_verify.sh` shows anything in red, then you have made an error in a previous step. For the master node checks, run the check on `master-1` and on `master-2`
+Always run the `cert_verify.sh` script at the places it suggests, and always ensure you are on the correct node when you do stuff. If `cert_verify.sh` shows anything in red, then you have made an error in a previous step. For the controlplane node checks, run the check on `controlplane01` and on `controlplane02`
 
 ## Target Audience
 
@@ -39,27 +39,12 @@ Kubernetes The Hard Way guides you through bootstrapping a highly available Kube
 
 We will be building the following:
 
-* Two control plane nodes (`master-1` and `master-2`) running the control plane components as operating system services.
-* Two worker nodes (`worker-1` and `worker-2`)
-* One loadbalancer VM running [HAProxy](https://www.haproxy.org/) to balance requests between the two API servers.
+* Two control plane nodes (`controlplane01` and `controlplane02`) running the control plane components as operating system services. This is not a kubeadm cluster as you are used to if you have been doing the CKA course. The control planes are *not* themselves nodes, therefore will not show with `kubectl get nodes`.
+* Two worker nodes (`node01` and `node02`)
+* One loadbalancer VM running [HAProxy](https://www.haproxy.org/) to balance requests between the two API servers and provide the endpoint for your KUBECONFIG.
 
-## Labs
+## Getting Started
+
+* If you are using Windows or Intel Mac, start [here](./VirtualBox/docs/01-prerequisites.md) to deploy VirtualBox and Vagrant.
+* If you are using Apple Silicon Mac (M1/M2/M3), start [here](./apple-silicon/docs/01-prerequisites.md) to deploy Multipass.
 
-* [Prerequisites](docs/01-prerequisites.md)
-* [Provisioning Compute Resources](docs/02-compute-resources.md)
-* [Installing the Client Tools](docs/03-client-tools.md)
-* [Provisioning the CA and Generating TLS Certificates](docs/04-certificate-authority.md)
-* [Generating Kubernetes Configuration Files for Authentication](docs/05-kubernetes-configuration-files.md)
-* [Generating the Data Encryption Config and Key](docs/06-data-encryption-keys.md)
-* [Bootstrapping the etcd Cluster](docs/07-bootstrapping-etcd.md)
-* [Bootstrapping the Kubernetes Control Plane](docs/08-bootstrapping-kubernetes-controllers.md)
-* [Installing CRI on Worker Nodes](docs/09-install-cri-workers.md)
-* [Bootstrapping the Kubernetes Worker Nodes](docs/10-bootstrapping-kubernetes-workers.md)
-* [TLS Bootstrapping the Kubernetes Worker Nodes](docs/11-tls-bootstrapping-kubernetes-workers.md)
-* [Configuring kubectl for Remote Access](docs/12-configuring-kubectl.md)
-* [Deploy Weave - Pod Networking Solution](docs/13-configure-pod-networking.md)
-* [Kube API Server to Kubelet Configuration](docs/14-kube-apiserver-to-kubelet.md)
-* [Deploying the DNS Cluster Add-on](docs/15-dns-addon.md)
-* [Smoke Test](docs/16-smoke-test.md)
-* [E2E Test](docs/17-e2e-tests.md)
-* [Extra - Certificate Verification](docs/verify-certificates.md)
diff --git a/docs/01-prerequisites.md b/VirtualBox/docs/01-prerequisites.md
similarity index 61%
rename from docs/01-prerequisites.md
rename to VirtualBox/docs/01-prerequisites.md
index c6c2881..955e4e6 100644
--- a/docs/01-prerequisites.md
+++ b/VirtualBox/docs/01-prerequisites.md
@@ -1,20 +1,29 @@
-# Prerequisites
+# Kubernetes The Hard Way on VirtualBox
 
-## VM Hardware Requirements
+Begin here if your machine is Windows or Intel Mac. For these machines, we use VirtualBox as the hypervisor, and Vagrant to provision the Virtual Machines.
 
-- 8 GB of RAM (preferably 16 GB)
+This should also work with Linux (as the host operating system, not running in a VM), but it not so far tested.
+
+## Prerequisites
+
+
+### Hardware Requirements
+
+This lab provisions 5 VMs on your workstation. That's a lot of compute resource!
+
+- 16GB RAM. It may work with less, but will be slow and may crash unexpectedly.
+- 8 core or better CPU e.g. Intel Core-i7/Core-i9, AMD Ryzen-7/Ryzen-9. May work with fewer, but will be slow and may crash unexpectedly.
 - 50 GB disk space
 
-## VirtualBox
+### VirtualBox
 
 Download and install [VirtualBox](https://www.virtualbox.org/wiki/Downloads) on any one of the supported platforms:
 
- - Windows hosts
- - OS X hosts (x86 only, not Apple Silicon M-series)
- - Linux distributions
- - Solaris hosts
+ - Windows
+ - Intel Mac
+ - Linux
 
-## Vagrant
+### Vagrant
 
 Once VirtualBox is installed you may chose to deploy virtual machines manually on it.
 Vagrant provides an easier way to deploy multiple virtual machines on VirtualBox more consistently.
@@ -22,17 +31,17 @@ Vagrant provides an easier way to deploy multiple virtual machines on VirtualBox
 Download and install [Vagrant](https://www.vagrantup.com/) on your platform.
 
 - Windows
-- Debian
-- Centos
+- Debian/Ubuntu
+- CentOS
 - Linux
-- macOS (x86 only, not M1)
+- Intel Mac
 
 This tutorial assumes that you have also installed Vagrant.
 
 
-## Lab Defaults
+### Lab Defaults
 
-The labs have been configured with the following networking defaults. If you change any of these after you have deployed any of the lab, you'll need to completely reset it and start again from the beginning:
+The labs have been configured with the following networking defaults. It is not recommended to change these. If you change any of these after you have deployed any of the lab, you'll need to completely reset it and start again from the beginning:
 
 ```bash
 vagrant destroy -f
@@ -41,33 +50,33 @@ vagrant up
 
 If you do change any of these, **please consider that a personal preference and don't submit a PR for it**.
 
-### Virtual Machine Network
+#### Virtual Machine Network
 
 The network used by the VirtualBox virtual machines is `192.168.56.0/24`.
 
-To change this, edit the [Vagrantfile](../vagrant/Vagrantfile) in your cloned copy (do not edit directly in github), and set the new value for the network prefix at line 9. This should not overlap any of the other network settings.
+To change this, edit the [Vagrantfile](../../vagrant/Vagrantfile) in your cloned copy (do not edit directly in github), and set the new value for the network prefix at line 9. This should not overlap any of the other network settings.
 
 Note that you do not need to edit any of the other scripts to make the above change. It is all managed by shell variable computations based on the assigned VM  IP  addresses and the values in the hosts file (also computed).
 
 It is *recommended* that you leave the pod and service networks with the following defaults. If you change them then you will also need to edit one or both of the CoreDNS and Weave networking manifests to accommodate your change.
 
-### Pod Network
+#### Pod Network
 
 The network used to assign IP addresses to pods is `10.244.0.0/16`.
 
-To change this, open all the `.md` files in the [docs](../docs/) directory in your favourite IDE and do a global replace on<br>
+To change this, open all the `.md` files in the [docs](../../docs/) directory in your favourite IDE and do a global replace on<br>
 `POD_CIDR=10.244.0.0/16`<br>
 with the new CDIR range.  This should not overlap any of the other network settings.
 
-### Service Network
+#### Service Network
 
 The network used to assign IP addresses to Cluster IP services is `10.96.0.0/16`.
 
-To change this, open all the `.md` files in the [docs](../docs/) directory in your favourite IDE and do a global replace on<br>
+To change this, open all the `.md` files in the [docs](../../docs/) directory in your favourite IDE and do a global replace on<br>
 `SERVICE_CIDR=10.96.0.0/16`<br>
 with the new CDIR range.  This should not overlap any of the other network settings.
 
-Additionally edit line 164 of [coredns.yaml](../deployments/coredns.yaml) to set the new DNS service address (should still end with `.10`)
+Additionally edit line 164 of [coredns.yaml](../../deployments/coredns.yaml) to set the new DNS service address (should still end with `.10`)
 
 ## Running Commands in Parallel with tmux
 
@@ -75,7 +84,7 @@ Additionally edit line 164 of [coredns.yaml](../deployments/coredns.yaml) to set
 
 > The use of tmux is optional and not required to complete this tutorial.
 
-![tmux screenshot](images/tmux-screenshot.png)
+![tmux screenshot](../../images/tmux-screenshot.png)
 
 > Enable synchronize-panes by pressing `CTRL+B` followed by `"` to split the window into two panes. In each pane (selectable with mouse), ssh to the host(s) you will be working with.</br>Next type `CTRL+X` at the prompt to begin sync. In sync mode, the dividing line between panes will be red. Everything you type or paste in one pane will be echoed in the other.<br>To disable synchronization type `CTRL+X` again.</br></br>Note that the `CTRL-X` key binding is provided by a `.tmux.conf` loaded onto the VM by the vagrant provisioner.
 
diff --git a/docs/02-compute-resources.md b/VirtualBox/docs/02-compute-resources.md
similarity index 77%
rename from docs/02-compute-resources.md
rename to VirtualBox/docs/02-compute-resources.md
index 7339425..fed576c 100644
--- a/docs/02-compute-resources.md
+++ b/VirtualBox/docs/02-compute-resources.md
@@ -14,7 +14,7 @@ CD into vagrant directory:
 cd kubernetes-the-hard-way/vagrant
 ```
 
-The `Vagrantfile` is configured to assume you have at least an 8 core CPU which most modern core i5, i7 and i9 do, and at least 16GB RAM. You can tune these values expecially if you have *less* than this by editing the `Vagrantfile` before the next step below and adjusting the values for `RAM_SIZE` and `CPU_CORES` accordingly.
+The `Vagrantfile` is configured to assume you have at least an 8 core CPU which most modern core i5, i7 and i9 do, and at least 16GB RAM. You can tune these values especially if you have *less* than this by editing the `Vagrantfile` before the next step below and adjusting the values for `RAM_SIZE` and `CPU_CORES` accordingly. It is not recommended to change these unless you know what you are doing as it may result in crashes and will make the lab harder to support.
 
 This will not work if you have less than 8GB of RAM.
 
@@ -27,7 +27,7 @@ vagrant up
 
 This does the below:
 
-- Deploys 5 VMs - 2 Master, 2 Worker and 1 Loadbalancer with the name 'kubernetes-ha-* '
+- Deploys 5 VMs - 2 controlplane, 2 worker and 1 loadbalancer with the name 'kubernetes-ha-* '
     > This is the default settings. This can be changed at the top of the Vagrant file.
     > If you choose to change these settings, please also update `vagrant/ubuntu/vagrant/setup-hosts.sh`
     > to add the additional hosts to the `/etc/hosts` default before running `vagrant up`.
@@ -36,10 +36,10 @@ This does the below:
 
     | VM            |  VM Name               | Purpose       | IP            | Forwarded Port   | RAM  |
     | ------------  | ---------------------- |:-------------:| -------------:| ----------------:|-----:|
-    | master-1      | kubernetes-ha-master-1 | Master        | 192.168.56.11 |     2711         | 2048 |
-    | master-2      | kubernetes-ha-master-2 | Master        | 192.168.56.12 |     2712         | 1024 |
-    | worker-1      | kubernetes-ha-worker-1 | Worker        | 192.168.56.21 |     2721         | 512  |
-    | worker-2      | kubernetes-ha-worker-2 | Worker        | 192.168.56.22 |     2722         | 1024 |
+    | controlplane01      | kubernetes-ha-controlplane01 | Master        | 192.168.56.11 |     2711         | 2048 |
+    | controlplane02      | kubernetes-ha-controlplane02 | Master        | 192.168.56.12 |     2712         | 1024 |
+    | node01      | kubernetes-ha-node01 | Worker        | 192.168.56.21 |     2721         | 512  |
+    | node02      | kubernetes-ha-node02 | Worker        | 192.168.56.22 |     2722         | 1024 |
     | loadbalancer  | kubernetes-ha-lb       | LoadBalancer  | 192.168.56.30 |     2730         | 1024 |
 
     > These are the default settings. These can be changed in the Vagrant file
@@ -49,7 +49,7 @@ This does the below:
 
 - Sets required kernel settings for kubernetes networking to function correctly.
 
-See [Vagrant page](../vagrant/README.md) for details.
+See [Vagrant page](../../vagrant/README.md) for details.
 
 ## SSH to the nodes
 
@@ -57,7 +57,7 @@ There are two ways to SSH into the nodes:
 
 ### 1. SSH using Vagrant
 
-  From the directory you ran the `vagrant up` command, run `vagrant ssh \<vm\>` for example `vagrant ssh master-1`.
+  From the directory you ran the `vagrant up` command, run `vagrant ssh \<vm\>` for example `vagrant ssh controlplane01`. This is the recommended way.
   > Note: Use VM field from the above table and not the VM name itself.
 
 ### 2. SSH Using SSH Client Tools
@@ -100,15 +100,15 @@ Sometimes the delete does not delete the folder created for the VM and throws an
 
 VirtualBox error:
 
-    VBoxManage.exe: error: Could not rename the directory 'D:\VirtualBox VMs\ubuntu-bionic-18.04-cloudimg-20190122_1552891552601_76806' to 'D:\VirtualBox VMs\kubernetes-ha-worker-2' to save the settings file (VERR_ALREADY_EXISTS)
+    VBoxManage.exe: error: Could not rename the directory 'D:\VirtualBox VMs\ubuntu-bionic-18.04-cloudimg-20190122_1552891552601_76806' to 'D:\VirtualBox VMs\kubernetes-ha-node02' to save the settings file (VERR_ALREADY_EXISTS)
     VBoxManage.exe: error: Details: code E_FAIL (0x80004005), component SessionMachine, interface IMachine, callee IUnknown
     VBoxManage.exe: error: Context: "SaveSettings()" at line 3105 of file VBoxManageModifyVM.cpp
 
 In such cases delete the VM, then delete the VM folder and then re-provision, e.g.
 
 ```bash
-vagrant destroy worker-2
-rmdir "\<path-to-vm-folder\>\kubernetes-ha-worker-2
+vagrant destroy node02
+rmdir "\<path-to-vm-folder\>\kubernetes-ha-node02
 vagrant up
 ```
 
@@ -137,5 +137,5 @@ To power on again:
 vagrant up
 ```
 
-Prev: [Prerequisites](01-prerequisites.md)<br>
-Next: [Client tools](03-client-tools.md)
+Next: [Client tools](../../docs/03-client-tools.md)<br>
+Prev: [Prerequisites](01-prerequisites.md)
diff --git a/apple-silicon/delete-virtual-machines.sh b/apple-silicon/delete-virtual-machines.sh
new file mode 100755
index 0000000..d14b2e8
--- /dev/null
+++ b/apple-silicon/delete-virtual-machines.sh
@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+
+set -eo pipefail
+
+specs=/tmp/vm-specs
+cat <<EOF > $specs
+controlplane01,2,2048M,10G
+controlplane02,2,2048M,5G
+loadbalancer,1,512M,5G
+node01,2,2048M,5G
+node02,2,2048M,5G
+EOF
+
+for spec in $(cat $specs)
+do
+    n=$(cut -d ',' -f 1 <<< $spec)
+    multipass stop $n
+    multipass delete $n
+done
+
+multipass purge
+
+echo
+echo "You should now remove all the following lines from /var/db/dhcpd_leases"
+echo
+cat /var/db/dhcpd_leases | egrep -A 5 -B 1 '(controlplane|node|loadbalancer)'
+echo
+cat <<EOF
+Use the following command to do this
+
+  sudo vi /var/db/dhcpd_leases
+
+EOF
diff --git a/apple-silicon/deploy-virtual-machines.sh b/apple-silicon/deploy-virtual-machines.sh
new file mode 100755
index 0000000..c2b557c
--- /dev/null
+++ b/apple-silicon/deploy-virtual-machines.sh
@@ -0,0 +1,104 @@
+#!/usr/bin/env bash
+# When VMs are deleted, IPs remain allocated in dhcpdb
+# IP reclaim: https://discourse.ubuntu.com/t/is-it-possible-to-either-specify-an-ip-address-on-launch-or-reset-the-next-ip-address-to-be-used/30316
+
+ARG=$1
+
+set -euo pipefail
+
+RED="\033[1;31m"
+YELLOW="\033[1;33m"
+GREEN="\033[1;32m"
+BLUE="\033[1;34m"
+NC="\033[0m"
+
+echo -e "${BLUE}Checking system compatibility${NC}"
+
+MEM_GB=$(( $(sysctl hw.memsize | cut -d ' ' -f 2) /  1073741824 ))
+SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )/scripts
+
+if [ $MEM_GB -lt 12 ]
+then
+    echo -e "${RED}System RAM is ${MEM_GB}GB. This is insufficient to deploy a working cluster.${NC}"
+    exit 1
+fi
+
+if ! command -v multipass > /dev/null
+then
+    echo -e "${RED}Cannot find multipass. Did you install it as per the instructions?${NC}"
+    exit 1
+fi
+
+if ! command -v jq > /dev/null
+then
+    echo -e "${RED}Cannot find jq. Did you install it as per the instructions?${NC}"
+    exit 1
+fi
+
+specs=/tmp/vm-specs
+cat <<EOF > $specs
+controlplane01,2,2048M,10G
+controlplane02,2,2048M,5G
+loadbalancer,1,512M,5G
+node01,2,2048M,5G
+node02,2,2048M,5G
+EOF
+
+echo -e "${GREEN}System OK!${NC}"
+
+# If the nodes are running, reset them
+for spec in $(cat $specs)
+do
+    node=$(cut -d ',' -f 1 <<< $spec)
+    if multipass list --format json | jq -r '.list[].name' | grep $node > /dev/null
+    then
+        echo -n -e $RED
+        read -p "VMs are running. Delete and rebuild them (y/n)? " ans
+        echo -n -e $NC
+        [ "$ans" != 'y' ] && exit 1
+        break
+    fi
+done
+
+# Boot the nodes
+for spec in $(cat $specs)
+do
+    node=$(cut -d ',' -f 1 <<< $spec)
+    cpus=$(cut -d ',' -f 2 <<< $spec)
+    ram=$(cut -d ',' -f 3 <<< $spec)
+    disk=$(cut -d ',' -f 4 <<< $spec)
+    if multipass list --format json | jq -r '.list[].name' | grep $(cut -d ',' -f 1 <<< $node) > /dev/null
+    then
+        echo -e "${YELLOW}Deleting $node${NC}"
+        multipass delete $node
+        multipass purge
+    fi
+
+    echo -e "${BLUE}Launching ${node}${NC}"
+    multipass launch --disk $disk --memory $ram --cpus $cpus --name $node jammy
+    echo -e "${GREEN}$node booted!${NC}"
+done
+
+# Create hostfile entries
+echo -e "${BLUE}Provisioning...${NC}"
+hostentries=/tmp/hostentries
+
+[ -f $hostentries ] && rm -f $hostentries
+
+for spec in $(cat $specs)
+do
+    node=$(cut -d ',' -f 1 <<< $spec)
+    ip=$(multipass info $node --format json | jq -r 'first( .info[] | .ipv4[0] )')
+    echo "$ip $node" >> $hostentries
+done
+
+for spec in $(cat $specs)
+do
+    node=$(cut -d ',' -f 1 <<< $spec)
+    multipass transfer $hostentries $node:/tmp/
+    multipass transfer $SCRIPT_DIR/01-setup-hosts.sh $node:/tmp/
+    multipass transfer $SCRIPT_DIR/cert_verify.sh $node:/home/ubuntu/
+    multipass exec $node -- /tmp/01-setup-hosts.sh
+done
+
+echo -e "${GREEN}Done!${NC}"
diff --git a/apple-silicon/docs/01-prerequisites.md b/apple-silicon/docs/01-prerequisites.md
new file mode 100644
index 0000000..beff949
--- /dev/null
+++ b/apple-silicon/docs/01-prerequisites.md
@@ -0,0 +1,64 @@
+# Prerequisites
+
+## Hardware Requirements
+
+This lab provisions 5 VMs on your workstation. That's a lot of compute resource!
+
+* Apple Silicon System (M1/M2/M3 etc)
+* Minimum 16GB RAM.<br/>Bear in mind that the unified memory architecture of Apple Silicon Macs means that the whole of the quoted memory is not available for software - some of it is used for the display, more if you have external displays.<br/>This rules out 8GB models - sorry.
+* Pro or Max CPU recommended for running the e2e-tests at the end of this lab.
+
+## Required Software
+
+You'll need to install the following first.
+
+* Multipass - https://multipass.run/install. Follow the instructions to install it and check it is working properly. You should be able to successfully create a test Ubuntu VM following their instructions. Delete the test VM when you're done.
+* JQ - https://github.com/stedolan/jq/wiki/Installation#macos
+
+Additionally
+
+* Your account on your Mac must have admin privilege and be able to use `sudo`
+
+Clone this repo down to your Mac. Open your Mac's terminal application. All commands in this guide are executed from the terminal.
+
+    ```bash
+    mkdir ~/kodekloud
+    cd ~/kodekloud
+    git clone https://github.com/mmumshad/kubernetes-the-hard-way.git
+    cd kubernetes-the-hard-way/apple-silicon
+    ```
+
+## Virtual Machine Network
+
+Due to how the virtualization works, the networking for each VM requires two network adapters; one used by Multipass and one used by everything else. Kubernetes components may by default bind to the Multipass adapter, which is *not* what we want, therefore we have pre-set an environment variable `PRIMARY_IP` on all VMs which is the IP address that Kubernetes components should be using. In the coming labs you will see this environment variable being used to ensure Kubernetes components bind to the correct network interface.
+
+`PRIMARY_IP` is defined as the IP address of the network interface on the node that is connected to the network having the default gateway, and is the interface that a node will use to talk to the other nodes.
+
+### NAT Networking
+
+In NAT configuration, the network on which the VMs run is isolated from your broadband router's network by a NAT gateway managed by the hypervisor. This means that VMs can see out (and connect to Internet), but you can't see in (i.e. use browser to connect to NodePorts). It is currently not possible to set up port forwarding rules in Multipass to facilitate this.
+
+The network used by the VMs is chosen by Multipass.
+
+It is *recommended* that you leave the pod and service networks as the defaults. If you change them then you will also need to edit the Weave networking manifests to accommodate your change.
+
+If you do decide to change any of these, please treat as personal preference and do not raise a pull request.
+
+
+## Running Commands in Parallel with iterm2
+
+[iterm2](https://iterm2.com/) which is a popular replacement for the standard Mac terminal application can be used to run the same commands on multiple compute instances at the same time. Some labs in this tutorial require running the same commands on multiple compute instances for instance installing the Kubernetes software. In those cases you may consider using iterm2 and splitting a window into multiple panes with *Broadcast input to all panes* enabled to speed up the provisioning process.
+
+*The use of iterm2 is optional and not required to complete this tutorial*.
+
+![titerm2 screenshot](../../images//iterm2-broadcast.png)
+
+To set up as per the image above, do the following in iterm2
+1. Right click and select split pane horizontally
+1. In each pane, connect to a different node with `Multipass shell`
+1. From the `Session` menu at the top, toggle `Broadcast` -> `Broadcast input to all panes` (or press `ALT`-`CMD`-`I`). The small icon at the top right of each pane indicates broadcast mode is enabled.
+
+Input typed or passed to one command prompt will be echoed to the others. Remember to turn off broadcast when you have finished a section that applies to multiple nodes.
+
+Next: [Compute Resources](02-compute-resources.md)
+
diff --git a/apple-silicon/docs/02-compute-resources.md b/apple-silicon/docs/02-compute-resources.md
new file mode 100644
index 0000000..db5976b
--- /dev/null
+++ b/apple-silicon/docs/02-compute-resources.md
@@ -0,0 +1,60 @@
+# Compute Resources
+
+Because we cannot use VirtualBox and are instead using Multipass, [a script is provided](./deploy-virtual-machines.sh) to create the three VMs.
+
+1. Run the VM deploy script from your Mac terminal application
+
+    ```bash
+    ./deploy-virtual-machines.sh
+    ```
+
+2. Verify you can connect to all VMs:
+
+    ```bash
+    multipass shell controlplane01
+    ```
+
+    You should see a command prompt like `ubuntu@controlplane01:~$`
+
+    Type the following to return to the Mac terminal
+
+    ```bash
+    exit
+    ```
+
+    Do this for the other controlplane, both nodes and loadbalancer.
+
+# Deleting the Virtual Machines
+
+When you have finished with your cluster and want to reclaim the resources, perform the following steps
+
+1. Exit from all your VM sessions
+1. Run the [delete script](../delete-virtual-machines.sh) from your Mac terminal application
+
+    ```bash
+    ./delete-virtual-machines.sh
+    ````
+
+1. Clean stale DHCP leases. Multipass does not do this automatically and if you do not do it yourself you will eventually run out of IP addresses on the multipass VM network.
+
+    1. Edit the following
+
+        ```bash
+        sudo vi /var/db/dhcpd_leases
+        ```
+
+    1. Remove all blocks that look like this, specifically those with `name` like `controlplane`, `node` or `loadbalancer`
+        ```text
+        {
+            name=controlplane01
+            ip_address=192.168.64.4
+            hw_address=1,52:54:0:78:4d:ff
+            identifier=1,52:54:0:78:4d:ff
+            lease=0x65dc3134
+        }
+        ```
+
+    1. Save the file and exit
+
+Next: [Client tools](../../docs/03-client-tools.md)<br>
+Prev: [Prerequisites](./01-prerequisites.md)
diff --git a/apple-silicon/scripts/01-setup-hosts.sh b/apple-silicon/scripts/01-setup-hosts.sh
new file mode 100755
index 0000000..cdecbb7
--- /dev/null
+++ b/apple-silicon/scripts/01-setup-hosts.sh
@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+
+# Set hostfile entries
+sudo sed -i "/$(hostname)/d" /etc/hosts
+cat /tmp/hostentries | sudo tee -a /etc/hosts &> /dev/null
+
+# Export internal IP of primary NIC as an environment variable
+echo "PRIMARY_IP=$(ip route | grep default | awk '{ print $9 }')" | sudo tee -a /etc/environment > /dev/null
+
+# Export architecture as environment variable to download correct versions of software
+echo "ARCH=arm64"  | sudo tee -a /etc/environment > /dev/null
+
+# Enable password auth in sshd so we can use ssh-copy-id
+# Enable password auth in sshd so we can use ssh-copy-id
+sudo sed -i --regexp-extended 's/#?PasswordAuthentication (yes|no)/PasswordAuthentication yes/' /etc/ssh/sshd_config
+sudo sed -i --regexp-extended 's/#?Include \/etc\/ssh\/sshd_config.d\/\*.conf/#Include \/etc\/ssh\/sshd_config.d\/\*.conf/' /etc/ssh/sshd_config
+sudo sed -i 's/KbdInteractiveAuthentication no/KbdInteractiveAuthentication yes/' /etc/ssh/sshd_config
+sudo systemctl restart sshd
+
+if [ "$(hostname)" = "controlplane01" ]
+then
+    sh -c 'sudo apt update' &> /dev/null
+    sh -c 'sudo apt-get install -y sshpass' &> /dev/null
+ fi
+
+# Set password for ubuntu user (it's something random by default)
+echo 'ubuntu:ubuntu' | sudo chpasswd
\ No newline at end of file
diff --git a/apple-silicon/scripts/02-setup-kernel.sh b/apple-silicon/scripts/02-setup-kernel.sh
new file mode 100755
index 0000000..1b90028
--- /dev/null
+++ b/apple-silicon/scripts/02-setup-kernel.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+# Step 2 - Set up Operating System Prerequisites
+
+# Load required kernel modules
+sudo modprobe overlay
+sudo modprobe br_netfilter
+
+# Persist modules between restarts
+cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
+overlay
+br_netfilter
+EOF
+
+# Set required networking parameters
+cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
+net.bridge.bridge-nf-call-iptables  = 1
+net.bridge.bridge-nf-call-ip6tables = 1
+net.ipv4.ip_forward                 = 1
+EOF
+
+# Apply sysctl params without reboot
+sudo sysctl --system
diff --git a/apple-silicon/scripts/cert_verify.sh b/apple-silicon/scripts/cert_verify.sh
new file mode 100755
index 0000000..7e11994
--- /dev/null
+++ b/apple-silicon/scripts/cert_verify.sh
@@ -0,0 +1,578 @@
+#!/bin/bash
+set -e
+#set -x
+
+# Green & Red marking for Success and Failed messages
+SUCCESS='\033[0;32m'
+FAILED='\033[0;31;1m'
+NC='\033[0m'
+
+# IP addresses
+PRIMARY_IP=$(ip route | grep default | awk '{ print $9 }')
+CONTROL01=$(dig +short controlplane01)
+CONTROL02=$(dig +short controlplane02)
+NODE01=$(dig +short node01)
+NODE02=$(dig +short node02)
+LOADBALANCER=$(dig +short loadbalancer)
+LOCALHOST="127.0.0.1"
+
+# All Cert Location
+# ca certificate location
+CACERT=ca.crt
+CAKEY=ca.key
+
+# Kube controller manager certificate location
+KCMCERT=kube-controller-manager.crt
+KCMKEY=kube-controller-manager.key
+
+# Kube proxy certificate location
+KPCERT=kube-proxy.crt
+KPKEY=kube-proxy.key
+
+# Kube scheduler certificate location
+KSCERT=kube-scheduler.crt
+KSKEY=kube-scheduler.key
+
+# Kube api certificate location
+APICERT=kube-apiserver.crt
+APIKEY=kube-apiserver.key
+
+# ETCD certificate location
+ETCDCERT=etcd-server.crt
+ETCDKEY=etcd-server.key
+
+# Service account certificate location
+SACERT=service-account.crt
+SAKEY=service-account.key
+
+# All kubeconfig locations
+
+# kubeproxy.kubeconfig location
+KPKUBECONFIG=kube-proxy.kubeconfig
+
+# kube-controller-manager.kubeconfig location
+KCMKUBECONFIG=kube-controller-manager.kubeconfig
+
+# kube-scheduler.kubeconfig location
+KSKUBECONFIG=kube-scheduler.kubeconfig
+
+# admin.kubeconfig location
+ADMINKUBECONFIG=admin.kubeconfig
+
+# All systemd service locations
+
+# etcd systemd service
+SYSTEMD_ETCD_FILE=/etc/systemd/system/etcd.service
+
+# kub-api systemd service
+SYSTEMD_API_FILE=/etc/systemd/system/kube-apiserver.service
+
+# kube-controller-manager systemd service
+SYSTEMD_KCM_FILE=/etc/systemd/system/kube-controller-manager.service
+
+# kube-scheduler systemd service
+SYSTEMD_KS_FILE=/etc/systemd/system/kube-scheduler.service
+
+### WORKER NODES ###
+
+# Worker-1 cert details
+NODE01_CERT=/var/lib/kubelet/node01.crt
+NODE01_KEY=/var/lib/kubelet/node01.key
+
+# Worker-1 kubeconfig location
+NODE01_KUBECONFIG=/var/lib/kubelet/kubeconfig
+
+# Worker-1 kubelet config location
+NODE01_KUBELET=/var/lib/kubelet/kubelet-config.yaml
+
+# Systemd node01 kubelet location
+SYSTEMD_NODE01_KUBELET=/etc/systemd/system/kubelet.service
+
+# kube-proxy node01 location
+NODE01_KP_KUBECONFIG=/var/lib/kube-proxy/kubeconfig
+SYSTEMD_NODE01_KP=/etc/systemd/system/kube-proxy.service
+
+
+# Function - Master node #
+
+check_cert_and_key()
+{
+    local name=$1
+    local subject=$2
+    local issuer=$3
+    local nokey=
+    local cert="${CERT_LOCATION}/$1.crt"
+    local key="${CERT_LOCATION}/$1.key"
+
+    if [ -z $cert -o -z $key ]
+        then
+            printf "${FAILED}cert and/or key not present in ${CERT_LOCATION}. Perhaps you missed a copy step\n${NC}"
+            exit 1
+        elif [ -f $cert -a -f $key ]
+            then
+                printf "${NC}${name} cert and key found, verifying the authenticity\n"
+                CERT_SUBJECT=$(sudo openssl x509 -in $cert -text | grep "Subject: CN"| tr -d " ")
+                CERT_ISSUER=$(sudo openssl x509 -in $cert -text | grep "Issuer: CN"| tr -d " ")
+                CERT_MD5=$(sudo openssl x509 -noout -modulus -in $cert | openssl md5| awk '{print $2}')
+                KEY_MD5=$(sudo openssl rsa -noout -modulus -in $key | openssl md5| awk '{print $2}')
+                if [ $CERT_SUBJECT == "${subject}" ] && [ $CERT_ISSUER == "${issuer}" ] && [ $CERT_MD5 == $KEY_MD5 ]
+                    then
+                        printf "${SUCCESS}${name} cert and key are correct\n${NC}"
+                    else
+                        printf "${FAILED}Exiting...Found mismtach in the ${name} certificate and keys, More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/04-certificate-authority.md#certificate-authority\n${NC}"
+                        exit 1
+                fi
+            else
+                printf "${FAILED}${cert} / ${key} is missing. More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/04-certificate-authority.md#certificate-authority\n"
+                echo "These should be in /var/lib/kubernetes/pki (most certs), /etc/etcd (eccd server certs) or /var/lib/kubelet (kubelet certs)${NC}"
+                exit 1
+    fi
+}
+
+check_cert_only()
+{
+    local name=$1
+    local subject=$2
+    local issuer=$3
+    local cert="${CERT_LOCATION}/$1.crt"
+
+    # Worker-2 auto cert is a .pem
+    [ -f "${CERT_LOCATION}/$1.pem" ] && cert="${CERT_LOCATION}/$1.pem"
+
+    if [ -z $cert ]
+        then
+            printf "${FAILED}cert not present in ${CERT_LOCATION}. Perhaps you missed a copy step\n${NC}"
+            exit 1
+        elif [ -f $cert ]
+            then
+                printf "${NC}${name} cert found, verifying the authenticity\n"
+                CERT_SUBJECT=$(sudo openssl x509 -in $cert -text | grep "Subject: "| tr -d " ")
+                CERT_ISSUER=$(sudo openssl x509 -in $cert -text | grep "Issuer: CN"| tr -d " ")
+                CERT_MD5=$(sudo openssl x509 -noout -modulus -in $cert | openssl md5| awk '{print $2}')
+                if [ $CERT_SUBJECT == "${subject}" ] && [ $CERT_ISSUER == "${issuer}" ]
+                    then
+                        printf "${SUCCESS}${name} cert is correct\n${NC}"
+                    else
+                        printf "${FAILED}Exiting...Found mismtach in the ${name} certificate, More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/04-certificate-authority.md#certificate-authority\n${NC}"
+                        exit 1
+                fi
+            else
+                if [[ $cert == *kubelet-client-current* ]]
+                then
+                    printf "${FAILED}${cert} missing. This probably means that kubelet failed to start.${NC}\n"
+                    echo -e "Check logs with\n\n  sudo journalctl -u kubelet\n"
+                else
+                    printf "${FAILED}${cert} missing. More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/04-certificate-authority.md#certificate-authority\n${NC}"
+                    echo "These should be in ${CERT_LOCATION}"
+                fi
+                exit 1
+    fi
+}
+
+check_cert_adminkubeconfig()
+{
+    if [ -z $ADMINKUBECONFIG ]
+        then
+            printf "${FAILED}please specify admin kubeconfig location\n${NC}"
+            exit 1
+        elif [ -f $ADMINKUBECONFIG ]
+            then
+                printf "${NC}admin kubeconfig file found, verifying the authenticity\n"
+                ADMINKUBECONFIG_SUBJECT=$(cat $ADMINKUBECONFIG | grep "client-certificate-data:" | awk '{print $2}' | base64 --decode | sudo openssl x509 -text | grep "Subject: CN" | tr -d " ")
+                ADMINKUBECONFIG_ISSUER=$(cat $ADMINKUBECONFIG | grep "client-certificate-data:" | awk '{print $2}' | base64 --decode | sudo openssl x509 -text | grep "Issuer: CN" | tr -d " ")
+                ADMINKUBECONFIG_CERT_MD5=$(cat $ADMINKUBECONFIG | grep "client-certificate-data:" | awk '{print $2}' | base64 --decode | sudo openssl x509 -noout | openssl md5 | awk '{print $2}')
+                ADMINKUBECONFIG_KEY_MD5=$(cat $ADMINKUBECONFIG | grep "client-key-data" | awk '{print $2}' | base64 --decode | openssl rsa -noout | openssl md5 | awk '{print $2}')
+                ADMINKUBECONFIG_SERVER=$(cat $ADMINKUBECONFIG | grep "server:"| awk '{print $2}')
+                if [ $ADMINKUBECONFIG_SUBJECT == "Subject:CN=admin,O=system:masters" ] && [ $ADMINKUBECONFIG_ISSUER == "Issuer:CN=KUBERNETES-CA,O=Kubernetes" ] && [ $ADMINKUBECONFIG_CERT_MD5 == $ADMINKUBECONFIG_KEY_MD5 ] && [ $ADMINKUBECONFIG_SERVER == "https://127.0.0.1:6443" ]
+                    then
+                        printf "${SUCCESS}admin kubeconfig cert and key are correct\n"
+                    else
+                        printf "${FAILED}Exiting...Found mismtach in the admin kubeconfig certificate and keys, More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/05-kubernetes-configuration-files.md#the-admin-kubernetes-configuration-file\n"
+                        exit 1
+                fi
+            else
+                printf "${FAILED}admin kubeconfig file is missing. More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/05-kubernetes-configuration-files.md#the-admin-kubernetes-configuration-file\n"
+                exit 1
+    fi
+}
+
+
+get_kubeconfig_cert_path()
+{
+    local kubeconfig=$1
+    local cert_field=$2
+
+    sudo cat $kubeconfig | grep cert_field | awk '{print $2}'
+}
+
+check_kubeconfig()
+{
+    local name=$1
+    local location=$2
+    local apiserver=$3
+    local kubeconfig="${location}/${name}.kubeconfig"
+
+    echo "Checking $kubeconfig"
+    check_kubeconfig_exists $name $location
+    ca=$(get_kubeconfig_cert_path $kubeconfig "certificate-authority")
+    cert=$(get_kubeconfig_cert_path $kubeconfig "client-certificate")
+    key=$(get_kubeconfig_cert_path $kubeconfig "client-key")
+    server=$(sudo cat $kubeconfig | grep server | awk '{print $2}')
+
+    if [ -f "$ca"]
+    then
+        printf "${SUCCESS}Path to CA certificate is correct${NC}\n"
+    else
+        printf "${FAIL}CA certificate not found at ${ca}${NC}\n"
+        exit 1
+    fi
+
+    if [ -f "$cert"]
+    then
+        printf "${SUCCESS}Path to client certificate is correct${NC}\n"
+    else
+        printf "${FAIL}Client certificate not found at ${cert}${NC}\n"
+        exit 1
+    fi
+
+    if [ -f "$key"]
+    then
+        printf "${SUCCESS}Path to client key is correct${NC}\n"
+    else
+        printf "${FAIL}Client key not found at ${key}${NC}\n"
+        exit 1
+    fi
+
+    if [ "$apiserver" = "$server" ]
+    then
+        printf "${SUCCESS}Server URL is correct${NC}\n"
+    else
+        printf "${FAIL}Server URL ${server} is incorrect${NC}\n"
+        exit 1
+    fi
+}
+
+check_kubeconfig_exists() {
+    local name=$1
+    local location=$2
+    local kubeconfig="${location}/${name}.kubeconfig"
+
+    if [ -f "${kubeconfig}" ]
+    then
+        printf "${SUCCESS}${kubeconfig} found${NC}\n"
+    else
+        printf "${FAIL}${kubeconfig} not found!${NC}\n"
+        exit 1
+    fi
+}
+
+check_systemd_etcd()
+{
+    if [ -z $ETCDCERT ] && [ -z $ETCDKEY ]
+        then
+            printf "${FAILED}please specify ETCD cert and key location, Exiting....\n${NC}"
+            exit 1
+        elif [ -f $SYSTEMD_ETCD_FILE ]
+            then
+                printf "${NC}Systemd for ETCD service found, verifying the authenticity\n"
+
+                # Systemd cert and key file details
+                ETCD_CA_CERT=ca.crt
+                CERT_FILE=$(systemctl cat etcd.service | grep "\--cert-file"| awk '{print $1}'| cut -d "=" -f2)
+                KEY_FILE=$(systemctl cat etcd.service | grep "\--key-file"| awk '{print $1}' | cut -d "=" -f2)
+                PEER_CERT_FILE=$(systemctl cat etcd.service | grep "\--peer-cert-file"| awk '{print $1}'| cut -d "=" -f2)
+                PEER_KEY_FILE=$(systemctl cat etcd.service | grep "\--peer-key-file"| awk '{print $1}'| cut -d "=" -f2)
+                TRUSTED_CA_FILE=$(systemctl cat etcd.service | grep "\--trusted-ca-file"| awk '{print $1}'| cut -d "=" -f2)
+                PEER_TRUSTED_CA_FILE=$(systemctl cat etcd.service | grep "\--peer-trusted-ca-file"| awk '{print $1}'| cut -d "=" -f2)
+
+                # Systemd advertise , client and peer url's
+
+                IAP_URL=$(systemctl cat etcd.service | grep "\--initial-advertise-peer-urls"| awk '{print $2}')
+                LP_URL=$(systemctl cat etcd.service | grep "\--listen-peer-urls"| awk '{print $2}')
+                LC_URL=$(systemctl cat etcd.service | grep "\--listen-client-urls"| awk '{print $2}')
+                AC_URL=$(systemctl cat etcd.service | grep "\--advertise-client-urls"| awk '{print $2}')
+
+
+                   ETCD_CA_CERT=/etc/etcd/ca.crt
+                   ETCDCERT=/etc/etcd/etcd-server.crt
+                   ETCDKEY=/etc/etcd/etcd-server.key
+                if [ $CERT_FILE == $ETCDCERT ] && [ $KEY_FILE == $ETCDKEY ] && [ $PEER_CERT_FILE == $ETCDCERT ] && [ $PEER_KEY_FILE == $ETCDKEY ] && \
+                   [ $TRUSTED_CA_FILE == $ETCD_CA_CERT ] && [ $PEER_TRUSTED_CA_FILE = $ETCD_CA_CERT ]
+                    then
+                        printf "${SUCCESS}ETCD certificate, ca and key files are correct under systemd service\n${NC}"
+                    else
+                        printf "${FAILED}Exiting...Found mismtach in the ETCD certificate, ca and keys. More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/07-bootstrapping-etcd.md#configure-the-etcd-server\n${NC}"
+                        exit 1
+                fi
+
+                if [ $IAP_URL == "https://$PRIMARY_IP:2380" ] && [ $LP_URL == "https://$PRIMARY_IP:2380"  ] && [ $LC_URL == "https://$PRIMARY_IP:2379,https://127.0.0.1:2379" ] && \
+                   [ $AC_URL == "https://$PRIMARY_IP:2379" ]
+                    then
+                        printf "${SUCCESS}ETCD initial-advertise-peer-urls, listen-peer-urls, listen-client-urls, advertise-client-urls are correct\n${NC}"
+                    else
+                        printf "${FAILED}Exiting...Found mismtach in the ETCD initial-advertise-peer-urls / listen-peer-urls / listen-client-urls / advertise-client-urls. More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/07-bootstrapping-etcd.md#configure-the-etcd-server\n${NC}"
+                        exit 1
+                fi
+
+            else
+                printf "${FAILED}etcd-server.crt / etcd-server.key is missing. More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/07-bootstrapping-etcd.md#configure-the-etcd-server\n${NC}"
+                exit 1
+    fi
+}
+
+check_systemd_api()
+{
+    if [ -z $APICERT ] && [ -z $APIKEY ]
+        then
+            printf "${FAILED}please specify kube-api cert and key location, Exiting....\n${NC}"
+            exit 1
+        elif [ -f $SYSTEMD_API_FILE ]
+            then
+                printf "Systemd for kube-api service found, verifying the authenticity\n"
+
+                ADVERTISE_ADDRESS=$(systemctl cat kube-apiserver.service | grep "\--advertise-address" | awk '{print $1}' | cut -d "=" -f2)
+                CLIENT_CA_FILE=$(systemctl cat kube-apiserver.service | grep "\--client-ca-file" | awk '{print $1}' | cut -d "=" -f2)
+                ETCD_CA_FILE=$(systemctl cat kube-apiserver.service | grep "\--etcd-cafile" | awk '{print $1}' | cut -d "=" -f2)
+                ETCD_CERT_FILE=$(systemctl cat kube-apiserver.service | grep "\--etcd-certfile" | awk '{print $1}' | cut -d "=" -f2)
+                ETCD_KEY_FILE=$(systemctl cat kube-apiserver.service | grep "\--etcd-keyfile" | awk '{print $1}' | cut -d "=" -f2)
+                KUBELET_CERTIFICATE_AUTHORITY=$(systemctl cat kube-apiserver.service | grep "\--kubelet-certificate-authority" | awk '{print $1}' | cut -d "=" -f2)
+                KUBELET_CLIENT_CERTIFICATE=$(systemctl cat kube-apiserver.service | grep "\--kubelet-client-certificate" | awk '{print $1}' | cut -d "=" -f2)
+                KUBELET_CLIENT_KEY=$(systemctl cat kube-apiserver.service | grep "\--kubelet-client-key" | awk '{print $1}' | cut -d "=" -f2)
+                SERVICE_ACCOUNT_KEY_FILE=$(systemctl cat kube-apiserver.service | grep "\--service-account-key-file" | awk '{print $1}' | cut -d "=" -f2)
+                TLS_CERT_FILE=$(systemctl cat kube-apiserver.service | grep "\--tls-cert-file" | awk '{print $1}' | cut -d "=" -f2)
+                TLS_PRIVATE_KEY_FILE=$(systemctl cat kube-apiserver.service | grep "\--tls-private-key-file" | awk '{print $1}' | cut -d "=" -f2)
+
+                PKI=/var/lib/kubernetes/pki
+                CACERT="${PKI}/ca.crt"
+                APICERT="${PKI}/kube-apiserver.crt"
+                APIKEY="${PKI}/kube-apiserver.key"
+                SACERT="${PKI}/service-account.crt"
+                KCCERT="${PKI}/apiserver-kubelet-client.crt"
+                KCKEY="${PKI}/apiserver-kubelet-client.key"
+                if [ $ADVERTISE_ADDRESS == $PRIMARY_IP ] && [ $CLIENT_CA_FILE == $CACERT ] && [ $ETCD_CA_FILE == $CACERT ] && \
+                   [ $ETCD_CERT_FILE == "${PKI}/etcd-server.crt" ] && [ $ETCD_KEY_FILE == "${PKI}/etcd-server.key" ] && \
+                   [ $KUBELET_CERTIFICATE_AUTHORITY == $CACERT ] && [ $KUBELET_CLIENT_CERTIFICATE == $KCCERT ] && [ $KUBELET_CLIENT_KEY == $KCKEY ] && \
+                   [ $SERVICE_ACCOUNT_KEY_FILE == $SACERT ] && [ $TLS_CERT_FILE == $APICERT ] && [ $TLS_PRIVATE_KEY_FILE == $APIKEY ]
+                    then
+                        printf "${SUCCESS}kube-apiserver advertise-address/ client-ca-file/ etcd-cafile/ etcd-certfile/ etcd-keyfile/ kubelet-certificate-authority/ kubelet-client-certificate/ kubelet-client-key/ service-account-key-file/ tls-cert-file/ tls-private-key-file are correct\n${NC}"
+                    else
+                        printf "${FAILED}Exiting...Found mismtach in the kube-apiserver systemd file, check advertise-address/ client-ca-file/ etcd-cafile/ etcd-certfile/ etcd-keyfile/ kubelet-certificate-authority/ kubelet-client-certificate/ kubelet-client-key/ service-account-key-file/ tls-cert-file/ tls-private-key-file. More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/08-bootstrapping-kubernetes-controllers.md#configure-the-kubernetes-api-server\n${NC}"
+                        exit 1
+                fi
+            else
+                printf "${FAILED}kube-apiserver.crt / kube-apiserver.key is missing. More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/08-bootstrapping-kubernetes-controllers.md#configure-the-kubernetes-api-server\n${NC}"
+                exit 1
+    fi
+}
+
+check_systemd_kcm()
+{
+    KCMCERT=/var/lib/kubernetes/pki/kube-controller-manager.crt
+    KCMKEY=/var/lib/kubernetes/pki/kube-controller-manager.key
+    CACERT=/var/lib/kubernetes/pki/ca.crt
+    CAKEY=/var/lib/kubernetes/pki/ca.key
+    SAKEY=/var/lib/kubernetes/pki/service-account.key
+    KCMKUBECONFIG=/var/lib/kubernetes/kube-controller-manager.kubeconfig
+    if [ -z $KCMCERT ] && [ -z $KCMKEY ]
+        then
+            printf "${FAILED}please specify cert and key location\n${NC}"
+            exit 1
+        elif [ -f $SYSTEMD_KCM_FILE ]
+            then
+                printf "Systemd for kube-controller-manager service found, verifying the authenticity\n"
+                CLUSTER_SIGNING_CERT_FILE=$(systemctl cat kube-controller-manager.service | grep "\--cluster-signing-cert-file" | awk '{print $1}' | cut -d "=" -f2)
+                CLUSTER_SIGNING_KEY_FILE=$(systemctl cat kube-controller-manager.service | grep "\--cluster-signing-key-file" | awk '{print $1}' | cut -d "=" -f2)
+                KUBECONFIG=$(systemctl cat kube-controller-manager.service | grep "\--kubeconfig" | awk '{print $1}' | cut -d "=" -f2)
+                ROOT_CA_FILE=$(systemctl cat kube-controller-manager.service | grep "\--root-ca-file" | awk '{print $1}' | cut -d "=" -f2)
+                SERVICE_ACCOUNT_PRIVATE_KEY_FILE=$(systemctl cat kube-controller-manager.service | grep "\--service-account-private-key-file" | awk '{print $1}' | cut -d "=" -f2)
+
+                if [ $CLUSTER_SIGNING_CERT_FILE == $CACERT ] && [ $CLUSTER_SIGNING_KEY_FILE == $CAKEY ] && [ $KUBECONFIG == $KCMKUBECONFIG ] && \
+                   [ $ROOT_CA_FILE == $CACERT ] && [ $SERVICE_ACCOUNT_PRIVATE_KEY_FILE == $SAKEY ]
+                    then
+                        printf "${SUCCESS}kube-controller-manager cluster-signing-cert-file, cluster-signing-key-file, kubeconfig, root-ca-file, service-account-private-key-file  are correct\n${NC}"
+                    else
+                        printf "${FAILED}Exiting...Found mismtach in the kube-controller-manager cluster-signing-cert-file, cluster-signing-key-file, kubeconfig, root-ca-file, service-account-private-key-file. More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/08-bootstrapping-kubernetes-controllers.md#configure-the-kubernetes-controller-manager\n${NC}"
+                        exit 1
+                fi
+            else
+                printf "${FAILED}kube-controller-manager.crt / kube-controller-manager.key is missing. More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/08-bootstrapping-kubernetes-controllers.md#configure-the-kubernetes-controller-manager\n${NC}"
+                exit 1
+    fi
+}
+
+check_systemd_ks()
+{
+    KSCERT=/var/lib/kubernetes/pki/kube-scheduler.crt
+    KSKEY=/var/lib/kubernetes/pki/kube-scheduler.key
+    KSKUBECONFIG=/var/lib/kubernetes/kube-scheduler.kubeconfig
+
+    if [ -z $KSCERT ] && [ -z $KSKEY ]
+        then
+            printf "${FAILED}please specify cert and key location\n${NC}"
+            exit 1
+        elif [ -f $SYSTEMD_KS_FILE ]
+            then
+                printf "Systemd for kube-scheduler service found, verifying the authenticity\n"
+
+                KUBECONFIG=$(systemctl cat kube-scheduler.service | grep "\--kubeconfig"| awk '{print $1}'| cut -d "=" -f2)
+
+                if [ $KUBECONFIG == $KSKUBECONFIG ]
+                    then
+                        printf "${SUCCESS}kube-scheduler --kubeconfig is correct\n${NC}"
+                    else
+                        printf "${FAILED}Exiting...Found mismtach in the kube-scheduler --kubeconfig. More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/08-bootstrapping-kubernetes-controllers.md#configure-the-kubernetes-scheduler\n${NC}"
+                        exit 1
+                fi
+            else
+                printf "${FAILED}kube-scheduler.crt / kube-scheduler.key is missing. More details: https://github.com/mmumshad/kubernetes-the-hard-way/blob/master/docs/08-bootstrapping-kubernetes-controllers.md#configure-the-kubernetes-scheduler\n${NC}"
+                exit 1
+    fi
+}
+
+# END OF Function - Master node #
+
+if [ ! -z "$1" ]
+then
+    choice=$1
+else
+    echo "This script will validate the certificates in master as well as node01 nodes. Before proceeding, make sure you ssh into the respective node [ Master or Worker-1 ] for certificate validation"
+    while true
+    do
+        echo
+        echo "  1. Verify certificates on Master Nodes after step 4"
+        echo "  2. Verify kubeconfigs on Master Nodes after step 5"
+        echo "  3. Verify kubeconfigs and PKI on Master Nodes after step 8"
+        echo "  4. Verify kubeconfigs and PKI on node01 Node after step 10"
+        echo "  5. Verify kubeconfigs and PKI on node02 Node after step 11"
+        echo
+        echo -n "Please select one of the above options: "
+        read choice
+
+        [ -z "$choice" ] && continue
+        [ $choice -gt 0 -a $choice -lt 6 ] && break
+    done
+fi
+
+HOST=$(hostname -s)
+
+CERT_ISSUER="Issuer:CN=KUBERNETES-CA,O=Kubernetes"
+SUBJ_CA="Subject:CN=KUBERNETES-CA,O=Kubernetes"
+SUBJ_ADMIN="Subject:CN=admin,O=system:masters"
+SUBJ_KCM="Subject:CN=system:kube-controller-manager,O=system:kube-controller-manager"
+SUBJ_KP="Subject:CN=system:kube-proxy,O=system:node-proxier"
+SUBJ_KS="Subject:CN=system:kube-scheduler,O=system:kube-scheduler"
+SUBJ_API="Subject:CN=kube-apiserver,O=Kubernetes"
+SUBJ_SA="Subject:CN=service-accounts,O=Kubernetes"
+SUBJ_ETCD="Subject:CN=etcd-server,O=Kubernetes"
+SUBJ_APIKC="Subject:CN=kube-apiserver-kubelet-client,O=system:masters"
+
+case $choice in
+
+  1)
+    if ! [ "${HOST}" = "controlplane01" -o "${HOST}" = "controlplane02" ]
+    then
+        printf "${FAILED}Must run on controlplane01 or controlplane02${NC}\n"
+        exit 1
+    fi
+
+    echo -e "The selected option is $choice, proceeding the certificate verification of Master node"
+
+    CERT_LOCATION=$HOME
+    check_cert_and_key "ca" $SUBJ_CA $CERT_ISSUER
+    check_cert_and_key "kube-apiserver" $SUBJ_API $CERT_ISSUER
+    check_cert_and_key "kube-controller-manager" $SUBJ_KCM $CERT_ISSUER
+    check_cert_and_key "kube-scheduler" $SUBJ_KS $CERT_ISSUER
+    check_cert_and_key "service-account" $SUBJ_SA $CERT_ISSUER
+    check_cert_and_key "apiserver-kubelet-client" $SUBJ_APIKC $CERT_ISSUER
+    check_cert_and_key "etcd-server" $SUBJ_ETCD $CERT_ISSUER
+
+    if [ "${HOST}" = "controlplane01" ]
+    then
+        check_cert_and_key "admin" $SUBJ_ADMIN $CERT_ISSUER
+        check_cert_and_key "kube-proxy" $SUBJ_KP $CERT_ISSUER
+    fi
+    ;;
+
+  2)
+    if ! [ "${HOST}" = "controlplane01" -o "${HOST}" = "controlplane02" ]
+    then
+        printf "${FAILED}Must run on controlplane01 or controlplane02${NC}\n"
+        exit 1
+    fi
+
+    check_cert_adminkubeconfig
+    check_kubeconfig_exists "kube-controller-manager" $HOME
+    check_kubeconfig_exists "kube-scheduler" $HOME
+
+    if [ "${HOST}" = "controlplane01" ]
+    then
+        check_kubeconfig_exists "kube-proxy" $HOME
+    fi
+    ;;
+
+  3)
+    if ! [ "${HOST}" = "controlplane01" -o "${HOST}" = "controlplane02" ]
+    then
+        printf "${FAILED}Must run on controlplane01 or controlplane02${NC}\n"
+        exit 1
+    fi
+
+    CERT_LOCATION=/etc/etcd
+    check_cert_only "ca" $SUBJ_CA $CERT_ISSUER
+    check_cert_and_key "etcd-server" $SUBJ_ETCD $CERT_ISSUER
+
+    CERT_LOCATION=/var/lib/kubernetes/pki
+    check_cert_and_key "ca" $SUBJ_CA $CERT_ISSUER
+    check_cert_and_key "kube-apiserver" $SUBJ_API $CERT_ISSUER
+    check_cert_and_key "kube-controller-manager" $SUBJ_KCM $CERT_ISSUER
+    check_cert_and_key "kube-scheduler" $SUBJ_KS $CERT_ISSUER
+    check_cert_and_key "service-account" $SUBJ_SA $CERT_ISSUER
+    check_cert_and_key "apiserver-kubelet-client" $SUBJ_APIKC $CERT_ISSUER
+    check_cert_and_key "etcd-server" $SUBJ_ETCD $CERT_ISSUER
+
+    check_kubeconfig "kube-controller-manager" "/var/lib/kubernetes" "https://127.0.0.1:6443"
+    check_kubeconfig "kube-scheduler" "/var/lib/kubernetes" "https://127.0.0.1:6443"
+
+    check_systemd_api
+    check_systemd_etcd
+    check_systemd_kcm
+    check_systemd_ks
+    ;;
+
+  4)
+    if ! [ "${HOST}" = "node01" ]
+    then
+        printf "${FAILED}Must run on node01${NC}\n"
+        exit 1
+    fi
+
+    CERT_LOCATION=/var/lib/kubernetes/pki
+    check_cert_only "ca" $SUBJ_CA $CERT_ISSUER
+    check_cert_and_key "kube-proxy" $SUBJ_KP $CERT_ISSUER
+    check_cert_and_key "node01" "Subject:CN=system:node:node01,O=system:nodes" $CERT_ISSUER
+    check_kubeconfig "kube-proxy" "/var/lib/kube-proxy" "https://${LOADBALANCER}:6443"
+    check_kubeconfig "kubelet" "/var/lib/kubelet" "https://${LOADBALANCER}:6443"
+    ;;
+
+  5)
+    if ! [ "${HOST}" = "node02" ]
+    then
+        printf "${FAILED}Must run on node02${NC}\n"
+        exit 1
+    fi
+
+    CERT_LOCATION=/var/lib/kubernetes/pki
+    check_cert_only "ca" $SUBJ_CA $CERT_ISSUER
+    check_cert_and_key "kube-proxy" $SUBJ_KP $CERT_ISSUER
+
+    CERT_LOCATION=/var/lib/kubelet/pki
+    check_cert_only "kubelet-client-current" "Subject:O=system:nodes,CN=system:node:node02" $CERT_ISSUER
+    check_kubeconfig "kube-proxy" "/var/lib/kube-proxy" "https://${LOADBALANCER}:6443"
+    ;;
+
+
+  *)
+    printf "${FAILED}Exiting.... Please select the valid option either 1 or 2\n${NC}"
+    exit 1
+    ;;
+esac
diff --git a/docs/03-client-tools.md b/docs/03-client-tools.md
index 1f4936a..3884d1f 100644
--- a/docs/03-client-tools.md
+++ b/docs/03-client-tools.md
@@ -1,16 +1,16 @@
 # Installing the Client Tools
 
-First identify a system from where you will perform administrative tasks, such as creating certificates, `kubeconfig` files and distributing them to the different VMs.
+From this point on, the steps are *exactly* the same for VirtualBox and Apple Silicon as it is now about configuring Kubernetes itself on the Linux hosts which you have now provisioned.
 
-If you are on a Linux laptop, then your laptop could be this system. In my case I chose the `master-1` node to perform administrative tasks. Whichever system you chose make sure that system is able to access all the provisioned VMs through SSH to copy files over.
+Begin by logging into `controlplane01` using `vagrant ssh` for VirtualBox, or `multipass shell` for Apple Silicon.
 
 ## Access all VMs
 
-Here we create an SSH key pair for the `vagrant` user who we are logged in as. We will copy the public key of this pair to the other master and both workers to permit us to use password-less SSH (and SCP) go get from `master-1` to these other nodes in the context of the `vagrant` user which exists on all nodes.
+Here we create an SSH key pair for the user who we are logged in as (this is `vagrant` on VirtualBox, `ubuntu` on Apple Silicon). We will copy the public key of this pair to the other controlplane and both workers to permit us to use password-less SSH (and SCP) go get from `controlplane01` to these other nodes in the context of the user which exists on all nodes.
 
-Generate SSH key pair on `master-1` node:
+Generate SSH key pair on `controlplane01` node:
 
-[//]: # (host:master-1)
+[//]: # (host:controlplane01)
 
 ```bash
 ssh-keygen
@@ -18,32 +18,52 @@ ssh-keygen
 
 Leave all settings to default by pressing `ENTER` at any prompt.
 
-Add this key to the local `authorized_keys` (`master-1`) as in some commands we `scp` to ourself.
+Add this key to the local `authorized_keys` (`controlplane01`) as in some commands we `scp` to ourself.
 
 ```bash
 cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys
 ```
 
-Copy the key to the other hosts. For this step please enter `vagrant` where a password is requested.
+Copy the key to the other hosts. You will be asked to enter a password for each of the `ssh-copy-id` commands. The password is:
+* VirtualBox - `vagrant`
+* Apple Silicon: `ubuntu`
 
 The option `-o StrictHostKeyChecking=no` tells it not to ask if you want to connect to a previously unknown host. Not best practice in the real world, but speeds things up here.
 
+`$(whoami)` selects the appropriate user name to connect to the remote VMs. On VirtualBox this evaluates to `vagrant`; on Apple Silicon it is `ubuntu`.
+
 ```bash
-ssh-copy-id -o StrictHostKeyChecking=no vagrant@master-2
-ssh-copy-id -o StrictHostKeyChecking=no vagrant@loadbalancer
-ssh-copy-id -o StrictHostKeyChecking=no vagrant@worker-1
-ssh-copy-id -o StrictHostKeyChecking=no vagrant@worker-2
+ssh-copy-id -o StrictHostKeyChecking=no $(whoami)@controlplane02
+ssh-copy-id -o StrictHostKeyChecking=no $(whoami)@loadbalancer
+ssh-copy-id -o StrictHostKeyChecking=no $(whoami)@node01
+ssh-copy-id -o StrictHostKeyChecking=no $(whoami)@node02
 ```
 
+
+
 For each host, the output should be similar to this. If it is not, then you may have entered an incorrect password. Retry the step.
 
 ```
 Number of key(s) added: 1
-
-Now try logging into the machine, with:   "ssh 'vagrant@master-2'"
-and check to make sure that only the key(s) you wanted were added.
 ```
 
+Verify connection
+
+```
+ssh controlplane01
+exit
+
+ssh controlplane02
+exit
+
+ssh node01
+exit
+
+ssh node02
+exit
+```
+
+
 ## Install kubectl
 
 The [kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl) command line utility is used to interact with the Kubernetes API Server. Download and install `kubectl` from the official release binaries:
@@ -52,10 +72,12 @@ Reference: [https://kubernetes.io/docs/tasks/tools/install-kubectl/](https://kub
 
 We will be using `kubectl` early on to generate `kubeconfig` files for the controlplane components.
 
+The environment variable `ARCH` is pre-set during VM deployment according to whether using VirtualBox (`amd64`) or Apple Silicon (`arm64`) to ensure the correct version of this and later software is downloaded for your machine architecture.
+
 ### Linux
 
 ```bash
-curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
+curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/${ARCH}/kubectl"
 chmod +x kubectl
 sudo mv kubectl /usr/local/bin/
 ```
@@ -65,29 +87,15 @@ sudo mv kubectl /usr/local/bin/
 Verify `kubectl` is installed:
 
 ```
-kubectl version -o yaml
+kubectl version --client
 ```
 
 output will be similar to this, although versions may be newer:
 
 ```
-kubectl version -o yaml
-clientVersion:
-  buildDate: "2023-11-15T16:58:22Z"
-  compiler: gc
-  gitCommit: bae2c62678db2b5053817bc97181fcc2e8388103
-  gitTreeState: clean
-  gitVersion: v1.28.4
-  goVersion: go1.20.11
-  major: "1"
-  minor: "28"
-  platform: linux/amd64
-kustomizeVersion: v5.0.4-0.20230601165947-6ce0bf390ce3
-
-The connection to the server localhost:8080 was refused - did you specify the right host or port?
+Client Version: v1.29.0
+Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3
 ```
 
-Don't worry about the error at the end as it is expected. We have not set anything up yet!
-
-Prev: [Compute Resources](02-compute-resources.md)<br>
-Next: [Certificate Authority](04-certificate-authority.md)
+Next: [Certificate Authority](04-certificate-authority.md)<br>
+Prev: Compute Resources ([VirtualBox](../VirtualBox/docs/02-compute-resources.md)), ([Apple Silicon](../apple-silicon/docs/02-compute-resources.md))
\ No newline at end of file
diff --git a/docs/04-certificate-authority.md b/docs/04-certificate-authority.md
index 2a761f9..0c6494a 100644
--- a/docs/04-certificate-authority.md
+++ b/docs/04-certificate-authority.md
@@ -4,23 +4,23 @@ In this lab you will provision a [PKI Infrastructure](https://en.wikipedia.org/w
 
 # Where to do these?
 
-You can do these on any machine with `openssl` on it. But you should be able to copy the generated files to the provisioned VMs. Or just do these from one of the master nodes.
+You can do these on any machine with `openssl` on it. But you should be able to copy the generated files to the provisioned VMs. Or just do these from one of the controlplane nodes.
 
-In our case we do the following steps on the `master-1` node, as we have set it up to be the administrative client.
+In our case we do the following steps on the `controlplane01` node, as we have set it up to be the administrative client.
 
-[//]: # (host:master-1)
+[//]: # (host:controlplane01)
 
 ## Certificate Authority
 
 In this section you will provision a Certificate Authority that can be used to generate additional TLS certificates.
 
-Query IPs of hosts we will insert as certificate subject alternative names (SANs), which will be read from `/etc/hosts`. Note that doing this allows us to change the VM network range more easily from the default for these labs which is `192.168.56.0/24`
+Query IPs of hosts we will insert as certificate subject alternative names (SANs), which will be read from `/etc/hosts`.
 
 Set up environment variables. Run the following:
 
 ```bash
-MASTER_1=$(dig +short master-1)
-MASTER_2=$(dig +short master-2)
+CONTROL01=$(dig +short controlplane01)
+CONTROL02=$(dig +short controlplane02)
 LOADBALANCER=$(dig +short loadbalancer)
 ```
 
@@ -34,14 +34,14 @@ API_SERVICE=$(echo $SERVICE_CIDR | awk 'BEGIN {FS="."} ; { printf("%s.%s.%s.1",
 Check that the environment variables are set. Run the following:
 
 ```bash
-echo $MASTER_1
-echo $MASTER_2
+echo $CONTROL01
+echo $CONTROL02
 echo $LOADBALANCER
 echo $SERVICE_CIDR
 echo $API_SERVICE
 ```
 
-The output should look like this. If you changed any of the defaults mentioned in the [prerequisites](./01-prerequisites.md) page, then addresses may differ.
+The output should look like this with one IP address per line. If you changed any of the defaults mentioned in the [prerequisites](./01-prerequisites.md) page, then addresses may differ. The first 3 addresses will also be different for Apple Silicon on Multipass (likely 192.168.64.x).
 
 ```
 192.168.56.11
@@ -51,7 +51,7 @@ The output should look like this. If you changed any of the defaults mentioned i
 10.96.0.1
 ```
 
-Create a CA certificate, then generate a Certificate Signing Request and use it to create a private key:
+Create a CA certificate by first creating a private key, then using it to create a certificate signing request, then self-signing the new certificate with our key.
 
 ```bash
 {
@@ -78,12 +78,14 @@ Reference : https://kubernetes.io/docs/tasks/administer-cluster/certificates/#op
 The `ca.crt` is the Kubernetes Certificate Authority certificate and `ca.key` is the Kubernetes Certificate Authority private key.
 You will use the `ca.crt` file in many places, so it will be copied to many places.
 
-The `ca.key` is used by the CA for signing certificates. And it should be securely stored. In this case our master node(s) is our CA server as well, so we will store it on master node(s). There is no need to copy this file elsewhere.
+The `ca.key` is used by the CA for signing certificates. And it should be securely stored. In this case our controlplane node(s) is our CA server as well, so we will store it on controlplane node(s). There is no need to copy this file elsewhere.
 
 ## Client and Server Certificates
 
 In this section you will generate client and server certificates for each Kubernetes component and a client certificate for the Kubernetes `admin` user.
 
+To better understand the role of client certificates with respect to users and groups, see [this informative video](https://youtu.be/I-iVrIWfMl8). Note that all the kubenetes services below are themselves cluster users.
+
 ### The Admin Client Certificate
 
 Generate the `admin` client certificate and private key:
@@ -191,7 +193,7 @@ kube-scheduler.crt
 
 ### The Kubernetes API Server Certificate
 
-The kube-apiserver certificate requires all names that various components may reach it to be part of the alternate names. These include the different DNS names, and IP addresses such as the master servers IP address, the load balancers IP address, the kube-api service IP address etc.
+The kube-apiserver certificate requires all names that various components may reach it to be part of the alternate names. These include the different DNS names, and IP addresses such as the controlplane servers IP address, the load balancers IP address, the kube-api service IP address etc. These provide an *identity* for the certificate, which is key in the SSL process for a server to prove who it is.
 
 The `openssl` command cannot take alternate names as command line parameter. So we must create a `conf` file for it:
 
@@ -213,8 +215,8 @@ DNS.3 = kubernetes.default.svc
 DNS.4 = kubernetes.default.svc.cluster
 DNS.5 = kubernetes.default.svc.cluster.local
 IP.1 = ${API_SERVICE}
-IP.2 = ${MASTER_1}
-IP.3 = ${MASTER_2}
+IP.2 = ${CONTROL01}
+IP.3 = ${CONTROL02}
 IP.4 = ${LOADBALANCER}
 IP.5 = 127.0.0.1
 EOF
@@ -241,7 +243,7 @@ kube-apiserver.crt
 kube-apiserver.key
 ```
 
-# The Kubelet Client Certificate
+### The API Server Kubelet Client Certificate
 
 This certificate is for the API server to authenticate with the kubelets when it requests information from them
 
@@ -282,7 +284,7 @@ apiserver-kubelet-client.key
 
 ### The ETCD Server Certificate
 
-Similarly ETCD server certificate must have addresses of all the servers part of the ETCD cluster
+Similarly ETCD server certificate must have addresses of all the servers part of the ETCD cluster. Similarly, this is a server certificate, which is again all about proving identity.
 
 The `openssl` command cannot take alternate names as command line parameter. So we must create a `conf` file for it:
 
@@ -297,8 +299,8 @@ basicConstraints = CA:FALSE
 keyUsage = nonRepudiation, digitalSignature, keyEncipherment
 subjectAltName = @alt_names
 [alt_names]
-IP.1 = ${MASTER_1}
-IP.2 = ${MASTER_2}
+IP.1 = ${CONTROL01}
+IP.2 = ${CONTROL02}
 IP.3 = 127.0.0.1
 EOF
 ```
@@ -326,7 +328,7 @@ etcd-server.crt
 
 ## The Service Account Key Pair
 
-The Kubernetes Controller Manager leverages a key pair to generate and sign service account tokens as describe in the [managing service accounts](https://kubernetes.io/docs/admin/service-accounts-admin/) documentation.
+The Kubernetes Controller Manager leverages a key pair to generate and sign service account tokens as described in the [managing service accounts](https://kubernetes.io/docs/reference/access-authn-authz/service-accounts-admin/) documentation.
 
 Generate the `service-account` certificate and private key:
 
@@ -355,7 +357,7 @@ Run the following, and select option 1 to check all required certificates were g
 
 [//]: # (command:./cert_verify.sh 1)
 
-```bash
+```
 ./cert_verify.sh
 ```
 
@@ -373,7 +375,7 @@ Copy the appropriate certificates and private keys to each instance:
 
 ```bash
 {
-for instance in master-1 master-2; do
+for instance in controlplane01 controlplane02; do
   scp -o StrictHostKeyChecking=no ca.crt ca.key kube-apiserver.key kube-apiserver.crt \
     apiserver-kubelet-client.crt apiserver-kubelet-client.key \
     service-account.key service-account.crt \
@@ -383,21 +385,21 @@ for instance in master-1 master-2; do
     ${instance}:~/
 done
 
-for instance in worker-1 worker-2 ; do
+for instance in node01 node02 ; do
   scp ca.crt kube-proxy.crt kube-proxy.key ${instance}:~/
 done
 }
 ```
 
-## Optional - Check Certificates on master-2
+## Optional - Check Certificates on controlplane02
 
-At `master-2` node run the following, selecting option 1
+At `controlplane02` node run the following, selecting option 1
 
-[//]: # (commandssh master-2 './cert_verify.sh 1')
+[//]: # (commandssh controlplane02 './cert_verify.sh 1')
 
 ```
 ./cert_verify.sh
 ```
 
-Prev: [Client tools](03-client-tools.md)<br>
-Next: [Generating Kubernetes Configuration Files for Authentication](05-kubernetes-configuration-files.md)
+Next: [Generating Kubernetes Configuration Files for Authentication](05-kubernetes-configuration-files.md)<br>
+Prev: [Client tools](03-client-tools.md)
diff --git a/docs/05-kubernetes-configuration-files.md b/docs/05-kubernetes-configuration-files.md
index 46097a3..0de150c 100644
--- a/docs/05-kubernetes-configuration-files.md
+++ b/docs/05-kubernetes-configuration-files.md
@@ -14,7 +14,7 @@ In this section you will generate kubeconfig files for the `controller manager`,
 
 Each kubeconfig requires a Kubernetes API Server to connect to. To support high availability the IP address assigned to the load balancer will be used, so let's first get the address of the loadbalancer into a shell variable such that we can use it in the kubeconfigs for services that run on worker nodes. The controller manager and scheduler need to talk to the local API server, hence they use the localhost address.
 
-[//]: # (host:master-1)
+[//]: # (host:controlplane01)
 
 ```bash
 LOADBALANCER=$(dig +short loadbalancer)
@@ -161,7 +161,7 @@ Reference docs for kubeconfig [here](https://kubernetes.io/docs/tasks/access-app
 Copy the appropriate `kube-proxy` kubeconfig files to each worker instance:
 
 ```bash
-for instance in worker-1 worker-2; do
+for instance in node01 node02; do
   scp kube-proxy.kubeconfig ${instance}:~/
 done
 ```
@@ -169,22 +169,22 @@ done
 Copy the appropriate `admin.kubeconfig`, `kube-controller-manager` and `kube-scheduler` kubeconfig files to each controller instance:
 
 ```bash
-for instance in master-1 master-2; do
+for instance in controlplane01 controlplane02; do
   scp admin.kubeconfig kube-controller-manager.kubeconfig kube-scheduler.kubeconfig ${instance}:~/
 done
 ```
 
 ## Optional - Check kubeconfigs
 
-At `master-1` and `master-2` nodes, run the following, selecting option 2
+At `controlplane01` and `controlplane02` nodes, run the following, selecting option 2
 
 [//]: # (command./cert_verify.sh 2)
-[//]: # (command:ssh master-2 './cert_verify.sh 2')
+[//]: # (command:ssh controlplane02 './cert_verify.sh 2')
 
 ```
 ./cert_verify.sh
 ```
 
 
-Prev: [Certificate Authority](04-certificate-authority.md)<br>
-Next: [Generating the Data Encryption Config and Key](06-data-encryption-keys.md)
+Next: [Generating the Data Encryption Config and Key](./06-data-encryption-keys.md)<br>
+Prev: [Certificate Authority](./04-certificate-authority.md)
diff --git a/docs/06-data-encryption-keys.md b/docs/06-data-encryption-keys.md
index be5ab96..9aaf93e 100644
--- a/docs/06-data-encryption-keys.md
+++ b/docs/06-data-encryption-keys.md
@@ -6,9 +6,9 @@ In this lab you will generate an encryption key and an [encryption config](https
 
 ## The Encryption Key
 
-[//]: # (host:master-1)
+[//]: # (host:controlplane01)
 
-Generate an encryption key:
+Generate an encryption key. This is simply 32 bytes of random data, which we base64 encode:
 
 ```bash
 ENCRYPTION_KEY=$(head -c 32 /dev/urandom | base64)
@@ -37,7 +37,7 @@ EOF
 Copy the `encryption-config.yaml` encryption config file to each controller instance:
 
 ```bash
-for instance in master-1 master-2; do
+for instance in controlplane01 controlplane02; do
   scp encryption-config.yaml ${instance}:~/
 done
 ```
@@ -45,7 +45,7 @@ done
 Move `encryption-config.yaml` encryption config file to appropriate directory.
 
 ```bash
-for instance in master-1 master-2; do
+for instance in controlplane01 controlplane02; do
   ssh ${instance} sudo mkdir -p /var/lib/kubernetes/
   ssh ${instance} sudo mv encryption-config.yaml /var/lib/kubernetes/
 done
@@ -53,5 +53,5 @@ done
 
 Reference: https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#encrypting-your-data
 
-Prev: [Generating Kubernetes Configuration Files for Authentication](05-kubernetes-configuration-files.md)<br>
-Next: [Bootstrapping the etcd Cluster](07-bootstrapping-etcd.md)
+Next: [Bootstrapping the etcd Cluster](07-bootstrapping-etcd.md)<br>
+Prev: [Generating Kubernetes Configuration Files for Authentication](05-kubernetes-configuration-files.md)
diff --git a/docs/07-bootstrapping-etcd.md b/docs/07-bootstrapping-etcd.md
index 2698077..fb2ca04 100644
--- a/docs/07-bootstrapping-etcd.md
+++ b/docs/07-bootstrapping-etcd.md
@@ -2,9 +2,11 @@
 
 Kubernetes components are stateless and store cluster state in [etcd](https://etcd.io/). In this lab you will bootstrap a two node etcd cluster and configure it for high availability and secure remote access.
 
+If you examine the command line arguments passed to etcd in its unit file, you should recognise some of the certificates and keys created in earlier sections of this course.
+
 ## Prerequisites
 
-The commands in this lab must be run on each controller instance: `master-1`, and `master-2`. Login to each of these using an SSH terminal.
+The commands in this lab must be run on each controller instance: `controlplane01`, and `controlplane02`. Login to each of these using an SSH terminal.
 
 ### Running commands in parallel with tmux
 
@@ -16,21 +18,21 @@ The commands in this lab must be run on each controller instance: `master-1`, an
 
 Download the official etcd release binaries from the [etcd](https://github.com/etcd-io/etcd) GitHub project:
 
-[//]: # (host:master-1-master2)
+[//]: # (host:controlplane01-controlplane02)
 
 
 ```bash
 ETCD_VERSION="v3.5.9"
 wget -q --show-progress --https-only --timestamping \
-  "https://github.com/coreos/etcd/releases/download/${ETCD_VERSION}/etcd-${ETCD_VERSION}-linux-amd64.tar.gz"
+  "https://github.com/coreos/etcd/releases/download/${ETCD_VERSION}/etcd-${ETCD_VERSION}-linux-${ARCH}.tar.gz"
 ```
 
 Extract and install the `etcd` server and the `etcdctl` command line utility:
 
 ```bash
 {
-  tar -xvf etcd-${ETCD_VERSION}-linux-amd64.tar.gz
-  sudo mv etcd-${ETCD_VERSION}-linux-amd64/etcd* /usr/local/bin/
+  tar -xvf etcd-${ETCD_VERSION}-linux-${ARCH}.tar.gz
+  sudo mv etcd-${ETCD_VERSION}-linux-${ARCH}/etcd* /usr/local/bin/
 }
 ```
 
@@ -52,12 +54,11 @@ Copy and secure certificates. Note that we place `ca.crt` in our main PKI direct
 ```
 
 The instance internal IP address will be used to serve client requests and communicate with etcd cluster peers.<br>
-Retrieve the internal IP address of the master(etcd) nodes, and also that of master-1 and master-2 for the etcd cluster member list
+Retrieve the internal IP address of the controlplane(etcd) nodes, and also that of controlplane01 and controlplane02 for the etcd cluster member list
 
 ```bash
-INTERNAL_IP=$(ip addr show enp0s8 | grep "inet " | awk '{print $2}' | cut -d / -f 1)
-MASTER_1=$(dig +short master-1)
-MASTER_2=$(dig +short master-2)
+CONTROL01=$(dig +short controlplane01)
+CONTROL02=$(dig +short controlplane02)
 ```
 
 Each etcd member must have a unique name within an etcd cluster. Set the etcd name to match the hostname of the current compute instance:
@@ -85,12 +86,12 @@ ExecStart=/usr/local/bin/etcd \\
   --peer-trusted-ca-file=/etc/etcd/ca.crt \\
   --peer-client-cert-auth \\
   --client-cert-auth \\
-  --initial-advertise-peer-urls https://${INTERNAL_IP}:2380 \\
-  --listen-peer-urls https://${INTERNAL_IP}:2380 \\
-  --listen-client-urls https://${INTERNAL_IP}:2379,https://127.0.0.1:2379 \\
-  --advertise-client-urls https://${INTERNAL_IP}:2379 \\
+  --initial-advertise-peer-urls https://${PRIMARY_IP}:2380 \\
+  --listen-peer-urls https://${PRIMARY_IP}:2380 \\
+  --listen-client-urls https://${PRIMARY_IP}:2379,https://127.0.0.1:2379 \\
+  --advertise-client-urls https://${PRIMARY_IP}:2379 \\
   --initial-cluster-token etcd-cluster-0 \\
-  --initial-cluster master-1=https://${MASTER_1}:2380,master-2=https://${MASTER_2}:2380 \\
+  --initial-cluster controlplane01=https://${CONTROL01}:2380,controlplane02=https://${CONTROL02}:2380 \\
   --initial-cluster-state new \\
   --data-dir=/var/lib/etcd
 Restart=on-failure
@@ -111,13 +112,15 @@ EOF
 }
 ```
 
-> Remember to run the above commands on each controller node: `master-1`, and `master-2`.
+> Remember to run the above commands on each controller node: `controlplane01`, and `controlplane02`.
 
 ## Verification
 
 [//]: # (sleep:5)
 
-List the etcd cluster members:
+List the etcd cluster members.
+
+After running the abovre commands on both controlplane nodes, run the following on either or both of `controlplane01` and `controlplane02`
 
 ```bash
 sudo ETCDCTL_API=3 etcdctl member list \
@@ -127,14 +130,14 @@ sudo ETCDCTL_API=3 etcdctl member list \
   --key=/etc/etcd/etcd-server.key
 ```
 
-> output
+Output will be similar to this
 
 ```
-45bf9ccad8d8900a, started, master-2, https://192.168.56.12:2380, https://192.168.56.12:2379
-54a5796a6803f252, started, master-1, https://192.168.56.11:2380, https://192.168.56.11:2379
+45bf9ccad8d8900a, started, controlplane02, https://192.168.56.12:2380, https://192.168.56.12:2379
+54a5796a6803f252, started, controlplane01, https://192.168.56.11:2380, https://192.168.56.11:2379
 ```
 
 Reference: https://kubernetes.io/docs/tasks/administer-cluster/configure-upgrade-etcd/#starting-etcd-clusters
 
-Prev: [Generating the Data Encryption Config and Key](06-data-encryption-keys.md)]<br>
-Next: [Bootstrapping the Kubernetes Control Plane](08-bootstrapping-kubernetes-controllers.md)
+Next: [Bootstrapping the Kubernetes Control Plane](./08-bootstrapping-kubernetes-controllers.md)<br>
+Prev: [Generating the Data Encryption Config and Key](./06-data-encryption-keys.md)
diff --git a/docs/08-bootstrapping-kubernetes-controllers.md b/docs/08-bootstrapping-kubernetes-controllers.md
index 7ee8666..bfdc507 100644
--- a/docs/08-bootstrapping-kubernetes-controllers.md
+++ b/docs/08-bootstrapping-kubernetes-controllers.md
@@ -2,17 +2,20 @@
 
 In this lab you will bootstrap the Kubernetes control plane across 2 compute instances and configure it for high availability. You will also create an external load balancer that exposes the Kubernetes API Servers to remote clients. The following components will be installed on each node: Kubernetes API Server, Scheduler, and Controller Manager.
 
-Note that in a production-ready cluster it is recommended to have an odd number of master nodes as for multi-node services like etcd, leader election and quorum work better. See lecture on this ([KodeKloud](https://kodekloud.com/topic/etcd-in-ha/), [Udemy](https://www.udemy.com/course/certified-kubernetes-administrator-with-practice-tests/learn/lecture/14296192#overview)). We're only using two here to save on RAM on your workstation.
+Note that in a production-ready cluster it is recommended to have an odd number of controlplane nodes as for multi-node services like etcd, leader election and quorum work better. See lecture on this ([KodeKloud](https://kodekloud.com/topic/etcd-in-ha/), [Udemy](https://www.udemy.com/course/certified-kubernetes-administrator-with-practice-tests/learn/lecture/14296192#overview)). We're only using two here to save on RAM on your workstation.
+
+
+If you examine the command line arguments passed to the various control plane components, you should recognise many of the files that were created in earlier sections of this course, such as certificates, keys, kubeconfigs, the encryption configuration etc.
 
 ## Prerequisites
 
-The commands in this lab up as far as the load balancer configuration must be run on each controller instance: `master-1`, and `master-2`. Login to each controller instance using SSH Terminal.
+The commands in this lab up as far as the load balancer configuration must be run on each controller instance: `controlplane01`, and `controlplane02`. Login to each controller instance using SSH Terminal.
 
 You can perform this step with [tmux](01-prerequisites.md#running-commands-in-parallel-with-tmux).
 
 ## Provision the Kubernetes Control Plane
 
-[//]: # (host:master-1-master2)
+[//]: # (host:controlplane01-controlplane02)
 
 ### Download and Install the Kubernetes Controller Binaries
 
@@ -22,10 +25,10 @@ Download the latest official Kubernetes release binaries:
 KUBE_VERSION=$(curl -L -s https://dl.k8s.io/release/stable.txt)
 
 wget -q --show-progress --https-only --timestamping \
-  "https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/amd64/kube-apiserver" \
-  "https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/amd64/kube-controller-manager" \
-  "https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/amd64/kube-scheduler" \
-  "https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/amd64/kubectl"
+  "https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/${ARCH}/kube-apiserver" \
+  "https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/${ARCH}/kube-controller-manager" \
+  "https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/${ARCH}/kube-scheduler" \
+  "https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/${ARCH}/kubectl"
 ```
 
 Reference: https://kubernetes.io/releases/download/#binaries
@@ -62,15 +65,14 @@ The instance internal IP address will be used to advertise the API Server to mem
 Retrieve these internal IP addresses:
 
 ```bash
-INTERNAL_IP=$(ip addr show enp0s8 | grep "inet " | awk '{print $2}' | cut -d / -f 1)
 LOADBALANCER=$(dig +short loadbalancer)
 ```
 
-IP addresses of the two master nodes, where the etcd servers are.
+IP addresses of the two controlplane nodes, where the etcd servers are.
 
 ```bash
-MASTER_1=$(dig +short master-1)
-MASTER_2=$(dig +short master-2)
+CONTROL01=$(dig +short controlplane01)
+CONTROL02=$(dig +short controlplane02)
 ```
 
 CIDR ranges used *within* the cluster
@@ -90,7 +92,7 @@ Documentation=https://github.com/kubernetes/kubernetes
 
 [Service]
 ExecStart=/usr/local/bin/kube-apiserver \\
-  --advertise-address=${INTERNAL_IP} \\
+  --advertise-address=${PRIMARY_IP} \\
   --allow-privileged=true \\
   --apiserver-count=2 \\
   --audit-log-maxage=30 \\
@@ -105,7 +107,7 @@ ExecStart=/usr/local/bin/kube-apiserver \\
   --etcd-cafile=/var/lib/kubernetes/pki/ca.crt \\
   --etcd-certfile=/var/lib/kubernetes/pki/etcd-server.crt \\
   --etcd-keyfile=/var/lib/kubernetes/pki/etcd-server.key \\
-  --etcd-servers=https://${MASTER_1}:2379,https://${MASTER_2}:2379 \\
+  --etcd-servers=https://${CONTROL01}:2379,https://${CONTROL02}:2379 \\
   --event-ttl=1h \\
   --encryption-provider-config=/var/lib/kubernetes/encryption-config.yaml \\
   --kubelet-certificate-authority=/var/lib/kubernetes/pki/ca.crt \\
@@ -210,7 +212,7 @@ sudo chmod 600 /var/lib/kubernetes/*.kubeconfig
 
 ## Optional - Check Certificates and kubeconfigs
 
-At `master-1` and `master-2` nodes, run the following, selecting option 3
+At `controlplane01` and `controlplane02` nodes, run the following, selecting option 3
 
 [//]: # (command:./cert_verify.sh 3)
 
@@ -236,6 +238,8 @@ At `master-1` and `master-2` nodes, run the following, selecting option 3
 
 [//]: # (sleep:10)
 
+After running the abovre commands on both controlplane nodes, run the following on `controlplane01`
+
 ```bash
 kubectl get componentstatuses --kubeconfig admin.kubeconfig
 ```
@@ -253,7 +257,7 @@ etcd-0               Healthy   {"health": "true"}
 etcd-1               Healthy   {"health": "true"}
 ```
 
-> Remember to run the above commands on each controller node: `master-1`, and `master-2`.
+> Remember to run the above commands on each controller node: `controlplane01`, and `controlplane02`.
 
 ## The Kubernetes Frontend Load Balancer
 
@@ -264,7 +268,7 @@ In this section you will provision an external load balancer to front the Kubern
 
 A NLB operates at [layer 4](https://en.wikipedia.org/wiki/OSI_model#Layer_4:_Transport_layer) (TCP) meaning it passes the traffic straight through to the back end servers unfettered and does not interfere with the TLS process, leaving this to the Kube API servers.
 
-Login to `loadbalancer` instance using SSH Terminal.
+Login to `loadbalancer` instance using `vagrant ssh` (or `multipass shell` on Apple Silicon).
 
 [//]: # (host:loadbalancer)
 
@@ -273,15 +277,17 @@ Login to `loadbalancer` instance using SSH Terminal.
 sudo apt-get update && sudo apt-get install -y haproxy
 ```
 
-Read IP addresses of master nodes and this host to shell variables
+Read IP addresses of controlplane nodes and this host to shell variables
 
 ```bash
-MASTER_1=$(dig +short master-1)
-MASTER_2=$(dig +short master-2)
+CONTROL01=$(dig +short controlplane01)
+CONTROL02=$(dig +short controlplane02)
 LOADBALANCER=$(dig +short loadbalancer)
 ```
 
-Create HAProxy configuration to listen on API server port on this host and distribute requests evently to the two master nodes.
+Create HAProxy configuration to listen on API server port on this host and distribute requests evently to the two controlplane nodes.
+
+We configure it to operate as a [layer 4](https://en.wikipedia.org/wiki/Transport_layer) loadbalancer (using `mode tcp`), which means it forwards any traffic directly to the backends without doing anything like [SSL offloading](https://ssl2buy.com/wiki/ssl-offloading).
 
 ```bash
 cat <<EOF | sudo tee /etc/haproxy/haproxy.cfg
@@ -289,14 +295,14 @@ frontend kubernetes
     bind ${LOADBALANCER}:6443
     option tcplog
     mode tcp
-    default_backend kubernetes-master-nodes
+    default_backend kubernetes-controlplane-nodes
 
-backend kubernetes-master-nodes
+backend kubernetes-controlplane-nodes
     mode tcp
     balance roundrobin
     option tcp-check
-    server master-1 ${MASTER_1}:6443 check fall 3 rise 2
-    server master-2 ${MASTER_2}:6443 check fall 3 rise 2
+    server controlplane01 ${CONTROL01}:6443 check fall 3 rise 2
+    server controlplane02 ${CONTROL02}:6443 check fall 3 rise 2
 EOF
 ```
 
@@ -311,24 +317,10 @@ sudo systemctl restart haproxy
 Make a HTTP request for the Kubernetes version info:
 
 ```bash
-curl  https://${LOADBALANCER}:6443/version -k
+curl -k https://${LOADBALANCER}:6443/version
 ```
 
-> output
+This should output some details about the version and build information of the API server.
 
-```
-{
-  "major": "1",
-  "minor": "24",
-  "gitVersion": "${KUBE_VERSION}",
-  "gitCommit": "aef86a93758dc3cb2c658dd9657ab4ad4afc21cb",
-  "gitTreeState": "clean",
-  "buildDate": "2022-07-13T14:23:26Z",
-  "goVersion": "go1.18.3",
-  "compiler": "gc",
-  "platform": "linux/amd64"
-}
-```
-
-Prev: [Bootstrapping the etcd Cluster](07-bootstrapping-etcd.md)<br>
-Next: [Installing CRI on the Kubernetes Worker Nodes](09-install-cri-workers.md)
+Next: [Installing CRI on the Kubernetes Worker Nodes](./09-install-cri-workers.md)<br>
+Prev: [Bootstrapping the etcd Cluster](./07-bootstrapping-etcd.md)
diff --git a/docs/09-install-cri-workers.md b/docs/09-install-cri-workers.md
index 078952d..4cc3204 100644
--- a/docs/09-install-cri-workers.md
+++ b/docs/09-install-cri-workers.md
@@ -6,52 +6,90 @@ Reference: https://github.com/containerd/containerd/blob/main/docs/getting-start
 
 ### Download and Install Container Networking
 
-The commands in this lab must be run on each worker instance: `worker-1`, and `worker-2`. Login to each controller instance using SSH Terminal.
+The commands in this lab must be run on each worker instance: `node01`, and `node02`. Login to each controller instance using SSH Terminal.
 
-Here we will install the container runtime `containerd` from the Ubuntu distribution, and kubectl plus the CNI tools from the Kubernetes distribution. Kubectl is required on worker-2 to initialize kubeconfig files for the worker-node auto registration.
+Here we will install the container runtime `containerd` from the Ubuntu distribution, and kubectl plus the CNI tools from the Kubernetes distribution. Kubectl is required on `node02` to initialize kubeconfig files for the worker-node auto registration.
 
-[//]: # (host:worker-1-worker-2)
+[//]: # (host:node01-node02)
 
 You can perform this step with [tmux](01-prerequisites.md#running-commands-in-parallel-with-tmux).
 
-Set up the Kubernetes `apt` repository
+1. Update the apt package index and install packages needed to use the Kubernetes apt repository:
+    ```bash
+    {
+        sudo apt-get update
+        sudo apt-get install -y apt-transport-https ca-certificates curl
+    }
+    ```
 
-```bash
-{
-  KUBE_LATEST=$(curl -L -s https://dl.k8s.io/release/stable.txt | awk 'BEGIN { FS="." } { printf "%s.%s", $1, $2 }')
+1. Set up the required kernel modules and make them persistent
+    ```bash
+    {
+        cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
+    overlay
+    br_netfilter
+    EOF
 
-  sudo mkdir -p /etc/apt/keyrings
-  curl -fsSL https://pkgs.k8s.io/core:/stable:/${KUBE_LATEST}/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
+        sudo modprobe overlay
+        sudo modprobe br_netfilter
+    }
+    ```
 
-  echo "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/${KUBE_LATEST}/deb/ /" | sudo tee /etc/apt/sources.list.d/kubernetes.list
-}
-```
+1.  Set the required kernel parameters and make them persistent
+    ```bash
+    {
+        cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
+    net.bridge.bridge-nf-call-iptables  = 1
+    net.bridge.bridge-nf-call-ip6tables = 1
+    net.ipv4.ip_forward                 = 1
+    EOF
 
-Install `containerd` and CNI tools, first refreshing `apt` repos to get up to date versions.
+        sudo sysctl --system
+    }
+    ```
 
-```bash
-{
-  sudo apt update
-  sudo apt install -y containerd kubernetes-cni kubectl ipvsadm ipset
-}
-```
+1.  Determine latest version of Kubernetes and store in a shell variable
 
-Set up `containerd` configuration to enable systemd Cgroups
+    ```bash
+    KUBE_LATEST=$(curl -L -s https://dl.k8s.io/release/stable.txt | awk 'BEGIN { FS="." } { printf "%s.%s", $1, $2 }')
+    ```
 
-```bash
-{
-  sudo mkdir -p /etc/containerd
+1. Download the Kubernetes public signing key
+    ```bash
+    {
+        sudo mkdir -p /etc/apt/keyrings
+        curl -fsSL https://pkgs.k8s.io/core:/stable:/${KUBE_LATEST}/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
+    }
+    ```
 
-  containerd config default | sed 's/SystemdCgroup = false/SystemdCgroup = true/' | sudo tee /etc/containerd/config.toml
-}
-```
+1. Add the Kubernetes apt repository
+    ```bash
+    echo "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/${KUBE_LATEST}/deb/ /" | sudo tee /etc/apt/sources.list.d/kubernetes.list
+    ```
 
-Now restart `containerd` to read the new configuration
+1. Install the container runtime and CNI components
+    ```bash
+    sudo apt update
+    sudo apt-get install -y containerd kubernetes-cni kubectl ipvsadm ipset
+    ```
 
-```bash
-sudo systemctl restart containerd
-```
+1.  Configure the container runtime to use systemd Cgroups. This part is the bit many students miss, and if not done results in a controlplane that comes up, then all the pods start crashlooping. `kubectl` will also fail with an error like `The connection to the server x.x.x.x:6443 was refused - did you specify the right host or port?`
+
+    1. Create default configuration and pipe it through `sed` to correctly set Cgroup parameter.
+
+        ```bash
+        {
+            sudo mkdir -p /etc/containerd
+            containerd config default | sed 's/SystemdCgroup = false/SystemdCgroup = true/' | sudo tee /etc/containerd/config.toml
+        }
+        ```
+
+    1.  Restart containerd
+
+        ```bash
+        sudo systemctl restart containerd
+        ```
 
 
-Prev: [Bootstrapping the Kubernetes Control Plane](08-bootstrapping-kubernetes-controllers.md)</br>
-Next: [Bootstrapping the Kubernetes Worker Nodes](10-bootstrapping-kubernetes-workers.md)
+Next: [Bootstrapping the Kubernetes Worker Nodes](./10-bootstrapping-kubernetes-workers.md)</br>
+Prev: [Bootstrapping the Kubernetes Control Plane](./08-bootstrapping-kubernetes-controllers.md)
diff --git a/docs/10-bootstrapping-kubernetes-workers.md b/docs/10-bootstrapping-kubernetes-workers.md
index fe74888..e302bd4 100644
--- a/docs/10-bootstrapping-kubernetes-workers.md
+++ b/docs/10-bootstrapping-kubernetes-workers.md
@@ -8,8 +8,8 @@ We will now install the kubernetes components
 
 ## Prerequisites
 
-The Certificates and Configuration are created on `master-1` node and then copied over to workers using `scp`.
-Once this is done, the commands are to be run on first worker instance: `worker-1`. Login to first worker instance using SSH Terminal.
+The Certificates and Configuration are created on `controlplane01` node and then copied over to workers using `scp`.
+Once this is done, the commands are to be run on first worker instance: `node01`. Login to first worker instance using SSH Terminal.
 
 ### Provisioning Kubelet Client Certificates
 
@@ -17,16 +17,16 @@ Kubernetes uses a [special-purpose authorization mode](https://kubernetes.io/doc
 
 Generate a certificate and private key for one worker node:
 
-On `master-1`:
+On `controlplane01`:
 
-[//]: # (host:master-1)
+[//]: # (host:controlplane01)
 
 ```bash
-WORKER_1=$(dig +short worker-1)
+NODE01=$(dig +short node01)
 ```
 
 ```bash
-cat > openssl-worker-1.cnf <<EOF
+cat > openssl-node01.cnf <<EOF
 [req]
 req_extensions = v3_req
 distinguished_name = req_distinguished_name
@@ -36,27 +36,27 @@ basicConstraints = CA:FALSE
 keyUsage = nonRepudiation, digitalSignature, keyEncipherment
 subjectAltName = @alt_names
 [alt_names]
-DNS.1 = worker-1
-IP.1 = ${WORKER_1}
+DNS.1 = node01
+IP.1 = ${NODE01}
 EOF
 
-openssl genrsa -out worker-1.key 2048
-openssl req -new -key worker-1.key -subj "/CN=system:node:worker-1/O=system:nodes" -out worker-1.csr -config openssl-worker-1.cnf
-openssl x509 -req -in worker-1.csr -CA ca.crt -CAkey ca.key -CAcreateserial  -out worker-1.crt -extensions v3_req -extfile openssl-worker-1.cnf -days 1000
+openssl genrsa -out node01.key 2048
+openssl req -new -key node01.key -subj "/CN=system:node:node01/O=system:nodes" -out node01.csr -config openssl-node01.cnf
+openssl x509 -req -in node01.csr -CA ca.crt -CAkey ca.key -CAcreateserial  -out node01.crt -extensions v3_req -extfile openssl-node01.cnf -days 1000
 ```
 
 Results:
 
 ```
-worker-1.key
-worker-1.crt
+node01.key
+node01.crt
 ```
 
 ### The kubelet Kubernetes Configuration File
 
 When generating kubeconfig files for Kubelets the client certificate matching the Kubelet's node name must be used. This will ensure Kubelets are properly authorized by the Kubernetes [Node Authorizer](https://kubernetes.io/docs/admin/authorization/node/).
 
-Get the kub-api server load-balancer IP.
+Get the kube-api server load-balancer IP.
 
 ```bash
 LOADBALANCER=$(dig +short loadbalancer)
@@ -64,55 +64,55 @@ LOADBALANCER=$(dig +short loadbalancer)
 
 Generate a kubeconfig file for the first worker node.
 
-On `master-1`:
+On `controlplane01`:
 ```bash
 {
   kubectl config set-cluster kubernetes-the-hard-way \
     --certificate-authority=/var/lib/kubernetes/pki/ca.crt \
     --server=https://${LOADBALANCER}:6443 \
-    --kubeconfig=worker-1.kubeconfig
+    --kubeconfig=node01.kubeconfig
 
-  kubectl config set-credentials system:node:worker-1 \
-    --client-certificate=/var/lib/kubernetes/pki/worker-1.crt \
-    --client-key=/var/lib/kubernetes/pki/worker-1.key \
-    --kubeconfig=worker-1.kubeconfig
+  kubectl config set-credentials system:node:node01 \
+    --client-certificate=/var/lib/kubernetes/pki/node01.crt \
+    --client-key=/var/lib/kubernetes/pki/node01.key \
+    --kubeconfig=node01.kubeconfig
 
   kubectl config set-context default \
     --cluster=kubernetes-the-hard-way \
-    --user=system:node:worker-1 \
-    --kubeconfig=worker-1.kubeconfig
+    --user=system:node:node01 \
+    --kubeconfig=node01.kubeconfig
 
-  kubectl config use-context default --kubeconfig=worker-1.kubeconfig
+  kubectl config use-context default --kubeconfig=node01.kubeconfig
 }
 ```
 
 Results:
 
 ```
-worker-1.kubeconfig
+node01.kubeconfig
 ```
 
 ### Copy certificates, private keys and kubeconfig files to the worker node:
-On `master-1`:
+On `controlplane01`:
 
 ```bash
-scp ca.crt worker-1.crt worker-1.key worker-1.kubeconfig worker-1:~/
+scp ca.crt node01.crt node01.key node01.kubeconfig node01:~/
 ```
 
 
 ### Download and Install Worker Binaries
 
-All the following commands from here until the [verification](#verification) step must be run on `worker-1`
+All the following commands from here until the [verification](#verification) step must be run on `node01`
 
-[//]: # (host:worker-1)
+[//]: # (host:node01)
 
 
 ```bash
 KUBE_VERSION=$(curl -L -s https://dl.k8s.io/release/stable.txt)
 
 wget -q --show-progress --https-only --timestamping \
-  https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/amd64/kube-proxy \
-  https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/amd64/kubelet 
+  https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/${ARCH}/kube-proxy \
+  https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/${ARCH}/kubelet 
 ```
 
 Reference: https://kubernetes.io/releases/download/#binaries
@@ -138,7 +138,7 @@ Install the worker binaries:
 
 ### Configure the Kubelet
 
-On worker-1:
+On `node01`:
 
 Copy keys and config to correct directories and secure
 
@@ -214,6 +214,7 @@ Requires=containerd.service
 ExecStart=/usr/local/bin/kubelet \\
   --config=/var/lib/kubelet/kubelet-config.yaml \\
   --kubeconfig=/var/lib/kubelet/kubelet.kubeconfig \\
+  --node-ip=${PRIMARY_IP} \\
   --v=2
 Restart=on-failure
 RestartSec=5
@@ -225,7 +226,7 @@ EOF
 
 ### Configure the Kubernetes Proxy
 
-On worker-1:
+On `node01`:
 
 ```bash
 sudo mv kube-proxy.kubeconfig /var/lib/kube-proxy/
@@ -241,7 +242,7 @@ kind: KubeProxyConfiguration
 apiVersion: kubeproxy.config.k8s.io/v1alpha1
 clientConnection:
   kubeconfig: /var/lib/kube-proxy/kube-proxy.kubeconfig
-mode: ipvs
+mode: iptables
 clusterCIDR: ${POD_CIDR}
 EOF
 ```
@@ -267,7 +268,7 @@ EOF
 
 ## Optional - Check Certificates and kubeconfigs
 
-At `worker-1` node, run the following, selecting option 4
+At `node01` node, run the following, selecting option 4
 
 [//]: # (command:./cert_verify.sh 4)
 
@@ -278,7 +279,8 @@ At `worker-1` node, run the following, selecting option 4
 
 ### Start the Worker Services
 
-On worker-1:
+On `node01`:
+
 ```bash
 {
   sudo systemctl daemon-reload
@@ -287,28 +289,28 @@ On worker-1:
 }
 ```
 
-> Remember to run the above commands on worker node: `worker-1`
+> Remember to run the above commands on worker node: `node01`
 
 ## Verification
 
-[//]: # (host:master-1)
+[//]: # (host:controlplane01)
 
-Now return to the `master-1` node.
+Now return to the `controlplane01` node.
 
-List the registered Kubernetes nodes from the master node:
+List the registered Kubernetes nodes from the controlplane node:
 
 ```bash
 kubectl get nodes --kubeconfig admin.kubeconfig
 ```
 
-> output
+Output will be similar to
 
 ```
 NAME       STATUS     ROLES    AGE   VERSION
-worker-1   NotReady   <none>   93s   v1.28.4
+node01     NotReady   <none>   93s   v1.28.4
 ```
 
 The node is not ready as we have not yet installed pod networking. This comes later.
 
-Prev: [Installing CRI on the Kubernetes Worker Nodes](09-install-cri-workers.md)<br>
-Next: [TLS Bootstrapping Kubernetes Workers](11-tls-bootstrapping-kubernetes-workers.md)
+Next: [TLS Bootstrapping Kubernetes Workers](./11-tls-bootstrapping-kubernetes-workers.md)<br>
+Prev: [Installing CRI on the Kubernetes Worker Nodes](./09-install-cri-workers.md)
diff --git a/docs/11-tls-bootstrapping-kubernetes-workers.md b/docs/11-tls-bootstrapping-kubernetes-workers.md
index 2e8cda4..390abf8 100644
--- a/docs/11-tls-bootstrapping-kubernetes-workers.md
+++ b/docs/11-tls-bootstrapping-kubernetes-workers.md
@@ -6,7 +6,7 @@ In the previous step we configured a worker node by
 - Creating a kube-config file using this certificate by ourself
 - Everytime the certificate expires we must follow the same process of updating the certificate by ourself
 
-This is not a practical approach when you have 1000s of nodes in the cluster, and nodes dynamically being added and removed from the cluster.  With TLS boostrapping:
+This is not a practical approach when you could have 1000s of nodes in the cluster, and nodes dynamically being added and removed from the cluster.  With TLS boostrapping:
 
 - The Nodes can generate certificate key pairs by themselves
 - The Nodes can generate certificate signing request by themselves
@@ -41,11 +41,11 @@ So let's get started!
 
 > Note: We have already configured these in lab 8 in this course
 
-# Step 1 Create the Boostrap Token to be used by Nodes(Kubelets) to invoke Certificate API
+# Step 1 Create the Boostrap Token to be used by Nodes (Kubelets) to invoke Certificate API
 
-[//]: # (host:master-1)
+[//]: # (host:controlplane01)
 
-Run the following steps on `master-1`
+Run the following steps on `controlplane01`
 
 For the workers(kubelet) to access the Certificates API, they need to authenticate to the kubernetes api-server first. For this we create a [Bootstrap Token](https://kubernetes.io/docs/reference/access-authn-authz/bootstrap-tokens/) to be used by the kubelet
 
@@ -100,7 +100,7 @@ Once this is created the token to be used for authentication is `07401b.f395accd
 
 Reference: https://kubernetes.io/docs/reference/access-authn-authz/bootstrap-tokens/#bootstrap-token-secret-format
 
-## Step 2 Authorize workers(kubelets) to create CSR
+## Step 2 Authorize nodes (kubelets) to create CSR
 
 Next we associate the group we created before to the system:node-bootstrapper ClusterRole. This ClusterRole gives the group enough permissions to bootstrap the kubelet
 
@@ -135,7 +135,7 @@ kubectl create -f csrs-for-bootstrapping.yaml --kubeconfig admin.kubeconfig
 ```
 Reference: https://kubernetes.io/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/#authorize-kubelet-to-create-csr
 
-## Step 3 Authorize workers(kubelets) to approve CSRs
+## Step 3 Authorize nodes (kubelets) to approve CSRs
 
 ```bash
 kubectl create clusterrolebinding auto-approve-csrs-for-group \
@@ -168,7 +168,7 @@ kubectl create -f auto-approve-csrs-for-group.yaml --kubeconfig admin.kubeconfig
 
 Reference: https://kubernetes.io/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/#approval
 
-## Step 4 Authorize workers(kubelets) to Auto Renew Certificates on expiration
+## Step 4 Authorize nodes (kubelets) to Auto Renew Certificates on expiration
 
 We now create the Cluster Role Binding required for the nodes to automatically renew the certificates on expiry. Note that we are NOT using the **system:bootstrappers** group here any more. Since by the renewal period, we believe the node would be bootstrapped and part of the cluster already. All nodes are part of the **system:nodes** group.
 
@@ -206,9 +206,9 @@ Reference: https://kubernetes.io/docs/reference/access-authn-authz/kubelet-tls-b
 
 ## Step 5 Configure the Binaries on the Worker node
 
-Going forward all activities are to be done on the `worker-2` node until [step 11](#step-11-approve-server-csr).
+Going forward all activities are to be done on the `node02` node until [step 11](#step-11-approve-server-csr).
 
-[//]: # (host:worker-2)
+[//]: # (host:node02)
 
 ### Download and Install Worker Binaries
 
@@ -218,8 +218,8 @@ Note that kubectl is required here to assist with creating the boostrap kubeconf
 KUBE_VERSION=$(curl -L -s https://dl.k8s.io/release/stable.txt)
 
 wget -q --show-progress --https-only --timestamping \
-  https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/amd64/kube-proxy \
-  https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/amd64/kubelet
+  https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/${ARCH}/kube-proxy \
+  https://dl.k8s.io/release/${KUBE_VERSION}/bin/linux/${ARCH}/kubelet
 ```
 
 Reference: https://kubernetes.io/releases/download/#binaries
@@ -256,10 +256,10 @@ Move the certificates and secure them.
 
 It is now time to configure the second worker to TLS bootstrap using the token we generated
 
-For worker-1 we started by creating a kubeconfig file with the TLS certificates that we manually generated.
+For `node01` we started by creating a kubeconfig file with the TLS certificates that we manually generated.
 Here, we don't have the certificates yet. So we cannot create a kubeconfig file. Instead we create a bootstrap-kubeconfig file with information about the token we created.
 
-This is to be done on the `worker-2` node. Note that now we have set up the load balancer to provide high availibilty across the API servers, we point kubelet to the load balancer.
+This is to be done on the `node02` node. Note that now we have set up the load balancer to provide high availibilty across the API servers, we point kubelet to the load balancer.
 
 Set up some shell variables for nodes and services we will require in the following configurations:
 
@@ -367,6 +367,7 @@ ExecStart=/usr/local/bin/kubelet \\
   --config=/var/lib/kubelet/kubelet-config.yaml \\
   --kubeconfig=/var/lib/kubelet/kubeconfig \\
   --cert-dir=/var/lib/kubelet/pki/ \\
+  --node-ip=${PRIMARY_IP} \\
   --v=2
 Restart=on-failure
 RestartSec=5
@@ -404,7 +405,7 @@ kind: KubeProxyConfiguration
 apiVersion: kubeproxy.config.k8s.io/v1alpha1
 clientConnection:
   kubeconfig: /var/lib/kube-proxy/kube-proxy.kubeconfig
-mode: ipvs
+mode: iptables
 clusterCIDR: ${POD_CIDR}
 EOF
 ```
@@ -431,7 +432,7 @@ EOF
 
 ## Step 10 Start the Worker Services
 
-On worker-2:
+On `node02`:
 
 ```bash
 {
@@ -440,11 +441,11 @@ On worker-2:
   sudo systemctl start kubelet kube-proxy
 }
 ```
-> Remember to run the above commands on worker node: `worker-2`
+> Remember to run the above commands on worker node: `node02`
 
 ### Optional - Check Certificates and kubeconfigs
 
-At `worker-2` node, run the following, selecting option 5
+At `node02` node, run the following, selecting option 5
 
 [//]: # (command:sleep 5)
 [//]: # (command:./cert_verify.sh 5)
@@ -456,11 +457,11 @@ At `worker-2` node, run the following, selecting option 5
 
 ## Step 11 Approve Server CSR
 
-Now, go back to `master-1` and approve the pending kubelet-serving certificate
+Now, go back to `controlplane01` and approve the pending kubelet-serving certificate
 
-[//]: # (host:master-1)
+[//]: # (host:controlplane01)
 [//]: # (command:sudo apt install -y jq)
-[//]: # (command:kubectl certificate approve --kubeconfig admin.kubeconfig $(kubectl get csr --kubeconfig admin.kubeconfig -o json | jq -r '.items | .[]  | select(.spec.username == "system:node:worker-2") | .metadata.name'))
+[//]: # (command:kubectl certificate approve --kubeconfig admin.kubeconfig $(kubectl get csr --kubeconfig admin.kubeconfig -o json | jq -r '.items | .[]  | select(.spec.username == "system:node:node02") | .metadata.name'))
 
 ```bash
 kubectl get csr --kubeconfig admin.kubeconfig
@@ -470,7 +471,7 @@ kubectl get csr --kubeconfig admin.kubeconfig
 
 ```
 NAME        AGE   SIGNERNAME                                    REQUESTOR                 REQUESTEDDURATION   CONDITION
-csr-7k8nh   85s   kubernetes.io/kubelet-serving                 system:node:worker-2      <none>              Pending
+csr-7k8nh   85s   kubernetes.io/kubelet-serving                 system:node:node02        <none>              Pending
 csr-n7z8p   98s   kubernetes.io/kube-apiserver-client-kubelet   system:bootstrap:07401b   <none>              Approved,Issued
 ```
 
@@ -487,19 +488,21 @@ Reference: https://kubernetes.io/docs/reference/access-authn-authz/kubelet-tls-b
 
 ## Verification
 
-List the registered Kubernetes nodes from the master node:
+List the registered Kubernetes nodes from the controlplane node:
 
 ```bash
 kubectl get nodes --kubeconfig admin.kubeconfig
 ```
 
-> output
+Output will be similar to
 
 ```
 NAME       STATUS      ROLES    AGE   VERSION
-worker-1   NotReady    <none>   93s   v1.28.4
-worker-2   NotReady    <none>   93s   v1.28.4
+node01     NotReady    <none>   93s   v1.28.4
+node02     NotReady    <none>   93s   v1.28.4
 ```
 
-Prev: [Bootstrapping the Kubernetes Worker Nodes](10-bootstrapping-kubernetes-workers.md)</br>
-Next: [Configuring Kubectl](12-configuring-kubectl.md)
+Nodes are still not yet ready. As previously mentioned, this is expected.
+
+Next: [Configuring Kubectl](./12-configuring-kubectl.md)</br>
+Prev: [Bootstrapping the Kubernetes Worker Nodes](./10-bootstrapping-kubernetes-workers.md)
diff --git a/docs/12-configuring-kubectl.md b/docs/12-configuring-kubectl.md
index 2543ac8..a4ae525 100644
--- a/docs/12-configuring-kubectl.md
+++ b/docs/12-configuring-kubectl.md
@@ -8,9 +8,9 @@ In this lab you will generate a kubeconfig file for the `kubectl` command line u
 
 Each kubeconfig requires a Kubernetes API Server to connect to. To support high availability the IP address assigned to the external load balancer fronting the Kubernetes API Servers will be used.
 
-[//]: # (host:master-1)
+[//]: # (host:controlplane01)
 
-On `master-1`
+On `controlplane01`
 
 Get the kube-api server load-balancer IP.
 
@@ -50,7 +50,7 @@ Check the health of the remote Kubernetes cluster:
 kubectl get componentstatuses
 ```
 
-> output
+Output will be similar to this. It may or may not list both etcd instances, however this is OK if you verified correct installation of etcd in lab 7.
 
 ```
 Warning: v1 ComponentStatus is deprecated in v1.19+
@@ -71,9 +71,9 @@ kubectl get nodes
 
 ```
 NAME       STATUS      ROLES    AGE    VERSION
-worker-1   NotReady    <none>   118s   v1.28.4
-worker-2   NotReady    <none>   118s   v1.28.4
+node01     NotReady    <none>   118s   v1.28.4
+node02     NotReady    <none>   118s   v1.28.4
 ```
 
-Prev: [TLS Bootstrapping Kubernetes Workers](11-tls-bootstrapping-kubernetes-workers.md)</br>
-Next: [Deploy Pod Networking](13-configure-pod-networking.md)
+Next: [Deploy Pod Networking](./13-configure-pod-networking.md)</br>
+Prev: [TLS Bootstrapping Kubernetes Workers](./11-tls-bootstrapping-kubernetes-workers.md)
diff --git a/docs/13-configure-pod-networking.md b/docs/13-configure-pod-networking.md
index a2f874d..860cdc0 100644
--- a/docs/13-configure-pod-networking.md
+++ b/docs/13-configure-pod-networking.md
@@ -7,30 +7,32 @@ We chose to use CNI - [weave](https://www.weave.works/docs/net/latest/kubernetes
 
 ### Deploy Weave Network
 
-Deploy weave network. Run only once on the `master-1` node. You will see a warning, but this is OK.
+Some of you may have noticed the announcement that WeaveWorks is no longer trading. At this time, this does not mean that Weave is not a valid CNI. WeaveWorks software has always been and remains to be open source, and as such is still useable. It just means that the company is no longer providing updates. While it continues to be compatible with Kubernetes, we will continue to use it as the other options (e.g. Calico, Cilium) require far more configuration steps.
 
-[//]: # (host:master-1)
+Deploy weave network. Run only once on the `controlplane01` node. You may see a warning, but this is OK.
 
-On `master-1`
+[//]: # (host:controlplane01)
+
+On `controlplane01`
 
 ```bash
 kubectl apply -f "https://github.com/weaveworks/weave/releases/download/v2.8.1/weave-daemonset-k8s-1.11.yaml"
 
 ```
 
-Weave uses POD CIDR of `10.244.0.0/16` by default.
+It may take up to 60 seconds for the Weave pods to be ready.
 
 ## Verification
 
 [//]: # (command:kubectl rollout status daemonset weave-net -n kube-system --timeout=90s)
 
-List the registered Kubernetes nodes from the master node:
+List the registered Kubernetes nodes from the controlplane node:
 
 ```bash
 kubectl get pods -n kube-system
 ```
 
-> output
+Output will be similar to
 
 ```
 NAME              READY   STATUS    RESTARTS   AGE
@@ -38,21 +40,21 @@ weave-net-58j2j   2/2     Running   0          89s
 weave-net-rr5dk   2/2     Running   0          89s
 ```
 
-Once the Weave pods are fully running which might take up to 60 seconds, the nodes should be ready
+Once the Weave pods are fully running, the nodes should be ready.
 
 ```bash
 kubectl get nodes
 ```
 
-> Output
+Output will be similar to
 
 ```
 NAME       STATUS   ROLES    AGE     VERSION
-worker-1   Ready    <none>   4m11s   v1.28.4
-worker-2   Ready    <none>   2m49s   v1.28.4
+node01     Ready    <none>   4m11s   v1.28.4
+node02     Ready    <none>   2m49s   v1.28.4
 ```
 
 Reference: https://kubernetes.io/docs/tasks/administer-cluster/network-policy-provider/weave-network-policy/#install-the-weave-net-addon
 
-Prev: [Configuring Kubectl](12-configuring-kubectl.md)</br>
-Next: [Kube API Server to Kubelet Connectivity](14-kube-apiserver-to-kubelet.md)
+Next: [Kube API Server to Kubelet Connectivity](./14-kube-apiserver-to-kubelet.md)</br>
+Prev: [Configuring Kubectl](./12-configuring-kubectl.md)
diff --git a/docs/14-kube-apiserver-to-kubelet.md b/docs/14-kube-apiserver-to-kubelet.md
index aed3dfd..674b990 100644
--- a/docs/14-kube-apiserver-to-kubelet.md
+++ b/docs/14-kube-apiserver-to-kubelet.md
@@ -4,9 +4,9 @@ In this section you will configure RBAC permissions to allow the Kubernetes API
 
 > This tutorial sets the Kubelet `--authorization-mode` flag to `Webhook`. Webhook mode uses the [SubjectAccessReview](https://kubernetes.io/docs/admin/authorization/#checking-api-access) API to determine authorization.
 
-[//]: # (host:master-1)
+[//]: # (host:controlplane01)
 
-Run the below on the `master-1` node.
+Run the below on the `controlplane01` node.
 
 Create the `system:kube-apiserver-to-kubelet` [ClusterRole](https://kubernetes.io/docs/admin/authorization/rbac/#role-and-clusterrole) with permissions to access the Kubelet API and perform most common tasks associated with managing pods:
 
@@ -58,5 +58,5 @@ EOF
 ```
 Reference: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#rolebinding-and-clusterrolebinding
 
-Prev: [Deploy Pod Networking](13-configure-pod-networking.md)</br>
-Next: [DNS Addon](15-dns-addon.md)
+Next: [DNS Addon](./15-dns-addon.md)</br>
+Prev: [Deploy Pod Networking](./13-configure-pod-networking.md)
diff --git a/docs/15-dns-addon.md b/docs/15-dns-addon.md
index 0fcbb8a..1701d4f 100644
--- a/docs/15-dns-addon.md
+++ b/docs/15-dns-addon.md
@@ -4,11 +4,11 @@ In this lab you will deploy the [DNS add-on](https://kubernetes.io/docs/concepts
 
 ## The DNS Cluster Add-on
 
-[//]: # (host:master-1)
+[//]: # (host:controlplane01)
 
 Deploy the `coredns` cluster add-on:
 
-Note that if you have [changed the service CIDR range](./01-prerequisites.md#service-network) and thus this file, you will need to save your copy onto `master-1` (paste to vi, then save) and apply that.
+Note that if you have [changed the service CIDR range](./01-prerequisites.md#service-network) and thus this file, you will need to save your copy onto `controlplane01` (paste to vi, then save) and apply that.
 
 ```bash
 kubectl apply -f https://raw.githubusercontent.com/mmumshad/kubernetes-the-hard-way/master/deployments/coredns.yaml
@@ -83,5 +83,5 @@ Name:      kubernetes
 Address 1: 10.96.0.1 kubernetes.default.svc.cluster.local
 ```
 
-Prev: [Kube API Server to Kubelet Connectivity](14-kube-apiserver-to-kubelet.md)</br>
-Next: [Smoke Test](16-smoke-test.md)
+Next: [Smoke Test](./16-smoke-test.md)</br>
+Prev: [Kube API Server to Kubelet Connectivity](./14-kube-apiserver-to-kubelet.md)
diff --git a/docs/16-smoke-test.md b/docs/16-smoke-test.md
index f4a336a..ee0148d 100644
--- a/docs/16-smoke-test.md
+++ b/docs/16-smoke-test.md
@@ -4,7 +4,7 @@ In this lab you will complete a series of tasks to ensure your Kubernetes cluste
 
 ## Data Encryption
 
-[//]: # (host:master-1)
+[//]: # (host:controlplane01)
 
 In this section you will verify the ability to [encrypt secret data at rest](https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#verifying-that-data-is-encrypted).
 
@@ -61,7 +61,7 @@ In this section you will verify the ability to create and manage [Deployments](h
 Create a deployment for the [nginx](https://nginx.org/en/) web server:
 
 ```bash
-kubectl create deployment nginx --image=nginx:1.23.1
+kubectl create deployment nginx --image=nginx:alpine
 ```
 
 [//]: # (command:kubectl wait deployment -n default nginx --for condition=Available=True --timeout=90s)
@@ -89,6 +89,7 @@ Create a service to expose deployment nginx on node ports.
 kubectl expose deploy nginx --type=NodePort --port 80
 ```
 
+[//]: # (command:sleep 2)
 
 ```bash
 PORT_NUMBER=$(kubectl get svc -l app=nginx -o jsonpath="{.items[0].spec.ports[0].nodePort}")
@@ -97,8 +98,8 @@ PORT_NUMBER=$(kubectl get svc -l app=nginx -o jsonpath="{.items[0].spec.ports[0]
 Test to view NGINX page
 
 ```bash
-curl http://worker-1:$PORT_NUMBER
-curl http://worker-2:$PORT_NUMBER
+curl http://node01:$PORT_NUMBER
+curl http://node02:$PORT_NUMBER
 ```
 
 > output
@@ -160,5 +161,5 @@ kubectl delete service -n default nginx
 kubectl delete deployment -n default nginx
 ```
 
-Prev: [DNS Addon](15-dns-addon.md)</br>
-Next: [End to End Tests](17-e2e-tests.md)
+Next: [End to End Tests](./17-e2e-tests.md)</br>
+Prev: [DNS Addon](./15-dns-addon.md)
diff --git a/docs/17-e2e-tests.md b/docs/17-e2e-tests.md
index b7880c0..fd95ddb 100644
--- a/docs/17-e2e-tests.md
+++ b/docs/17-e2e-tests.md
@@ -1,17 +1,21 @@
 # Run End-to-End Tests
 
+Optional Lab.
+
 Observations by Alistair (KodeKloud):
 
-Depending on your computer, you may have varying success with these. I have found them to run much more smoothly on a 12 core Intel(R) Core(TM) i7-7800X Desktop Processor (circa 2017), than on a 20 core Intel(R) Core(TM) i7-12700H Laptop processor (circa 2022) - both machines having 32GB RAM and both machines running the same version of VirtualBox. On the latter, it tends to destabilize the cluster resulting in timeouts in the tests. This *may* be a processor issue in that laptop processors are not really designed to take the kind of abuse that'll be thrown by the tests at a kube cluster that really should be run on a Server processor. Laptop processors do odd things for power conservation like constantly varying the clock speed and mixing "performance" and "efficiency" cores, even when the laptop is plugged in, and this could be causing synchronization issues with the goroutines running in the kube components. If anyone has a definitive explanation for this, please do post in the kubernetes-the-hard-way Slack channel.
+Depending on your computer, you may have varying success with these. I have found them to run much more smoothly on a 12 core Intel(R) Core(TM) i7-7800X Desktop Processor (circa 2017), than on a 20 core Intel(R) Core(TM) i7-12700H Laptop processor (circa 2022) - both machines having 32GB RAM and both machines running the same version of VirtualBox. On the latter, it tends to destabilize the cluster resulting in timeouts in the tests. This *may* be a processor issue in that laptop processors are not really designed to take the kind of abuse that'll be thrown by the tests at a kube cluster that really should be run on a Server processor. Laptop processors do odd things for power conservation like constantly varying the clock speed and mixing "performance" and "efficiency" cores, even when the laptop is plugged in, and this could be causing synchronization issues with the goroutines running in the kube components. If anyone has a definitive explanation for this, please do post in the Kubernetes section of the [Community Forum](https://kodekloud.com/community/c/kubernetes/6).
 
 
+Test suite should be installed to and run from `controlplane01`
+
 ## Install latest Go
 
 ```bash
 GO_VERSION=$(curl -s 'https://go.dev/VERSION?m=text' | head -1)
-wget "https://dl.google.com/go/${GO_VERSION}.linux-amd64.tar.gz"
+wget "https://dl.google.com/go/${GO_VERSION}.linux-${ARCH}.tar.gz"
 
-sudo tar -C /usr/local -xzf ${GO_VERSION}.linux-amd64.tar.gz
+sudo tar -C /usr/local -xzf ${GO_VERSION}.linux-${ARCH}.tar.gz
 
 sudo ln -s /usr/local/go/bin/go /usr/local/bin/go
 sudo ln -s /usr/local/go/bin/gofmt /usr/local/bin/gofmt
@@ -32,7 +36,7 @@ sudo snap install google-cloud-cli --classic
 
 ## Run test
 
-Here we set up a couple of environment variables to supply arguments to the test package - the version of our cluster and the number of CPUs on `master-1` to aid with test parallelization.
+Here we set up a couple of environment variables to supply arguments to the test package - the version of our cluster and the number of CPUs on `controlplane01` to aid with test parallelization.
 
 Then we invoke the test package
 
@@ -42,25 +46,19 @@ NUM_CPU=$(cat /proc/cpuinfo | grep '^processor' | wc -l)
 
 cd ~
 kubetest2 noop --kubeconfig ${PWD}/.kube/config --test=ginkgo -- \
-  --focus-regex='\[Conformance\]' --test-package-version $KUBE_VERSION --logtostderr --parallel $NUM_CPU
+  --focus-regex='\[Conformance\]' --test-package-version $KUBE_VERSION --parallel $NUM_CPU
 ```
 
-While this is running, you can open an additional session on `master-1` from your workstation and watch the activity in the cluster
-
-```
-vagrant ssh master-1
-```
-
-then
+While this is running, you can open an additional session on `controlplane01` from your workstation and watch the activity in the cluster -
 
 ```
 watch kubectl get all -A
 ```
 
-Observations by Alistair (KodeKloud):
+Further observations by Alistair (KodeKloud):
 
-This should take up to an hour to run. The number of tests run and passed will be displayed at the end. Expect some failures!
+This could take between an hour and several hours to run depending on your system. The number of tests run and passed will be displayed at the end. Expect some failures!
 
-I am not able to say exactly why the failed tests fail. It would take days to go though the truly enormous test code base to determine why the tests that fail do so.
+I am not able to say exactly why the failed tests fail over and above the assumptions above. It would take days to go though the truly enormous test code base to determine why the tests that fail do so.
 
-Prev: [Smoke Test](16-smoke-test.md)
\ No newline at end of file
+Prev: [Smoke Test](./16-smoke-test.md)
\ No newline at end of file
diff --git a/docs/differences-to-original.md b/docs/differences-to-original.md
index 0daa0a4..22db51a 100644
--- a/docs/differences-to-original.md
+++ b/docs/differences-to-original.md
@@ -1,9 +1,9 @@
 # Differences between original and this solution
 
 * Platform: I use VirtualBox to setup a local cluster, the original one uses GCP.
-* Nodes: 2 master and 2 worker vs 2 master and 3 worker nodes.
+* Nodes: 2 controlplane and 2 worker vs 2 controlplane and 3 worker nodes.
 * Configure 1 worker node normally and the second one with TLS bootstrap.
-* Node names: I use worker-1 worker-2 instead of worker-0 worker-1.
+* Node names: I use node01 node02 instead of worker-0 worker-1.
 * IP Addresses: I use statically assigned IPs on private network.
 * Certificate file names: I use \<name\>.crt for public certificate and \<name\>.key for private key file. Whereas original one uses \<name\>-.pem for certificate and \<name\>-key.pem for private key.
 * I generate separate certificates for etcd-server instead of using kube-apiserver.
diff --git a/docs/verify-certificates.md b/docs/verify-certificates.md
index 73a68dd..443925d 100644
--- a/docs/verify-certificates.md
+++ b/docs/verify-certificates.md
@@ -1,10 +1,10 @@
-# Verify Certificates in Master-1/2 & Worker-1
+# Verify Certificates in controlplane-1/2 & Worker-1
 
 > Note: This script is only intended to work with a kubernetes cluster setup following instructions from this repository. It is not a generic script that works for all kubernetes clusters. Feel free to send in PRs with improvements.
 
-This script was developed to assist the verification of certificates for each Kubernetes component as part of building the cluster. This script may be executed as soon as you have completed the Lab steps up to [Bootstrapping the Kubernetes Worker Nodes](./09-bootstrapping-kubernetes-workers.md). The script is named as `cert_verify.sh` and it is available at `/home/vagrant` directory of master-1 , master-2 and worker-1 nodes. If it's not already available there copy the script to the nodes from [here](../vagrant/ubuntu/cert_verify.sh).
+This script was developed to assist the verification of certificates for each Kubernetes component as part of building the cluster. This script may be executed as soon as you have completed the Lab steps up to [Bootstrapping the Kubernetes Worker Nodes](./09-bootstrapping-kubernetes-workers.md). The script is named as `cert_verify.sh` and it is available at `/home/vagrant` directory of controlplane01 , controlplane02 and node01 nodes. If it's not already available there copy the script to the nodes from [here](../vagrant/ubuntu/cert_verify.sh).
 
-It is important that the script execution needs to be done by following commands after logging into the respective virtual machines [ whether it is master-1 / master-2 / worker-1 ] via SSH.
+It is important that the script execution needs to be done by following commands after logging into the respective virtual machines [ whether it is controlplane01 / controlplane02 / node01 ] via SSH.
 
 ```bash
 cd ~
diff --git a/images/iterm2-broadcast.png b/images/iterm2-broadcast.png
new file mode 100644
index 0000000000000000000000000000000000000000..9c948346bd6128a7f1f5ce41374db119990e0153
GIT binary patch
literal 137563
zcmZr$1ymf{vPFY?kl+$r1_?HJAi>>T!XUxj-66QUOK^90CrBW8aF^hN{>ham_dnK}
z)lGLFt2(Eu_O1$3kP}BkCPapUf<lv&5L1GJf(?O!f|*5p1$j~!<kANPg<NbdDykqU
zDoU<kZ)0L^34(%>2un;tP>CPG8`^uA5q&R>Nb=rhMjMKrqW)W9Kx7OYBK2Sll#xj6
z0Im)SC1p<eeqN}*1++19C><W&z#6_WmcsmiKib?abVzmES^Mo|+n&s>i}mSBi_7G=
z%QIArBylVqtQs7-G98xqoyY9fCeD7dAr!2W?<?!>jJ^qMw!XdqXrsEz^^+%EDA|c7
zregc2hnJV{39gS!EKmwOy^`%r)-=7eF~2exv8ADeRjIrKh{Mdnm$8b%V_~p51qSFj
z`1uDUIrw==aBzEIpduZEXzh45UqeY~g=S|>$ckLV>{3}$Z6gID%6~tKO>OxSa&8zX
z8%u!Is|<c4=`#|4(Uc)sn?WoW{>9Wim8(6PTsomg^Oq0l&`aYu>cKJT;4pb%I4ot1
zCMj>-!@-!pF_R23S~>{Y2I!rpTnIf~H$GuRJ<cAzh4WTB9gC2EYy?KAktsTmgmdhX
zX?<7|4-gS^lE`GjW|~TswXB{-%6wUTu~_@)_EoW_E`vD~DRZa%YB;BbAZZ+s^l|ub
z59O(2@8&xGIxF=$*&E(+QA_f(if_5gq|TEkg#(MJT1Gh+>H3fh3yl^YAkKB{1{)MO
zwh4ao%<iM+TwqxN*AnAk(FZb38AL+O24SKd`;mk~MRmh(!;o+6Nfo6TFymBUq9`d*
zJJMXV-Z?hLSa3#Ln||7Z>YmfiY(cg$pS8iv)6Kk;e1x|3i0ppgUGMdTN^^%+XiU3I
zC3i_Xgcj!WW5hL`y8EUqL?8@@>>KWh<md~{3ZEq5B{$67gL3CDjQJ{0m|p{?nH<*`
zhHV(StQ)8RC)KT14Xff$SdBppC*IBW4Mr~D@+WrlD{EiApIG~_0Y9k;V9$Es;6!*r
zQ5DIZB=Fh&naKG<q1}W#6<A+G4~T{-AioVP_{Lx+paPTlKJlAg3F-YCAbe&>rEteL
z*b*{Azct}(!`CwYU#qz+QMLO}Q;-mP6wi%#;Pue=dV<bPnqew~F#0CW-R=lI5l#d2
zd$;I(<3y(w-07rW!w$R;%EeX~p=0}uR!X26Rr-N5Z%IM7M7u<Aj_weLFrp~uz)ZTH
z2na<Ixto`qzmUV7%Q%fNJ+Uu$#q22Lj{1ZvI%sCd#9B$fMS~viKhpEsaFop{B|ar0
zg)c>9+=B^Ex-ZQjvj+Nyt0kc`wKI-0cO%kr)X4z4!H^wK25=H)FAAm4&K6q-%NqZb
z^_2LO#v1b$3lOp}u)Ohfj^s+w38fz;6etwY6-L%8kNFzuBb@qs0zYvLkst4W$eU5=
z(4u0~gi49w<nghEr+m~AFDK{124IuntdEY29E`OLGsoZzS0t9j@G-b(R_dSPNTwRg
z8O7qo78Fbrz!o^qz|Ls1r&`L~P}0UwZ%=HyU%+1|Ux>Sfw<q#zXVGQ@^r_dGe3YLP
zVMKZ){JvI;QOM`&Y&7>e1u1^;&#R%7j?HiWSR?f-VN+nhjygQ9LMcV5XojXxR7yP|
zIMHr&aI|xjf9L&<*C>7h0v%mAbkK(lrFrEWWfrAZUo}dR5@luclN6#AJW4(>j544z
zurahSs4|$U+?&y*u|>*`<yhsC<gXTbseM-im0qZFmvWV^sXXNrecde_RA*GPP-@G+
z(afwoEz7Fxl<oNN6!uE1Pv?{0$EZQl$OyvxG!<EH*-Dd|UABo3t?Hx}wZM6)3NNiy
zt*s^C((@AKiS819y||MZP!DJh1OZK*K04C3lD5LEvadR{0`?gkX#@iFM9vDL56lnX
z_a(1y4zKrR_tW>qkMQ@o4}{pr30YC&&_+>#sDr3ZXrid<Z@35q-%%2<eNl>ZCUkn^
z#mdDN#kpp%V#IHmXVS|x!eP$pW+}yW{Z7|f%ffvb)nbrUntR#GxsRC3<()id6?>O8
zv^I|>B9pWB)nwneLn>{CI^S6q^+=p~s@0;wqRodo<VJ?-&o%BKE3-_4j)~T>`?AP<
z+29H9bn(W~M!!b*Myp1f<MESbXI1B>laU+m8}LoVO%(|f@g2Gc@hP7Yu_!S&k28<A
zoxL+QA15%9hX_auROeg&r0{0ri|m&%76N>mWY6STmTa9&9qP&<ofpSCM`;(nZ7%+G
zV?m$iXE5yP{VDNn$Eg>oW3*T_nZP~&H9v1wL)KI~YP+kRlb)yyhY8^&>t$k7WYdp_
zf?I?nMhnieRfL_bGv(vit+HdH6YYbCIr(+KKvj>;`1-U@p^pa?4LO~GcDFzySNd3`
zX*4_#p%VQVl@k8LE7ey5C|nqL2u(rV6n+%TqNE{&LCB)oy}|^1mL5OiZR5{(HoBO)
zSrGLV8h*M3TJ@KPR!T^1&kT#kp5?daH;M^_b44b7bm^z-XA1us4aPje(I#BRHzjET
zo@%v!Y$xyJgigkcS4d{<{N}O|6%-IbjE~FQ+V;cP?sSt;`dyMS6K|c0A-(CrFEJS-
z%gx+=NjZYzB#x|pxl%d8t=eY37J!>xJNp{qdZzv;nUu3Ui!7;}o%~`Jd)#5FRu+)K
z0Eq#<Y8GbZ^Ne6YNFkZTOA=Q4bVAsa%s4-_3SJQkU-ALdnC?7dEhcW*eNr3CdX1+H
z@!QHV|5`lL2C0%zy2GS2sjm1NQx9Wxkk5G72ya$d0^|6Jo?)laR(LLdS9`Wvp1Qrd
zbNP&RgSG0*=iS2&iyTf#3*ZIX1<EDD!hMxMb5t{n*J>3!7knZ7+5AwY4dWb(jyBJE
z=8Fs3hl>xJc^*V7Tyvh$&wA%xQy(89+qk@$cX9QZYv}0#sVn`fj@JmwWDMSSjl6CS
zQ+UP99*ss#$W3djyDcXMUzN=D4!Un*P9{KCwVSmrd`YLxN~a2Xb@9#0t#wtD&3R7A
z8<iDpG>poOXDV*$oT?V8Hs#ON=}iy2q*VfuoJ*Y4oY_9FA6<Q_Ue<OYr}M(=hu7jm
z)>-u8`Zdm0@jWoIHLewa5QuP({*m~&+@-QgsKCig8g_-;ih#F$|2&dPP+W_Mndp{l
zI!!9dKYu14;4SwEKCQ|5L^AYdh)A9wvqVsmS91lGv&xLrLelEMBGTqW0N1rNf1=`K
z8=%%j%v0ggdiZ5DmDx1R6lKbrFWJSqU3X5<U2x}7cxWa{9DkE#<y7a}q66Fh=8m*?
zGK(Wy+oY~@m*;)>QKGW?8+GkUUR{e*=VL)|*;W;;M}~V^6`#IM$A*1=g^TyuVtN+$
z)cQq>(*f7RO#@%9i~HHf^$s7K>5k5a_J=+UcG7n5lqcKG>7}8Rp#k~V*$G15-L)Rl
z7j0y{<h)Gpz3$txKL~of>n3ppd(5B32Lw%xOpS#&h8%{R1j|R?MXtEkoDckzo*oOE
z&J#*_F7XE4ANFVK`8Y=pM51-#bv@sh%xYgZA*}JX9}!@X`P>U$KJ|xeMjw)4cpG^h
z-V;B#nNgZzb8G$@IF?>s$f=6%0(n2sY=-jADnSLI^6<X#<wk%aAA%Kbfrhf%_>z>x
zW%lt!9_LP;KfkGX0?D`48LG%wpOt-~{6j%Gex76u8+AxtJCvmjfT*t3MJr!kvzi(T
z8C0&pmn^=O`7@g<fBi-2R>+im?7j)C&p84sB%xLA0f}7IKpK)Jva(PNkb6WZ=n!)#
zILI9|<VOhkL4w@4U?>F06&vys%Ypg(Eo?{*?BDk=v%fzSQ5Kbygj|(B*@HmV4rVrv
z<>^;=kgn#<RWuwmWMzP#Y^+!ejctrTEUs3zznehuy8<D%Rv<@1a#t%$YX_jK0OcQF
z03r9k9|I`K|M<kwLV!|3R)Jj9#vVk@#lp(MN-2m;PEO8mZ)^fo68rd9bI5-JlxB{O
zwm<;D#l?lig@eV$-W0&b%gYO3We2dcGef>$c5t(HG<0RQcA)yRlfU~B137%MH@9^(
zx3MPw-LIjMjgzAQCFSpd{`L3gJVCDJ{~pQO;jd*u76|zL2EfL`3iwywkf!{<p8^%k
zT|t(bV&+y5@j%89<YwpK|Kt1r_vYUt{zprVf4Agi{jZk)@#dc`RUJU~qBd5LAsq$(
zt(m`u{m++wHRK2UUip7W;!iRE@f0FwL1ccwzjP*uJTrHE2?Zq#B`GGN;tGA7iQud9
zp)q)B{2j0O2)i#F?s)5NhORE#UPkuAxcP*|66YQ#|3HSi3hUk%%2#5Tu?5>1sc%f~
zzq`1Xw#+)5on%3=+oNBtEaS>Qsjlk22o#rIM6Fe6+y9CK&otXnna@<`%4G9O<1y<|
zpb>E<l6G(>>OD0k2znt%OkLkg)$KADf+FVQva@O3+}xD3v<@r5r_>A}5J*WuL4h=j
z7Bo^Ioeq%1*WR6>!A6RtlARfd%^rtmk=4{x8q4Lk+lgIE{s28EsaaSE;$4s@X_>1s
z*Lj*tCsXQTG)erPJ)Zm2GAEC3ys3}BBwzdzd#C*r+!ZNwOY(%^^|H7(CFpYluA9pC
zdU<5KoLYK*p1>G?ame%uo_LA(1N*RC>LW_%roQ+qs@}<~JZwnVJu-&AjKARkEna}w
zO~$9#KhMcu9GGU0a<6}}1uN^IKeAKXEJPmB;#^-8ShW?+)SKgIR-3gr9@L}~J8TLS
z47oog7AX4i1iwn%idgB#WQ9Y87VZA8i@}5#)bnmw-kxpDD4BR<oW%=R{*B;cx`Lj1
zwcb$wcipyz#QBP}vEG3(P>6th(o4s=v-w(Hq{UZ{v{-M$?SQvw1TewA6b6X@eJMXc
z6vhl7uCz*Tw7)Y90Y+@vQ-|)8eF6Mv*RLz%b2MWfm}F?)i5eQ-7|N*HUF7V@Ez16X
zy+HaDK1D34n0i`tKB_1zFb?t*@N|W@-}e-YXE(heHlJ>6B6gp1Ye}}GNBif}elPU!
zHH>7FJnDRJ1Pi}D*Rmytlh8HVFhE<8(qWe=J|MbPtdCXTzgB=5(jAUlSnK$USd+)c
z`Ex)^b3dNxpNp&hNCCCSNKYR-2575?;guOr)1^$eYU;Q;tc&$(sZ!K68U2?KENEaZ
zP37XlggP0wx;)fqWVKm{PHYn_Yp(@oO07aTl?`V{|5QW{HcZCbX&+&q2GS^k*rkDb
zgIRC1sx_-FszUX3W(H6-)PJhXA5rFE2SpOEgOY^r`7JZiTWUobcEfSRrkb8&C55UW
z$J2SLl$F!Jgi-3(y*Us8I-L7DllLJ4*#ZWMk%h&12$QQ)rSujG&6-u2UXi@pMvVj9
zw7z{*)iv*qeRTa95Oidf0gPuIvo4S{b=P^mPgi>E2~lD<%)`^Is&1QGccV3Lp3;j`
zuhPqDJ#HGQ#ima?4`+HgA)!y@7F5+MBb})}I-SWmhZ-5H(sHA&Y&Z2GV-hXyV*Z3*
zFnY9_7jnF8h{4-FwqBrzJ2tikBW?Iwz};lg!qXR&Zl~bARd7Ap&NoqX@D^_PwC_nh
zZ(k#ew9~owL#B)Ief>f0UY5rw@Tk73ZX%n*s&@SG)Nt`RVM0vpUHo?5fD$V;1vnC?
z*0SfFo7?%x%vWvsgO!Hr$;Ro|+`kV%4j0zlXly0lS-Z6Dz~0JD*W(W0;<oNZT<~QR
zrR8?*;R@B|(BgY(;fmYC$xMzREcp51Y-gQ&J<sj_=BTVP`<i&leSaflXVqn0{W?nE
zhG5YpyJNQ0`|%g;#c+;Dt>pnb?{-YU_Rj!xsUc9?n{Pg%PRv0}G<X2!Bs^xm0(75+
zPmH~Fw0q;RV0As_$i4AIXXbS2JZ*g0W+SkY=GAx|`^!mF;ZB3Pv>s7Z_b|)IP95mk
z6klp<`?dLcd(E81q7p~q>#3LzIHU<+oDiuoE1RVDV5>U(U8QlRH0EM24?mg7bQak(
z?)Z5t;OEY-1D88d<}b7_nLriNAKQ55>*P%r_N8;!Z+@TM>R03nDmrgP^?gLsI4v4S
zhd1iYXSeI7gp#93fWwW;*4l+?0Nqv<J=cv70@`7;S&>BCv1=U*@v>ZN8qUjB3k->>
z@%^0UqSb4MKcB#R`lI{P`JlQ9?y|b=7-pnFpNGn~_%ca(@F#`c0tqP`#VSd-Ee<iO
zi<+P?_c%brb{p22bTJF9n(GWn|J0v*S0f#Bf37Cqvf;a$QmawWqaY~U^BIg^8@Wth
zFTFP@^?Gb&msLXAl%iZ+2t?pvHLP%Oya|qc?0WG~@h0U{Yjrv)?LV*bS(P^#Pob!4
zzmQ5JUUOSm)v|W7V`kC;3j^33=3&g2+9TN)YirLZ%&H0Aqoy-!&`t0)(`Na}T419Q
zN-*N9v3gW8H9vkfw_B)~^w$tl<7NuR>@xw+7JN8T!yPSC@9M0#UJyp!m5T>w>yb0N
zcq?2WZ;tgDA+kMo7&KA^oiH+$mg{%rzB5~p@XqGYmV0C8*IxZSKuJibvt46{dFHnf
z@N2;I`>I^b>wg<(SwHQ|5ZgBrPdj$ay+RjB$e9HD;_T~qG_SflrJp0@7%lMJ{N>?V
zo%cE+UKC@q!YZX~Ie2M4zcOiv*l?q~W`=>H)^n7JUgBL$UK~GtJj^ZMNqGpoq`6j?
z-+0<}gy2b~`V{p$w%;egfLT08I+^7&J=`l&r7Vv%@WqVJ3nTZct0<5kCogHzjLZ8G
zF7@K!b)@^{L{mWvhc|`8-ejU=JPne0yXPKLWZPM1nFBX-Y_#D04}?9(f&5}nL?Wog
z##;PTt07Wgxq7%I&WLUNZSVmhiKgXRV?%;mHvNaHE^0K4I}0Ggago_(*=M$^e%5YI
zPPeQ&gGRH}_fn>^iFuM$l6|DVOs4mW+Vk-G-m#6-VU8}>%36TE<{jO<N6YLT7Xtd`
zYFYm<jq?(4<Qh$@-o@Bumy-hGPW=tWb0yRE7bCQXvtm^|c>N3dKDyYGPuqY~Nos`E
z+MAzg7BBRdyA#P}mF+8DdrkHhD8XaO@<LSUeA4sN;w1Fk>-J?bsqCsZOBNVzdzmgl
z4d~0(b&<sG`xF;_!?72`RMDStHM%BwZ#`SK<02rYvoq;-?M3*;MV`%N5o9Wks5T6b
zug4VQpZ@X$@bbA8xILVml4j|YD3Z@U&2pYh(Cct7MX_8L^xBSUJB^#n1R}}5j|GIF
z#dEKFY7fd204lT_oaMEf68bXG!C>(H&$A$W{W(#O;<n-<0b~yz?uk{9#a>>3N--Lh
z?s71?m#7^9_o;g7JGZzMr=gS5hfmQ$6hbeLb<ct~cCDmN+p)Q7U7B?!jL_E0jgeYn
z>n<q<B&&uGC)+krm?22lo#&g<y};;Kr@3b9onAZJ@p39hXM7O#0-tsO+ASkJu5TX3
z05d*)XrP~dJ~%IqE_dfP84Y(%;O_$g>*#!z0FSeVWVHs{jrZWYczIBrEVtbejI!Q4
zL!b($<>JhMQmtjyHmBXT?WvOFyV2x0rC9#w7PgOMJ8hl%t;U@W7FrC~TJNep<0h^B
zaU_H|VLWMVPRfHdFuI;@_!f=hBSn`z9_@yZ(+9rTb%`JvS9d;C2$M&ywz({<yP(<n
zuyh@>A1v01-#0CV?Ah<MwOO?_nr~@&>v{JPn9iugez1--<k*usWDfr1olUbKz^9_W
zQpWTCBjJom{7(FOlF4LZ!Uel)20&^{LUhTJ-FQj+P%1pzQpK--!&*uU=a0R1hz-M!
zv~9k1yjVB;c`B1nzE9(27xZiM!^NgFK(fvGWEI>{2Ri?$zWrTYe|A5W!}PQJJU{tZ
z67%fs<=)i7ZJo))%<YumZF{}-s+KK$klA}mJN4_g`I7Mo(q^K2oa{b5FcWpgBiPKa
z3j|l&L7p#97#HbOLZ%tst)6$&;`SRKl7~rL*68tdJ-_OBT{md4z&ZCft$)5h>wM5#
z06pFx@hoOIB(Df938%*lk!X4x6eg>3Z&JjRZ{6)e2y*>QE+%J--ES_#F%*-VoU>Tx
z)=DZW+rw8*7X$eEK=vOZtw8lG!@kZxVnON&EzO@($S!YRgT4@h^V_fI`DSuO#l`)L
z$2g`0X)y<6{Mu`hjC%u-YF8VVC5W1cx5fY=NXD;!0nteLH6%ah2czvUiuY%`RJIJ4
zWP8UgpEZlp$Un<EFPhU9+ti>EUNu)&V!1s<a_>MqOTy4<8CT(W>`Uz?C<-}A(tGw^
zsY>xZHkjX=8FzBLw|1C-j*;1ZIUj$)<hxqZ9|5BeAsjlPYmP?_&Bc1Mew3y1Y?18F
z)vR1%SyijjEV0`*mi@Ea-r<vZaV8}{-RU+ds=FV-ycjaE$W>gIt7Mqq^(D07g3;|e
z+*?Hez#I4;4-fDi|5i^z`Ph4|PI4rpMyX2VNr80lviDL#ncbxvBfLE-O-POKof&}~
zsuznoxw&^*atD9*K;<8S@EkSV-P+?&VU(+`Q&8Re%z{!MNYI*?W*c6o_tcl^wvAsa
zx^mB3Ht+p#TDBvcHOaqqg?!4Sh%1xvPBBc0?^X=k!XTL?6Z9=VdbnsZZwK_`{bXFO
zE!_jlkGChviq3bX;MCA^ap5x@#dn&cM!zZac=u`ICfY}*=$AODUGsC4=i>-%Cr^i3
zF<OVmZ4zJRz&YWq=y<Edu-@(IQEB0|y}G_o@!s*GgX5}k&?t<}T}{_%_5$6rIFONw
z{kW_OhF+-&jb!oRw#zzh*``euosdTXoyWi@^6q+J?&D`cSOgq>w}G9?_Of?~7F4G~
z+1~f5RFQ?XvvPb4f+1wyC4(O7c~*_j5telm^R;`V9(Q>&>Jma0%5p+mGQ2PTC?p%6
zBHk}gE><=xVnHxcD`(H)J7dO~db$M@zSjkc%YpTlakP=EeaH7BN|HQrI_;K0Oq#9z
zSo1pvz>~p017`zjnC4XLhMlC-rZfCo1-tFh&~6e8TQ~CiDxdYdTmVo${^9f`dQIr&
z$JRwQ0;wa$J9R-;bmNM7<}4vS?6FLFL?N^9xVIU$Ahp~4tYrNN3)GZ@?eBVSGA!5)
zU)M*ImNWm{U_3BrE3lk8Tv)@X>=P$3nz)A0{F_x8)1{2kNlZ={J4)89(j<o6)N!lx
z8i8j)C(Tb>t1+(&JPch}J}U-<Qa&QGIPGv+&uDNDP?VcSt7zBczz-aqR<+baH_7R^
zV(RNflR^R`?D>50Tx+_32tXj0jK<3bbNNx*>JFyO2ecyj*7eck%nz^emvVNRnBLq8
zIK4>`CO@_gFSC{$L8cDb_eHfM!aKk4PsH=<emPs8y6M5KY`#Hv!9eXciPC2Ar%uA}
zjX(55Al0DoI-e;2ild`XU6@GqfHKGw6U2c(#_yt5%LIu3I61mJ_hek9p>;UlHy%qL
zKO|W^N&gf8`qA+hI2#s0Ky&PZ)*p#@@zT7%J<~_R<`;4`Xx+inZeAx<j3({O_W^@4
z>aCX5yze#;ZnZfzt(%`)rQFK!tK(2<lJJXlL^hF2&uEB_r4B1X5Ukq1w%;w<+LfUg
z=d|6{_O`^%F&>|;f7Cl_IAEs!z_Aj=KRqvsXc6X6Sh^S0I7~xSf6S~LvCF5wLU5GJ
zSl#T}Vp|^+_Q&j;ko^4pJyr3Wlt}GsIxW`P-4fG$JvQEPgH6R1=O-ynmYZhFganP|
zk2NPx>aEPYWm9(K&ku}RW%lC2$0xp->xwIByo5F&*8<05Ddt&fE4VLuLdf=8M<%#r
zpQ41ztFuH(xK<2cdvvd1n^bb$E_Z8JotF=9)-c6%3@MDVT%8W*6vxJ{<*U&IF)Ucx
zUH!SgA8b(Ts*e+P!cR^lc^k^^^@q_vg0ZF&<b@t&xKa1leMEV0Qu5)sXMOZsL``bn
zu}ypt7Md5&dJ-}{>>20}u&YLE$KZo4(`|G9Tq6e15w_cT`ZYwhYQheG(2$;b{mXkd
zA&h-zxwt@neK#%yep(YTA~^wwQY6tEIrRz+xj<4>M+(I_i0bhS-CMY|m5LeYcuJ_2
z5%g#5uSV4^+RohgLnqmK#XX&`v)4`kV%bj|wd)rX{6>>!!1V%tR0)s4OV?pQ*Obu9
zdotpS2R;Z9(GZ*qAz-@21e)py#89bp6Mn-&fl7Z}Ny#5o7UC_N=U-$^btocs0SWiw
z$2h7ozzhde-rw&RJ!$H!uSC9nKuMPB>s_4%=UMX%#cVPBNK{G3QX&@yXf{jSoTS)y
zg)xlv{sCk)W`Bc$cyD=tE#JrWt12IqqbC}f6oS%Srv+WWQ5zXf7rITiFLWBZG*)^K
z|M^c*_HHZd3&mhY6Ej0UVIQt_fVD${NC0WPpY;SBQ7(D2M-opGtMy8=FnTN+_loc#
zpRT@_Rj75NKi|$<(^cRgRvskC9h0{{A!aGE<O#5BTr4_d2Orl>m8nKd*bIIFYc?I4
z^x;ap75egWe>?HM?a^H@t9+Nz&<b&Ep;+FAy5Q5t=va@_4*7~qs*j#!YSPt_*g8g4
zt-D$W9c%8Jt8Uy3LqaJC{?XOej@!}s+Z^I}Wt1{>f_6lc)q;+G54wGu$at`?uGEta
zPRTs?DHg{vzq&sD8d9Z8yUuUN9DaL;u<FV9mc^&ea^yYOdcSKW>FCt3uSmP~i^B?g
z-{Q=96Lnm<I*qh?^OMwSz%IW_LD1`nca~|iD9O(((L$aT#6G(XGo8BMhdolz@l5^z
z;Mr(?`70*2IJ9yqHt0)(qEi8@O0bi>#`HtXO=}FdFMH5UhMHuC%J2AXoFP%J8+fM&
zd4NrvOce?H4t=vK5nBwtpw`@yQfRCOr{Ht*R90<w1^z}evNJW>CkGVW73?8b?Uwq*
z0+HJ%&~qTgX><5NE2DV~xw}!b!6}R;LuNstbh<41k-cv_52!@OX-Ku2(H!1?9~mwO
zJn2>Bpy@$T@%KrG_NI#xJfsuYCzX~rG<12Y@#TT{fl9fmyIh2zl42psaz4K8pL5nz
zn5<mF8|2PRs+MqlgbfDI<TPu@J6m>k+u{c};tcDaN6d?#Fq))Gw3mZ%k3+~l0#Vix
zq&~Jw(|~HGk%jaygdRhg?Ao$x%f2>^*5G_DvOUEK44W{#`z8GrnV4cxYJoiN=F6=7
zEYtcIg50(SJA-pY>sY}f?7p|jT!A}%PJ7{FfZ1yjOzvS~aoY^{QToFrSntrG!DMK#
zvDdD+^(BdO;wRak&!^@#3>EU!r*tt^j?9!6vRUqj^o!mPC*O?@y(`pc!dpI7jE2#Y
zo=rBpt1c9rw~b&?t-<3*kUz#>hc!?XTH~a_D|aRvW^>0rp3(3r9dPB?iR)CvtJ7R(
ze6P;c*84Hj(#~R$k`O$B{8lrKb}Zs>EO5Omxd{OyE?>T-o@=g}{SS8VPMN|Nbe`3A
zhHQn?wSysePA1Ukzpnq{;jr|zcprFuA4ON|rc;z*+xx4xthDzmIJv!o`yj^iC}8?D
z#2Azljj9*#u)D7rLTuhsSunX>GTjWpfI7R4#5Q)T-{baZU|S^Y!IlC?)pqvbr#goi
zUj2!V8@<%EGC=9E6YJRa;6z>f-qCE$ciL0Hj0|pF7wU>LraXxnK4SM@{vT#I7ez>y
zuKuJjdJn7rgn-WyaJC^j^=7exx>rK44ezT5(T)0*2W2)q->$rSx^Er7(^>OaP|L={
z|M+%1GS+rQqK2z>5N-4OQl?FWwVegE?Ns1#@WDtl0Z+ABO>5j@aEW~qK)-UkS~35l
zqU2mh;+DYtL3I>qKo77NM%=Q`5d-giYx`sS)y;NKv(8x$(u$oVGBR9}cO{x;tyw3(
z%Q~)-R=q^p>(|nK?gO=!VSH4)KAo>C%*Z>C+nTp{#JrshNfxXqm<c%@jzo{fuHMKN
z8a_bR&UPkdTQ3CbsRjS(Z-r0DeYFo-g9L&s){2N4rMw@(ff-q>7X`N9ZwrOPE#(O^
zQp}!JP1fq>KeK4KS6s+OP*Owtzh*dwEa1x$97mP8N=xm^&J|p1IVA_L-Xy#V@^KJK
zOQhwp+evJ`$O1os+?<xuFOGUu+yv5HlAriasl^?66%JKv+M8RMCjShz$X(#7jV5eO
zah@SO%xk`jrRkQ@o8v{QTbTKu3FYFbaebT`-#?eB?cUpb7-8Szt?$)*6+z6a!vw%+
zl`DF@$#--n<vZcKO=i9ol1+POzB>=7)hWz!ptsK3Zdyvz`uHcs>G$0q3L~NIc0Z9a
zMB8#s5PT~BiJ>jL5>K@p`)?97$C}C){`?_U2yqW9_ynllq>W$kbU_`l5&%NXcc^g+
zthSpy)V9yJs3G{fQ$OKoy^cg;8pnmkaWoyZkXLFUe+4rX=d{AUoVhL5;g_^#)~!fr
znTZN-8(L(6->m;)$`6TQydwprSuXIIHFxKWUeC3BOzHg}d^Z6Mr)bW*Y6>)MJRYBz
zG+eWm|IJ5}!iX@W=*LJji&|KiwjH%11esg@gF63Bg)V*RmU2%y<CmT_H7%cr(OCW;
zy=g3C{%qHoC!z#j<KRwx)LQPYz9IboTzvHnC1y48Zi{M&cSu?TKBh&>-;4hb&fbCy
z1`K8#F*KU)g=gQs<_3+#QCpB<&l~+M_W#Hl%p1WGa(+&*_M(&zFH|j4n<<ctcg$J+
z7xn$0(t$)eX5S2U*!$ozFpW}d+mil^YyZ~-$^{Tr$U{hgT*?0aFxoE7H&<N^bAN8V
z{}>n*`U4b8X!R%aJi~y50oG^%8QH(I^xv0xDY%PdCany?1)~bFZbGa7Az!U<U!kp-
z-93PwMtxGR!35X;$c&so(uU=R-hKt1GIb*U%jPkvCer%xcXnHYl8Ujh^OgiG8r8xO
z5OZreVhmx}*<DUo$`77P;85^c63l0dzDr%(ecCIAK;F&GO|7rA+7w-n7ZC}Gi6Ci{
zU;im1h~R`HF@5tVQrJX)hs@xMF~Bva{kB9ZuY-x)&a1t0Fc=;jH|8$N0J5JD6I2dO
z=Xa}>$z<m&u4TV8?esZmSb*D9*1ou$5*n-OdQNk&gD@uP{7+Z2_EQ44!%w&CfB*yx
zyk51$Z(-jlZ0Zjp0G-37^VNoZa5MEqqcIes#s@Qn4S9OD$8Zl`1L3$AyXiKg<(hS$
z3$rYPd~ZXssA{R}T>r5Za+VMc?g#`un+;M*^t(D8kAEoYXNdLa+@;%eV(s?WVZVdf
z<+fA+uvh`nVVcdRDc=Zrw=?OrH^1je`nvA(psSWJsGc!dpJwyz%|%*7ceB1X7_{hq
zRIxM8F_nNL&#!oYeMAfBxQdfWdq<y4S(@<*o6YC>kzwzF!}upXLKUfi`<%Oj|I;MG
zcKhXI{A4EIg1dkrymkAp!Ha|9?BEZYDgW5%3ZLM9niBZMJU=}gdA3?CRQ8scPGu3Q
zDJfCv`#d?#x3<@?PS<PpWvqM{seZmc8tX^G0X<f26^c)hx(jaBf1NcRJyUj^ndm2?
zcEDPp5PCcp<-Om}=j8q30s$Mf52tNM4>ny-YO?v)hu`B#oPUULtvV{BLDaFFSZ_y)
zP++wGEm!I%xrW9J9c<ZFFp)K#$5}^HnkqfYQ?YzDi#V}epje{c^<l^DTKrbDklq`v
zc#oxe%SCox2<N!dvX>QKHzlZjefKi}V;d6YC@=It!@e4}ZaXP*`a;MlC3wG2MLmO=
z1yQ;FH%_T8e0@*F-SO1?ZJhV55TNpPpjNxd`n~25vBMWZ`0mz^9t)bLB#V$47kE9~
zl!m;Bf^leMzBR^IR#z*a^PdY>EEjJegS{Yoyg~M;vaRy*#KtFnFp_ADv8p|9DAkw3
zduV@yZOBL_-IcDJ;D>3pSAE6YVylzI!CHq$bvVOnGzp&?LM>U0hQ;*L5SdScT7?$9
zr1<*ISn?PouTbW0Xuk6#$9GcTWVm=TTO1wds?TfA{y@UW`V>0GeqyyynW@z$P^9w)
zwyN{K)M&9pk!lf?tQ+_|u<|^wZDa0!_`@XKN~MWjxd_n<wuM&6wb61>Df`E{;g#3!
zb#2){^-qK-lfk37*RO5e0xIMcQWMi7VEU=!D)OGN5AJ!FSI1j~QfQ9@J)PU8vLNO?
zt-MrAtXw9SD(!%7o74A8>^=rm6h>y|3Io6Xx1)jUD1iq)&wD-zKUwK-Pkl829Tze`
zI&kA3HEv#^6VuUVd)CIGFs1o`$MlUMsgh~Ne#|fiSbO*pUnYTH{W$&&2M}G(;u}K_
znhCqdjU{zZ41Rfd`^RWf=1+rPrg=hpJ0DIN_c9!!Htz?CY|Jth?@2t*duEDciFo&O
z0ut_GTp?C^sV4!NcVGZl$+-s}e?Rdy^*wmM`f`$Q46<3urq9|h<${cVz5?g7%)}tn
zh6?-kJYLPpCkx!JD6e_l>gGn<x&--(N=yNdn5g-lk>FiLn)?E4Da04y^vxs^@t4q_
zHNa_HR;2;pf_S;OJ`5opBnGcZ9;8ai54Yp3z4w_l@4c4>2*vMT%Xr+LGRHUuV#qBw
zT5)<-b=)YatJqQzd%E%1_9D^l1LY344SPQlS-r*Ab&O5IsaJ5>|3+b|Z?o>*_D{Ff
zLhidvM;g^5ddzXjY57Cp{^o>{z}P;vKkkF{tTAIUs>}}*kJqCmWa9LxW(%E}wcmcS
zaJMAHGoz`!W8&6ms+M8n9h$+R)yPQsLA4z~?0h&!&mtYfgGd($z3KY_^#~J>zgz~<
zP=lJ{L%LOCYQ5R?`@Waw+pZ&AY1}UvtyoLvkC#(N0zRdA>v-ChxhEkRBHoQlpBWqG
z?FK%-Y5W*_;YJZd75Z7Bdh(?8sIv9>Tbs@+wt=NlD1Y+!Bw+OyMIozQ_?ln>Wx=-`
zGUU-@K94onY!Ve@F&@V?AqGh3$i^{jxUaKpW6+P?$VK=861p+3UtOwPXI&hSElCP_
zjL})`<#wy<dljmQh0?u^=?p%9pWtzQSZJKe-W^?EKtU{I1Av55ig{=2%isUuDodE*
zSdR^i4WlN#@m<+B-;WaGPH}$`7$1<_isV~7oCGk?S77t@hr@`_Nxa?<>}W30NMb2l
zGof6A360Zm^v8ai4i676h3d)w7J6j7uV4-3w&%jDxhpu)ZvgpLnC3c07|+INk&+oC
z!bOoihw^p!^$h&=?%IOrQtAHQSgziwmzRzk**sTvNNe*{KLTa21@$&QBb{}+!BLRk
z_Q2L2e)anqR}n3j6+7{4rmLkwY5a!vr?Z#ms(HT$`eyj$GY;&euf;Zu=Ki;W7z^Z;
zso;Qvyi*RgLefz`*Wcz;3xKB!Xb!J^g)7a10e#wbCfHzLq}#9bh3_z4UXVW9=ecDn
zZwLODtoV<}e_8=ixRfq;xu0%OhJq_0vBA}JzYapDFyw0U+3#$TZ!A#lQjZqPiq-lF
z#SlNK!bxMYq{Xm0cE{nqMud-dn&}QsO`wV))S<$X`Pzb5K-;__t@1|W%`_}!0B&eQ
zSouR=+N-a<Pnam!Ng^w3HAaTA?hxGW6hdAe+}xPQp;5z!IbUVzPtQ}L&nhr4h4^Y7
z7|3{rH1+y$@E*zfXYzsiaYdxYIoA&ZSg%q{V${@~U!-{<@X5{w)37KKH1CC6UG&lD
zUPSfTpd`nZ2KvzXn5@94MO&nlq>ZrFCapg`Bp8y6t4&u#mipe-tp}Lz^PMS;Eh&<s
zDzGFeF_mcG1Q_F4_Pn<L62UmHa<v<V>Si}U%~FE$D^+be2i@7`AK{V;J~R)Cbo)7R
zKVJ-(`%-cDc>L4i7`&h`;mk+L7z~=xxWXD4c8y`1c%Ru`Hre-3<al(jxfkhk!tM50
z!)Wp65I?0&yCA|CIpuRX!F|Mx<8($kTJ)A!y&EVdPvCV=PKCa<6)^@BkXWf1A}u3I
z4@`u{>P-tKI)FwXCf5ieH^LNHd8IiQ_ERbR`ec&tOvMPr-1zd%Ozp1Cw;U0|sIiUQ
z5Yof%WxfsyLi6P{T(O*XmYo52u9Y#2&I$vCSd{Nm1qF4R+j^*PQcbfIF9xB`EttFr
zSqmbY*4)ePX-u)l$JyPcM14=1*7Zms`GNtz=WDC`?Ra^|ZZ?84MpTW)HMH=BKK%f@
zm93)ikqqY?`Q4ODF#Cgm26_RS(%t=06=N8vg28|J)aT_vpA$m58}#<XUk6!c1fJ)@
z+6*#pg?s1f>7$debLEe`-A`M5{%5qzDF%h!tM#4-VK9TWr!BID>$FgDb8oVL@1)M5
zY<p(`LzPiR<rUfU4!*urNEAtd_JVaUI8?8CO&DFf-ZIx1i#@T-;K@(r*XV1+H*oJb
zqQbZV^7HJMK^@|>dTUB}s;};UYJ~=&UxaZYF)IGJ2ae{9=LChdBB8{MuzIogwObS{
z064O4_wl})IPV31spexi*u*O`;_NHMQ&%^6st@zjfbGD<BbE_tXHZA{<@0<=X1Hpi
zvYa>iNr3$1%PcgB8~ieIjn769e!bi%Vq;kAKFU1+wXgaYVKAB+M4HW8Q4vb(e-e8C
zE=2PCOx2x{2&TDoM^z;ddh|@=WxTZXndjw8`#6!BisCQ|o546;t2(+F8==;WS2=5#
ziQFIKsbS5t1VdfQ&<Sk_HZw~Riyf)17er<C_k{#cg3XAvIXJfpOM#qhGVGFN@}dHE
zCl?3)3*>G{!3bwtqk%ct@~eggG#YY^cLrKM@-3-v8A6NY)xR?aq)b@ZE^ce#j?B?A
z0e~ilNb{rt)$IPiQbEDjA_QE`ueUlajQ(*x%8}tx>a07#yX=sVy#d{5?!rOm3y^93
zQ)NVx$*w0)3C1e`z>Su8QNZnRacXXfC8pEh|2e!r@Ibj1+_}*w99dLtSAI$+HzUp0
zEX8*HG4%vOKMWL^L#{KmN#XxDewt&3BlkH*>MH|cUm1++*HGS~nU^Z3?);JE|1Sgu
z3F0*_v4*p`ZGNRy6`Gs<V=;ehONArEyGS;A9yX6jY~B9-smikJrE=kag#Ul^>c@!<
z?Zd(?jduB}JX>NiYrV5~W7VQyz9``zHun#tCrk%J?7Uw4L3(6N{$xIzmiQovc5{t(
zj7MDH8rwy-^%Ls~-&2?Iueht!6Yz&I(Xqz=Jt)xMH{W0CMqy!Elzs~!rZDvwOcLks
ztAcEm6oJy3xVunB=AD#7(<t;0l=Wwongu_MTbzC+6`rU#ED1*-0(L2$*iO_aDraVJ
ziw099q8m0m5>-fe@YDYgUQQIHf;GM)(^RYgD6lzdx2-7(vs9bDpY;Qrxe@6`JG1nt
zs=6+<)e<DwFL8tKPyOdH|6@jTig1pRxl|rf_c}y#_K48iT`20wN<YX0zddcl?Ue^f
zni_iUrkWaW_J{qzGK|@H??)U?;2Bh`^OOrITB<9DSS{7c=2CD;zR%0^3?zJHSWr!W
z<9>5YUz}kd?rd+Bl&*>AHOZ*l+si(C?(KB&M(s9@biU@3I4=Y^>|{7h#zMS?Wnvi-
z|F?RY#EQ1lR{L&fgnf&qRc93D&rY`whn0Z(=^a0dI2JqiN=P2*WO)oy169>Ul<Kt0
zp2U7B)=_on;-<ojXZ`p7d33|Hb#OJMkSSgKrptz!#8xFg{l4;^p^4H+{VlVj?eUMA
zi_Hjtl+j|X5&p`L4u&ypn-0~m*J#8%3PrN%YP`Qbqw_)#>+hnfL<kZrl;Ye=vsut}
zN#vO15uJy?6l!T|YU*C&?dUkG#>J12%qNc<#MT%;KZ0@Rcn%8Ux5ofo2@tkU6|rhE
zU7XZS43eKEhg^+;4~5Bk3_eds`tT&Rk{MZcZWeWDcGr)JcB`#U@gbz{5_kZ;a(U2i
zkLz~YvZs~`T()kjSg{{t)}r;&!tr|~cKjxC__^9>0QqSJl%&4uJ;g+OCul8G9)9od
zq`u=VJ420LS6cs-#{72->}d*tqkOfNi?zrfcG!~`j6>bxk6heju<$^COKT1YbGz!2
zJ^5W)S~^jb)y0UJ47=UPRk8}j@t5J*$QIf=oz#4MJiO735HdNHk^)Qqxjl*8hpNh=
z6twHEhX5X~VRup8*plUxBL8H7K1*1^C0ism6ULO_LplHTobth2huv|>^%qSWh+CwE
zRLfO*K3y-^&nb!{Wsc6C3n^uJUP!t@3Il!v|HQd&WO&1JH2dLhMkb~N@2C3_Nd1-*
z=KF-F?s65kkHQ&QZzLJpD<-&9=v>j<>L7In3~bwd;{m~{%zP*H@oGH{Mcd~P$ce8f
zPUcllY(GqqTdLl)E{ej4@r4MdEU%MCcXM<8t?njkghk(B_!x+(f<?ES^lyU#smF6Y
zt{JLthJZuK+tbxq2UB^(zTKHDVt0W@kL;n42gZ#EJmxry%9f7{i1+6|Rm}}~5&9KU
zC?i;cPy!I7I_q$0R)JzNUnIaa_+Pm<xeC6j>lbYH>5>&MP)jEbLuxe`10lZM`w-9N
zHzD$y_)yQasOnH-rcf@HON3}k9>N-Y<UJ~{OE5!y!!AbZ`V)GUropf;*d8*oQ3%vz
z_7w*Qyh4kE@C2$v?hhwTWkIO+FuZN|hh<LenG$bjz~rArY6p8FV_KM-R+Pes1tIlw
zFYSlK$yM+3+1K7#uV`r1o8<!g9s}lQn(vX3k+)MmMa6pEEQ)J2Su@Ae%B$&i@A#vz
z#3;)Ps2c1b%HxrHo^{-28GTrL!(meLKzagO2LZuSm2Ia$S$RPn=?=$}B~@G1!14F{
zW<vg&DehX0mh{QG&Z+V&e8<%R8J-s-_Dkl)s_uE&aw^`iseZ(#5EuLhS?8$oqG+0s
zCE$J)dc2HI0u*b6?j;Ix(n*b}q7$f#tSfo;fJACkPLcsQ_R3w}UW=|<kst_!jfEsU
z4-$=qp048K1|qqZBqjwPET6C;JXH}t1kqmnMyZmX-o1lx^IJR{xsx}`HdT<^%07ge
z8B3s7R*5c|+VzEoH4<u4y#BQqedu!0zwzd~I0Ws65#xB$Y#m1QaxA;{IAtJ+Y@0s*
zjJ16R?}>A2_tiCY06`|R9Hm}%>+q>ruTmpRPo`3u@MiGZ0e9BO&##Q<$vnvlQOrvp
zbV-@k|E_*T^;7kOYByPFwyTAZIc1zN>r7E0=hB}12cPs3WQWDwvuRUE<z^tH0zC`M
zJTFxS6&(ShD)HHv1JO(YY7(p1>E+76lY`CJ-PSXe+s?*UmncR&+yQO26rIzC1-<)=
zZCDp&8ii^#8VT+d+W;6}A}pcP?G^|N1ls5gIy^;uW2^-GsdF=&aSjIBHzr>$6G$KC
z{{=z~NuRbJu`m-^P+Mm}qT{wh<eFX(a-1_n--lw$-2V5|XzW2A)M7O@>z$gH;Kx+;
zrC?6qsOPSi2cbpVJ~YO+VPzPb@N5Axk6UCfG4euBDmA~F;Sk_i)G&?Vh^rYgA&48M
zQ)ZvsMdLFCDki5b+Gv)?=~q|wku?b4bWQ3>G2a)0q5jzT!zjWLZ#2aBZbTbMxn<Jh
z4<F7~fD^}OG0!B6wcumtK6q`VLsaq(`KXzF>*~vxxR>G+eld!jVsE8<r@U>`Ru;Z>
z5kC}UWAR-@Y(dUR;=1>PY$c@Ja`AInMSXJ#8<uJ^#=7II>~+s846{4`Uut4PulfYj
z?d&>Nsx5T7;sueXngzp&aO|!JHc~6r!IRxV86k>SBM{QDH%*&@Ne&-dt$3VAU~36K
zL=(PHbZzd&bX?sIQk185k9KaSxIm{XL3T@oshSl;^f&ok1`B;-(j6M0=*x@iV5TG7
zazUBFXw0^ZV)SNwYwV{~Dx%ZV-BxsB+N(Wf@BN9OQ?x*Zj6zmiy-sS`mgyMX&p$@$
zWn{xKC0r6d*kM_q=LZ$9Yq(&Ri)z%8%WD*{W(z_*l@yl-hIljnO2}Pq2<l1g7|ZWc
z0CV7JswenbO@rP40%E&IcarrhMIbJw<aa$p7*385ge|;)kawSn#jqfzH$vFAy4x`F
zH#4fWMjjC}TLKAycQGnmHGWkeD$pJcln7M{A_Cx!A^pg;T^MS9&`3^@O&P9J+grBj
zO6=`@PYo(p^njQnCsv4|BE=1Nz1s*0!vBT&iS@j<JN=z`9QJ3X>V%MM1{|AgLD!%k
zn_133{SX)qilS>uuMTF#AK1%ZHm|NgA;0y!S$z|KTm4(nvq2c2R9*%S{0kYSTvK}7
zCm^J*=8(|#6bgnc`3=8uZq>dxDJrYUQ!^3~j-byRE_>*}J!C7#pLM<Hxso}eVLVu}
z@5VGYSKn{m3!uxBu8Dc!_eUZ*hTij^V=^Mk53*u&=^@gR^`nk$BanG2Y_xs3V-2(5
zJ1A2ws-l&dYQFj9MSQLMa}2d@F!CtPd$1IkwCVVD#Kldcjd}cUzN17IF2#k@W=&`B
z2$N~oh97ZHRXLXlpn;ycwe>wj-KePGi{In-#Nag^jc1m`v?p^F#yDOh#N4aifV03u
zV#KT1=lk`SXLVYV=Z-G9Y(ZT;w;f!k+(6dNM!eVMIEYXpgodptTEFXCC8`X4PP<;7
z9a)c#QVi}rWm4GTEl_*=!z5WD%)bt3-wyoFFiA)>1YLEEjHONk){Zj(Ol5d2l4p3W
z0WPJ|_xu%vEqbAM!bHG{^$L5NgdK*yA6c5rP;-I?)fN#W2}5EG;xWoK`Lpbv@YS6)
z)&~otkF>J^<>NY6sAKpGJ}vv3PNUc1AWVPgK}0fFQrn*l$AzVz`~egzA>vWQ^v&15
zssm*UT!%NQkLyyUGvwosIMJtc?&%iXJzI6oQIA|MAl~cx{wG}Cq;)MnDj~mXwYLxW
zqRhQQGS$%Ch<BVzue9_N%N9^3S?3;Loe^~KrZ}PsaLi3!&V<78cZNib7RHuDf~b86
zhvyWlmqU`$P%owK;Z}rl{}Q2(j!15x&$1nw1AZpNiWNk=EoYvit+vmdGYz-1INGO!
zT}8GahI3o*xe+&>SJyR!J+S*aMl2LTd!^2!1fR=JM8jr)4bw8oKY|1e<R1_dG6+wN
z=!>xzCb)UI;T)n(>d#1OKSG^c!dTcz|I+7tD524L@m3SitfA*P{h{@e^esvmA+{Qs
z7#;`UK;sk6YamWfS~pOdbqh&Up?8V&OLQxO#bY!FJPL{h>J<N_OarkI_zISp!)n)K
zDa<K^z5N@;;{8-HTH9a)pd8K4>qytDZ*=^_RJG@qos#E>S?cnNmcWh5h$HBDZ^56Q
z<P?q~(#9!ScAz?x&yecRIff9>BnpO{85#D?;?=?Cre~T?m7VMEjJV+^%F5HUpCh+8
zYlty1zqx&(Oa8ZDNTy}8^h;zJL<3J*(hsHKnk&tf2d3qvpXlY1m+n}iPnaU!{Vn>^
zFsLrY$6dDQzE5%MwtDR$SMUOiUn%1eF9eTWvg^m&+!WOm{Kw|}HxxwS)D@|NNAVVM
zIdSs~ZL0z?kq<^)UfSj660;==m<(}I^uXxq*%RFB{7*(o2t6BLdGMmCqIllZDl~Jt
z^?p1(U2QvZZ-8WqG$yjjJ02i(XoH<hFV7hozEpoz+blPQPjwb~bLFOe2=x>S(HGXQ
z-J|e^AbVLL*LLXG-erhxO|5MLti>Z##LXuxv6tq10)pQpXq=u7QjPJ?HDr-NW@N+O
zDC(iM$>8r~xP!tuUTYHz#h<VvmRWf6%ChG~BsBR(Jg$Ccw>*=|)opN1nzR5dH~I-#
zof*{@8W3ZJ&e#{SQ(7#4R%Q33uB+?0XsAAjO!i(US<@!MDGh<Hc}rED+|SapPZ6&?
zb%)ci7mi{@`iCh;GS3Wa6hT1GRO?jw;@Mx?>0KD$tm{17MB2sIbIom)m3Iv3x<}yi
zoZ4YXZJqm=n(DMS(`lIkO43}l%anc@h~&5$CYH8q-M-L8uQBCdpV$94G%rK(gD|(M
zBP0&MU06&3o7cT4aTA}&L))8&Fnc0AUa~9{6=ORe1up5REutb6NHhAoN&*}c-wxbg
zm5c6^7qEUn$#jb0lc4I4d9d#t<~#h=s|I}ToJkA^=b}CTsMV%nNwi#pLdv&mW)Xb8
z+ma%9N)w(xhK8}o`r(&grS1m4w)7nchK~_oBFSQVU>voLuH|Pl4f#0VU2}?_4A21n
zY9|jaKQPk8I?#L=5~E_#FC2UYQ|)LUj2G_=42T-c9MQ(gJIqIv;5b<1hsIX{;(1Y+
z%h+mM4h6GX4hE=Bxdhut3r8Y174)%>EV1F`ymDb4pp@u<q#s+8T$Zhx3h}>g5=L}t
zKnaLcDA*1X9g5)J;}T=7;Y39ksl0%VdavGg0fve%LHD<cR-wJX%HJ;jB3D}FrN$c|
zg})x$%y@m@>IGa$uxUM@Va8_!{ty{_vMw}q^IR)ow9poMIIcr>+ITg7|8c&T(lA?A
zUr&el{uh)#Tj+<(GiZR}lbp`$EKhx7B5B1>{`P%`5q<HpX)y+5w(`6>HF1~12)(^~
z@g#v1!YvXhEZ>=DkM^qcOb<gXvKKheIkIV73$se>PMppc{*SJ&j;d-~`&I-2X(XkQ
zl<t&9T0&ye4U*C+APv%;f|Sx7o09JCM(LDB8o#;kJ?GqW?|Z&6_8|U%z1Lhbp66HV
zGqZgro0H_fj-S4b#&ooA<hjLh=08jSEkptheR%_>!Sa6BZ}dvWu;5|A&leJryu}~x
z>!!5#-4vlwTm9mef&-UBT?{ej9|#`Yrqk@ZHJ&{a)0IwkU=Bp$&)EKzYwya)JII1T
zr$I1~H52@~N$6!NH9pfjyoUS=LB#~XGm~4&SKDo&`fZ@Jv-hmCPYmv^<&+9We3egj
zPX3W0<&{E3r~R$G(r&_}vdtt$L9$6skJU!iE7zC6XvMgK4t@;9usHP0zcYB|><Pt2
zFPz=R27(cWyLk@oVeQ6Rp=XKhZ_^@{LbUa;4*tT$)NR5kpQ$NoS*do4J3(th9g_ta
z?$UH?d;82GDAamm6Pqm1ycSlqDW9w3E1nqsG`A`BS;beADqSfm9E2XLkPN<6wDIY-
zOWACMogYNr$_<@fNvDs(>JSr8=I_0SzLa(SQLYs)A(c;}FSowmz4-2<@d)>n-y4x{
z9$l>GuqspE4Q>bUyo#7BWOk&aE~_=jJ_gJPE4j>@FRVZJEVGKH2pKn2TQ94epnMJ}
zz+aCNU~xYPM`>Tg%S(m7n4p$R%15MW$qOCFWpE`pPqAF<Z)nJu5#6j0t)E6Tj*Kf0
zOvxQdWGR-X*)i1ad_3`LO6nO6E!53amY{D?{>`Tg)LH{C+6=dBE%)-lRZBJPPRymk
z1)sV3gt;JtYu;l29lr~%F^<CDbS?Z1@aO$aTVc-~#lH@6)?5i4R1xB9JSE9K8l0B0
zH>Q-$++CIV_QRa6@U}3ZtdM=JTh5s^M`4O^#{O<=#zO;vC6ik=33}*|;c-1w^`6g#
z>(5<Z9TDz!S$zKzZL{v9!Zgxa9rB21BF2?lyC0sIBGOo#XMh_it8uZPq8D(y$O;`h
zQHFbnMOZ_Sbg^WSmJ~7sj)c_6aYh4Im)6=R%cc2?6P|q=kK<fPUs6f2++m@Dud7lD
zv?@Snpb>xrW(p0z{)X2rdbFO*a>wSc$YGapVcy+2|1XK)A4X3R1*{Ln6qtP6>FfE(
zs0zekJ+Z{aK2YDsp%fQ-<+GxT@lEw2?@V(U6YI;x>7C0DALU{pZ_a!;5gwI8uXUAw
z6AM8kx$1Dr7rlQhCY?M%@jY)~fI%8RW~NM|YTYldW=lPldG1dQ&fnD?mvPU_0RXYv
z?P49$=gnaKDs%=XQRG)_Yf1cuezep(`ZEd4w@9bz;?iVt9JA7~c}^L0m1hV=ROT^`
zzXWeWO-d^=g=~TVr7m`ou1){@5`*Wgo$0)MpS6ofH>8S+S+`RD2?~mHM;iRJ<i9N+
ze}8+JS*!5*gE8YO0+x;-v^Q2{1I{7FrwWVm&4Hu(FO}Dy(09J*O%McP-2^i4OHoCo
zAITiU<v|2SlHrT~dGC2t%A_(lUMKRMBpnV0&>JPsWA>;i-Dkwp7g4)z$3URHpZJpB
zc6<KwJHH@*kY(H~s8Jl0?i@};R|dHM{I1b={M$@H8Sp9*v|&2#74=lixy5WI1*E3d
z4Le^N{OPIUhGxW)j`$wuQ;pu)3o7!^c6Ch#Q^yUPZQoZ-v$BM07lrxL6%vjGHr_}y
zOT5(N(jHfRs4QpsCs_3#3{!+e;=_{U+^6`p&e`{m@f9MoTd60@u+DO$HxUkVQc+|&
zW4CxNO@=51vK%<cJtZ-d=<S4A=y#=_nTN`MRZC4aijE|(M21H=p$1?GeU(PW`yT^U
z|I5<<8!N_xFNdq#L2V2bU*&ayI|)j_@Z0VqPn2kviL%>xxw7oh`%+A3)k}vpokY$n
zB^7#$VVj$boaJ@YhJ!1=Bmy6|V<S6oMR7J7sGO7}VPPT5M`ob$C*<^ZNZfZ3v(=$@
zAdXu{+Wy8woX{s1VLdX5HYh;+h&)gz+!Ma?vBkP<eKE)St_*Qw)^)Wg+WGdAo{N6+
z_mP)*>Ugo)x8DX6%FM|fer4rEmP^s*QPYdbehNiESxoKln=T-@vHHIw`GF#u11`<F
zGBlj@rIxNtAH2Oko!G7)p3pn`00Obj5R~q?nWrK?d5q)NO^a)lPc#SPD<|D?9~K$*
zyCj?WCgTlwDQfy`BU3h}QEsoI_tSk1Psv;G{KxBqz?U}czTg7@%|wsJrE?Ibp!6qN
z51e+-5E2PS>FZn1am+{&)C!RkQn8)yRfa=9+Wff`jxg%a!o}fgLR9&d9ePuOWbbCD
zI6rky#U)ijR1_(dqoa)||5<%i7~c9kN{|vrPbzHXJFxJe(PFiJxh&)J1ciTQ0hErG
zI|Ya``kPcKq;a#q9sN9-P5!>2bad`MpJ>2<P$Puya5jN6^E`w(uhg~km{UJ=3teEJ
z9JovhsMO0h?KYluj(%hu{j&@F51aH*ocx(D4Cx(<DWZ6MkTmc3<^9c=!;CU@L^A49
zguv7&mikxJ+tK<gF>;EqyPJ!dCG}JBkzNQ|zc%havIRB%4<3uU>3^i)$Ih1@ixFwp
zfw$jiipIRmdNSPyfa}5p4t*55sPeFXBs@r7i6E0sci>F;bMB(>Bl(^cmp6q%Fq)?(
zN~{=p1g2MhrS1OX+mb$<CR~-+mAI2WfA#KMP+~bTu2W?z%43kN2b1y&A+&$tvt{@{
zF%+$s`OlGfU*rd{bY0sqn5t3uTEC2|Bwe-D8h-K#8S5l@%Z0&fBSE7&;_6-}jDOtd
z&BQ+qBQT{$o?RgXF-PjkzWE|11-G=xDRWNiYyqUn)vS^PaeeHXP`fN!`8fT4+dP_o
zyas2yhsFN%0~ASuJx}>+;k>uei+f$uM`FaRLoJ!tKSFtj_2ictoa|ox^Jdo&_P`4D
z&8qb0=UyJe*(jqW7Uj=gxa#!Xt0Z>5?{hRK^8jW-Q#i7>|GcUj{6*?@M`J{!e*N$q
z){Q4Rrx_v-s(yiSp`u3|4Pm~r9m{H|`{%8PL_(zQlP~^ms#qzexYX_CVf$1b&NPy}
zlMl3<nXOqg!t<~=ymk}QP5yt523P_?ej^fZ!&d$$ZN7X3yC%hx{?8xiwR+X`nbF{}
z@ucS+m<!xbG>Yk_h;EGkX<JZo#ghJ{@(|f+)y=Tq0ZDY-X19=Ng7;1Kw~q5_!DP;>
z;j(zEd>kAc=}aLnld2)^I6%&5$W9czp`CkwI+O<x+Jseg=T<<IGwzktEf<!WMKEUy
z&H4Pk+v()e8Ucn04Rqcg54?T?{Z&>25b?fw&9{NW<r7TPOHuy9IGcNSKs0ZZD#fFe
zS=V7FSSgU{zt`F4*W{n8M<)argBO!p%Bj8#3r#Xvs{FLq!Mu1AP*nB&OFPGJm<S61
zjW6BL#-ug?Qxo0hk2o+UMOM;B{ya&?A++giT+RUyAOiqZq6g@Yof%fq*&WdAF#|r~
z&1>g$r*WCew#P*4@wLp<yGxCAIvzWD<DW(SxwLG0M??`xsJ>=+6s804JgdPLjDf?V
zeUA*F2*lPLk&FA2^CPYu#^@OpzGO^I<rS{+CwU`H%(Vaay_$Xx@3clZdDbnGoPC{G
z=}C_jiPRur`cPP9IcWjYIe6l>smZQr0;DHw9Qyoj+y^3`>u3B<`K*LCi_i*Gz*_xU
zbX5GbZ;ar6KBch%6CeUTqSD?o+F%lw<g=d(t`QSfHp<(87D+OWda0h_zM0ZXBYd?U
zSJ^}A*?W6+`g~&2tP>DzuP=6YRi;2sDcreZVgKJN$%+}yPN?Q4K^x9Jr;|m~7Q+cS
zWW>0FVl{*!v6FpiiW4_psZPZ-w&1~USD0=S=(DyLXcSWOwE?&&XL@zAv1`U}IY~#z
z=aAdo0zmLxcId^j=Kzow?uF$$k+2$k(6MVnkbOaqSP!bINjN_9VPfiJo@KY3bmwVJ
z6$pe*JP0)gk<?8D!%UtETb8wU*~4mzdV6yokSI<%Md~FcK!XOhaB@IWgu^tTfN=V{
zVN<`6sI@g)VVn@aX)~`n{PIGFBK?<`UWU)TyTU|^j}PB&evU~_1b1v~EcO)uH`f8a
zFaw1OLsv;12iYnCk0re~U1EB&-ls(~Jw^8t;8q&-o2gdofKt%d(`@m+gT+-O7L|R|
z+KViT;+4K4G*4GXu7dvRN+8VJ0-Px2O~|*6hoY*#C8vUm*1)v?Iu?$sBj=Aj69i?$
zVtnpKra^W$z`O2?=ygB&MzJptUoRg+_!3p3>uyW<cg*fK;a3!XsdI6KZfDG}A9s@Y
zx>Rl`I>7d_^8=>qd@Xck!uPX!!ep+}bjPmozqw+_DW<eC|NR&Anj;(*ug<_QL!W2V
z(Gp^KUfCy`>q&Xm;T!K5^vI><-+y;oLz^=SV{*#YQCFwoFdG~__deg7nL!mefad5?
z7}>YOr#ky#(y>4rM7Q4)+ZMva#VjqiD#&E(sJ^O3_37L;so0}n)m!j>tI*J~4{T_P
zB;tA9M`J}nVFuv|HI7BI-^jpUN2y;4B8n#v6Dh#R-ewA4EUOykmmRe$B4INM*zEfi
z9LjkR7v1Iq_ym}C_C<Zf#8WHlGQH+?z&FXpVI%beiB(1ke?$u)%f#8jtn^jeVB~<Z
zj*hBsfH*Y6Z55gDrH9k@vvDZ5L`3NB^h~{@Iki|g(_(Z%S}@$1qz>`9n$!riw&!0%
zio*@~hZ&a>z6%EcSPu-Qa6}Mzi0uEp=4^cy{va1)f&90ME4}II03mr6L*HjtE@#6w
zuHfiqx)cG|QjiF-<!6dnv;s)?Jgas)w!k0Fw<iPq6~gP$;*(Oi*y?ZE&e8S|;%pdY
z04DKC<k#%zI)KUJfP7VD+55&u6F5fHyMp){_bbD&yTOdoTl@I&Bj*8t?h{+?&&yKr
zP^d4OzFn@Oz`%O!Wf%_ZeZ52L4nV1DwB-hAZSs<0-y5J5n*11FVgsp6R`MT!RX?CN
zm|(c>-q{(rJL<qlfS-7cBnxDbUaI?Cs8!ZK!(OoBzwFpO-RSDN;%s9$82GVPGTH`(
za(70A8W5&j*q_I^0H*F5lWK=FwfsvWekTueX@f`i4)zQN7vao&bhL2z%lY9)1i3({
z%ROiE)W%2J0fqg~j`3ex9b^qtI_05runH2T_2`|<s?e^pGtXjGb+ngE#f$49rek>d
zcz%auBz+gUH(%sqfI3$v%ufPv7&euF!=YE^2L+?EH~|vYI`SS7URUaqMDc(=zEUsi
zS{R#VMeuZ1{@8w71J{rP-vo#~W#3spBK$S26hdPg3-!!!9OgS2701~5BDjr9O~UV_
zgs)y~kP;h~0h)Xtej*cMYsVPY!O9wz!bJdY7mXz0<8Mu@dqi0I&v01FuWNZj_<Nbw
z(A$h65$5Go7Yj!x>dI<+YTn6hCIm~|ub|{&S^<$C<L>{I9?lOQO2Lur$&namMwwy~
z8GUSoD(UKPyFS;Iu^^8s;3VkAM!3QnWX-t~zQ4=~x-@2h$Zdr_FHHtP8`#q)T{0FH
zyYiC74#g-YaJvJiSCE@vYoI3wA`1>fo9DJkNQrnRMJ2Vdwo45=FYP&dd+b%kHY1bb
zL%l_>0K<I7)L6Qzl0-ilh8rkz4P2Tm#eLaB-`}4qn2n#^>`Z(us)_64+N1Ud17WYe
zXrP&LVVG=crEf-f@5Ss9G_`fw113bh-r9UC7HP=g#gF9Pn%i=xHX%A@=F(`Y7q)8K
zDOSR&&N>=zmAZ)-p~Y;1r-K|*4!y6t?guEJ7c~C`8vJ_-Okf^aAx*h*N<N|pJnEn_
z6T>5ZajtE#-|n!z1%)PU&d5!o*x;2q5G(rLkP@ktC!!nX;K)Z6D;U9rnFgM_Lzc>`
zJCUuBu@*(<j?aKEp)9@$NE{kc20&B*BjC=bxICf0l*G;-Ja+&inl>D~z<}o4o5dm}
zK+dYq63xH(26;`V8(1urX5oWmUN!(t!|oU6c$k7yE{)q}vIcYJTj*2TFQIzeb($e#
zU=lK7sxE4@q4TJP*fM)~colh|bugBC*>7xRn?t<54MKUx%lR;gw%r^KPwl(ZQg|85
zr2%o(9bh)RqG;yDXM(JtLgZn#8!HDJCd34cJw(#wa>o~$7_0U*=ua?YXRAZGqW)*r
zSP{TQK0P-0UPjTG7mpA?fTJ7WiGtgixDD5TmF38+W{Vi?cS8kNgw0Tm?iZj<Ex@aS
zT<Wqf@i75yMvhzYSRH}8r1hMAVq7Il<YIFx(`WkJJAU9GxcE`0%E|!6ORMwzy_>_9
znI!>D?cP0b(nLSP5LAj1XzhABfW_!~dwJY&g|cwH_OWl15wq9j=X_pK51d~bofT~X
z$_0cm3$p`8zh!t|TcDYX6VY79hjHQf^-vM&@}0&Ydva%y(p+07!o9|Pb=KA2Ps3&C
z;Zb`~HreKdnN;rK^`5{iH_B2UqAA3PFPO8N6AtA)3;bM#vh9a}GMP6sBS&mo-8sgy
zul3}yvW>ykWIo%<KzL)&lvMKJqtbgxHys^?bJPjyB=7uP=r1=VeO2M|41&Q5%Ijc0
zA+j_n(fhglT~KJAwEYLM`uF5}irFfb-!w8NtRwr$szA2hlipFp-p~?4MPd@`b3ljk
zOV-y)re|0ocDP+~SeC_{O`adWFE<U9X6Xwt?rNxG7+&1)c$`yW=M#HFQ-qFmQ@Wjy
zH-Un~l}S$1pK})isCO8ha97{!NkQUl(Tv^_UlGTkL_BYKZY^V8BFmpNA#1T%K_IiW
ztVO>VgF7UyS0-MnF)!s6k2M&lFk&#TbGVa6H%Rv!hzd4>cL-;s?CtH(*Pr1}f%+iE
zYOW@wwDufzFZlB}0MWJGrd$laNWKLI;8+0dl(5>$^lUA@R4zQ58)EEO*0^Wpl1F_?
z^oaYhHR>!uIh%p8fm+nVx=yAY?lXBjd|c|VFuBDV=<Twu+{ZZTt^>8o_GX=Q&qMCx
z$?~gHe5y|?<U8C53N$J%ufAG_*pY)cE^i|2=N_*OoG}>9ZS>;H@y0TJlT(69e&?8g
znq65Ls9uR}-3<LUIONN(B{z`e$WS{zK1<|D%V=YFXujAx$R3xfVR`X#<&RTZ$7^mi
zdmfXArZS=a#j2I|2-I8T_ip%Jxl2_W&a_1F0W|X3IliqLB3*Hx_8-IthW8cwBIOPS
z9fS&@=N<3~@1Y=zFKX+^BhMJr&|v@k`7nE6$H<jo%1?cQj3x()bNz`@<4uja0xo9A
zUJexcLe)^_H#xi={)X@4`%UkcTV%N()&3h0Q6hmS9&^mdw&-)TE+6D`+Z3QgLKvKI
zyOpu0*?1{)Iw3d5J0tM!Q=~#1g8Pv3DSq}p0}s1+a1&n@k`ha_c7r&tBCqlo0}Hqf
z$W5L<b8Vv76qn(TDvu{oHtEamVn6!q+khV~u*xdJvZsEdp#4v{$;03W2f2DGlNcFW
z-1YKlPp9;d<eXMRDDe+;g}7JO<AVaU<F{R=sJj0#SMM`3<p&~q6O4I8GI`~;Ni+%8
zns2P<dN4pL1&7bV_bL8adPlrW1vB?|r++Y?wPHSa__Cq>xS9RE^rvk$T#qCz$89|F
z1_?|t=3JRP1}6F`=U`d%Qxxn}>fNY?aXk!&t#FRI1TTKg7mmB567Bx>I}%e(JF^uz
zq;E&&Leo(oy7oOb+XrED=w)TLS3auWKDjPy0>MVJaG^(09kH+47)DX{;MADmdtp27
zjec<r4XF~YqMTAA-70l$+y4yEWfi4T_i(Q4ZPOI1<h>v=j(k|U^ETCvm(tQg6I_x^
z$KoazqdIEbtB7ZPjw3H=VUn~(pjkNqMN&V^iWcC=+9ZHdGH%sF;)=>pC~J6NEkelo
zHk#PJ6AO-Q$);|}q2Fg*hPLl9k+l+qO%k*2daNAt7}GU_#N;s#@Y6NyS5Lg=tD!_q
zN@u@E#xB{d)yN}r2y|47PqA9!lBpZwUg)*&A)!4W9+T}V-u2E`HH>_y*5;vLBOa+x
zWAdL4s~nH~LD7IexyNgyH>$^t3D>-}Uwm<6+nD$!buAZ5)&hsEw>c8Fm|E<*zw5d#
zQG;_lB12#sz2{$j2lw~)jxehp*QwXV5-lia70povh?q!H)`nodo%97)P}yqiKu{RN
z(;Im$C-aG|v;<;HhM>hmHu_6BX~9x3ZyTd-L$%73PmuQ|M|GA;59Du2inj%rAEtI1
z#N0BUdtkP*mkw*?ANK1=2<>6%%GPPqm*%B=ARUUwGV4;7rPEtV|G?NnGa@-_ug5nb
z5O68Rh^=?r>Q81f<`g7J-Y|ppS}^NagX<wPF~NQ3Q^j7QcTFqYT?H)Qdxdpn9}WAv
zWx-~ZNuVamHDN1+6o)~xjD{E)8CCHi<B!jET$h}u{ASDag{iA%bQ~jaaB*c|K|70%
zBU6GO+E>2A<ZkLyfAn_nUTv#M`ra|XlBmD7dSc-hE&S*)YBUNnROI!`b5-gEDqkIr
ztWENZziaQRN&aXyThFyqsIZawe$5)20uUn+KpcAm8omR?QEQlv=vh4{vMmxTaG{Y_
z;yMdn&4xe%wCuh`VuK&1Yd)BqRr;;k|5x)-J4!`Ez|>kt_8AZ%R=<=Tfl2oWh``R;
zsMSWm0)DFz!ZAcu{Yq9@^RiU_`*69H>Vgc>Ox;-<TMzMbz%NF@BARFvGm4G9fxk0m
z?G&`lVf!tAs_@k8Vg0q%?s>!>q7Wj~OCL0cLiPLQ9q0{#Cm?Ky282Gz1tY$j4jNG|
zZ~iY|g-9t<>zxyQ)|TtAGmc+=ZpEU?_G>Pu#i0ZwVJG!h5y6bu>!rx6m3=UiTwE>C
zY-!M5V6v@)>6Qee<U!P+l>1Q|;s%i1gfTr4vjc0XHvswRI#|$ZGrh3(MusMClA#nT
zMjIZjbb!?#O#TWPZ|D&^uL$ie%yQ^9qpo9!&!m+*XIsC4SK}fCRHN;kr{I3!_u^ZS
z$4BGns8D<qzCH5CW;l3=WMvUYqY(eron-aoiZexnX21BUiNislvlb?Q$P0Vd?_PDR
zbKUGHD{I%F3f|5A^wTsYSNsbkEc7!OuMMd7PQVAFk6FQVq`9+)+V#4Fl5PILd8Da(
zM{FL*;*hPH@R)V-snUOmphxrSa*B3l(gDR6`WNM7fDkKq0N)dy<M`EayLc?fa%<MQ
z`><<ov*jxa`TmNNkA!&21-o;l?-C}i+5oMaI)lJk1|p{YS{!@Me5*ei>Cq46a)7!-
zb28cAedu}EXk=5-g~xB(7f|;ABRo5V!eaI8mg9Zo+nm2RT^I*3CHf%pYtzU(>A2PR
z1*hn`0T;Z~&~!3Ou8hq5jq-2LJ@TwQpHV<gk~^DE`Wg5&X$aN1i+ze&cE@spVE~cL
zcMxbrx7HICMJEI6kW{dPoy|a3cLFdBh63M3Ls5fR0NL^Etz(WShq3l;NNPq4GTQ5L
zFWQMW|Eq26J=p|3l-fzBhXl=++~D`wJRa5nS&>DrVCDjX(uK=5M6z66ovMvfXN|3E
zpwQmy%s`(921%2~pS5z@^Q2y9%G5vN2d-&z6*GlW(c6cvmEcjRu!H4lxg~0JQ6ev&
zehnLeL-uVFbEDV*$z-wC4VO(|J%O=bu6y@gdhk8i&hl&)YGoq{$kcu!>YG6pD0Gxf
zuiq=r<k$AB@Yyc%QX2p~qEZm}Q?<?jD0J4J+GdSC{aB~<YM%>0``CQpdx+fSs{$V?
z!krV3TU{f_TIQTW!^#FSbD%Do>3_$~`6xaQMny<axDWGh&l-HB{bC!U?$SFIS}F{H
zVy@tVco=L_ZYDaNe0z8E{r79B_7`_r;>DU!R_rKKx=3PnLNoThTugc<CN-m=o3%n5
z?(yUHR63n2kBfs6QB3ugdKBAAXdNY{5ltbcCP;32c@~XID#&XkG^8^m3_-^_>WYX#
zz5sTfGDFNn(B6`P0W?$HzuB!NY0d_|#d3%kDi&iU5*0z{E@DLZ<<luCt|<=drpsSy
zb!6@H2RzzO7&x-~c7A}tIkyQ$Cz-tSINKiEaVT_nIvrHFj`1b%tq|DN+QrGGDZZ0{
zzFXPKomJQQVDDrrpZ{l#;C~J$10>Z~4_wFJOJOXjZ5>4m>B#Elr;YCw3*oM#1~P12
zhQ`L?+7684P&~o=c>ctwQ{v=Hn(aqj4J2g~v5cR*D2$TOz!klZHw2|25K@XHF5Kdj
z{oH3X@)8_f?=m`UzhrDbo+z(CQ%93-gY~H}PiE;ze<BOy)e$LWxWTcZE_vL_=1>}9
zTrR$U<*!O$Qr-O(e2(p_`dr(lCZRlsL5vuB!`u66(>BHsYGNg>x-gecC+jel$A5>Z
zMz%6{hHB;Md|qrJ900c0L8wa)`1a17uDwB|m%w&Pw9oW?Pz?p-)ub0hI65)-HOwxX
z4nR^%zRnj!Qu}>zVHuOblU*Y*FKm7O4&CPC!9}i%UiO#xSijC`OlrWa&G7ZyA+f@y
z2#=)u(q6&-g-V!EEIp(hP8kBpPi$7;SyG+BsVGI-d$fK4l$X;C%&yQUDujF0tLs38
zHQh(XTu}Ve=*>rNn|UN#11{WY#?_#{XF_LZ%z4Til~+hlEv9Y9UQ55wKCbe{_{7|F
zB<8%3&TDVvL5WroHh`~&zfxQyULL;^G~h8L4}8y!wm9wla@<H)z-NnKh301qCD-%(
zS+iqZ{0ZJwn(<ClnB3q8HEI$7duo=F2wjFGlgi)QHw5He7}jqSPXF57)tvA?@<1%J
zH+?)|x(tR5T~YdJrYI@pkM;;^G9F85RpvF0H&KHZf=a87ovso}?bp6;A*7AzCz_@t
zr$E+@H;Ctv8J6L^;n?X<%iU&V^X0$xH7=>v7~z`GJVswjwg7nkZ>{w~5VQo|-BgKj
z5rUOadhusXlrgfZnz$jD?cH=uP34hDJg<;4zBk83kk7&!ulL3XX>KQw2v>-S^(KEd
zqW(cF>B4aC=bX)t_oNsdI$vRrw6P3eq@4(BzYTjuL5;Ikn_mD_oMxRiVXLQ!tg(>)
zoKjsW`uLy<6XoR9#;FZb<2}HCWzX!?@&sL8bXkhI>p>8M1a<&cR3>0nnT5{6oyB+5
z`p8)U|DXgk(k;6oD2Fiaz`81`aUT@21@M)iE&C>|`#dQWg$PNqhNAT6j+nS@<&Ic=
z6MJAeoi6*t<L>}Mm`!#&?!tf0c6xoqaBi<iW_Vs|E3EXYT>g6`l-(<}9580C@7eLl
z?X3g+QMdwP*brp=i(f^I<a4{-wIU5rrCqXqgYhL~xO|UgSe>?&e)<%LWL)NP1TEgC
z2uWE>Pc6N~G}_YSj%WWnB>b5M$pC?o=UIbX#)*WhL*POJ4u)b4Rs)VL;+qXJOi9{<
z<&ifDN!9Nb7<U+v=y#F429Gyrl4Z=Pr5l#e<03^i(xXn6sMvQRyQTSgMqg|Ud?DiJ
zOB%>^EGbs0AI45~V$Mi7`AoZ^YztXZzG@%8W;IunX^?RbJW223*rC~!F%MMWSJ9&w
z-g2DI&eirOcqa7?DiqQ|U5GX}e*lClW)svLUPoT>%x#=07jtLfmaw%eBW$vJ@VzHt
zXCgqi3N{bB$&J(4{Y--+MhxCNALd-QX%5BO^33K6{L1zto!dp8s4De}OegXlw^>)+
zxgpnHU=q6cPT$dAUI|*_*6t4xzBLx8@|i-<cM>tF!#*a`hJ}5M>!POa0}&Y}p`P|r
zp7@*L${zZvoi$W^uFH$Lr-JhAv_n?kzXhg|b1U<_Ld@tR`|#kP9KveP7qQU&8$)TR
zkP}`V8E)S?{Dz}+Je|n{I6Nkyq&LJ<1Y!(-<N0@4;U>N)CQW;&rdJUeu}_*mvVBQm
zn>*|qC4Q(IP|NzWc{`R#4=U}^K<%?n7AMV%&k-k#_i$QhH8NPPAe5q<oBV@7o~K9N
zp2^+(Kx*xRkQA5X=*eH2^B@u3S0Z&u_9jvO2gfX?Xoi+`DpF5ZKJHrY+LDJdi$s;%
z+2+Y44Tn_`b2}z>n3?gNh0Ol1aT_Kt;SXwcGUv0N%g*CKZ*UIGIBa`zI(y;&0OUC(
zif=^PmQVyqT)eATSj#mp%cumbjjZ?1$Nsc{Nj746-T(Ayf05$T9`Gu;n7_6<k3}P^
z=y-@;V95sxSY>IUFA2E3aNglHiXxdj1wn(n|DUd!8%`F54Vx13xSqwQLZ%?YYnxb+
zE0)vNhVtO6?V8-un2>=Z)$~6%!KD<@S{mEcuL&Q$xy5+3T^y`q5bDmXOgP=?u=4UZ
zuTjKl`RN;Eud{vz)L0U$c0GnSQ%jABwzOm}vS(X-(|L*efLN<s_Sg$7OegHov`pud
z@==#8Oe=fg9PP5?JTv9}nT7Y}Bq~~d@E(bzcsK!Rot;K~=2E9%DszuHiR~~_Y>Y$g
z3avLD$e=l*n*Wvm{cq=@TG)ehMe|$l<-=u>TdJLXU)7)3c2m?LO|G4oaz=!ud9QgV
z1cZ0cC(+}~Gu&S-UKwYxxC$9U61lkdK@<YEE2%NUU4zpOC5+It{i;uqjot(^u$g}S
z<nm;SlfxF|3d8_g#OuYmsD$z0mDQ(R8>bdPfkyTFvp;$)%;f{zGyC&&mHnnBMtB+`
z#Afza)0@yjqr`#a{DaHlLS~<7?*Y?6;E2+8jq4hsdgHK@GbjkM2LHOX>P&F-p5#7!
zN8c9hlD(4(8|CK=clG*=Uc^~LSArY><x!7jG5du^Vp#b1`+p^f0Po+}EZ~;JzdzkX
z*Ff#7*nAAwEW>e7>~U$dspZeX%=55_g27DT78NFYXy-<esuCL9vd?cXSUVONjO8r4
z%36eS{Tqv49k)uSTf(`=T+R9F`B5Q?GmtquXOVo#`Lm`wG8cQW9BiXh66ld+sq0-&
zRB+PHd45{@WjJ=5F(T(xL@WsIkQS@sKobp=?j-9Up3VpPBhp_N-{wS2j!!guy8hi-
zl)IK=3j!xuq)43Oqca`vystL!eM2ZggOC7#294T92RY3Oqd@G(=)J>uUy;S`VFoFF
zmwmeP#V-PZfq`1gech2HX|E$Zaqv1}F1MqVj*V2S(wOY*Y=~~*LXcA)1rM}NEEdLb
z)|fGCR!TfZdqxE!G$IAU*<&I*roxhv@_FZ-!Njv*?-eY~(_6J`YbQvEx>deg&XL0C
zI)Jg0a@20#FtZ(?g{_2pYDV_d683=UX&rdGl)`d+AokzAF8btHnqd~bnEz^j4}(z&
zDKP|(KE(6Mx#O5klI3lI{++T1yHmh+zdHg{3^|^@0>Mt*;e@*$axD`<AmxCs^5^?k
zgdNIvB3|G?tiL_Y{2dQ7KQ1AzIstbK^hYLXp!3%7Cu6o#Q;m&hJf-xsz{|r%_UlLP
z3;w{olA+^zw_~H9UjakE=Y~%76zVH+u3UQ<o&Wy6F>~Y>j8)xn#F@4w!@F=lviLhe
zR}&%f@hXq|lfA0aT(%>Lb6e+8BGEKW`@?e`3H(;<*jza$(7QXl%BCrbHIrAVpi;pM
zw7Wb@(9oj?1*F=v1Gx|I+eOAc?k8X~lHeZ!B*AC+NaP~`8x%;4Y2U7{jw6^XmXqw^
zYUpIeeF43<_Mtn5{V}j**3r4IV0!3qfxgo<;v<OpwK;M&(=*)Lb_Rlj0jT{Nd@M{5
zVX@RuLlX$Ug3e<z&k2J4JxxJK&kkkwD!DY~udy5{4XsRqU^$&{Q15qu(?9#SEvu9>
zqu2^=#QLWk&zC1W@<N)feG+phrM4wnH7eP!7J)sL32?BJ74XMFvy{roT|0!qgr@4Q
zP0>8E1dl-UEffUfA;a3;g7c)BN_(5AJw$zswT}+`PTN2HjmqqyZo2K|!$F$Xc~~)^
zLuFLX98$}Y3;6hK-@YK?xG&ijWZonaanY<^hlEcNo@!;?I0COzkay(!_p@9Fr<jS$
ze^WAi#>14Z5L$|UjF&vGO(RM0Mli+^eSpuH&v2cjb5zbx9J}ZRs6CUgnHh0F10M^(
z4{h2q>lf_Sv*oj^Zn8u0cqmgqfbm(v54HH=A|RqCPfjNkh5Ig#*QT`maARn<l<gr-
z+3TRI#?#wIT<I)aM`+Pn2RegzV7Jvd1RazTwTXR$lD_ji=2vr=CIwg!mD}$CEL6Y@
zF~+3v{{g!4sD6J8p?pKkE^B*(SB;u10ooQyt9BH+s$lGWu6MrHe3Tai^eBV<Pn2D?
zg$w96HW^bt^lxAT)17~UA7l<pyUA*<P3z-&jGvP9JPO_e$CG7!n@Unxz`6g3)NgOl
zM#Ee<WH_D?9bM+A9nabc&aY0d3Oyo-X5w+r=fd||toiqWO$~RN<`m(&pP}q+ElkNA
zWVl(<X}C6#gwG8|obEt?iaE24MP9MnINsz&P-3IX?ms7LJ_VdL@1v0k;R1!Xlc-2o
zPEzVn8`-5X+{ubq)Jp!C`at|G^#=BFM6*WrIfK~8Y!b3^atLC<DCXStfH9pyLo@30
z=!W@??UIa6AHl=<Az&DuXaOz5EUyB@U-)0l=mpSiOl`0N*PF&yv>jP7+i86tFSI)_
zgfF_Td1-D^u<?^pYPpxU#t#kMJYIIpYY=%zCOqU5O&(lpM^*mS(7B?i_OeJo&ri`J
zd;SQ}baZS~r1-i4Ly$@th%o%Af$xBtpqV{1!0?mRRZR->ZdD4(w6e#K-H4ke{C*Fx
zYdPykc3oB5&#(>(PQ!)<mzxIU8Rd@|df{k%i9#9J+C!O`=n2%V@*-_Nf&49FYZ4A_
zn6X!onv61kHL}ER9m6UsOeroaOhLKh<l?~k$@ycZk=E3X!Z`6_e5k^T8SpUcq(YLg
z%}GviD`&9=@Z(}(z8L0)ZORmoaMti8Ht5`^_zvZxa4iKRb29U8#(9{sK=I?0%8{rv
zMr<`O=Y9;JHyX+0J*QYilH$Kyk_;7pPh8pveBBe}P+o=T4Mk#RLruq>3synkA5>Rl
zHWZ8&DaWZ0dWt^{dRvWN*_-GHo@EGl?8O%pn>E$}$r0AULIDt~VH(FO=xE^y`DX1b
z*|qf%<;ov&bJEUwYG30Oac%8UT$D2aI!l}aGgTdCFV(5zodl%41*lMA1RKbf@Y-{J
zq6db@&*JCbPHRi7hf;e-j9t(2x9~TUP6hGv_fRMTm>ErVscfzaJ5F*KN7sMP31B?n
z>p%J3QdjRJ_RLoa8(Zv<WT#nfTT%pPhw}abg2cmz5AVXH-$Z|*YsQaR&ePc8!nA~=
zqG(>+u>F0wHRr|S=*e+-V8cw6^j?4VQ%YS+W=iv*YsQur?Myt&qDWnyb`v=kTSpOM
zvU#@^5;#x~?SwxfoWQoNO*3AQVbMcL0dIRG6;5CX7sDqG3~gK$eGCL3$ZX=RR&jH5
z&}C;{biDv$H<pg9xW^Uubdpw&((<d5OOUO?<{R;L8FZk75z$W9VF@1|pe)M4Tvh^`
z42kOf>#lZ15=}`XY(<@UO*$o8FS);&2y60&ct1W)lV|vD&P?&pRk@g^jf*$sT}a(8
z7|eeFN-YOi9DwI;!Po4;!X5KxRa#|9Ci)AN`a`qE=f?&?Q-&$Q8VdPAa?kdZT%T1%
zt6LB?()5>&%)aBO<`D2gc2=z_*(A<m8@N_Dz2L?(+M+9Zy&IN*@-y$8Be#M{SgPW?
zcxC!8NfCI7f4$~2AG{I^px6|fc>l}n2@5_`zfZ;5BO*PE5T)Xxw3;9(FQF_PCi6KB
zC_S=vtfpZ+?Isdmu}<z1FiGQTFl>bKpbYK<JE)6zo26Tn;7Q2RXC=h*Po4+$kylp4
zRlF!X&*BGU8TM><DNbGOcpAaERHC=M;!DIxafOrNH6KwUrNv|{{S(3#dzAq8gcjoz
zFCA^o2XGX<lsJ$*NT?l9&ehfXLs!trgch#}<WPRHk*aT*w0#1Pj;QJ?%(Kwx6$g(l
z5jZrA$>hwaIHtY{CHRsF3M<x&)#$`p)2`RH9w}*k&YhG(FlXwyz`8lt>qQxT&!1e{
z&5i(|j8w!MvAj;{V%)n9*Ja7d)YR^$aSwW5Q4xG=C`b5<FO#C&4uj{mc)w4KCqax$
zXB-mjQI#BcR?Orz+(0v4s@R=!zJO{oIiIBTZQf>|IFNrlIZropFc3Xax;t60E~|8w
z@8jL4kOY(&c`ae_MvJYGd(%5oF+Q8WZo=k+hi~5B3oVZ@bke*%MF}&C7B|Dg9;xnV
zijtzKtStEbE7ORe91_)(DTimYP<@{L{4l9##4~A#JLz;ftI6jiQ){@fXtO!YAZ_9{
zT4exJQM-C)iHqYjH(_KK#kkBF)#4}S7XG`wo3BR&cc<zxO_>}so7Kg&V(*!BEMFd0
z90%T4JMWcbxeK$@AmG2F9`;;$E7+{oAgPrv++C$2Y&>Y$tS8noU#URk$+dC!qQkuf
zQ-;Adq5q40K@it@ce0vgUCB;@ciMMT{qbSt@DzQ?>HEh4dlO~*=@)p1w?Lnn?m?1N
zB_kk3p_tD>Oj}ps;Qd5YXwNmi__>Yn-bHkxhW*@c@6d?Z?PsH0pRGh@M7U-?_?#Pf
zcc1NC5u$ONprN5%brYgp5k_#FM0jVeJ^p3Ry=l&UeW{{jyxf9JaY)v?(Cp~-)uW80
z{%1Y~t2s>*Mg>zBeXys7x&f)NdPtsW0!0SxVFh<pzgZ2BfN`&-)nGE4rp&K{Z^fOp
zjLa%}Qhy9a!bQ<M_@61b$zcS`zK{&s?&3d&p#Mf=$liLt;soMSZe7FG3GIYTybjmY
zzEP(4$@{+PI+rxdCu<y3bO_Mtcg&-?RU-I~^_qsYsh9#%HF~Fp-yFGqCT;ayzl`6S
zs6Yz&@UNGM0OnCDx~7I5E)(PHk6{)e1I8*6*X~IZ{HLVn7RzrK-j#k8B8?K)9{N&V
zD<yCytrpU{NZaa10R6hEQpjqK9OAri)t$VeH|!}tqvvUp_B@=(`XoWv=A8odzZW_9
ziiZRDwgvMEb1rY>^^T+-DxP0oXSQMa4|U6aHsw;=3TlsafqJ1@1F3v@Z7j@(|NZif
z6gN1_9~)Lwwy)>^9VyNj;H^&K(veM7eHG|z#?RUJwqQM#+bfl*@(j~6Pm(z^X|8-N
z-QisIk4@&UPoecRe{BkPS$ftwY>@osNqad|FhcR@BNhYYZ(6);3rogrQ9Z?ED_eB4
z?rAi-SO5Fx5(dk(ql5jqG`CMOasuaq&WIMWFr1g?s-b?(L&8+(FXswABc?beqqxhw
z`QK}Jh_&qoAMN%lvLhRhGw*E&9kZ<e)abY!uOzNYYnie?#*0P>x&XDF$J>f)?Ekrb
z@V83vqaIClm?-3Jn?%?<fuDzjI_=)t=5bSujrVoQ9wwp;7>d%)SA6^HQvdpapZwvn
zw6a@-r1HwuhTPBDZk2MJ)CIcLv9MQ;;*z|S1YW#=MJp$kC4GkG75eWf@z+-oL~5mz
zXH3l8{<tx%R!m2f8zG9KPlo3~#9t_JDTwoA*2qNZ!~4qe-!}|=e&0yhR!)k?A`A44
zO1spV&2yvgH0x*x&6sr7w#bGj!`kDlt6AVE$^Yv`lK$WnHOwjsZ;PA~ZzyL{KGfSy
zGG;bF*ph9%!F3PsR}Jp}9hzwPre2OV4J9vVLTb&Z&uO=~c34pJDzUhHNN;<?DyO(-
zf@EFkCxP|RDU1L6F-2O#+F9F1rKSvNINxO9`+D1_HeJPC3wH5^La=QzjJ_Gj4uX6f
zM+FWdahv&%e~rwaKRAiNK@k0m=<qts_Jj0LQYBfp5I*Av&SDSg5U_h3&o1g<23tEW
zHB7m-W)%(m&-H>|eIGcYqO^sHuw1)IBG~5Ca-yk=PegX&h_%IT>$@uJd_HSOVL3|_
z*Kpf0?9DCtbJ70!_8}rYluFeo9#|oJ`G<}5VIID3ZzP7WgTjl^FI0s35G+zt&76vr
zi|YRGJ2N4X-^=6Ar;BxxwU34g-}7`(ycqMDy<`zM!RsD};}V)4;h#(wKcf3%pZMEb
zQvcY<$P`LuX-Jya;vA9|NwavX{pO>*@L6_DO3*r!r3{fvsnrZ~ZO%W<3%L&nZ{;6U
z9^W7gWJ%)L1a@-JRv7Sc&P<50Q$wO(t&U1>%l+@l<7a(%C~BEK8uSB0o{{n%^W&!8
zN8GW*{0hclmRJ5a^u9K>yQ=jGc)i=&|L0F>9%{P<m9BC3<K?~mmIrwfdL%Y#Zu$B$
z#zCi=;#zRI&#67YVqNtg7VKyE(f2e@!V*Q$<u5nxn#8)-Im%0nD=FGg#1~(u*{Ds3
zsg^o^B@KM(753NQ{P}~EG@KbRV=_wEcgeLZ65Jq@y@_O%v!0MHv8-`7M~>%Ze4H&4
z>H4Fb$MgxshUR0E_|8DpP<P!Q280UZwjhhCW&}J!@lA%#sXdo51n|a-Amd{bkh7*g
zm4X!ArNbCTo<<se85M#LLL=G)j-B#J$8jO1N%et5ZQC8F%ea`kR*7+bjgD5Pk^Rr(
z8}0YUT}yx)*#OVbgVX^evpe;T76RP&DfhC`2yW^m{ZpG4#e;uMlPZM==YBTjKWMbd
zu~jTe^B)XZLa_bYrY5aAvkwgSxa7Ueq+r247l3%FyR>@*v4Q}IXsM4jbH4#->I$FO
z2EjD@Fj+>UaU|atHIEXk3O4KJ^XUW7t~-O|zVAyQDQfrN+l{SN&>Af7Rx<942yZF?
zv<R~&_v^I61vEFrLyo-^!B91IP1DF)wyzA|0ampb<$d;irqT6~Z%H+6R~S&COCU8g
zM(c|p6L%1(brR%kpxwQ5cX!~CNVB?L=TirW!k4~8K=e}d>!G6cJ{P*_H#$6l!_ya4
zCssl(l$%p*o!7;je{2oO7sxm^!8DJXaX7V;TuHjTIGvUc%k?$3&^`z)$#urAMDhin
zD{%NvSkSRqg`Mw#6dr4ecmQ<?Fo+8ryaerc<Oq21%l0o|$#5y+vqJqO;OYVd1L>ZC
z3Rwafi$Bafp1w#_fGczd>BP2q3F;0o%qvtgz(i>(fgd0Kk#@l5A}YkLJBsWOV6i3j
za}jfvH}h6y&LA)>EsfuK*LsSB2c@SQoaq$~Klw7imHq_4tu2u6+XC|6F(P7$#Q~Sd
z(=)OxX9^cw=cB4CLsXKVsVYAIuK4gC!0Ewzv>Bm{Lv`GAB}MVFpQh+T(!C%$pC8kN
z^u#(joewG8e}2PV3;;tYn{jt_Z}}km02E|{b$s%<zcL#Wm7u76Eqv$H$hJRSk|qH1
zaTh_l@-_&L-OGPe)Lv~7*!7Oi2LxcHJZJ=YSc`xp-%L%bl6(=tQavh0vk7anpE|%|
zd>TO}gZ3H29=Q$b`cFXRYv#OdEGXy$0^veQ+{GhGbWmnH&QzI?;8|!QhKzwOaMBAv
z7@H1Ipi^pK`F7b}0-Op5AYaC{<@ep;67an&8G&aiee*DT=GC!*`>?V5nH9lz457=`
zyH)&_-d(>g<L0*hFr-)8?GZ<yOiF{~GBZ{KDU3Z#qtXam4~sxyWbSUHf7T2nw+G-~
zvEv)Sb8Q`hWfhw7y#MwnSl9`c#I-k5mU+B#y9CTWDI0dqf&gDD7MS>|$TKrOS|@zF
zf-#L)+J?!i2(hX#7$se8DVdR*uDJmcgZk_1>v88HXh#S9{D^E=1cggvd8}E)r(c!B
z`Xwz2-5PS+K>x10U{z9+cmqIA676=7Kl5{YfW_xZ?)34GTP)`Kb?m3tI>DMVwCcUZ
z4zRxG&fBv7amgb>{fh69{dbDf&Ue7*G0hnS@)amfn|ey|1(~nUcGkRsT`%bsbj~cT
zUL51)Bngm#<+U{Db*`fOcveDA$yxW_;rS$0mbw=XUz0S0aHW*3Pr(qj=?X_xA!d?4
zwz*a~nbxotzcI`TjcDHxG5J9E!2o&Q>Xdg?o#crfx#$DVrH90(J?Vu2?QRniH6Slc
z)OFEx1$$fyqzxhNiUyYWra1%CCRIHEA?(2}9MDc|xny!AG+noqKwA*S2a@43s?uz1
zofravxV^{r42v>;t=p#ySEE>UaD1ZsgR}qFQ>59V(uV$$hTTG@-BeaXzX(M8z|XLd
z53O8tlH%rH^EA9zz8}!lC2T#mdjL4IXt`g(Id51T##EaedI;oEtuQT#=1|fqfa*MZ
z+<(y6fR$S96^V5c@@!YMH^X(={Q&5=90ALax?tdsCc9DP!kYvMMi;s?2p(YOaaxSW
zHrfgyQnfX}@^85sdbbE;8X7RG`t2P*zLor(H1hK~I?p<A4#zk2KSG8V!l0<!Wi)*~
z*TzoV=u#irO%lm{e?8NZO7LXLB(Lk=OS<Ber?F*-HN&zFSSESQbTpt59Z?u?EIKnt
z`IvV48@|e*18|spv&Thn9bFr7*KIVTGVQFpM_{z|vU?xwsg*5l01MW$aJzl&e)N>I
zKLHzCpu#(-y1GSEHO6_U$6Km`P02jmd7oHWUG$IR63-3pUJsAq2je@b-}6r}5d5=K
zo-{j{&}0w2V%!x!)X{Qa2+W*8{6agYh$dKKN{U6+sn0G5(lA{7k4Aj%Cv4;KHBGSU
z+Mh5$OKRu)Z8Lxp(fR@?02+W*i7G7RhE5S$kJXx8-ba&GEzKefu`I|V=6R_ocpRWf
zb$@s0v(V}fVH(l*PUm{8BUCYLSLFqqN@+ikO|jTeSenWgz@k)$XOFamGXf425FRaj
z0k*`1PD8q|8@=h-s&P!WMI~c}YhWK+XdmL4)cyv$wM)#6`>VjAWdirfO9-ZoME2V4
zybi00zBkY{75!`pmz~6yoPGiJn27+#ePTnyAFs}VgN~JF0m#aiYgr=_Iuv3A-+{Ec
zB3r;i=$ieMB**6M0gA86deNR;Yc*v`N|&FM(my(qvBu9(Y6Boz)~FSZI1D`<sj^#T
z)8EbDq|_RbOiLL^XGhJT!{x-?Vz8S>QBpEvK$lcAbRE%Enm6nGY3en*kPT|ZDXH<}
z8%3e3PEx(m$IEaKd;6Y@rRZO-^e+FtYn>2|pkhbP#<e%@e;!xwkPIl!#?g^`e>+34
z6?UiGWwsw3<aA!?hDpg&5<D%dJaR-&dvD1d3$~D@V+;>11FR&>WQ^`1Y@TiS03G!o
zGMo=h!w^_(d{a#{8L{DQKVs<zfTu3->C6`*SFqgzdlnnRG(ejy5}9<kk&y&-KD%iR
zDa^oBauxKd{G~b}ggU#hDEvAg`r?&vM5?GT&!eccKNK6Rz+MM*!pZ@NMPI|;wHZhx
z60j8`#DAEiWxH9VYmMZ4wOdrCH8;`Bz~+kx7f|iUY4=0K@m<%v2C3!CItXKh&H<3*
z(QvxE`4&-T3r;7U{EF+Tu;R(Jf2v1nWU=ACum(*%)!2Ji_44{ccXDjns$3<r(%ZOV
zkHbY*!!qiunoac$GZTgwhagl0XSL5)Kp@-8MST8y-Ygf{xY6&&x##rVskfS2bbN}G
zC3;<dbU&?r60HIH_6LUF=E6kZgx)XECQC3TW1&!ve-~bF@-8S!+t^Th*I)U{XfZk-
zadG~#=h?BS!BqQ+8ja>{V5^{@9+|R51<oQVa?ABp8S%lJpCon^un>BZ)6({I`uSFm
zkUh&9b#Zlst|2UYZ1^YV<Zq>-NQX*?l1$RLe=#y2wS9_7D<%7V*)y%txd)(sd9^W-
zParMgT?`_=rcQTx@~TTvzT_ZfP!Y1l)=QU2x3?bx32Fz~6oMf2Cf};PHW`fy{E$!4
zI*6OK_QG`=bFtc;BT$%2;{qV5rujz+E|Er(g?v61TXfvtAf7c}jz@hzbRiCK`XN}o
zXU~mjPIa(YD>`qQ$SnR2DIT7MZ7#9amA@vEW0G3l46@zsDEe3?cEJ2=xMbvN6N>ZC
zseYSvm0nqvR#meBOu~DbuW<8_d;|B7F4W)~tr9EI^;IB}C=2S{v?}?di(opQRi^nZ
zNoga#YKh+pM-~z$h&o==K>0gPyNF|w;07{T<*muh+_nf0g5eh_#R=F=LWb4^K=vpx
z3J>dVM#AK+U<fkL_vf#|%iZlE$3f^MmKII(9|H9Yku8i{Q|o@;-z?~GZ!WXFn$P=9
z@uQ)a@<s8imVyX;B^_c}r2+Hv%qZdeS+IkU5qWAob8L9cy8`bxL&E1^BBNv9p{pPw
zv097b)7`t+57biQw$C)9gX(hz5pqcudo0l^96KY(ZB9NvU<=+rNiwkIHr|N!GF*N(
z13#ULnLN=SL2*h}K_zs1)RCxa^C>H%JVLh-;*O-_3QaPyK&ME=J1JKndUOoHxJ%6b
zfhmuBqcs$p3Z~z8)D!cSBTYtd7_#M`GadTrOFn*u-H(zNCs;KZ7qjme)y?-CN}W;r
z>=QBpY}Fmk89;iPe-+_~Zr@Ud10dUf&2If6=S1!xg1uS3C&oU@x+{NX0j#eOq9m}D
zDgU+YOT$s~jJI#^H9eEKrGP`OT9jwQ@IZTuTtD7ng8J&*x%9}XMJacKM{(;anENV<
ziRC$l;?Ismm3?Ej&IIf*BDsV$%l=i4MR{Xolmp?x^NvsPeD1~Egqya?819(tj1K;i
z7(9}@uLwXQV*LTo`qc>{J+h^FfzbaY;-TE*A}z{jXu;|$)Fjc)$6lX_r<vy|0*<@p
z*OpA0P-2=WerR=x(GS)=@9fS<e2h|@6!OCM5~AaWOB6@RU7b+d<?%sa8gP|XYuA8^
zwLWw)sZmU(oF!m^gQiZ&5^6iV&r(<g2eeRYvLvG&;%4`=3&^5~@kV~;y<y%;szK!Q
z83QB;2JE>U!FzUYfns^z0xCBaW^2M~B5^fS{9%vr(EJ{ZL1xQnWRVpyOE5l+wMLbj
z&~eVUcU!@VO5q+k`!!?svN-xTrT*0+OKw+fb&Pdf6V&KArCsP|gK3@$qjoix*!(PC
zQiX$sjWXGBLTTQpt%F>B@pl5Rh^Z83-RI+$gyP%yKh1PcEe6}q{lKGSx;_#F=;w3T
zXb<tp-ZXZ8-!J|y&NZVsO;8Ex8CE914<n&4N%09EsQ3E=4q&u{zh%O6)g*Y-JY3Z!
zv)2^J+PT3-Z}jXe)R}u^^y`&pq~DFjiqL2Yf3@PWwgcTnDcQS}0Z+C#t*@>YgPsE#
zmRfn<ZW_H!t_np3*6vHoOYDc4m0Qh?#>?8d^LfK3-0c;0%Nut?Mx@Le#!-2JC-<+|
z4w(wvS<2@Z75kN@8!u|<<UZZ25xMgQxXc?92}tP?Xz9OgY$}1&pEOO8&ZwC0&!6Lk
zH)TFwC_Fr)O;j&v0sF3c>GUZ+k$!Qr*2JZa{c=^mc|@~Heercj*+!EFI2?Be8%oX1
zQ7ev3*-kOqPwpS8Ew}uljC0j$wzw<aJXG0FEpz&03M%M(qpe=g59@bEykk~OHv1o~
zz%y^U-UvFQ!SGzxi&9@@{fJ@DHT7kd$ElfPqtWl)zC9yr`QGcjvKB$_E=0_O&67hR
ze6V2e{*JiZQ?qWKy?HBycQSD7|FLz}QBiJx7gq!Yhwd%~L|VF~L_x%&8>C_Al9EPJ
zrCSg%7-FQmyK@kRPU-G=&v@VK@76zejcZ+C>N(Fj`@8pN?=)ZvYMM*4$1+E72!{l@
zE>oI$;v5~iFP>K_?@lfVT^6RD!;~7hLqA_|7B40@D{LEP0r~h%-c_AzyAAx@ucOI=
z2D6u_vdIF{$by)!_~Bb68#EO3xAqc7;v8cUu|zi+ctS^J`Me(AbO^Z;$}vq!p-mUH
z-Zb#x_z!{19NqTwp7Isz2*C~5I>DaHSMfXFaR2}If3$%)v~ad-;K0&d`NXSrkwkO1
z`P^jl#aO%P7VDx_$J{HrL`ujYc7lU?Y5m=6J87QdKS%>vZ?FDKCXxMki-3G#Dx$B{
zhE9vRsEqXMri39k`lS0ZMh0Hh0wZP<>tJ@7aUkcMdM5AE`C}RA|K<mO)f!*XL;B*Q
z^7kb%WuknTDIw-^o#`Z7mP5oCw_+Q$Uu@H;(%7D@eE*k@^@iom2+(E?j9nd=`8|Wl
z_v8;OAap+D*s(Hny;|s)(VhJKrnMan_CNn64$11LGVAAM1lMFR^&P9JjaqWR5ZTwy
zli1HjLhnbv;#Ga%9oGErX#uqW|CrR8CGd0?y2t}AEL*H~$pAPM8EwkI4i+{Fht);N
z4)R9|$fkC|tQB7o;&x7W9O1G!vy?Nf&EM5zzCkz&{17zWWW>K;F?g_ugJveibz0Ri
zH?D<my(&j<XV%bgUB`^U>U=e8ZInHz`t?3LbLk{X`#5ND)b;fMDCi0liPkCGIYa|&
zgpv7P`)ux4T~uR&sO^KbjAK-uM;V!a#Term;9}Usl{~XW3=NIlq*8?FphOny7^%yP
zD*R#SczJu)h}6qQ*hqy+o+l<KUw#h-XB)G$j>Y$y7U#J`nowGbk_v`DHCFCg0`7p|
z{&wdoIs6>@7U|QS4EVwu2rnVTZoj)bn@MYNOJ2Pm1^Ye(^zaIhU#RnV2Dk0*MnRw|
zw&z+aQ56m<f`;a~_ezbLz-qo(GU2S{vYZ}NVIK=Ga$b`z`c~e|H1_r3Y*iimfH+fk
zEBYVLL*l{L^xxugmlIkSZ<kw6`qb<Liv#J!TPNz?X5R_kFS{ge$#VoEhkgz=c;#4w
znqKYA$!euNeG)2ui<hju(h!b$)S>YZwacFXsUv8b=fT&zxzVgfrr<qwMzI9lK~Q5t
zcqw_VARC90uZ@8cfMkPki#;Rk<ifLlX$5+hCvjTlSusexiygAVw9B(r8mFOWOo!dW
zs#@LWGkD&pkzbmITra@ClU8ejBo2o)U<E@7=x~7pZ5FjnZ~=~pN^oWrl^rh;vj$WA
z(wf^7CS2fD9^@q852%INDw0MEZQkAdh%%7Wt!!EYSw?{;Je+V58NKf%@hPaSQzftv
z{SXH`1l*h*Am8c#K&TtxxByy==Gi_%Z_^pHwS=}3K1=}R4{5OxinHK8w^|^<BqPi_
zU<hso$2ld{uf`1|EwM9!alU^8Y}CtTu(>5#(wwaQPYf3fml&L(G7~X*z3;fnyA4TK
zAq%Ukt0~_76_tRIj0794h3j~<+TR3PV9{T#J`dRNwp7F(m`PZ!!KZF69Cgo9Y(;vX
zHBPuKr5w~er^RgUP?=2_CL8<9WW#3+)AhZnYQ3*He(6918;6y7V#Yqc%V5UOK8V~a
z1M`TCseGGcVMSJE(fZCY5X#VW88rwhM;+SFw<EnBZEB89SRoBK=^)D!mypAv+5++>
z6DZYzdFA_n0?Dg2)J_vstCl?R1|?N&fOCl5wHvtX-SV=wR-gq!HBn;P1kge%$8faW
zD5V44o}oxc?f_K}oAkpKX)8fBS!p~-aCHNsQDv&Qdj*gIs^s!P*_kO?^uZvS?`M#(
z-mvjL)ykRQ;giMn#FD5cCKs@ZFYk{y*u2d^AJTdH=v-r==46Gf6bzaxLOCnGU=)I2
z+!zPEi7-K%+(9*E<b502(tO=DJihlq7-SdfkKuRq0O(@__$!=)t+a8KMc4TRL3pDS
zrC9-4qEr0xY!~W>BT%sFXU9kwwbqf)A3o~T!XM{+@y$BlBOcDv=Mq1#1hU!{RM4_|
z6z|yCGaB*2D_MopS*fXqqapF>&lC2|8?72$hMwt2lrTiK2~Y^LsC<zNfD;qah;MRt
z-b}BCO_`7uDu6M(_-tWI4M>8UUZ@^vHOUm9q%?70^Im*p2S|2Qr|RVjwQyKX(@FlH
zQYcWwgNe2>@IF6%?AIo3!^8K<AR<Nq;@juQ;6T7})u0Vp9~FHXcfy=QUrhm%MrNXD
zA{!tzC75$nxi^8X49J(|K<epcHv!+!_Y>L%-Jna)-h{FN{v6e=I{_LL41W|nu)h|@
zAA&a`+jM6=a0^^0CfU{?AQ!t1v^@UzKHTF#_om(smSIP$7daU<iWEk-yVo}fPDNH|
zEEK&Gq)%iAG)z;Bjh<w;f_rAi;o!-m(->*tLOD{6+Z|RQiudiMv4zOUC-B;P*_*Yg
z{OPaYPi%?Jh4CW6#@=u#B+1-g)JF&g`z1zb5(KfNIDW|5j%i_cPO;-??$OISP{3hv
zE_h=S&Jae#5GFKzGIO;JXa-SV7~D%o?9G=1iU=zuWKwsm!!+C`ZK-Mbw#Jt>ulTq*
z`&-0ow1njsS<;sH^O+P50;R&pTTfNnPVO|R-Y+r<TG4*u1m1~p0oA+#8}=M7)xS>g
zK3+%Dy_tc<q0hsY5Tv^&4JJ#soMmg{Y<c%JJSh*g(Y4;SOl`_v%Zo4T=Q+ej-1R4c
ze8De!)@Tu+LI5Fv`oN3KWSV73Yp@JJqHeK=G{SPiFom95A6;Ml2!pH(Zq%Civ0eoV
zmODYkm)~gySk-8sh;7RfVIn`q1*vPgP0rh?N=CU294w(17C9GuoE<v_lk_5m2lu!1
zuRMEDheM$@t{*Okj=mjEWg|SuX9702qsKWzx;a;mf)$KDV&mQNb*-NbOETb3AF+?=
zu^!n^82(IN2)l<;P?#8AcFOQ~b#&g2G(vb#7XC1|ac=362|vIt-pdjnSJU}Di`b>R
zx=2onMk>RFQO$%;Vx%}&a5LPzRih&CI4E<(t<w;5KSku&&sQDWF1G|&FKm%jl6!qJ
z(A?q?dz7bR!N92>Wn`1{LXu#an{(VVp+;XwjO~I@+7&*A#0=bN6l2kCB_J&_2*vPE
z($l7-m;)EM#YjVufHV>m=FO|>IH_oTVQC7mR@GE*Cl0L#eElx*_i6&SWn8Zse@`2Z
zwqz@`Sb2QFwl;Sm;(6j&c^xHS;#+I6o0Z+1Jvaml`gn6&l`y+URmQC!t$~4oq{fBu
z0I6ge%eAW6A>vIOQjEyhZj!RXX3+XRiLcfzkgLtV!~p)YZoJTrTD?b{&}P%#SlY%r
zsN?XmMQ_JAcL%}DjnaT@+(HZ6HTRYw7xmU|94-A}LX{LmbJ7NWLl}$k-TeTuo4?;l
z#y(OsjPZ|LKFhpvW+jba%|3&sRF4_P;ujg=MnMMlHm5|3m9&Xa?zp6+mTvJ-J$-&d
z+-bmvrxx7kN~$jgv8_*Z=WUA%O#{!VEM#ss;B*>K)p+JgViw^Wnxk}dOnf9cDBn~(
z1fZXCQ2v;dG<TB?HvJ%i`ls)xR8_zmvsX|GhfryKA6il-1G^XyWfhYh7l>^U<41$$
z0z0&PyVD3`s2<qiXKR0t*g5Cp93Dy#aEAJ(fgX)koO`?L1+&u%Vew3<NoLyb5^lVW
zp=eRxGGqW3EQgB2h2eU3*04xmQN_2nIg4UVE5P&tKjSfh*XY;Z+M;SzIs%QC?EJiy
zT?2W?&lgxli%ZC;+|8KROB<#{Q!BRd-?|l+5fdFz5ld^9lLKoG;mU~W|Ava+nBJt|
z>!{=VSb2tZbFnYWAr(Af=e=<>$ESy=p=mLwo|?SNT~YiKA3~M$$iA@mh3(?%j4EmB
z_gmQDPNuC@Oz><AI6M>0=FPoTHLdjP74S>ujngV*^m~Xl)Y;pl&cL2zX@F7K+}t3Y
zY_WA_;0Q>a<sd9N1uE#;p&Rka{%ulwPm%<>;iK0D{TK@Lu?6#C>}_Yl4ZU6myg^Jc
zD$<=Y?CW5|z#AvK$ktEF7PE5#X(4EdAL&&uue)pYQ<=X@T_=X>qNv87Co4RK@5q6p
z;64_#3G;z!!7CMYRj&o)En12}Fp4wFss7GrxqNGUi$OVz;`n<W)4=y0y4fU0X|qu4
zX)7#NJvxsqsYUV+PFcj^4+12jO%o>^lAIzs#<5!WZiP~Ki+#_-f;q8E`;G5|n3Cy|
z`_a}+O9^3NpYw>odLoMrX`$wLXt?+u$GS}$AX`|Z5|)k3E%szQ!$j%k{)QzX=Ep#=
zvw<bnMBhb3{O{oKQmL*}+#8a77%1+aRy%yK3pv--ad>t!Bj>DjN$S2KcN57lc1U_S
zM{TLuq}H1d;ckxNqD>v4-AR$S!@Nv4$tf7I-k0Kch)RORYWG)3gCCrVjHe(`RW9b8
z?x8Po1Ud(+Vt6)fTz4mLCLWU3s~(#pxV{?#!*&(jq+#M=Y;zTvR2H8NQ|CO1B4C*E
zXy^r-u1?(JJ*8la1Gb{tWW_e39A4|SbZV`ZI=44^_fm~&HO*2jSt!zq^>BDQOms})
zyK%!NSw|%i>CZi528@;%R7(bgJMK~$k*<c8x-Oi1ObqRgshSL*2^5|vduWYAoSIvn
zq{60dddr;2WDbG0lxA1e6~*Pk5{^q9LcHxiyi30hpFa_A1j80gAE%|J@fbarRG#Y)
z<P(@TEl8P>^crvb4Da_Ag0jzVyPc2mxNVZeEa~P$b8t?Vrp_~S%C%ni?W)vakgPK2
zC9AKZPCMX`b7I{?wIo&jdrltjjXBNV?mn%dpFPdD(rUuoG)vlA@x)8Sa5DeKa}Q69
zpD&n|;pV;<4CS4}h#(c~MLKSS+g+hmppHW!=T)F9>HxXOdG%aiiPO87^Y<a;lAxej
zo`Mwm$*Oy)-P^79nfBwi&D}-9Gx8mF_#YnEe;YSyWjJ2awT$QD2%>-b`}zF;1E1rR
zE3u6=llIF>K@p`dKHh)?HZ};(^}-(ltB-xZ_p$5cMPqvuv*^foeS!gG(O2F@mnW2I
z|NCD3VRz_4pmzzWbCZ$QhPKFv-o>t_NNEe2<_N~Rl_9qvLAxEZ{%@Cp>_;QQJEJ%J
zlFVkBNy2Wcy?m1mf!rKuy{`5mpP-umeVqUz*HT%uFYcdzEcm`W)6*iFMDjh~UOqZ#
zX4O?V`5Er16BA;vsyymLM{=WfTFrT=a52Gu*<a#if=S+~JW`CU_hpx5S+u*w1UZ#^
z-}Y=rXSzJ_LANk^+MhbnZzqSNI$E$KFJvt4?R|fJhMrCSpwgG`dRlL1T0#Z*&0EU@
z1Hb;Kc>`CWE(v4Zi8%fS#}PvHh~v5(FUjkew#Twb;p%;XJ^9LDPL%a9Pf_iXSr+5p
zW}67bI*5e7{tQ2fYdk6Pp&bo>c`z5NotJ+$9YGXkiw7VjHD~<m$p+uQ!J^-gFLc<)
zr^m}I&2`1oH&?;Jq$wkK4=_WhPL4EMq%UckG;Yu&2UPsaQv_l5@%>RS{a^(no#Lur
z=vPTTvO(V$U%$$%y#*QMNQU|B$0-#5X)Fpxx252}?3Z2w>Sz&(La0%~f=S5SS2F)t
zK{d_Xp-Bg!jq$fMcFQY;|NcDbr}tBTTnVknr%-!tqjb9m+aIQ?K$}kwfqPB$%5){I
znj6$g9P5TY%`f@i&G}C=6iv{533x0vXJ&x0S)vj)=>vm%{pf}d`4{5v!~syBVk-sw
z_1!<Omp^}qu`lEbG&5Kn79h3BfN$MTVV`td@a{%}*=p?TRm0Cu3P(P+4?9`h&iSwR
zm+5Jo48=)+X$WJ1P+?zW_Ofh<7HbsY@zf4IL5ih?)%V<PVQnk;h4aV%a`Zg<m@urM
zbVMR1-&oa<LHAYJC?L_7zUv0v%e_}DdTlqdsTQwu);w&bu71t&ucxgKTybU5V`2@@
zu|=EZ0CqG{pedbL#q1HMnwqUNf9H(+EeUwWe|h5KQJ%O8Ms}f)E3#}EnAV=p-HQVv
z?_(zl$g+-<C-6e@1^7B=)bx}-`Tyr@uA^d&S5Q|gLKoQ-v1k>bec|VoPFdSrJY*@0
za>kMBMVQ4l;)*ys{fAig@Z&tcrnc2}Hbx)0$4W$`0*gut(G(=-0x(rD8EH`9zs>gh
zV*CBT(F`pcD?wfzKd9tB>ttq|)TMX*u;U1(DKN!p=hf(L3MU6VaR2A`p|2l{ySFd-
zAq1K!K)rbDwWnFOEZs9c8iAQeP3-c7@IqYa%>Vily}i;Ac|rP;4w_}cu{Tw<+s7Wf
zMzTb1C@qT>yLjj1T>FK?yNH*WzrR1fAM|Zwx;`UkCO_#x{M!^)mNF*R>>-6W=F692
zzfWU>T={Jz{nPpseE;p0k@}4OKK8(F4|fhTNcVizmAwpnt&9YS%mXgkq|lZI>6#}g
z3M3Zt|JzvozohnYjzB-cfWehuS&lCDKJtOJIVCJGo8~R6zb{jN?FQr0U<d<ZbQJ$T
zuh=)}A<j}<Xw{=Kn+cU)$bw6hhu96;w$^e<%Ho;HGR@86e_Rd9<NUW<3mq(ng8>4c
z@wbDx_hut6tMBv0J%4%2u-_YQplfLEL+PEo>+|wIRy15iunCbY=GJrMDlRrleE$YR
zqisaumlMv|tW9g^gTRV5fa+Mw>;3a%rAMQQy8`JWmi;(&bnd&*#~4~7J)01vUO=6=
zYR-`0%ZbR<5*+XUk9$Qc(;Mr)Gr1op*N8%cCH*tX;|%4Bm@L|6hUwW7Nt-`SEt>Q+
zef;wK^Zfmw?-|x;1Fs`(>9dkWxe)25=MVkKd?j8uG(<+vW#IIy3Uz~cUrO>{jthVO
zC{6U0#9mp0e!?~%tlFwHwYGSV>m^S00?Ppm(9hi^-^>mA%C`m@8`5ijo63Jnq#~48
zd2va}QVhIDKEG>lweqBV5pr<_F2wfs)lzf1uCc-GJ*I!I3aGz_H?Ci=RHV=J>P~qE
z8efjVBkW)I(I^L8#h*09z7_voN}fJ-E|F%%%`{=y%llLod0ogW=)9tW+Oq%1^YUKk
zY!1$@m!V+<`hR_lkLyD3Yo!h?5?}AsM;W3B!pX6$Ywr*WOA`l9tFc+%JpC{4r!1NQ
zZhHB9(qu&f-vF6f1a+8iaJ?^mlYP9lUv^E+i-R`5OY`SSCQGRftRRF~q~*}fpX-Bi
zRiUzL6O>dyXhO*wNRZR}A<bW^b&Zt-6x!KG94bao3lD(pJ}Xn}n!Is}=<L$SF*UHT
z{c`aE)awL*_aSGcVSKYNFNCHkV24sKT>w~(Ex;xzeLV)0mvUgb8sPwTt6vTlU~Y0^
z%^i56s<-SeM3){hAIaU6WnH*(+h&CPVQ9>)ls6Em;`2Mvw$2v<ldeXkL(dh<LA_%+
zkSJJhdoGQ`EDhf>#oBtHqN##*vrVMu-vSjw(cb#O4%(!vfh6Y$;*sT407@D<HLAdt
zJ8#kzZ%}(!vK2A>D5*HPc9i_fi$8~svLCMz-I-ik+9E5S*3+74rW=v=b}(d?*%Z=z
z7tn0<%WRVM@cdnRXvH&%!&(%B#vRC_NN}RI94<v57=oy0!8lR)5EuznRG0*}!D#XG
z>QrrQlCXnGWk@6F%4<7cmY1{#?_?;Iq?d=v`B(ly@IS9dh^*Wx1ubj|>Sk6}j;LOG
zmEq!;AE1=V1yO9Nh8h{it)Q^Mzl<Z~yDk)f;Ixrfb7Db64Dd@1;_e5IsL~Zt5YDA(
zh4+0{rgNEpFJCd!7$ln4T6?y@73=A|l9?CvM5LXcpT8Vb@r{>D0<ljA=-3kgo$wPV
z$cE;a&5E4mO*$Ye2<NO&*DKRabDe#wI=iJ-dlJ)ZszRMZWTIg-oi4)<1A6I=!||z$
zkrcZYiVa{_>s@&edIaL5m4G(Xpp+{1!@uWl4(y&<lfekT4``ZcBANgUS&Q>UhBk1D
zG<5++pa;FrauM|5>=nxy8<*#`mrE%93DMW5kLUr%(2Yp|#r@^m0gT#C|GS=ZHj`Xl
z+o2)8VydP>4A$b_8eP(!|NHWH-9WFpXe=bQ{8(MftyX|b*bbB7#Xl~~FzA=pf<@wO
zmTX~{jM=MCN*aHDl@nQdbN*b(G3ThL%K9xzn%~u3D=wb|Kt^tFl*P4N8)kFy=yeUS
zKdft-YP#$C&u@Z{xvG|-*S$aXu;JEbu9-^dxT=XR{XEe6e^ixfs#6vH<j5n98>tnh
zXdSICX59=3-8Tk;e5n_zgQ0&Lfk0@bT>^c1p5hX)rCxOCS*A=<MtK86!H%xg(m9U%
z1&ieI+x=#($lan+P${`o&E4tl6Mxxl;}zu%w9~t~bnu#YEpA6(7GSpIyIbF?#jI%b
z$cQe7R{$6+`XWkC7U)26^(q34O32sc?=+4`j<!vK)2-Xs!xrzjQ@Eue5WBzc7LQrv
z{3u?;C`(xdGl7;9<RpR~fmd4yv`ewtHpbAS+I%NBu8->{J}4k^{3WOtG_yXvA=BbM
ztfChFJ?ACMe#!n>bG&EV(i7|A3qjS#O|pMX7Avlg?NV+{DjoyM=@OMmSDPRo--)%1
z-INU#)lN9h#h}ojw@0GnL8=m|px2qd2T*8sC-LL*)3^yNHPkN6wd$np`lN1@gBWn%
zaR>EAsyaLE>t%)|n;s;}qB;U55kXFCAVylivRL+LMs?YSbD}R@W&(_SY{F+R_(fGk
z$F>{laVYLJA+O|@FH(YV@S(=UMa!2V<<vH#{W^ssVC@-u;d#$3cmpuH3eP-_lO7d*
z(N}8t7OXW27OG{Gf0PQ(4LCk@4lAe5dkoS))mZqFrJJNQ6l3R*K;0N#ZF>M|(lqo3
z5FOW0%&}77?MrITd+wfG`zcal%z*zC{E@Dk*GfA%D`6{kfdUP&meYWJf*S+{tz|_l
zWXXr>ZwQt!$X@2<zWS2gQ{(_bZlXVq7b#~%n$Tp9E)HuqQPieFGy5>7C_Cj8k>MR8
z`G+}$i8WzVf<1PeIZi*rhfxx?Tr0j&cYHY%gyW1$frX9uy2=cd;$7&(pB_zX#rI$y
zH14GgUu9Y?eT#u}Xvn@4whu-V4lK#GzLj96F)?*<P})V?oc9*MzFVsZ3dRUFst<K5
zy{fM`qgoWk&ndNSs`tA@+NOem=~g`n)xcnVJZnSQb(GW^TgzLP(juKDVkzv660`0o
z{ke7e=tpoT9w)_nsaoS^b?X;zSeP=amgGX8O#z8!kp|Ht+}>P{xK5=MLYGyxSC+@!
zRWZP%IP9jFdJ164-TM*366YuTg<&X<a`_X+Y|gT2GzTT7daW=RwRA9*z{<4W(KmkE
zYsyq*)?fv56HrD)1s$lY3Vc+KJM}IGW<I>dpSw=LAgW(?rIJUEo<2GLT0C~J&|-=X
zXo<_BQiB=-=koY-ftHXQ(%rCcSja1Lslo9zE8lXGOX;ISnq7Nv3$cip)ziw;Wr+jI
zo!|${#7p)lD>Dd77r284#Wm(Qc!|7z%^0Yjw^%~krhs6w`Ws}uQ!yPAp7pT1773x>
z_*SqrQa|7}Uw?hpKL~>Sa!dWgZqoqJWVv#<P)*I{?`N|q7kimIn-4lyVSIs4)!c+<
zDR`mXOUVvThNVedHnv1{z;soyRtxzUO9P>}R@#2e7nHO$G%;^{-3tnO7=wfvA<z*-
zwZ={CJ~tTAn>6la+C9o<IW$`5AxjLpQ5Jczs&{EWnNz=g7<l73y0)zyUJU?&BWc~&
z4DgcgilgVeH04<05(u1EFaCW_?W@OfO<%IHR!r~7k<v;pBA-i14*4mR`udrf+c~xD
zBHc-yr(Lxm2Wg>N?TksVoHo9(fm8?>E!DidI?JWrUbg*!oIrgqAku|^Pcho%8C%R(
zryHGk>pU(i051WrAmHl~HIyPKndInqLvUH5r9Z6meJB|phx$x3w2u+sH*J)CWdU;+
ziJr=cnD0-4)=ZjiaZU9BR3C0XKnJD$sTH=g#%;v;1CSP1odE@)aNwRPUMLh+%}t6<
z;6My7z};7!q-U3T&7lQjF-`L<nUFPNwTQ&e;a#VO_hG9-W$CTFz!Wp-4RdPU@gDTE
zz-JV&1McS5#UNuwG_X>Hei<`Dwn%MXlh7M1NBO>Pv!$}I0`R}@5O*W9hc(QxU&g9N
z+#r%Xs>gf0rAo-!j=QZNQ2wn;+{B9(Pp?B}Y@hJd`g!UU+ia3>0=N(>Q6oSrPBXWO
zVcJWSg%Pqv<AO9;B1mth6TOh|f7im4S?p8^u!ZAO!nA=CfDC6s(G=1qyhI(<L#J_Z
zvF&pGnJ#P73JQ8|DdHV7_Ojy7Lw=oybe*NxE83R(vWA71+=sucHYb+}mg=Uv*q({C
zY8`@6jjgBW+Cl~KcWYI3-Hbcim2@=kUzxras6S^eGV7m|DNInHNxxUte|uUwppt6D
zw@+DCmt$r?k&A<*Q5v5ejo|~&^(>m%yVm7Ca?#V-A<K2eTzkBsrdc9|1Mqh<9c|rg
zr>MSS<J@d<N#!1Y28@C$g-<)z(Ah<TAx$x9LHwdBF&(NeOpk@7&kTyC_im-?z5dB0
z_^R#Qhc?sw=dk<UM~!q{(t%Fcaf7e!<VO|3YHU6G0@LP9@varTV<5h((PrqRN-3kN
zXL~vC(&mRNN!J5g_u|aNqJVW45)I_VjoL(&*v{eLMHCE`?3ccr)MJkfhSI8UKMlDd
zRc3!3;zSy^^ZJ`OF0>!Gb!)rFJiwS-^kQV16HggAfXX{JBwiF;d6Cup(a@=<eOGNg
zK1TV^B~5>l>CFM8o(iYh0RMcUIc+N5<!kvn&6ljh8H5Y=DJzvnO(hsGUt}9Y2d27u
zL70Et-ArWswi^HwSYy<KiM#0S@hB%`?$|B;{)P{}5GtP}J$621-Jr7cGD}`|JxLGY
zT@R)SEVftHFYc+{QB|35Ay<6Bl=?D)KZDf7fJs4C19P|tk!oam!H9R$c1F&zI}cNz
zx_IR6!xrDh{g83nGTmS<Jnc$!m@vFAwuYXVLK4~s2VZ!wK@dh#fn0)N5Jm{z)m0|a
z${*rW<_ku(N@GuA>$^+E(X8+f)qfh)+gz_FnR{+o2`f{4*hABDS7~~a27$vlUzHbl
zgYj&V?QNraio?#C#^?Rtr=z}ftmy|9lNq{Lfuc(285)EX8q(B;Y<o|#?>wwjW=wcz
z$(cw13CgW4e{Vt%u{D!TSt<(sM&RugaNj{P^Y-p>e42j_d0yzPbN92en<=X11I3|K
zLhL5<pC{+fDo4c4C>n{}n)LA9fCV{o!fLLfRZI$Iw|6xMeFPgVPq!=%)vMvG&H1Fv
zF0;pC3GX@9h#+(%o=9D(jwuGApkIBToEzGL)=A#`)Frp80BJ~5vE4!?qoPu*)`7$o
z?Rr54Iz2QT%gu2S&-tt1D|XN_uQJ`yr9>F&-t6DWGh$4uZ+ok^N`scO!1b*j#z3Aa
zyKWc!)f4KgY&MwYPAw-5G7zs@R^``ihZjm4EpZGPR84{7+Fm`^jsusji6RtXiyd`<
z3!hqCD~fSa+Nv~6y@MwiPZiQk&BmtMP9E16SLC3msp?*~xKr7*Kx)ZXYkfg$3q2mc
zF~w0b+Hlg?Aa*v{Xed0CG@=XZvFOp$Oo8*f%l`8m%*gGHkBX4$uJMz}(eK`b;C{kD
zJV&fCeX7M{!rR4DdUUdx-O}JmfB0p8@UyWbd}%SzO~FGNbJG;E`@^=hNe*YbS(+<)
zCPfd)ZO7Y0&7{48f1iQ77Z>pY+D2ee70Rw|E}dG$;YNVjrPg@TlFY2#Uhu%~Rxn1C
z7-sr(c8fwrS@FI6cfwv}LrgaQ?U9vtoCa>Fw!XslFTgpS$MJFDvL9?i@<T`1Fm%;>
z3<-nP$K>D5`nFWbNt5<Iwb4rGS38N+q6xiDAjC{-`3xq$!_-Q9@^n=|j9lMIOM-zr
zjj&Teb^1gK6b=!_%d|*8P_M{4;PmiUPXT6C6{hloGt0XQn{=5t(B*O;(+zeu^9C$M
zyijt3bqGUl&*+gY$zt*g7N5BEIn6|3tn`g}0acc+?=5eb67lB<$FLAGLU~2q6`bE^
z!6h+yOpynFnrgix7(0?S%3m+T3ad|#04J<5ZDF{A>g*#eFkBy*ygZ+}{85g*`8*TX
zt2ddBR;*x}WYctE6AwXXm=L7OkXbBGiICS!N!K3D-d4yd93cPeiN(<ht@|h<af_|3
zX4XnZ@=Hb_oW$a$fZQUTW`**%)t6<668A67WI3H4y$0}XdNwU<x6-)UZ8H*OVXm^Z
z6g^$^tZbsqTyHm<w~v+bhn(F+){j3QX1RpD-^i65k(~Td?|xC$%z6pNoeSryG$xfw
zHd$@%t6!?|@~gNsS|^)1dfj`@a6Bfpx;6J1TB1b8lQgox(6;~CtkF_i?Kj3vHJomD
z$cxb3I{wDv?F`9%9e=n;VVUh@RWt9V+CtY^^{bfhX47y6RTF4t78sYjloax=$|0Og
z&M7H+(OI75HTkxEf0j;nv=TSU`rd(NUY2@F`$^}aC5?=mxJZe&+_>X;a6<gg|BtrU
zA#1L?_RfU;<Xt-txR@#PMi?CNEt(#kKX6AFe6r@~rYqckAn4x9F!m9;E$47tapJQ9
zjx2j~3AJdD+Ubs;80q5etpmaQ^|f8&sq?*hpN7qTt37`_Abp9Z7f!qW`fxu#Z8uWz
z{F+fAwtzccm2ceFQruaLM`D#q-ME4;*@FQmr|73!^w<1OlCI$0Te8|LZsvl!$oQ#1
zOOu^p%H6qme&)Z=5qvNruPC<1<HOj>B1E{(TD(Pj#LxO<Hf~*R*k)Vc?5?_4{nUHZ
zc7k1&KC4NYZ41xUvbwKR^J1xaNwIUr*X5B}(?6s*2;<dFRg2KOhG&gug3fC~TJ@fZ
zdVc8r@rQbuj)xF&+BLn)X2w+XkzfkoLD!&KJx7uv=6TtI>#82m!vvB>^5+>Jng0wS
z`s;AU2jjz)u^ufv;Cvw<@{(eIo%WoU<B3hYfjLM{M9#408C#r|d(@oA73k3``(FQ-
zn6-=UQ$=;W%~HcM8Q7*R1Bu7;4D;q`l&ABwdL%2zq-!0YB>ZBw;ELkZKVA(ZQ29Qd
zEmwM$|HPS08S1??U$)gEvq(0ptGT3?zo=)ryhMFMD3K>5-@l1)*%)Zgk*h@n7K|Q}
zy5yWW;vCMu$E!?uVOo+tpWHcSdRzl-gEk^Z5v^stwA4TKRs@&EEH)G4CXFcstu_~O
z$6By>k=~JRuy4#39BL{H4tEBDVQk4Y!DYwO#^DRA3fteLJqZ5Q{IkCM2LfD@m3>;+
z-Db;6^oyQVSaP#fKMQ(P^H@XV2tDbmClAJs_^t96kUKYE%eoS~!h$o6+t%zfy)~<I
z?v;3X-o4eH$E(|6%|qIrJ?jU1HPC)1G6yA`?z|Uq$(G5;<&Cjf6T!t{n{VGf#Xh!P
zH-&|#SK>N!Zd6uzU(HfmzwlRK!?olfTkT9%*xf90yg_aIMhh7IQoIqL#=+;a9>eJH
zO?>zt&z<mUAuefH;H0Yhl2gXz0VBRoaF^MEv$X1+{oR|@gzTD-b1w%6DeA>@FR002
z)q-lpQMO`5y(rGt6EUd!U=OrTGqfTI2wLKH%YGZ>QEB$!FDNIrS`X|nTZKu+#(LEy
zX(jg<T-*?$$hb&v($0~)xg)^&pV&x%3Xzg&+xl=MoB{(|87j+z>W*<JQ&IVSkoa|v
zg5X}|It}rY!za~!=F@ox{+O-nlxr|zQab+7mwPjSF?8s*p0&Cjaa`_~+zW5Z^8Mb)
zrirqFVd#!&6#F^LT%<Fd_GyG=qOL6yO~vVVXl~SqgU*Sg(+i2Td8qb2W$6w>&Z}6e
z{UI`FXika4<>_1~bT}>dXT`z#Vs=F8EL7v1Qc(Zghk3{BOYcq3i7}RZ8*48Q1g4<b
zczuEsE=5h)=`6f=Vg#{1zr&lPljqPQz8lIi@xXhmi=%MqJ9NHQ(q43;Fo~+HpD?c{
zv^n7g)kLtCgl#0<&PT2D(c+2MrqJaTcSq-L93^Oz(q^SRo>v`5<<w37{oV1>)(UYw
z<diI{SS<2&L8n{kg!1P3=!D=|Ue|%uM+!Yl>e`6Sxd$6=T(1%5>xY^Jslq=_Z^}zY
zHoI4>Lyv2;UWH#B!8@vQ=^oeh_evG6`8k(e84$GZJmsygjIgxjav#_#cNwg9iK|rL
zFgQP**z_`0oSOuu;H)E9%E`%VqCntj%%&2ACZCShnxgR7Jso+j|5(5T2<z<4#&G*h
zLkh~x#P<Rl^yOY1q?3h2AatfR6@2D>`P#99+Yj8?Yu@E-PPRL3fI_?pxAY!px>U77
z>(pr@bN2nup8UhJYLX^OWNZi{IBi~y7E9@d`ILjO&G^~kLcX>#m%c!aEu^%D?EdOG
z^j1#NvESOR#&&DYtC6?CvOhVi9@`*<;PpC_bBt_}eU^KSwsj)cCN`8emtsdfSOqt_
z;Tz!)UAw6o-k#dVPdyy)h3C*uy8^rnf;&9~0xtH)eyaAXX~poI;xxWVhqnRRm&0Us
ze$Lb@Ej5c1n&NBFP{+s;)0Cd0m2z2SQ9LTW0ynl13ORPloS&2V)YI3YWo1b`UV&sy
zo0U&e&!rXjLn0#W-K!nntn$AyIDAW1{Guj#jiX#<;;wwIu0=$g$-&RTRvc=f0%Ef9
znF&_F8Oa?77r=zbDr^qq%_%$c{^D9hIRShG2n&o&t47(nSehK7uSM(EXBE-YgogIH
zUVY11<n|W!`~~)YN_AFlIuCV;wdg`<`$l5DS_SmHqMXj#AyWe>QEl_8Ss^<-VKGl*
z=O$u}Lqi@Qy7sm08C=Fs5L)H8k|Ovmr_L)UbiOUQdyf_sr6KF@%HQ`;a=p|lZC)53
zv-9lj@!Bw85u6)0XC7kq66>F+*l>y^tqGJYDP5Pa8<p8OU!CL+MJl(@E~xIr_NrZO
zWn>i>r=>$nxGsUbJwVZ0?pGt!r9{Ku44K8@5YDY8d*UXd!RI6yzRy<c&A`v~o{gsD
z+iHy&-r@1Bv~u?nwlZ5o0;RyBZH{#gxDM&YEVJjmcF%c?g)f(0GXiIG*(LftT5+U{
zJ`zXMej6YmEWoD!C10!53)<OzG5eZBtV#Uv%x2<qn)tk&YxTHE4%>tu-sPx{+d_<2
zJ2Ddah$UqnWf4Sl*LoCE<`{j^`v<MXhx{tn&e>kQM^9zQ31~%j$cri^5pa_+=%Fjb
z4_D^t%t*6b-klE79Ew!6^E5Krcfd6@?~wkyF?Bvw;@7sDTcM5cRcFiWIpO3woF~9b
z;=X;OCcnJr=Yq*_-|I*bsw%lKDZwYnGr9huV?oJO$%XKIL^<oHY)vWl=!Nv9=Masd
zQ^6`rtrd&-q2-FbRO8`q#c5?GjM!M0JB;yLet5Vg)-dtTciSo)t4}?)aAm9y!y$TD
z&vHx5=ctM%24eFO1J%gbOJx0lf%a7O!kC;<YlQW)sfh8ZHBv1{Yj24}WL_n5mHEk8
z8`pc$`p{-+&sQb^17JDs<|ypC_bZAHD!p=%ids*HeEt*-e$7UQo_y3t-xJ(ylezTf
z_3aClBK@=-l%3KQF{+LKjydt+oj~ou$2UuHyXE>vi}j?~dDQwW9>22Q%GaTXc_GJQ
z5B4FSbodt%O+LODye6Hg*boz=4Hq#zX*PBBY!+3k{+TLv^6apz6y3}5G-#to$;Lhn
z$=g6#U;JI{@uf+k97nN|RMq_1-Opv+-{X}q!F};goQ*|yQR0F0agjCUYLN#+UX7_#
zm(qpDcR6d%ZrqDUK2u7`XGPndyM|H^Ywdd=8{bbL3TfklRXi_KDpGz3{g|*rIB$Gs
zyHO@jC)!X;o7KO+EZir)J>RRfP`jKFiUdwcB&8*+|E?0jKQ=1G1l%Nq8;3j%36`vc
zSL~Kq7*7z|qoj(I^`FTm1D1DP;nSw^SvM9F3F0B6YkCCmXg%U=vFYrxU_I98!*zal
zDSy#L!Xz&9ABGDZtB+_4^}8~tupRx*lf@Tre%DumaRq}TkK5Y2Af&rmt+D6vS-mo~
zbPRWMrQ>W##buDBU4F{phgES{WRiq)g||uz6_jVHXXJ9MzWQJ(?mS0W_1^a0k85eS
zE2GNOMtTwF$t|#_PVN_((}ZL5Q*>`DEiuhuGKtom9o2`ur4t{taP7w@stS|NzUon%
z=19fjs12$g)oDE!tbS!#y7+drqJ7dj9%4~`P3>N)GTmtz3F@kv`1(0@1vOwg1om-t
zWbNie?#p$p&9jMZEQ7v}QX8Ko&%XjoWUE!)EQ%`e`e4mG?<+&(Kj;0$M0Hw2z6j3%
zK^0<ECJxyXPnfL)hfU}(@jW9I_AZI0Z_CZM-3HKR4NuA_nEPVKObWWM6`fQ;%pLm2
z$|fnOD$*~Scf+G7k)Li%Y^vw-YUcGHwgl;86<wS1s`-lFyS=(pyF&Kl>mgg%#>$A8
z0ZnNWsiNGf$KnwS^2_HMM=kC0T+ynTOJsx#ZfSX>YUyQ#aku4TdQLG%gVLXRCHL4^
z=A<5aEvvDtOMI+6o!k_(J6B!bY^mXC5kH8!;c;oP%3@8qNBjkTAgu=%GMpGcvl)-p
z7Ln1UTzwa-idre*Dkkn+<E>nQylteJ3BtMUi>56tf`g&Y7u|Qb4GL?a3j*b?iioLv
z=P^Fd*wbxLkAQr~AcMlDkXGPNe5Y3eLpbZa8DOSg1w8>XsGiJ20FIFFWPSFh@bm|k
z?xP5r!S*vE;+lsDs18I`TB~9xloRIva)DodiPNk985j0$4SwEdh9Mlv_)fuv>lL7r
z;a*emC}+*j=NsdtEw1T8)pBAtVA>)MnxB#+vYj+x+BqQ|j4RbbvVD)Kc_zaTA>ID?
zIfXUy)mj&IF%v~RFD6<ibBn|Z%y9EN?>}VLyZWs5DVcjfi~nJ3`B$&u;SztCSIdf-
zrF+$fYo!yFr4_^Bb7GkV5ygV~)y+tMyq58^F7=wCB02GVii;}cBU_Kq`Q)_u3Z#AK
z4>ndx%GvxuvuAyDDCYkL5Yg=cE5o}pN|QzsG_T~&N;d^kk&+%^wf=9;hcd0y`99Vk
zTJF!&OPe$iXp-B@PO@>Pt2*>DuSthX(ZA*>YY1U011{6?rrFH)D4G_!jqO!c>Jbh}
zJI&h1c4hR}Qps9qn`Us>v?mlYyCLUEQJ(LFlA|0|O8>Gf)}6`f7m)>3K_g-wY4|#J
z#lsJDcLD={PFBLr_yJG|(Lv*}6{&N1aiOz387=f9AEUwdeTs<FPX6)kCe_P$7c7tC
zd9n@5+K1TrDgSl@I-&&}`<8{gc3LK-C<qn>Rh1LKjr<Cl3AWUBZ0xnZr|keRbM+c2
zzd`&VWLTf)Hn(_BZHHkt&9dd>ZSI{7f{4g}xrbg6>dR5uP!y4opQt>7lOAkN^&;hS
z!^pygFX;yCMhID(11v&-q8(spLZyK3Q!aOZ_vR9*Tk&5H6n!(8uG?zdl#G`*H+hOM
z%+3sGFZ)d{d2TWM40y9pQ0_M3%XguKp$a^CfBmsPl&HRbOjn&COEXs+hP<pc3G5J)
zyL%n)OR0BwcGDwUK9D07D4^mB+aTAHlq6BTAM)wdzuuXv1o5R<V#iHU{7wZR1CwRH
zAAUjO$7|Z-7#<#;^>F>SYw7ocu1j<gfPJOR)XOb;@$<guKh|^bPvEtqR!qG6`zL-s
zV0T52|NKxt&oDwwqbsqfY`VTL_@7P@eJPeV5BEY7N<2!NeR1XH$o_hqM(yY@-rvtt
z%b$eImhqeXeM^0nKz$nPwx02O%Xo=Tcj<{0NZGmkEiFDfYa$oHTq9{yP1)E<y+y-1
z{+_WyvBo&l6u=fE=i8&kv+_od&%h#3Tj+qQL@se{H?72e67&0sqaM_0-+m*y4B*g6
za5P*3V)o^aCD5(q0yYM@-_(?plwx}qsUzqlzkU-A!jy#Wd{#;t`S!jqeS0b*|686a
zNwl08==*^J)}t}Jn9d8NZ8pFF^h<>=2q$%jqc&myEn|nG`?$}(WudlPr@+?@D||jJ
zJLNd2grX%C_cpyHQj{C51%z`H6Imz3GLpuB736&epoWre5-86HSxa5O5g6j2VtS?W
zrEDYH$4hDBk=ce1jQ{44^})UW=JWt`4mYN|xH2^ZR`!~o^C=+SQXfuMm2i_bobU=P
z73fXXM5HMAP#v>IeJ-=9xoA;Jlc<hP`A*cLY&+Ky;eZp4lXc`~e#1Zrtfb#6_P{}>
z0_8|Su~?wM<?aYrRxTiS=M*V^5RVG)sW=s>F^@_BWIISG#X8)eaeSu*l8<ZgCj{Za
z4FRN@U%u@kVkNeRd?0Mc(p@FdkqcQH^k?N}s3d|Vn`(CTK&+mZ8w&bStmgFX@4m4`
z%Bw}vWu*%eF5s341)QbQ-syTj)OD`kfWJ)+sTUm*lZvAeo8Ai-n1W|m(uE%`|7cW7
z6PQp+5NUQ=9qVRS#B8*wJs;WM7#s(U!1)%PGr)GTegS%KDo{R}lM^t5j<1lrl5U%n
zl%$kd4Z=j(z9{5Lr%NM_;OKn<(lQBD+TS^B`AQF{w%yPL<CY*Q<~MJoJi*5k{;Aub
zF|Zsaf?uuP<vi(TN=4;#4+_fybfF5YCV;nUhAEp{_t*D*2Dqdi_S{GB_dx})rZ>;w
zb1u?CR4}n+9|Wt$U1#dBGLS=GU(jrWsdVoCjq3pT8WvN(gIPIQ?VhxyW7kZQOMB8q
z<gZ)(`iC8dUVhb1h!*Jc2J7c}t`Mn%$>-HSSpY9jLd;rlqCXR&ig|9)8BEvtw2*i1
z5Gt}8*r{t_d7kXS`A$M&@FDES<dO>oUH04eXko>fgSea@eQ1_2>>@A-0|EQD&=N-i
zOzOT2pMriQ@=#!8813P8sy><x9U+zckf&2w0jj#=6H+X#o?z-x75tr0I4w&5<|;O#
zpMONXal@fs9#f3S%`5G6s%8>D7z3^t$C+^Q#-2RoPTZ-5<Nn46<WsJD`UJH#<|$6-
z^>sm1_WlM>Q-%xb2-~|oG2=z4C`~kISsuqv1NfFrX)~#okUuF}^gDLHH`vfTOh%aB
zeCwE?VG|~ie=t`xUu+#{W#`mv1qgKW49s`HYLJF?uZfwij**kxMpf%&#GU$qV7V}k
zR`e6#;OVXG7Mw!1G#^RVX$k{wZz%{JCgRIF8c^KEi>(Jo|IUy*vwm94zNVn<3ZfES
z62{P38}GIIl^DNFiu?mvOHpUM{u})Oo{X3pds-ov_6pFR);}Bnx@63PjmQ>wk+O7}
z(xDx@23^|nC_M`6fj`~VXOV50=bN6J?#$N-;xOen7lCu8FBf!+N5F|(h29kJ2T7i#
zr}Snja?jmFd@vsQyIT;j34<lD^)PE;Z}K!u5{$d*qGDK@ZsD$i6{?@PR8|%ZZ9BBL
zmfKP}Kft}b=KQ4O5qThPQ%SJMbw4L82LJo_KQ^POvdN<R*azdll!vd&UbCjpD`+#|
z$V^2sF}~eL50cXy7|W;)W`u>-8Hc`;?qYcAn-JIWg$hD()shY^?CmFXcH^>wd$IQQ
z-8|BF+32eV8bA%=g0APjiYNlag?Re?G4P%RFma>HlC3+WMqPymJd}IKi0}5aE~w_V
zoWb|UT8Cfh2=GLY=*8T~-x$BQGg8U2!F)!`Y@0_;mO*7X4I}^~CBn$&1hJ+YIlOPf
z*u<WiSzbo#{cTUTNP<S5Th_afN}FGa@`qJ1mw#@_B94@)I&AZUv$3I9``{LMLR)fh
zq{QY$7S<kAB4^dC#pgfe;dfvte^++A2g{JTDA3cr&h{L0jb#;Y+aO8xM#I%@vXU?y
zHcGdz5I9AXsixL^dVcz*l`wOva`0!ocFzbn{=wRhK?zI&|J&9)l3Za#1cB<nuFFsV
z0p7L_ZcVDR3<~G<cPUmNp19V5u9aYVy5NcD_Q9CkM(f%>^QuYOYy45n`)C>B=<J0k
z>X^7}oiT};8rq1Q7d7TSs-CAg(&yxZ5tftr-?s@g;rIK<XD$TXxM*g_?DbMt$2?<)
zzfh73wAv=887<okfD)=_oBEndEgrnt&5ZoRLw@^MrH`7(XLCIGpTW$7afo?T`NkNZ
zMyRl0-I=#QL%YN7D}4c$u%~<1`u&@K0`eUn5j$x;N{nPz4=#hfF`K(RJ)of9$+JBa
zKF&60pdH5L&oKExUZM%tL{ApS%~!w4@PYotZR%xZ)i+9s<C!UJTqSox^>$F8!|%4S
zhyb~Q-29&VqlPp%XtBbn=2zK_3u<CNzaS;kLUX_*_&KDg6W;}AW|k9%W^HK$?+p@#
z-<wVO-o>A}1{y4<RW;4Co{O1>h3@A69@+hRK$CD~5MHMIpcK{BVe+c})E+nrOWaL1
zB6)-irbFEHnVXF~$-IeD!rIXMZvt+IEU978^<bGjkMnLsY{{~r-OLAAl1SN%DVzvh
zae$F{2Lz~{Mg(Q0Y;j~q3%IdjZ;$odd^8-k{2KUGkSHceY&Pn>VxRY=`e~A6ZSs!5
zdaFJp-m&&^3DuZk=&~UXsVarsM-&yH<?V&T_l8%>q@7p{nB=4#4Ab8$0EkXgc=68n
zhq#>Swl{Z~Wq#~%gicJKl!H)h42z0q7#jzf<`_7VDyY|8S3})$CY#jCuRy|Vm7ANw
zF^HeVVFy2FPb@HkX&oJZLPt7iyt_{J{Dc%u5_6G>@jAhvx;B=!VzTAYAk?;afdM^s
zdg~*@(5JrxMjiRkWU743GxbXS-3>R~2hj$<wh@tDRq7<#7<`nY<!oDeR!%nAXP6#W
zB&|L*xlam{&?P?DL`)4Yn3QMS!^55lj`@7ac%DO;l#T<FQ}@F+Shy<nz{8DF@Hp6q
z9j>a2*NQ17k)8(=S;m8gJ>HV_xX0YmYIxTgYba_&@}&DSG9{{_@I<y2?%E8CO}Cj>
zN}a}^isc~HIQxL&{gr0LFEp>TXO61VkxMcpLk`?Bd@v`08LitsMCkGL4qNd|r7~k&
zMp%?}gU`_`@i53LTTcJqH>mgJnd{CuuitjWuyoW<#yYvi;p;Vh9)uod)b748U&hl%
zZQsU_-M(VlW0j}S)$i(UbKY<_ia79P*z;zKQNBXfA5T<H4X&6c45AYs<3~L@Y$*D^
zU|07Lt^J$d1-B_qClxgRP3}T5zQ&vaQDu6*hG)jqFs97PqX?d%@evL(GR`D*Jfo2x
zMX#d_**Q|mGVfr!1w$IRawA^7zC%=!t}SE&3EFvW+uJ<+^0$Td*FjZ8<m!gY_T#2q
z+*SJ53`jDg+x2r%rv{Tq{6WlRF|_dt1Ha0pOV^8H>r~#+euHn9|J<>IXaW6->p0qK
z#Ps&VI?6V_``S;88o1}1?Spx;YkKlU5>49Sn*TE({Jy5RdkOEK!D}9=f6B_G!HJdW
zSjg`Ea`t?$MBwAuKmQ0Yx`*D+6V_9w&oXk-s{S{@*Gw60f5M&p)n>F}&5Z(as;B=;
z{{H@5yUafGvq?^!98+A9#`c1TK)UQns#eMW$J`P8GXwnrFq5LN9yYOCo91`sjT;R!
zt=y8dStRqh(;QqQHMh1wFwL%$z3}nOzAq8;lRLNnO^ucPC_~srwolL4=S&b#m7NiB
zSj~Hzi^4P8#G4weRqEk)ZY8M6i)Z|S)PFxR|I+y!@1U7U5CwScKZkf3HS}uTglu1k
z2TG)Kwn?I-gQx8w%Y*iwr+Xa4BY!;!|N7bB`$4y#7Tnlb=Lk5^*}B6)O%ga{wNfA?
z#)VDvKsL0C<Z)Ot_SoOfCx84+A+%))D?bdue&3jPQu84<`y36Vq%?azUUO4s1bE!p
zrgrCd2gVfk!f}co13TT}Wx!}YfHIp~Lo0F@%#4bMRUO(@JjRe_qQ3wL04UqImRT(0
zl%QhU(}?k*E1ER!G2ZEvilmG?jd>;5-&LYe1~fpOf&%kr%AC%U%Q&q8io;R4QIX?W
z0vMA+cWYO7FLX-dM3xQbtA^s#C2Mnv<j8b}Z~#pIV&aZXVWQ>Ns>dUCT9>h=!=L^f
zlz?R69}L!M-tHwGc{@5Bzdg}4#IRd9z?R<)bbqi&JtD||Jb&`8a^V2TVrEPsz>tk6
z2x@<0DV7@g-^<hfr1d&7aL19?O3W`o{@wa*0j%H1u&&&K{s&a$bigS7>-YtlLv8xQ
zWpIUo0*-XpKqXNL^g8SRW(^Mk0pxZls9dqzOMf1`&#PJ@-imK&3eEaOngv_$Ukp}I
z*$0hLQMD5U9S+p1J>U+tcCq(aQX?sO@CR0K8u;~t`<qi!-O0j(UM>s!!>=bhfqL1R
z_g1)H_xpOuTCbw#TOP~KcoUXQu;t%8O4>#-L(K=Xi@$sWZ<m};n^duP=Pi{xkN$s$
zGnP`v6sK)?xB`x%*$iba(vAclw6M9TTT7y`u2YsEKjG1c41uOtuiM4Ay67ip0V<Ci
zKpqzd-d7S?d>qjHBS?aSm}~DA^>EO28Cm<#kSgHXLE#S7LTE*ut<1f>CVnEz3q?1|
z=8!1oF0Rn@l}d(1^CKiSY7PV1PsdS55-q1|Y{b5B@g@euHL?j*1_0&Rt;8hgfUn;E
zk*+Qo1>g+h4%iD$y^vPGRw=}i@#+#Yiyt%q%$fq`(VjdZ56~z?lZM*kqQc8xb@KPC
zKC7yRh3ODEWK^r`8Jh1t*E8%gG&;%~_*NcUlT-7B=KqBNu!expv}A5Yjpu0vgG^xb
zMv5Q(<H|VPS#I#cg6=U$SiN1E*fUMG3p`!7@utc!wQi)AE~F-XMW2E18Q=Q2&0ofW
zosCrn6vhb#kyuo9+nV^*K3l(+)3a0kCk8k80v!HrpmyHC_lg90>`hw|k=-udZo-CB
zLco%9Jp{+aNg4oSVdewze_9tnH4&!V_$wjzjr_Tqo@X%?kD))#9ynA8LMUd@?VJIe
zWW3wa)6?@SwKNCo2&twS1Cax`rPpAUqxc^vd*aBFdO4}zUD0I#$z25k;6BAdT2XAv
z*y_;Ns8e86Uv?fdXF-6%=tCf5XzESxpscwx0ImuJOW_EmGAX_X3KI*@SOZVMc*8vm
z&xEUL%U2XoYuP0iY&mdHax<=)Tob!*#5NHs=3yChn0yA{q_{sO!2V?s7nBdVG!e)b
zz0T0<c!`wiqW{h2eQrN;{HYt}wKGY~Ia}l)YCB!m#Y68}sNT9F>tVcKIN%iPbg@x;
zdC^r9J)ODc_;a8cMdJCzXF!cgtlJL&<~B)P+bEnL2`u|Y-m*0pCzdWKd=4;9_gc&z
zMma0#i$`G4uAn^r&g(Oz)qnDTPu}m3YXi#jr`mDY!O^;Dic3e6t4Ycyun7>{O`H~_
zu;c>1$yE%59WDB^)YT<mYPYRDYUcVLXbl)2x{4_=CkgyDqf@^2%6>ai#fLWR>JSRZ
zB-xp@!UfgSNv|ED9IpAV`!;Uhz1IKa-zL+)$vXz_=?PG6WHoaCqFeg#_5?pc5Ry#g
zX0#0Y_4N3zNM=+!sim1&f%^kK`OxX{kJ`8lX7#lt4V{v7;Xel4crzqB(n%CsC(Db5
zlrtRmb=8~D1mnP}>*wivR5uY#bq9J>E+qoo$=Fw*vS)Ko62P@Ls+26$kE9{+Lk?Y8
z0EQ!e2>KNQc|~@(|JyrFqbOw?)#vknbbSR-mD}F8A}UC?h@^x_cZY<Cv;murO_y|s
zDBVbdg0u(%o7^<g-67pA9ZG-e@m$Y6_rCWVW}Gw5Y!Ca1wbuWad1MxJ)*m2%z!68^
zuZxgotI+!*Z`w4#Ye>{nQhr`1Xyi4Nqzhw>VVmXT&A<L(?e8Gn;^qlS7wT(x1b^ae
zjVw{(m!y3{h)@!*-OhgoNwVLu@i_zvF_)p;^1Y`Otq;5xd?{0gJD~8X97osp2soV#
z&%v5o`y6jW=8bQ1#dC@AUeK2vDwIwTbq2<0SorsokRvW9YdHMV0P`q95PlIFn^Bv8
zK(dKprhZ+m+eXo*0-lOvoh^I~IrkRh$8A@zlvIKM*Y1ztG5?*Mvr$|S1PVmX0U%_B
z!|Nj6M46x`jX9<_@tP}+ctc^bwO8n*#HF=Y<wsIr8Ofshdd&gf4H7$wC$@?@fOjdK
zFAoek@(V2+Cfzi#^x!aN5&US^KU0tBZ-x+zjoCMmab-Ol7$@+nTZSV!e|Dx{tY}5N
zH=f)NMVWeGixY<NP*b$IM4DOkl!`gpNP^rlH(Fd1N;TR{)2HUX-X0FPOne1~(KL*Z
zw?#$DVJ&BDIz~}_49o%A)vhIJ9c`mW1WiM)^Mz3JC1J(5O0Z1!R2}b&BYNHh92pNZ
zB+ed=h=FO|*K)gL%i^GAcxrMX`|KULC%=<-w_{!?B0d9COdCsaI}QDZH<wUe6C`1e
z^H-*2E*pN1ecksawnaD43>n7pHPb9`=Y1dw_m~e3Ai~MRw&K(cJ%(=qr=^}Vh??q%
z#p!zF<0>1A!nfZ&;tIsNTV_J(p#tV0I{TA0CR7d<@~EI@|5;mrgD(fB#9ZUqQnZr1
zGTdi*U1T)RZid?1E~KbM#0uajd;>iKtzU{k81VN>c_D9*JzO=^Yh{VaF*?5@^0gNx
z2KStAOK`k2@ccFy3#{PZJbFN<;8=lovo4x2_v7yek$(0qK*@h?%o1rmSP-NvY7ug`
z*#LN#F8aWk!y<e!)52xqb+kn|uAH0&o6`(j*wrQasDjE#p+6vh_6823*u@SDh?Ged
z7z5awI8Q)oP}widCvF;nVIR-IEuWBuZu+@M@2Mv4hWun}!RGiySlN+A@R5<zWn4~}
zrtQBDp8YAP$Q=!kNxkJo-bMcNwJ_Q$SG7--M1x(sh^UUI3tje2jir|3&y5~jG&r$q
z^+9)pM0=$&3x!NBJ{S$;_bm%ndc4pW@%ydVu@>yK52X;9fVS2Zi6FgZD;ClsMciw?
zrc&z$=5)fqyj8AnR&_WiCpXYtxOj^zX3;-aSTBs)X0cg;U4IH`o81pzW`_F}LR+2j
zNs|$=1yzCZLvINU_dwH^BC2&7jQ~=xXpAh*amQ%=fyzqTEM$PH5=azh?`u@{d=5os
zSMNl;v<8$QsnYI-eyoR01AS$j7|02$EEUXKH_@mB@jcmWX-Xs32uvDwJ^8uYeK)YR
z{3J~`dA?CnPX){Zvsi#8C5{|SDmZ|dI`e`zPZq=V%XF)Ys(ttuD~6>!f0GH<obz#$
zR4W`s+>LztuBK05uOGVf@;jZZ`uI_B=rm}#Xz*xoR8-YoJLf1X>42oVckq;SQ_hra
zYxYfP6(PgF6l1e=*GsX}v8D-7@1LPAbV<|LQrq-VghxxT$0)U`@FfKYjJw<@zjL!B
zEmb!V_i$?n(-ze`u$y)!-BXwmhRrhIO>l0WrQ<_<Jb5Sr%7ZmOphN}k>IJ#0;$Zp2
zx}tSgEb!nm$Gr_9zp;EPK%DeeJf`e5>J)}kUuEoy>Z`sP^@grjAFkZDSLl88WT}v}
zNX;l5!eDnF13#3T!Ck3dHtRSKmGiS)d}vy<gR6xInYM91Mb6!;jH<qJohd0101X8t
ztJ}5I<GbYFML6w@Qxa<hW)JGPZdVAS6u9^{0Y$VH<JPDB7P}4Ke2-XKM?NHs0?eA_
z`xG=7dH1L{-O$v#Yck>C3W5!ZZ+LuM<JcF`B?S%3M95Psa4gOvEN&1JuiOPDq8Vd>
z=6%vz8deh%@QEPD08WWdlp9C7Pm{~S%GmO-5Or7ub?QdMxhATjt#&$BEgSDgMrl@y
zFc;k#6vV`AE^VmR2IJcE-C8@1iH0A)yOsC~yGsjAm_N<a7vzUMB?-YW3$}&}ha9Sm
zCIo6%3kjc``SPLA7=m2%;#pxF*%Z(U@SQHhcAAkZZ#JZ~Ft6KSv8uWrQ4pR5({@{U
z?OIww$oQ|@iiJNn`|z@7Q4~8u_7ZEgi6fnDOTB~6+>feF{c1Zp?#x=WY=KimA<SV!
z+3|rwZ>bB<_iZ&67FX&(RQW0STG~u4A$n~Z^YIcvhI{Xue!R)+1Ntkq3!4`K4fDDD
z#1XR>+s;lm{4`(STE=j@?CK>KI)Q+~r19uVXGqts9h1yH^V1)Lj=H<L<XtFRJ_D+j
znr&s%dlD1?p1kmh#rW3Q!?O;Hd=SUB)Hh*ZH2(^_doQEORE+rX24ywHjYTMzY#@Y*
zIu3J66R#a9jfd24drzQcQc{rW9PT52_BQ$T(>4WW>uQ_Kg86Lh$DLEM;kj2<71PAU
z!_&9&*z-pGl}oSoH%L1>CXCCdTLtq%Z3;|9Bu|UNj&w5|(Tz;3NSV&(Y_*N+SVqk#
zKFx)XnS#{fT`Z7V+{>H_bs5--LN_Lge~>-=?z{C_w|33R9gY;~(}x!Fz7~kDwK^HX
z`d+|pnLK%@e3cZns~1pjFD+@M?Uvp>VL@W1D`H$`#4A`3a;R(hK_y}WL6|2ORlkhp
zPW%9Vne~V6Jb#I5U3;WT;5;>CEB2-z;|X;QmAddPpY{MxOgxY8IBk}b6B9oOjw>V5
z<x2xe56<H*sOV+K7+qQd))q1Hs6wI_49q1W3y<Ho#A+7Z(|A_>WWg)g_;5$S(riyO
zTlT)RBN}(Ox9QN;_hJot)>!75H)t8QNLC#X2S|Un>4W&nkLx}HO8L(_it{`gJ$UsH
zde;qb<Ybh)^#K`{^In+4#P7*U1IG?_JljjbJr7*}?sWqly!FJhwy-D6x&i*9_x0A7
z$Tg-)he#c`x8=VDM>>lHKjw~3X(6zAoCVKiqX{FszjBVC!VKBd8_B5i?I#v$|5e<(
zA1AvK&T*Zm)|`>}ae+H%1l4fONpUlGeE+BbF-(G?hx?hdMNP?;d_$tXF{*)M)mEi@
zvtC(TRiuNm6MbDGah|^r%QYWv)Ve|1C8NE68gb(8>WFR?XjN&Abb1<)ybp9#hRX)h
z0pte4`Kn2=3`;$eoE1kw3@K|iEK_e1XWO-45~HuVVn{+VyoBHAVH&8c?uetQUnpu(
zC|&9dlgYWl-`bTFkSuo4DEK;17AXl>BHkZ}-~QIP6HVlcCoV0as(p`zYnaVa@?+(b
ze9yEL4r6Ksw=T#1R>#kh-?KOI&%#vHB-GlT=d(&*#+5XXyp3_)@1B13CqyST_}b4N
zYG3c$iE%BGt0NaTPN|jxn*>QNt)$oR_*XmvO}Zq_g}Z+7krYZ1H#S|v-8L)Mc^x2R
zhBoEN5T0@A)fWE|^)l@E>{!VW-{LISgXNv^$EvAnZYt;J@T|;6GG-VWk9Dcds(jNO
zKfT1omEzIvdkY8U!eKe`F^;MYA`zP-!JphtiaQ$>qLZ<#iPc}yBA2p;R<t9y(IlBY
z<cX!J{2K&Tr2HS__c}X=P%X#av{@!VX{6Zem0<d2#njAGWmS5$q0Lr^wG@KrWvUQ5
z0{7_2=6f}n-o^0lCgN7<+E_#Q@^DDV1uxw8sFMXhwXH;lvZYmO#*u7URy6;jy9Z0@
ze7`{D@VxmE7q8Ae{U`2jr+ofh+}>x!msp?M*a}$@^~>isLMm>@?WbIxX%yB4|3zB=
zawV7(>0i6GoddDOi9W$+f|uk=BTi_7m!8-^Ngj*)TYVxyr8&LP)6}F`!#jX8B}dI)
zN&NE>^QX26_H}lT?>6p}k8@l4><`~YILab$RcX_D*baLO=&@@J^8?$8$#~pi$b|d!
zN}iP~D!*S(udeT_sj5kSJMojAxb|MK05K<n@hRrfzENz4g4+r{BDdLf>;XC-1JY&0
zpE*iBIXen|OY_tXn!?pxi@F!gM_x2WR`E=DA5FXh)y$`NHyx@Dy_`1^$Gl@^pK1>t
zeVJaxk=c5ySZ3z7&wo4_+Txgl?JB%^q+%(*G?Jr|vLtuqzu&pjc@p%>*s_MZF_f2w
zvjBcUvf}3Kr}i{iE&ltgT}qXIONoTQAHb|Z>G2!y9XzLVvhMm<%*Cw&msXATk?WGw
zDfVU<`nbNs(Vi%K!g{SRzZ5s1fRguESZ@|6h&D2`*gL@Bz$`zj45<B59Es0_k5@6M
zqjf`nZ7AvH09!CWuR59EW<{L(H~QS$0@dWW)X0xUuaJ{|d2bp~LFB0=O04Tg{W`_@
z?q~ec_<_*fe?g1M^X%Vzkz3$3gRnP|@Ncp@JU(ebV+$N~w>K%RKbh&bd!f11Q=z@1
z<A9MehM2MDD|hn1eqJAV`g9d%xm3-8{2mvAn11#ZQTrVpqS>M1*;_u}4c-pO%pVJG
zy_s2F&!HHGTW6)&{kaBzL4M%Rh8RUX5LH?1w*|wEK2n8+;ukV9+vd~xXfh7f<3@aY
ze%F`ElD{qB%^KYN7KSWmEGwFHcAZ}AlJ-)Kd&-fN`Rez@H2zOl*SOC8_VfFLmy4R|
z<i%;EF6zjI2#Vj`#woXmZ4C>lSz>2Y_&<&TDil&wTsLN7f<~@BVfaqLiuP_Z;upPj
zw*K{d<sP_R`l$~03BIRV6jXLkv<tE#qxa*`q#mj^*YLpbxA?xHnDu6U;O2Yo?K_W)
zmn8pGo;lz$xk~+!_q3|8;-3nDKZTzFp{-K9W<hzdJZ`|Vq}_(}*;lvgpzATXOH3~H
z3-2k}F<#)0+iC3!?~#!-cM`wIkV59}uX@3e@V&BpMvtvJQ}-N^g$QL39yJh{kvqGm
zwm-IS>qW`;64kJXv-n6cFSc9t?SInDzyIgK_<D{istn7H2F#*dhV8fnb}*Et``@Tg
z8M$gxow0mr3|N?VJ3dION-U4O$tS`?)fN<c@_5KI8yA63kLb2uB5WhlhE2bxu|gbT
z49X{9CK`_Y5BL@j1$JHC!GEL~&$h-1WzRnrXPyYu;z;#Ir!>UDdv9-2pP}yKQ7#Ow
zsw22#%z`ZH<*yrD<5piQ)c2S0{_q3WY9sP1PC2_m@uo&@;Gezt-+-_97`mRo5`h#M
zYbMgO_!A}yN1!mO4zB+PnYpx<#>!7!xc-4p%452OCCl#<z_55SdkR^iZ+njG+$={G
zdtTp{{K#d|4_%5m#LGnZ@^ftey+;I!rvFJDLc@=8Xai>#^CFZEVNXYQ8-(-*ewNex
z)vx_6y*&=;Anf|?8m49^ja7Ts<;xceMg~!b<nKsa(dw4Es-tKyw@{1wJ0D}kSv|g&
zI@(6J%5WEBS#=`nbNGMb^`F>%#I8>Itic{zP*+FO%_TKQz45j`Lp&UTLUU&*o$Y?K
z{{gBmHSyDM1h+q&IKL8P0I(>uv8CcDJ(qu{LuCMBY16y|q$@=jhl0z|1B1#U7ukCv
zH%m`%z7&efeemBxAzYtER0t!1LaQelxuN!m%C~`EOV>h(;$p+?(Yi{%e*jq<(*RL@
zuTH4i5Ilfumaryun9i27bTcD9<8qNDD*G-0BG65$2p_3qQK*9-km%s}{NJm`UtjSK
z{x4t#*I-|6mTkS?M61Vf_#8JRZPqTX(%(0(^I7%}d+h6SRk+Wxb}2$_p8S`J8d5uD
z(?ov1<r$0jc1^^c$q!^1_2o9la&vcr=ai$2Dr_u>AjaV7=l|sEpr=Iq09X7xku@K7
zyXWi33JJX%Ud8hlVf0t{M5YJ$i7qhotYI(yod5B;7kIlgeM*$__hm2Q7z4|36=*Pm
z5D`l6Mj{jaJMK55hcQRV{wMzgebY~s=(PUz!3_r*QDf?~URmEUnTRF4dsoN?Uur2a
z+{M;5tI;KX^*=wCz>I0oN0|Uy`tHqsXQCP>n$G;aKW9hL!n4lNde#R^*4DURYX6}W
z{JmJ7Ye5-C+@g1Hs06QQ24_X0v7vgVJLLz(HrN(DoaoH<JUvFY{XgsL8#Hd}>)fe{
z7mt3o`NdvTW0^%LHI(~x_@lC6B52DezhrmhK0o`l*OBr+GK`YmiyPo9CC6**l8ee>
zh7})~$upkbXkPGrn68~$EAmuE=)a^Fzwbmep7?=2nf#Pg)154x-B*O4)Uomm*pW$Y
zVF@Yr->b{YI+DI_{EtdW+Q^4unrVc$pO@gejj2q@NJ`W<dCAFjggiOE=wg0G7g8n=
z5UWL9`QIvF@ZR=3`76lizT`V2_9(wKDb3s%+8=6CG%|sWxX)_ckM5j(EU)#Lf}+$x
z%8M=%Bx+Z_I0wQphy@Yg0|G7Q;N<TNPy$Fr0}6)xk1qMq<sk-uKgqt@QYwi3Xp-VO
zm7Q#Do(kElOOk-)Iu(FJ(_f6Yx}_Wyos8rUn~yeLGVoQEr-;4M4nCB$&La9dfgUU@
z?5+f8_Gmp}+_tRJX!HSIg(3)C`tl|zTmu1lB`)Tptx3L;DA0W6j3d1J2BMj!0ieBY
z4M4RDAiC1jkdFu;cS@*+C<+k!ybSdRRxHP98pm-V6rs>vYXDuby*!7SpFk}jLc%PW
zao{Zm>lzfJA3qilEvJbq2L9d;YLuD=i3Z8)U!nA+Er4EH`;!{ChqBofGr`jt3e++c
z)y>Q|$4#}Xph-zm)zeY&A8+|5bhKZU?_k#fjgbHLE*{6jq}={IDPx)m%jRH2zfimr
zJ9n&x`^}r<h;L$-zcS81xXaq8h6T&n6bP;lPag2PIIV;vMSy8?b1I1-S^|ivBP9Gu
z1|b_l#GHxut$;MZ8sr$H$eSM=<h26edd&&s0Xc&&xXODO%v4|lwI)IharQ%phRsTz
zwXkWjuX1W_j!|BLBQO47SieczXpZYz(zUo!DEr<RaZ<i%B);X}JY(!X<a*4TYbe%s
zraLZuR_Q%TDu2P$7Dl$J19DD;#Co`g5;WJ_qaI8H)}g285ZrNlNKn=?3p{=+oXBst
z$dCYVs(zt9-~3*Vbsbx9jfx;PMv@<Z*4-#4BWk*d4G^j|EqeB2(I1m^0rV3(fp52(
zm|HT!_TgOv48-u~vzqaZ<z^>+0lu+@Ymhw48HBeWp-!$IpbIH*-kDLIfuww69sp=o
z@RbKD80)KxpUxk0Y6IiJ73dvg21)GJfQGV{V=0Rv6LQLjMz$%47_>#OY1u+ulhsht
z4e$^319nD6m40-j#;p#(VA~1sa9gO|O}&p8i1~g(0!k=arhvSf!ZvUpfQ@+sC9pFC
zqm_{Z0Kd0yJvfcKjp}+4?<}H49s!CHLX73-G?K6pyv?mrRiTGoKim%479(#{9G-xO
zY8~o{bN}`2H5J=7NMp*e$V@?0DX-Ret@R=mOP=mf0<Z`BwU5}vy3)uH)D;DsCEFXn
zsm$Pdg8ztNi{`mL<PlpLu<XQkOM#9)eSp@$;EB9crniN3M_zMW9QqKZT!sui4NG1u
z8m+a*PSqxB#rb~MWEiJtE(lIa?D@GlloMg3X;n628G;*f)A~~)L*Sb`*VXt?wF8?J
zAR&>nlGsHlx@a@$b(NrHyYEH%^y2j=D`Y|u<A?1JBDmwn0HZS2Om9z(XAI*DTBIkN
z?-ZqMCYkpoP-NE+yteFy)}p6x=pCnS%;Dp&xdmF=^jtSQZ6Ac4(HiVtUG7{>fv6Gd
z1zuI9d;}oR>V*JxmY0s|Q`{@KIb8jrB^7MDiQNWUT}=F{eK5+Fh5dpSSJW}U^g|g{
zVci0m2;QZzpeKcVZTIaHa1AWy{kzLtAByWXFCcXu9EFyNjN(j_j=5Sw*<cn7^#{0s
zf+qV3WUz8~Z&CeYM`&1*r{W-^2Vt2K_oWDi(#)jnIgVBdm}s64R42HBQd-rCSLU+l
zWfSFI7e`~;pwiR<b_;Ru@}$qZTtFY0K(lLIwN77+m<7&)?s_7;(djpvWTP0?<p|oZ
z#hs6^5p8ejp}29Ojn5g75@-{!aJQ=oF;?;c=|z7RVhTenEG$Zp;1cy)0kSoY7=!N2
zBgJilkq^8%NpqecQ)~(nk%EVs*Fv(0b&yz!$$k#R$Z(X<j98GxF<XD0w*z&Gm0&S$
zEg$An?Ni=v!V$BiNpPZ3Hcm3j#wD6I=ExhXt3e4F=Gt^itAS}fjh<Pk!%WrlQ*3LQ
zz$GJC=QRHbAA7I`lITov9`BABE3#1fzGf~MaBJPb-wfCewXk^FN&=54Ke*=qX4xyz
zC=PLKLOaIzj{}uYN0|6X7<Vo#MD1O<gjrS!!IZqM@KJjIOM?z>Tv>KS7m?_zlqRUq
zP8(o4s`qI&0B7Y`e|c1>@DS=OEvLdf!Bc|G7Cm(0(-WYzu@ASP4EYKrl{tlzeV@Qx
z_^hjj5>kl^`a&-@8hHcf^{}K(7wChkSG~@*R-vRK%@~H-VT-LJ<ByK2_WCV%RLO#e
z52oz<z8Xu0ww-1t_3s!$*TLcP&@0N#Seq>d?=LLV3hk)-9)WaM-?IRu(G*@$0^A3i
zn$6l^n5(ofr_Iq+Zi_hL&F=0^mB6x?SutYAe`W^y(1UbW3McVU&`vXXk<+3{&{SzR
zo{WESWkfk{aDW+o(-QyZkd${>oK_vb`~w$=OJT1me_QGBn13Ny0BFI5R`y#Of9)-@
z+{?RvfKquKYuV4E`{DsJ)cgzhP5W-E=B@W{viyobQ%4op(<YCDB#Zp`bz+sP7wC+h
z*E{?IlJ%{~S8BGod01K`On3O!A#EUBk=V)$3ap7%jett4Mis3K64?^5r8g3Fp74IG
znDHVmaRcvH$x{)49d(AZ_;E{DAb5B0;7F|fJWP0~;iX#TKp9HPl`Z+c1{tK%mwwSd
zVmqDonCCXkCJ~MV3uf|iWNa`TN7B4_Q~4j8p&mZI_?h1u3`Xk=9h#)O^1aFO@`Q$T
zqcQMDy17cJ!zvGZUfael9uXpU5Xv|0*U^|`8uOSFlAE!Z<A_#P^&OiA@iDsTXy<Nq
z2It7!x0T9Sf@anhEr@l7810D<B2(h%H5=D{4#Fcu%9C&^)Z{;*32b!bk)t7f{oj0U
z5{b31iMIvfZ)awdCIt~kO5oLJ*^oE^%;uM5u(b4);f~d%Nd~C;>4;RQ`woC*egpS2
zvak`G@0G80l$-yllVfrV^JpFH1Y9r2T4iJAaBgPoW)#84Qvn{9wy)^1F_@`G{l6y^
zb>FNrFI1zFGk%})*~AJu<A6Q4YG3`Lp@~dYarx(C;eyfihIjbHRtCKp|D50&mZY!o
zJwG5m8g2ZviyLSxoB4&eo?Z5xeCc?Aj+h<gJqe4QQC>bLtyvqbX_`ozJj0u9a|<2M
zGGXI3wT62!dav{b?r5=Du&|6YJ`w_9VR1b_GqhC23@NDMf|ap567m8xXCeAE&zZ9#
zvJa|}0b3}S`}B3z6j*rCQVj?=EdPbkb-EbbvA~Sh4xs*5Y!Nq6`BYXE?O3MZ2wxgZ
z@U|K{gZ#O1SK`w7C#iM_f0|vSY<5A-K@{1so6qL8gqG)XzIvH;Fm?4z`n;5HG(_cE
z?=HCG^Edr}F&k(0S?H>&&uihOxQ=Cn!tNhQe=51N2DT0p*4p{1=J_Xb_dT1wWU;qf
z++fOC2@6s-woG;u>Gc!UBNP1)(c)N<qVC8zh@(wD=5u?jYxDLBLDPLE1D6DXeS{0)
zLaN^v=!|Eh@y~(Dr{j&d9J=@ODcP=q_*sOjpK4*JS9N@7tp`f9pD4?nfq*?Y!Hy!P
zwe`13&90fo*uXYgS;tvT%&r;f;vcVXb$O|TZ@B6{N#wseeOp{{7*k7!ki5T#h^WAf
zt+m;RY}GvOoVoY%IHV}1)~`TP>tPqhXmRSh1X3AMwk6KR_MMxW<C=M$Gs~qf?p<kw
z7CXP*a+nDr>XMvM4oKIWXghlN;A4)C$dFmc_7I<I_rnK;o{0UD4bsgFnAQ(L>BW6$
zIhO9)?r;#%?#uUjI#v;7`>|KIdgtrgWrh@&bm1{Ad&j#KnTyWbU)Mi+RhJp9@n8N_
z@@STUi~s$jXAtV6-xLrpQxV2m5oX5Zp7HU@m*uPj!PgjjQW{2@{K10k#pTN6>&_V)
z<(0ZB$L#B#(-FGAHjGepo?e2wC*x**cO|_HHf9rR9UVPZ1DD$dR`=pA`!Jx)JDr%1
zZARF9HTiFrxtR2hy1JrcMLn^Z%vERHj^yK29K^b-yW~>AeslOCVuWi{27&y3w9&F$
zM$JpV5i7v4;9ix2@cMKa7P^`5RMJ2=DwV&D4EJ}9Suce>MO^+zRI<DmY7u(zwXmC$
zFOQj2rDn`bi>EY+hX%6Zn$bs8nJ!w2y>zBUP7Jnk%z61Tkc9rRG~Qn}Hw0VIn@=AS
ztDWC@CXkCZ$J%)VYvqUk$%p7KtW^d77$O0DLiOuMt>4TQMp^)unUJPfR(tq_r&Pxd
zHU5R9w~m#{aS1`w+xPM!=HqtL<DE)%K&)HuP<yBIpF_-FLP+*pbWAedDXjbbvrK?L
z@(Lp2s9B9XkwDE4;B^k<;W_7ci_a!C8mBiMGk7K1>pYTq?VtO|U;ZYaj^t}^`=vg8
zeYVk(YUP^fha=i3l{PDli{D7B^0dJYrs3Tr{X_hJ<OeG#HW1Prpjj~>Xx!)mEf}u?
z%!1NlgIG8O9`$gX$<NpPkNHqR>5Z#@mK23sh#r0o&%n;a8Lof|2YI*&s{vh%=m~$_
z-7ww38J(qY$}hT|qDv(~q4#sdM%t~nyTL+oEa5)$vEBVT8P=sES^23!ZTuLY#${$_
z1?bpD-Xw<UJ=fM5`-+=z_kx|H^PEvIv>vA>d61s}ijd@oj|Df=CWUEL@ZWBv1R9W2
zVhT$?eShNrgJDOY)HP6tHEx{Rg@C5GD63e5G3Obj_c`gLqW(s1j?-_Y8Pv{=&hTNb
z0J(6-87u^Xy$1#^SFELqslX!h^@V`8$owqU8q|*cJ5rKb9(-y`LK^fov04LL#%82b
zufVDUG(WNo%u=U!;6N4iPy{H6xioRS1ZmD2DT3-P?e&0keugKB(uLC>9iXO~NieZ}
z^o}siF`#!6bEwk$Mxd=PQdyp+_aavQ&n7r$^0*<Sj{RGIMf|I01TWG^e2iX8b9+Be
z&E{mlt9X%|11pz5j;tT4C*vR>l1qY;w6?*~wBjfBX*|3dnmHgX<~G>s%DcfKFdSss
zu6{WwnF&)3V@8$$sp5FBz@%k~LcETJk6+YJ);gerxLJ63@buVzW#8WVOi855)x}{k
zjIS!{fs9ktVN5^H3kfno$56$;p+k8URLhHjV3o)dzo(*CD|g0vCAjDe5QL|(@;yDJ
z@B4QSSS?U621^yirmxjcp7@9V#4;eq)DIU}DZ&KiC@219NR{;y^lML?Y;*_;LDSYG
zSlOq6*@~PE6Lh|GO+&R}KybDgr{iW;0hPuBHB4(c;SmT9O@?(d5pU91e}-`dV3HcJ
z7G)}o*@NrAfw4dn!far049#LzR#w&%W;u?Kv0?c!=E43BG~uz9fqHNx&>8ls=)%Cc
zQD_^urAv`8QMt&yGDrvpb$xAtVV=HR_APS7KZ&H0(x&11b~AyJ12DKolr4fG*%=Il
zDUPZZ7I~BU0pwG^LyA*ejn91L<~Yd~T!IAH(%SZ))i2pTmTH^8wQxsTkMb6>Lbjl?
zkl08t!gARkWs#TefUgoUO1CLEucadbhrcaf9XSApeEZNakS*GiuNN8*5)elzg4u7~
zTMuxviijnhNG$8I5Hf>%%2A#JKFAqJ`qIewZ9YM+JIiiwApWadJOI;b`&K<9>;N*$
z@RCR2Kq#UmC+P{lXxO<{u>;MB)Rku=g<i`}(~fFT*D@01Gr#J~arVNl&v0=6cc3H{
ziZnWV8#{V8%i;5WCP_`7;Z*s2e`KU0JEmRlOhDk<eBaTZGmEc?Uj!_6Z$Z^z)n-EA
zDs8P$P(R^c2z)RF48j|bLB|=KC99$IzQmIzS=4V34g+!{Za8-`<|J4wsmPEU(L^T?
z|F$9CHA6i^?UbQfxyhUaGNW^+cV8EMyTytuU$}DyCKFgWq}DgyssW|kTdfDsNEOI7
zNc9kp5t&It2<<Qgsy}XESgdmo$-^a>hN<J&GIOWxntFx56}@EM>mHKmr+yg(i52hj
zO~Q=vJS=rR_N1%LfF31`oNqmlam4`tGvx=Ur^y-E4-+Ei=~ku=+mO5O4`5^lRuvc~
z9xWRZ`#_d5&C#|A9xgsSMR(lWzA$a($GvLcK3WBsQItRyJ@8J>GOuJ}Ecyk|0;s}7
z@<MzBZnf(3Sao)VyV6ataEmr@Ps+s##FK6}Vz6;D2`#4NNF(-S6J4$5zTLuc*?kBD
z&JbA*EQD9X;v6`qJA>@3nlMeyd6tG7fR=xn1QW^eoyD_y`S(hQ>+=MSw)}A_!A}*<
z{9((0%YF=r`ed{wbcz0O0eP0ELxK)#KYPnoLL`}8r<$jM+`*|tUK&xXe*yOz0I$O)
z@2rPCfhWY~xdUWG_B|;Wm^=w=VJ5(mDCrD>B9lHpp3;9jM-QT{mCBPPrQlHw3apf!
z5=;6)82XT5avF?*-+h^H*I#VCRuJZ(j3Rq6_&_w5?+B*vM<jpWKzn1XFtuzCJQ-iA
zkfU8B1=H=v!0%T|=8n3QWKpoLs%{kfC2I?uBY3YXR(5;SFoWdrIP7md=gKI=PbEU-
zYI&E+rtkEg1dq@eKK7;3!K(?}2Qi6_BYAS|$z?rxCixIzV8dEs6E?BOIV8`O$Zz1`
zP(~?{sBR@=vm8shzif3dL9uuOe341ls@JoVr+|>$P+AP22<1k-dbN=ww{(&^Ul+cf
zt^3%lpHB&E53au+YLs6Rdi!$JcTW?LwZDun$y+9}`2Rh^2I4iCaS!;xZWH9`3H4@P
z_GgpX^<I%EM$RM?dQPE!gWVH0T$!@a>ygN}J@{EsfAKX5y9-e82t#d9@JDZo6lmro
z#F)ag=ju?P)<6HXN8fGZ{UO1}&p|>@k+8r6gBAJdqeKyB#rxxV`Ve=f>yJZUp;Cvi
z&sdi9bU#;POEt3I#pt5GUWepp1Yx-(W%g)sVC<y;O`a2<*KDDSCZcK@Ri%fJx{F`b
zJ_Cfnj%U<PJwdPf^7rs3#!SV48c5YRf4X@Yz#kPL!aJ{0w;o`lN5OreeddzJjVKIw
zNe~!OY4zaFiKizp9~-l<MT#V4CVI;Z_%r^4w@62=X+I#ASRul%$=ogcy1R-S*g-mp
zqbij;JeV!4puJgh!16=q@)wI-%4MUQAN#_S{mf`Z&TsF-m3AHw_N0zz-Y~c>hi9#i
zj9(D-XQGLdS!r|R)9W#$8_917GqpksSuIL3b5r>k8SZCQWNve#9xRxZkm7#DWTcB^
zf6N-M5tUiA8$;?TK%x%G-w)hEv1iLkwidKMYjTqne@OrZm$wBMpf1c&EWpOgoXXmn
zS&t?n$DD{6Ix(a-2A_&8X-6C!Z6uByKiM3g_G&kG&+mp+!>uBYSa75hNCNLReHA1R
z4(-e5&FpHQ?Ay3KxZfWn;16uw73$cCPEgR4_EaSK#F@~ddg0$p)h7y{X0-N;nD}>>
z-u65#mZn!{Y;V=x@y_<Q393H&`hot-;WXbkhM1lY)KRW}9H;H1p8TS@h9(~;uo`k%
zlq09+9|iWqQ&gFSPuDV>4g%yJ*;m723|dJ|9FRVaeC#H8eDW*1Dt&X$lhjy4B5WS?
zOtDM^JvCzVTG>&_0m$$7Dc%5Va*f)kC*NE4m$gF<y2~ESu?CZ|9`IN+f&JGi4R=Mo
zSiBuTY}-YnxSz>b1Hl$y$wOw(FdrV6CAM}O1yiDZ0pCJ0e=Ds!-zuuga5-dzj>(f>
zEi*;k>UC+#^j3iK&LOX=v7q*rSN;}9N+7-0J7K8?KQcK{>tW&0hn%7on=0<zH|V@%
z&cmJt<a<$3q_sWDIaf_=^8gG$R*BIzNv=uBdAQ4NGYzb}=b!6a3YA{O_`B~1w{;%T
zF7&;2y_H&X)=y7MAAb-s@QDG<QWI<eMBvOZZHPvVf|0R{?&B(j<e=GY-1x|h`i<sp
zVU2|Pi4Tz&LV~6p`MBj-gFB)6S8mjNf-u;_BEdQHwnpk0cW_KpB`KDTZxh|K%)M=0
zqNeQ_`w?Iwd}GZVd|_m!)*9+mH%K&mZ@M1r`|%oD&AM%}5V&>crVFb+YB85^rDn&$
zbRGmRONVN=;bU@9sI!b5!)va!8YF(h$P*b{!C^osZoEzVIFzfG{kni@|0m_lo~XR#
zMidEGtH82a4bxV|+A3w%)QN`5nyTS!1xj#5MiYSLkjyU8@6?ZF44x|5xG`-iru?L;
zyFVP3NUbm$SA35=HT0&`eT?}zi7-7wdFnyjJl938Laa0|_D0SQ8qv@~kS@d`wH*E!
zA0iJ%uV8rZcJqw8zbC%;l3{+z14M3Zoh8f<v;G=Oe*Za59ofxvNT-K+c*+(<`cUe)
z7Hvt)`@3~CZZuQb%U*lKD#Knc7NggX#nT+t7hkh?%{)^+&LfYjeY5dg$D2U?xUlu1
zJ6}KRa-N#Z#*#K`*GyTl+_IaT>3Fq^Q>UZ|V+7D2eT-*gvf^L;`pC%p#Y~#;>pkW(
zvV-D^#<<#tJGdnKt`;ieeUH0CAL!=e7-;QJC>L&}>6A^nIp%^mf!;hhL4_@^TDO(5
z+5tDG97^*|ig37*KezfMI5q7VVse%<KG1d={UzVVSCu-3Gh?oLocAs6!h%h3IAg}K
zcw^kM{z3girE#{U;q{%zwdG887FVi4@h)bVroVsAwOSi?=bO5$GGyW>Ct73L!bx9H
zEQ)nF<!{*wTmOK07uZd$RKVL}E~=P}c3fdADWygku_lc5{H5`g9BwvuqTgKGE`qV!
z3WTvNilKkWmJ4o>qHgGHMT#vx>Zz87Dh3?R1W(Bw$<prpy_cIBpfvg8INvyPk5GOM
zLQ`TGcKAd6zw%%KeFTjQ8~)Wh-AU94devyQuf?Ylaf-Up;n(abZQGi%fVs~L8+3ge
zUT0kCSTL9-cwC>6^64|@-wRPvtT+uSI3v(fxB23m_umd@s`iSIHsjyybEPH)1#tXk
zVf*MNb#z^6)c?0OhMUp{v{ZmT#@jAU`qETM8l|fZT%Z4B0kD-&(C@_V5=(n`E`3r9
zI0sfL)3$f+CHKS0CS9W<S0vN!{dZ|jLtnz1Tv4_&`I(ztbEtV~UtekfZ!?ypybXt+
z)_Sy3-6<)-%c1`h@^Oc1&htr+75B-rsi&SL@4->TKuF$Dp9TwYKU-~t?P4|8Ip-R_
z`9D#!zj)tJ^gndl2N@0;1Lab5e;qnbf&t?P^b`Fjbf(=Oxs{m|xOz(U>zm>vdUj%7
zS(uBG<MXbAvg`}1tma+OHe+)zsOHauLDi@G(O4^DA9v?NGW%1`5=X&t(>leQBLW;C
zP5~xXWKOqJ_kl1iZankzy8;0p@hFbH7h!$qWl6=y!J)2Kj|km!9(i9`NJfc%>B)fq
zIZpTl$zM}bVMC32b3VJ!@+sayl>PR=Z4X(2w!}`7g6!peUo-!#_1lU{gNpN@xWMW1
z0-i{zN@|&11SBr}SE8-huTt!L1*XAtV%)Xv9BBIX9b^{!3c80AdA^2eLUB=`aboSf
zno=mMZvh{_W#5lm1hGu-4GdH^P@y<9jk%|{v&O4*F{_G)sx!~_2^8dY2ZshdX){sV
z<jgwOjN+&Vj*1EM;>(LKAK3}lGZYgYB>oJsdg%o0J!*;Wrb&g<7!phA5$y1&M7#@9
zZ!PQBeDOnZaXKSzv7mN2dE>F$Dj2~WAdd;~e_#AK1jB)K+XtusMsVG*zW!)bvl<vF
zT#5@<n?KJHscFssE_whiG^a<Rt#omPFCI_x@6El#sUmm!{%wyvom3)Joom?p`7q)i
zzb~T;PZJMN9dngRIuia1E@2FQ!&oQviyE!A&9p^ot>Us@Oa1~I1>dpV8;HK&+l!VS
zCugV5+7!cofy3?(DHp~wo2%z7kc}b9G&d`bQ|@;-$ZD$hHf#O4oinH*d9`@p6bCav
zha&L>_78OG!NI?cS_&PUPrgoiUtK^+B6F=_WF~KYNDRk9N>E94L6J{9h_D}r3d*NJ
z%2dAAdnglRWEd%<|5(c~N*ZtwBCB9@zB@KLO8iwW!|JmRH~jWbRjENRcp8p&<2`tS
zgj!%goQr2cSy|b=fIN~^-2Da9F|fj$bl@H!<NR?K-}-T|QJx%}dIHjv$LTjw`Dp&+
z4@-F}Fj}WvSYR2iWhd(l>O2x#IE3@(JY7M$O9oVp@w>|ditDQY)*09=uv%?xgK?n*
zy~4E{>7^qAf=PO&5Wc(NVbkATg31!Ber}9(L8Y`SZgTZQ{(zWfs@OVzLfYhd(QpLG
z1AfNWpSM7*4%^TW{3`8UeA_ZaiyDalN=_>A6~<1ZqNUagd5X>N34LxhgMN>U=(jrd
zPBOeXSS}oZRAADj_Z~s>>XAxqJ+<pe<E)q0Bxu1=%b8U%Zen79*9X8vTmG(zcX$V}
zON<#UdEbtokH^;FN^Q|uXD49x?3FIqY3v6C5to|zS;5;JD{oC@8ps;5g1Pj=g3HMv
zm`s<!S+S+ci24%5UJw&t#q5Du?d8D-n?`i{IplROFmo$BycMF$T%aM|)9beRbv0ag
z|7o?^gx)(W%T&0p92!I#E7a`byJ_)^shg081Zx)#@cLSeTCbyRlz}^44er~R&K&>?
zlvMlNxUKPA3U}M4$sfxe>OYXvbU#?YeToL<>|_j`H{Xqi)xqk2ZjSZ!h+Um;g96(8
zeM21r;mxwbIGHH8wP>PqN0=QNvI^@idxP&iTa%BDac7|I$BLP{2Cv*#*cjo~nxJBw
zvFKOh>cde4cyXlI`8>`xU^+QA+3by=6Rso@dokD!@L;1hkE+6K(H%Psv?J6H(*>fy
za2i)LyVCqwPLXKKVQ!FMF`7ffw4aKJ@3nmMX<%qrsB877D?w0*&FL*eEown_CSsU1
zCh+&NMnN^llhPr4<>y#5?Oled{}eSZ_I;~GgcNH!L9H_P*pOkp<M*OM&(5XR4Aa=(
zqo)?^;h)iSqK7FYSQt!c0|qY7da#&@zXVXYwfmxyCfq;*#3*@r70?vUJM~v}>T*Ri
z`%A)X*ddBKNKnl{PPq{<*ZhUB5lofV)i`43MM40bu)KoCF!W-WHeh|N0!QrA{D|#<
zG%*`}+oG^`bmQ%ENJ9^m78Jn`;TMwvz6Q1Y2?N$E81t%0*c_~xU0o!bKOw&xt4f!B
zcA~Kz;y7z_Watc8XB*v#CFr3Bjj}|nAtw1iG#wTmPqSrYHV-h2DJav%xboX`HCn?X
z$#$75Q4kBWy;*p&HHO2%O6^Q+feN45VO!eV;N>k~WZJ19-K=+WgaO7~uv=jzVhv0J
z2IB@mY20H#oZqaz$Q2XMLvP?oct(Z~=IQuXO0966&p+MUyK)Zx<vyZ9nSP+$8di#L
zLoJQ6ARl~J9_7x!PDyU_gx4co3re=psh_g@>9bRoHqrj<w4sz@Gt_G~^Z6v<fMK?m
zl!S4n?g8ZsyE7xP7!{Rx(HtJqbqlBfLR!=ttvx;hgmGl*flN3zNw3?OMJCorh~bal
z)ax<ipC%+*K#mt;A&?WLBDPwYvn4M6ZpLMW3>&d(w-$UGdW2cK(Uz6t@AegpmJICS
z%l~pcT0IBFGDeM&o>~s*%&pJaz*Q2&Ax5TCvxnG%hq3fLMLz!LBy*!+AqCP6he8;6
zPeC25F?nHmHAwS?c17Zn20;rC|McS4W`HqT52$+*GI2E<En|#zeK85_nivJo<?_J4
zpUZ86hA=`zz(Xk<`seK9d$X}8ejSK)N#As5X$5z|GDRK*i+GE-M<^AHQ<#ab1LX(~
zo*RrJY@z@t+@nQX$vAG7^Kl9)6B9jMdjKkLunw*g&f>A>%dpgK*BxBXx^=rX^?5D^
z+af9X)Foz)?wLtG6tW1RizQP;<?~S!^c|57df>~i<qR^Ltc6IxzTjAApjBK<y#A9p
z1#xVoozpHr@f5d+kVA}sWOO}e2f5F>^>32*P%~5=aMBzW4mEnUc_hUy#AfcQb#7yw
zA#9y~=Vqg6HO$7;1vwS2^*s$$QB@xt24yQpx<i--Wwgmt)9}?j$u=`m?jC3f<-L~t
zI5_E6AK;+z$D#TL?eM-2u~<EB?O6ESflx=cL}%fTMb(Ke!}O0FM{Dr52!-vu0f#Kx
zEqIky1~3Q?H)9r3=%tVrQYQeelzdwTA)fSm?8F3P=LU?{w*l)CjL9Y_Q38@sY7e4=
z=`KLqMohJSxKU&81<6s{JHtXBAY=T0O<3i#hLxus-&<dVLV{3vx6`3?qe?t{B~JuC
zuAYzkI--rjqRpda;Y-jtw$csUoih9G4cpwFG1L0CiTDBrjN2-GR9-{2WoHm2%o;pG
zi@cRHq`x(8(}Xn*fs-Id?8Wcs#zdlA6XKF5ZE{rw+T(14$1qpn1bs)?$~+OeG|~`(
zZDhiMVS7}L;7}0~h1d7keB2(Ui%~Ju%#0{bSiZ>KR2PMN#;DP61ukQ3b%Tctt~n`#
zn3WVvJ^uUP>J}$1loz{Se?_a>)GV5C|HMLH<M0-vgut&)=?n_&b_G8)+DcnUGST_y
z^yT#P**gjBeebKXE))Q<M-}*BbMj4Ns8X*wO^>JMHib)rwerJv`-*^NZ9C@)SO4Hg
zhPA)kqLS+7b0UOHo(9S))ol<8YHnS$Bq!!)lDgSiAfp8>bWta<V9%+5CwgjWs$WB)
zZl@uHZNh?VN_u!pD&HaJt&2P8Roh@%NQy0eM@8Z($ipd=uaN{;eqb*{c;SSc8}5ac
zv1uzcvmc!U7_GaOzuCx29TA<ZvtrB{4$F0bD%sou4)a@sgx3F}kuQPEIb4aNkLIWw
z9>*sNU!)u6dM!7@-51F^dK@Wg+0i6=L5hO$)26AfGlkjV1smb~`xe2N<TmE!RjXY4
znS}Oxsij<CEi4!?)t0zSpM+8RaTX^Sg(<B_+?J!YlK*M-kO}aG^#lkH{cgh%E-k*i
zh|jt+JJd@<f48oGT19tJFvaMHb=?0%$U+;}^!yc%s*Z_D5NjE2G&bUX6;b?_=COST
z(*DPOTS$1ZZb97-ZQkmbc#j#um&Zz%TnDbsBgM{mKkT&fv9v-g+?;#5?GE-=MzVyg
z+N<MqYqEZ%Hkyp~X-ao`^=id0?iUdC@-=1+ctw=44d>)(zQ$rXbIm13x-i*}W3+LO
z9jLBj+oql0?Q=T{g<fA@H%Fu7kz<;Zi$_gH^|-PO)<^rswv3HQcJS^E?TWm;Bd=sJ
zBkkhThppX(G#1`B8h;%!3B}j8RM!Av$0&SJgBPrIgT9<iwr*ryt2ww!m*Im(hFhx_
z6vcxZT4PsO#9SOhcl&?;JdN<_^T%O}uqM+!E_7vz0BQ|kCwa|Es~>kKDY=X-UFDN!
zDTNAzou>FFDTT^=+QL}Q${u!J`gkO|`+-$xeXGloncalG1_!}J7m4$;pr%2%wFWn&
ztE<U1rKYVQF`jS7ZQ4w7rmPNZ&ovL-opp5#)rd)QSu*fg!;anaJ<E<BxpklM9iZ6b
zH3{Kb3^gZ=<e7x3XDnuwdr60bv&eE=@jIiuJnB}u)}+nm1jjOpqrtH=tIHV2pd%Gx
zE-g=R(AKo~p-;J4mC)65r$kyJKjI$wfqtER)aF=r$C=1*_R!z0vf@9{cc0vG&+%-*
zU#r=C$SaBI%X`(o^Q+>XTLh<f<IbYL`5p{YV7cO}^_1_==5ck;An|Ady~miqq0RUz
z0g2jNwdn!xwqaWp$%d>1J$S8HyceCR1-c3Xe~;E)tf*gfGO}@NspPp+y%VKr?g<pE
zHEs~|&g6CCa%g87wcI?76QkhBVEL|Z@;~x$`d^~%!uDUh>_+)+Fe(}CXG|x>W+0h=
zkBEt_F2^TBCd}aglVag~_<`CzF2Te%-(Rw*8U4M&{QX<lp;6tmr8!EgV%J}IZoVVA
z<k3>hFG@!!=aoXE@*i@*zYYirat)h;1Rg;fOz!s7C3gfmK1fa}T1Ak*{mCVbPOthz
zXz^JF4;vG8+Uq}OxxZ$p>v*ObC_0DpvPs`DE*7|TPWSc<B7feCv%;sjgD0Ed(I2#2
zY{cn2Jh*1t@py<+x#hoq)j1PIs{E&SZZZ3Bc_ja0Iy>>zIdD}8WZ@VH_mbOP;HZ&I
zylM7q2<yY6p#J}1k$8a*Dt_@3Gy}=Z7I-_=OYRv+<->?%<6-z0o2<`>($@N7SMCc3
z^8XLAoSse@f#Ei?+Ct&hHzi$rzw{!!F_OM~PN$QhmP%m~8Kp4c@#_EfHD5!4-Bci%
z_#n|t+1MW<cKH)!K<k-GSfKP(i@$4-k%tmf8n^jjg#LfWng15z)6Pk!q-w00U~6pE
zZrihLq18(f7nk7-;nbQME|U(bmS!$9_OLgV{?Eqr6}rf~*YSKrU9=Nm*aTgA224xB
z_V`RP$Q1g4xGZk%`kDXF$MlNX14WnveyEAU@S~k6C-8Y>A6yu4BUACe$9bJA+G7)N
zo)Z7LpZ|iNd{$`nF#42_^f09ulU_5%Nzl~b9tKUk@XEZeW*I0N=FCZc@-d6H?Ej!E
zf#L-C;s=RXMF!|g4ZgbLeN34mqSq&h>B;bG*qh&fx6VtV&v};Ng@))r_xx`p2x#j`
ze43ZqDk=yk_}u3onuUB-f<GIed_Wv6FPnMA8b&#p=l1DOQp?{+8LrRDgEuQpya~u4
zf1+o#b9oQNOYW(*=-Kcb-Qy5hEmD)k806L+%WM7nH2kmsh@}5-eLUyC^zp6DUto{?
z)O3Fd1Z2om_+|b>^!Xb^0#rEngX^FmdZXl~nf!4gjl3bX;DG8QI`lK5sCGPz0bgZv
zN-^Fa|0{7f6t(fbg#7~rsOz^QZPr4G*%z&Csi{IYGTXE99(Qb(MH1rZ%m1x{e}lKH
zDw+RAADdeBu_5IxX)YqS*milT<S-ZqvD@l%lBs8m8N<~TEB8?({*Ox{DehW9x(?ce
zMwVCoO*xuIzza^!iFOL~zO1w1Vad@o8fcW4`X6seHoaa_A?MG2Ze1aI3ASsVzUqWM
zp)kCtnUBL3lHOj8lT0;49KTYWR>ZG2=ZJlLK_tcn2DEAg-to+L>zqp||Do~!uzg(q
zlnj7o*DD|v9x!jc1u_)x)a;M)?RjLs1aK6LNKG(G=>c5G9*D3tjZ+C9>Cw<>fH0T)
za0aH~R-Os}CkI9&j7|j%Uf$rek~|3*%xOr$Sq{SNzAqE11vDs)>^OcI$Xc7=n9b^b
z#{8!=rr#4KXq?^l!O`1(_fS=NU$0G^o|fUA1hf8}<$6P-7pR8#&y4u!e>hLf0K8=z
zGSKeM-zpj?0vJ~nG_wIaLB$KaDNHLM|F8z|y)(#@d7bm?iBj`K5m4j*j@S7OXaKy%
z5gJCc{TCt0M-yExA9Jv;?&W@boD&cZu)g<5&jxuu+EWH0EW9d(90&~EKX{yRg1&!{
zXD(}OJs1S4fa+a@OUVkHG!UY}%Uv}#?-;7j&XU2j1$l}Vynr&L5*!V?h&&qzEZpBI
zB+?YOoO;?BsS2&Y$vG;^L8I9p2&BPK>C?uOq~X$*-_4NE_t34g`BMxyY13b7e<hTJ
zSya+py&{IyLq|<)iFFVr`-O0}BpF1s^zV&>>pQKgX*B}(TP^dcjDrLf?f}{W5SP^|
zz_M10Eb*^FHn<8<M2iGCMN>1gMDgckcC=gNXg#u|MRSncej7;slVe8KM#~Bz$;}^m
zN!|z9M1fI%AkyAHGIXyxJDW7k2%7@J<~2xi&F5sfM-&OS+UYpv(NsrxrQ#<jpj(-i
zb7Y<VWp+8oM02SPz+$&0I*OCflCAY)|G*Sq%Q$eQ+bTEcp$PP|ohxn|eP;qeU+sHD
zqR%!iJYc}6WdrF10#Jecqflri0X_xBH)CKLB&68{LW**-CSW4y+yZ5@)>*Ntb~kQe
z+Qj(0(jWe;qKbV2a)a3j^gskwH6Y0k1ewz&<_%)sfq!7Mc?$9tNNhuZEI9sZs}3rz
z7Eg$$1A9gyPw=v4TLk5fKNi_2H5*?|U=x(Y3ovGG@`ZhD+zd!s3W+$nmu&#jX9Lo~
zf}pJ3X{bW?5A5b(dIqc!iDWX<Hm=eQtRR)8^(UxNwFQ%ao(|Cu;Zd^unm|2Y)+saq
zqm~CrcQ#500X_$ktycr#z!Ve~5=Vb5J?(z9vHV+va{Y<&kT+C{9dd-{>h(`=!>@jC
zFd;Zwi~i+J$m@k{8)e+XTY#r67G%FA`6;z%)Zp8kTi{heczg}Q9ptuEj*gCQAhW0E
z^-;$9LPE-@M`d8L2NS(V`=^Biv-DdQw1=R1rS%vx1A;f4tSxRAV1Ggzb`ajkckMz3
zGJD9cabX{{GN`uKctEb53$J^m?^Jz06n=l5A7u;WYV!{JL(-PY3kote7p+4Oe+Kj{
z-e1apS6)wouQ(0F?J5_Onqm1rb}JYncyLe-E{*q`8DDq5aG2Ry14fzdEoTaY7FgTq
z=W=bqe{Fm|sSmD~>Y^bd-O$(SClxU1R~6{#?-b)(baKQNa%*29*Yp)fz_0r{m5Lqr
z)gRM=LjK&_4v%Q4g*V?qhQc*d{TjFs+SQ~V0QRYX>)V+EM&Ru~j)-YX`wUGs2sw1h
zh`^<$<hz7)3bmHRsUx@Y$%H@3H2iLT1u&>fKrxUY30dGQ+<ANeYMLAZ`-EUX_pV?=
zgHq{pM^(z&?Q<LOERE!DA@~a<HBBIBayBQ`s|so>-DlMmsR!$!z^PAiDHiYdhGT&z
z?GMZ!-lld3xF!<3T;ItZhgGbh;HH(n$uu?u_65lOvO)f^lWbF91ov&~liiJwyXW;+
zXJXKBtVW5pw7j@NI1nse_;IpLU@G!9*1eZsAK}pA{u1_WXDUhJhu`k9vHW325GHhg
zj2|GG3YdNd`wIqEfk!ILy7^aCXOoy)j8#zgco^y8oeJAudynV*Y{MckuK#>RakpiH
zqDw{~Ec}~tK)%%vK4Oqcuvj&~+k7h0`U8k`OX|OY2iT*`^<2?)mw=-4)r03k2seLZ
ze!V(j6yFNGJ_APfkgHX2RA%Ylu>(Tar=Ip`4r^k(n~|hSqQm3=fqU*RlI*#51V7dJ
zdN^~NQZuQBEoGE5A`oYRjT}n(tA30GkvUsWTp=tEgQYZ56M*wuD<_cj1}N4GEi5+I
zs)8}dl#rEp4e3RlkMc4@wo1joV=HLw29y?fB~PcoqG)`KX;AjUKZ(HAs$rR66O(Te
zPy}`8DUn2YT)-7q4M5j!DaNgb__*(2Sm3R@s)A${kFX_YV3Ppsb(vCzD?mPVLF9?Q
zoka!UKGG(EI%yi<mU<{3Jw=s7j$+U~JDX2K$|CC;syg3_OQWR63nUz#fpy!wQ2@Mm
zcabW!V0-QEIR>sg1dBZU#O4KU57>?db2XqYdv$lbK-5zgpcCQYTZ1Kjyz}g1V3;;4
zx`!#3M3URLINZP9UxbHne(soe*d^}^{ySSVF{En3Me|AeAM^!6{a};u6A3M~Hof-v
zik`Eume%K%TC3U&o}wTn#w&v3-NkP^2pjU&3<}KFwr$(G{j{2p>;N&Vl8?nPT1s6Q
zQ8g*L{I6(!A4Wg%5M6~^aD8`aR8?c*(-pdctb%E|C$BN7u?}zug4U*fAr`T&<G5(%
zBvp-6zTS^I2N%xi{9OtWteFmV<(+LwGnU|W>Ua_te1(R>|Hsx@M@6}|U0gV*AWC<G
z0xF#&t)vPFioy^MjpR_$CEcO4lz@cN-92=7cS?81caP`jcj8_CGpr@d%oF!>U)Qzw
zZxdp|hEREaR6_5ePY~R#MhC8sqK1^Lr#?lqVD81vG=%IMMX;#xVxSAEeX&*PlpO|?
zu{TGrt~G{Za=1%Rf_rugsfF^^$D$oNtb8QSyZP3KPtmOsYzHR58ln~_NY=($zStBL
zBR?iln-URolH`AfmK`Z3Yj-HLp=a2B{2^pe>ZgvTL~A4CPT(O6ku-B85{4$Dzq^g9
zBq45>$yzilN8Q{6_nBv?<VDOG_8%h5KVBN`myF^coIPk;StZF-N~@fP8ap;MSyip!
zCJcJfo#gk?a5uPPiqpnZlos3_t02$6WNmD6^zpwS4|$VDV$`>MfO{2m|F>Gx_GOD<
z3d1?xs8Y1aO7H8-tU^E~e7q2F^rXmkUxzKBwd;h>8>FYTR9*deB+xs^27hY!2i)Xb
zJMfq$*HClgVJP#Zs0I~PPH=h&^cFn$CvRw0c(5OZxDP41;n;fE5j{r+#WsJ-V#uTO
zMt*_<m+{FLc`P^U<L%k?F~?`c$|l|OsMHgrWj}x<GcGgRXBgZP@kvRpoPdV1ie+H-
zu~GN7{{#3t9~A_%R_W80)gvhNPR}(=4&!KTV2X46@m~3?LmBbvI{p&57oUA#1Sxq1
z0=K@j={oW7Gg0O)yn&Op)nsS{-9_Y}RNi4@_OLz$HYGaLF<0g;G`A^DOmW<Qq1{kD
z`QnAsuCsO?r#5nd`8v9=@s8szi%VM6U!Ih0Fd@i3yY}s=P#G2N1%!!r$v>bVlNSNC
zyr>j@xN8$~{;PUsPr-jYm-nZ-T=qu9TZ{})0I1$U%FD&slQ5o(I6~+i&@7WHB>+!p
z_9+JBI$!G~$k8^?`h%lEpxaF3-V70GJyLK(HI3{<LQ7pw-u<W*6hS;MJ#hv~J7XAy
zVkH1jLMd{1HD)8}Xfy6W_liNkBc{D+LSU@L>YEFCDQmvZEv8~344=nDi!*PCI&>HI
zfS4}o(d`p$lWsrl7sKEu<IQpqppfOq1TXbR6Tb(q*iH-V$U+h_H&Q=dH;58wQ+u54
zeg;iOuKeg0vQz{#OSz7-cpaU3%<AQ=$D&*exkDbcv5N59(N{k7J7AntlAfgNWl_(|
zYYj%<BsQgyS_W9OM8ti$orZrb7o7U+(GDyb6<%p=U=C}ko}EcITj?g)HKI|4X*>}D
zlNWy7ZbOHUj&Zkk8Ob(|MogI%^^DaZV_xqo49|oRx*T`05}O4Lo#*#yH;)cPL2LWs
ztzX~?-8^#!SUU2AZ<#F2l46E)<h=Y<=QszU;W$>7)7cJckjfO&Y4uRsRZua7^CM`8
z8pIzc1}ZHWUF@jF-#Y4CXzsVWOq9LSZf|dCP&mt_=Q<<sVWKC3L_BOB3~PK>8r_sc
z^sr4$Wa3$LXtQCc<|ff%$PL;CItX;%OyR4s$1ISXu4k98K9qK6pV3Q#(U>Zd=j!Bs
zr$_aTc?d_Ck%}A3-`v&QnB({8sUA77g^+HE-ZMcjRm_vWwYPzuSNyKA4t0$_$&Xx^
zC{m-bsnF-naNC%cP%Y&eNQNl1j<a9=b_kbJJo9+q7I;Ya!9P>+`FI~VkPB*=!Rdbl
zC?im9G~k)$!HsvgBZ7CoQ7e))p;=Opy3=Y1oj0;M&zezU<;bTiMTV4Elap6~#_q>(
zzI3F&chD(RmY0Jluhc9MN}hk}V~v-;J9`>C?81Co?CBBiSs1=ig6^*R*Nlq`&(e_y
zqpvy7RMhftaZAOy;L6_!+KGnIX)`wVb(z(NitYn-T+^#kxV?0B<ur*^V0bhn8`mJP
zkaoa-Z7J}CSx>Wah5>Zx>2Aytw{?sW{YcKNkv{M2IujxweP?IVqD{G$+`~#FAlkxt
zMG|TGtMWW9!<`8v;0*`egZG5PFYyC?$=+XPd0oOfLU$O=#Uucv;ogXK+4a-#DthmG
zLZ>?sW%<Nh(Yp4LP5C8`x=n)_-Zq}h4#S0ByF(EhlPv9*4;)4-1R|;=zDu=bR!KfO
z9ID8#QD$yPDc;B{4Vj+4A5leLw0>PN5`c4e?T@Cg>;NUjF!{E(SzP=`(`gH)SO(^B
zc9kNty2)5lb6^-)cBb539$M-M491-z=2izGIl)>dWE(ZW+B<B-9W+gJ5g#d%vvIJy
z7~Xs$d0I7vytt=IH(!tgKdSZ;wMY2HAK&v`HY8ZLGA#;Ll^3>N8FvhmgJa@zpq?3A
zdGqNgn-@N%k+R8fS^Pzbx?rQiPiKxsUm%J|VAgt|>S8g6$s)%g>3oUydERs}y{f6q
zgWx^tF7IGSOL&!e?WV5kWGSo~+d+7snw-PQliifbDSJiOa>4$gMkl)5gv0j^`$dgB
z1YI<tmN|6HtkLkE25D!TbTqR{Z$DT9oN@GqJoyp3JSxqSZ2^IAVLTzkTIP0k^(U3W
zw|11rCC}J~sx#N#AE`x|#wfjjjjt`XGX?Jj?mJXXLo+)n%_rk{5o1d20Y?s6JB`wR
z47ahnuqjINvnqCvOs9-Q<v_X&$3wE^sMes=ns1r&&7i0JW54$SpRNV_blUqsl1s4c
z8#Eeu^##OZJapH@=3t-KONt}%-#!o3cRC_Kfe)Ga-_8#HVWABsY(Ib9l^L~EflfYp
zK2X3&4(;OYDu&-fvA^^v41_34q!F<RY71{=Wm!)BW?rp!pNir8+?TB3qH-B{u7A=f
z_(xkq(+d;K29MDH)$GCkQ}i?yivCi+A6@qR4FL^Z9%o4p$6m;wL5CjHI$1Jk*WVe-
znz>KekX#_uP9^j6e}N1-INPE<Lya=bu6i5@!xahIEgpoSzH>^k;T;2<fXi_Yy4K3f
zSi@BV&Rau&_s9OFSka@MiIbE)d#OG|YqC6!NN{P^Y|W5_S<ZHU%>3NrFSWFR4`r#+
zvMkhg`mKHVy$t}^iiu~TwG;J-Kmy7Z&@26H&8@57iYJ{E=}yn=_w2sYMW>CXh)o56
zHH=gw12RMT1ovd%%5+UlR-w}V;^t%(Om68YXDF9=dXK7p3<vmMFYr!+Y?fx1GiKCq
z_2#$@Ff#L+$bxDxe?27sBnI4c^?TdH^n~rO$3YX8xM6AN#{RX5r8IK)8Ou`zL(_yW
z1V%AMpocPw*>8uj3pV^~fEG72c2CG!5bUkXk$A%h?QW*`NM1G&C_(k!GqZAuVaE$@
z*Mg+cimgrP=PIy!5*@ovtk$DQy1&(pnPzV+@Su!)%!jUnj79at-m4ZU9DXROI~~M7
zFy?%a(mVY;`Gg@<FN5rNPf!6J1(EPWG)BSac<<fFvJ2ZuM+(89{w{X2LLsf)y2nd>
zmV>rpMa}C!g*<>(uvR<{7id09$u*O0%SFnRkhwods%YGIT>rJO(wlObx%Ic;Ku2K?
zIOax!>JS2IaLgDEtzVfN6uu4pqd;;k+p$yj%g+z<IVQsJcLFc_$)5-nW(QO8h4^77
z*!f8nQH)bd^g_eF7#kS}3BZ%YW_!H)rerj-Rk#5Z^)Z@Wq%!*&gyg)&P@c}h{ugUV
z9f}Q*)0Tk~*?MtUQo}-^BpX%$z)X9kTwRYECczYT6Ikxep#8uN#p<p9I2VhQ6LHAb
zM94!_0t%rDFy!b!5@9!~ua3PdkdaZq1og&hT20HB{%3&aCV&GJ_{CeaJ)kr!0s(Q#
z6UaW%tmC5<APx`!c~q0YtYLZt>Spi$VxT(%c&02?gOX98O>5SSyQ2xTNE@%ap~8Kj
zAF~JtO|dLafy?9hK!pJ5%ntd;N|PK|)x-;djRin6;I{#W1cA&pB+Qy#9V9+Y09Ba&
zat?SBmjHakh#j-*LK*nfEL4#QBqvnU>AAOx9-^^H8Focj1v?$n6v?@R*aGKm6VPpw
z#cuZqk0n5OMeXvyMAPTM<bK7}@$Dad<3J))9#T_OG`N#=07Un-NRtE{Sg5jz$h8$^
zUl%BV5v2BH%R#9lY+SpBaCaxBk!uF*8m$3mqM#}#?51d*<ALqcpy%3y-?yI6<770v
zyBZQ3cF5lSM?dsB9V5(s+g^RpyjOe?np)Jc%3U?GL1L?Xh7`Dg8WM5@K+EmGLg8Ww
zvb_v>Z~-<6q&+Q1XD})@ft;byDxjTXSlylbetlv697OQ_WG+m8*Z_siPtE`+JdCV_
z>D-Vs{(^}C6iB};WO4vLV>pk)+2Ie8ZVDz`F88RJY=DO?cLVes^dnw&WP$m8VGOYS
zPXJfJP@>`=H?g=;+71d(-QFRcbI8VvfW&YUtwlPf)h$iX#NmRB0WIkG195W`p$8&t
z(?GJcw3OiDY_k;o&RXLTxTZ>hQ${Ef)1-@uYk<X6I>8v&T^M$AXX+COgK{4x0R7Y^
zlB4ZotcDfLzk2@&NO&svmZBO=K)BZ?C|=E(vP+W!v4MnLrXWLCl2U6vfFp9yMIuLO
zya`I4E+F%54+MK{A%ibVfLmewIGrW!@DZE3F%TpXY09QUfY!XuoT>o&wgo9{Q+A-X
zok6hyG=>Twy$bH{b@o<<p%1s8nJfW!zm(nZJUFe$T5w|emW#hFdhzP_jB?O%Z5DiB
z+bg)PeX@Gdw7ZIzQS%Q~KZ=g#p!5Ls>!Ye`g%5n_Yv>;26g{1?n^nr#q09T^W3qM}
z(Y3cwFOhf4JhXhP`m7u@kft+l2nxM(26%P0EqLXQWI<FF@Kjq{dh%?6{IiZgu}4Fg
zzm!VMq(e{P^|_Keb)S7m7RzaoDR5=x8JYQh^bUZ{DXT-%F{EZG+iZuRC34lEbOJ;w
z3b#j;rBmR2Oi>w~;+>ddeZGPlxN9snD7Z1De{l2NVCdQ~W>E){@o>KYAV$hyAES4m
z!N|620Ra~;`jcxk<+FAj9L=TRQ}mqr#Ta-9xLQJ$sgZq-LOLvv^(F5=&*ZOc9Lo`*
zb)mFnKZu!To%>;_h_(=)HsF!Q`S!I1a9uqO52+c~ug<K#qvRXd9g=DdZlf4p3h$eD
z&JRxn9&5x?CZcmmN9~34ENM!&Xbr`!0Rzh6kuGRt71xjo9+!dzH4BEs*_ixw^tG<9
zN&nKBK1L&>`Ec{w^#E7rB^r3j(sMs{Zs|l~w@Wn#T`Ib~(zspfI+$*6g(<Z_%UL}k
zK7@aXYEH#7R||y@6=Dd@%6+IsThGEy6loK<Z%0&(p$Re<mb!?7$S1YpXnHizG@!@V
zi95h8*oJl|+XCn`mEZ7r8{q;kuUQMNchuvV8^|Y*VSj4y-fHxV&>|6zDBZU=F&}1E
znSyhgrjLe(eFH}qZ6d_H=*|#S{4vgS>CO;mr<S5AbK_~w)B!(FZ9@9+jooc_Iv--@
zu2NDWjKHOg;S!{3{{@GhogER#R`M53AM&E>Fx>kZtgS8VuWXY&99O(2pUfzB*Xl>>
zS_bp4p{(nJ;A@||bztnor+?r(PrZtY&0&5v-<W)z?Y6mq2_#g@;(O8LqAC{C=mco*
zE|=QXfQxYg*^ouTkNmZ)dcoX*^<DwXrk_XVBmeY0&mtPO-1}JY2<1c=g<aG#V(n4A
z8?SNR2eUnY>ANQ9$d<KAlvSV^9AwwM2WPvKWdOg+(*&jlZ6)xp^TEB_A@os+_bW*I
z`nslkPhBaR@B!D`oZR5EHPBHuxjg}93$ukLd0&95Wqca+1mJWrc9zg%TM4Q1Anm4r
zA0d$7QE)pL|JZGM1-ttAz`6>HSdJ1ghVv<<{m!zValtO(5ARGziR{QohG6APR_HK>
zj|*ycoo1INu3p50WhSEz@2|=xTc8U)MwPjz>>{QwfXyj74wPFaG2WD`Exb(X0gQI5
zgPz=f+q3i#qWbdrZ!M${)m6T6YV-`Al^|pw@ZGP+c@mA4f_wK9dG-FYLvvYVx6cGl
z203DOb{+KL`v9u;`1z(dJ1!t>GWYpFX*1Egv<NPboZdlg5Auk1ls|4jopAJN5p#eZ
zxsF3q%7N66ZtgTw+khu>av2{h@VdcQdJ<WEC=sgYK9Wlj93}VBh*mUT;t?sGfCv%d
z7vsD{&4N6r@T?fqYP&(Jp%;qP`K#d2mIsVoFtbXubr=dj>X0#d^EaYTtfA&+^pYJG
z@iF>pA<;K|!%3T<+gh|u%)AkP`|9iE%I1N^v>BOn%YZzQ8Jj8WmlDk3KX@IJ%60k?
zydLTMIpCbsjo?|z@O-z<ZC?c)Z_v$mW;(BGxQh3F+7Z*35>-3>1t)*E(U$0&^nKO8
z!4&R4zt-z*!fuW)o9VH@0=COL_=qo&0fd?(nq9LWF8eFCBtx^bYwMc~KTWLf5yYO@
zmxg<$t)n-99?7Vpi8w(e7_c#r*^MO-5AWQf40a2rG4|CJ*>G-&Wt_-^hPdzj1nGW^
z%`DCB!Q7iSGjIfnG00KQ(oafGnYJ)4-OXMB!-4zFTI3VAy=vV!CMxsuY4(=UuePo(
zL<+v<Ki4<$X#`tM)um4@j`Z1$&r>Qd-K;%$^#-{j*m7^Ft}1wtW@K12B)p02NzE+A
zzv<G1iWxQ|8K9waU0TsocTwq-YUgPTn3|EPZiEvmi&2hxVH;?5JdK1z__VKyARs#)
zW-P_71rj=rRbbjwX7V&L{3DP3!+}KJmo{g-Il+cG_(9*KsJJfgF9c#_S|N=>2jy$o
zMi*7UDMT`E-%($*SFEfZUuf4sRs{o&D>%4>;ia=T_QGn5s30~(fuc0nWZd_43f{;V
zU9mPgYfG%YVp02BqN;q<<D^3~LLOIr!`_OZ(|&|m3zj9m>iJi32eu>;SK6MWr=>%F
zm=RUiefHyor#uVRvn+MDo~s=0b@DfcHdo+AR5|EG&gW+<EyNNt=x+5X9ulR!7|smb
zQ*6qwnPqWc(jQet6G&OMcm7Do6kJ&}eDtMlDj#}Cmrk~vrBha^Wu9pKD777PdDOn7
zW5T{^H>JI0EN2m~4*{-KhnD6D-X832>4fEx93mCH^{?H_8^oHDQ<dgKYc-WdLju!-
zyaP-*Fvm=4EjvJog-wxwXL)5~#`^M_-k}j#P)<yi1{3z)R>6S$%ersjLh+b<j+#!l
zSSW(6sQ~s?G_Gjl+%z=G$G7RjU;iF2a{w^z_U=k?vBmgG@op4{vw&W}bgHoScpJzh
zWpPN37U^d6-P`)e=8%)ld1TKb-NEB@lCjhOxgy0|P~y6pd>(wR&9~?U=s#)f(tMd-
zTIj|8?)eK2Q5z<valEYwe|+V-B;cnTB40#ws-(Dmcq_o8;|b#FQw<kH@LdWj11OHP
zI@TGjZ!~I6G%=U~D=8|q#-hfgGx$DM!0RzBcu*l5{#%$46^n6fAS#o5%M$&gmrP-O
z;K0Ba8%X2qfZkn2L}H}-o03<bhw_g*xWa1Sae97*6n&3>bya=~C8GK;a;MsEU!28Q
z<$4Y)MTPg2j7{nK6!o;%!@@(IYt|d@6*u5IOPty*XF;(Xj-qq<m&34RHt_$g4tWrM
z%_5k1++i=VV3@d=QJUdi+PNLqU51!^^~{h#X;l^bH|AkYfK?vfU}*S10)PRU1IHP*
zPJi0H#lF##>Hc#X&u#v&NIX-&tu2*E*+AAn@WKBezJ89pmXlli9*V&NyTbrBSuYA-
z&qq6~@O(*OiLQ9?ASwe&##Nm4=`H!MN8;~K?wWdU<{%zm8_RPh{YBJd_}<;9Kh&wF
zwY(ErAS`5w-Fd)0YD&4Ku9f{a@7rI+VNWI6IT`mLpc3KXyzA4MB~6lHP$ba7GfI1P
z^1Mn#L2BXU?_>P?h5kd-(vNh9xkNWSz0p9GPxVz#Sf-B#e<PeoI7umIz>OOOqr$&S
zX5{}aL4UuX#3&5IBOHO@x`s!43cqahB`A5tK)+j)@`R2b;%uD%*no36SJo0M(C<HZ
z+Aq&A3JYYuVbsh#{_IoZNBu2W+w=2++E0<G!-<SA`&BMCJOH5?dRX(F<(E3**H@Oj
z=KF5z(e2Od<_wF*oZ~ndiH)=Jeh&-pD;YkEmG89BXOk+N+o%8cuhI1cp!L{SmZM_Q
zprDXU*|kiFy-#3y;ZDMB^0b@?lAZtfn=%$l+J8RlV>F;kG5xCXP*eJ+CNG^*)nDe$
zsi)yN(auWv*RsS@ZDudD0t&o;WiTR-6F4V8Xcyk7mrI8SMGSCj=071;K_Aam0dLhD
z@R2`ryI1o6cZq*0<37iHXcbt(W#I27x_|JzXUce`#5d!I2Ll5aUg&(^KG!{b97b`_
zJo>Gp`|HIQJB-|w0KSia^frXEbl3i)eyX@jk`_Nju!tdjn0?V9#@YYs8PTJJQ4`9&
zriQ2JvFuM*?)5PHtiM?z(GnFWQe3`&deJwm9-NBypSu(gTj^&cG@~?D#(UhNdt^L8
z)K;TG+mhUB|LdiDbJm7?1WY+Oxz`QqSGi@|9~1u7JNy4DJ%JA;)15FmQTg`x$)QRQ
z(dP$tgP_+`EY3yj<pC2cE@5;|jQ}`An22S7VfC+7>$k26g0e)yQ0M=c?UWsLj@MAS
zUxSBxqb2&@y$JEEa{o`k86K}x$4hf_{s;LLA1{66dKLP<7IxLUP0$-36Ha457yCTy
z=I|h4-;KMq9XlrX;CueR-_qv;E|N4`$mi)J0*I0>=Udm4%EFS!aQ!d+@9g1aU=AG5
zzuHoy`=1NKhe!wKQ;o7Yn4wW`;awDb<(45~84-~89_{rtOaGaX_2MFNaSq#m7X$|S
zT2yXd^nLQ01Sr;qPNQOr-O@dV2r)|`*`(GL6>|w$%JFCatC2>GV(jkwcwgXh1~}Ht
zL4J3Q!<G9{RbcMIjc&+DR>2Z~_SJ{WXAS3C+_M{m#;VPB4%!Jzh6RTIg(HX10hygy
zz)m;Y%TvH7EOU9g&o(^N<gmeUm;Y#K&9pp``nFZYdZj-S^8umLdLkp^dHB%3x=I%!
z!!h`G9MR9y$4!Z{g!MT;BMOV!apegl)g-{wyQ-t!6p!?g{er&D)gRb1mWJ@OjpFYH
zeG`5A{RbxHUK#bjm!01)@X=>p87@6BrPH~pI-1Ujoked?6j3+7OZhxjDfCC9{!_Kp
z!H4aMFZ=%)6O2^FJwSO)x%P?Sur8k*JXDX^O^$9fi1Xrgv-ahg$dIe_irRN+ek+;M
z{V3o2A3-NKi>vs?=&cm!tqqqei(3;?PBH8A>bBj*jdIWTCB<vD)b(E0ZwzcX6hRF)
z2FJ1f*Glvi4f@gR#LM{!S*TMg>IrAuN)3+NRJPCk{WP)LN$ei45`^)*QM~>`H0lXM
zt32ky?pwfY(6k6R=IZq!>`mBDut=i07}_d|`CP~lIo2#E?<b4#<o_Sae=YW|2?8i=
z*YZ%k_&m@>L!HvaU8tVuw{<5h6B40KIgv~}-ze>rd;K>X`>%TyczmH~=A>YLk9xuM
zke#GF0!9&~zi{ELCyXffiP|5xIDJDj5B6&RW06>5&`@FT5Yq7<GNRtH(rBHKc^Ukb
zLvv;F8GfLTt&CfOW%?1t4U+#XOki*Ew8KkJh`XOwQB=nJvVT)TtHOrGge`daYp^8p
z29Q=YF#EPOpa9Vwe`E09`{ovk=?!j3pV<l{#hjL3N)LAuv488iXxE(Lb5Wvi&jg=E
zXFykn<>qqh<^J;+)_;Ktn~(0uSgE!S@PgiSGBTsKT7)^1B}ID1LNr(8^5kW8KhvJ2
z7@W%X#|A28{aY{m7%kv2pIv0tM!|Cf&I)$GQ)kO~T5Xcj=l6lTH>zz|WtB%0Rf}af
z_qHKB&rs9V>t-NF3`T0HHY||BFJuUO@LPMN!Vu~7ssQG&42D4}Cc(5X06SGH%QN^I
zS$}N;@j}b9!K!{cr{<Gqg9*P(niC-MZV`}c+_AP^e;XdFw1=oHz3-P@UO7XeDV+fS
zWU&2cx5gXEevt(r#Z5p_uugEfwBundR=76}=tOg4V`G`q{ac~F;p9f@F!K9s5o~JM
zC2mOv=yoeLNR=QQNtQzT|ByAR&uMFkowgQ`+u1lyIiHyvU4Z2#T?v<!lJhIpZnhL&
z8)z>pPXe@#2*mMt8>=P{%$#7+2uPnx9<O}rZ+Y(HJv{v<XVEKr`MFx8GH6<juk@GC
ziQ!-MQO}=O@h=GTdJIL$mx5;31kfbS08hz6NVQaP#d^NK1E^3ZfgesWT@XH3GNOeE
z0rtLf^ZBNO^havHgp1iVm-a`%l1ubmF4-5!CN2RVz6>OVHy%m(BRRUNK*M>9aQKZL
z$cp~BHeQl54oc^YMQTv0!GRXgy6`0Jw!)cR7BHatV)y|bQJFz%bW;`Z4FJ;bp(RDL
zDDYlSB769}qdNG_w&%?vmzu2=3JkiG_A7~Sz)L~meTR;a##Ur29I4S*M@F}rpUZ>e
zNnr!TPKfU->DtWGNMJP(fjq)zp6KB^1S+%Ibao`*ly|!)5q%BxAEz$>pVb=pPy;GJ
z37Wit`4K2WODd4c51^gWN3{V8(3pF3?4~lchaqBE=15A>o9G%7P>+7E0DuNHq4>l=
z<?+h3kJiXGsLREg`Xn%ot~VVIqjFeV16|z_Nc$`Od7=`X--6j8xoGtN-=^FU*N9hI
zSjJM@(E{H@4qd~aZ&(o?M=NG|5Yqnu;i9@9$@+>)hl+cXH)z)UV_1ZRD1rLb2wzL0
zaTZB-K1Q}!;UMa5wRhEQ-sLZ)<)MCAkteO_A-Mj3vWbxhEOAyygoKz<bZ;55Ujb!7
zBKq<Dd=$E_22h^3fX`kIIx<s%hx15&v?a1P4D45n69AhTp&B<dq*wv?wB9t&hO2rx
z^R_7fQF>GTN~eMD@D~f<H1a2P8`;4B+0q96i(w&vE&17iN0OCgD5xB_>#$y4Zn<0u
z@C&D_GEYxAY?(y7@;J?LK48N4^JgtjcL44q%W*0rYNF*z-r52xqfF<*z!1I9s?pC8
zlH?{j7f2WDh<l*@4@OBxV;N&`Z}S%8yxXV6rbgzAI@C6jd~c@DsLos4DcLb~Ig9ZX
zr7G9Jedl;x`u*JtSdPr<$lxWAD`s@^{|XGF>xo4hGvTB?veA2tVAW5Ygz3%(v$Nzs
z|0XBTz=9$)$~3xMXKy6bF8e8C4?^UJbe?Aw_C1H!en7#pkz*!8vc6Qoltktl3(#p=
z<F^KqMSPm+^OPr>^K3`TM6b_Z4pL@N4v&I99Flt0d1o6mf^7irDKfk>@MSuqRsgwO
zrU&qzCQW_~MXz&vjE<a^@c7>vx|ivP&MZ#pcEgAoMRO17qt;AJuB1y;uW{Cks}IM{
zAcWh|F6;nDHl&lV;HBO~&s{7fRTG|qk--Y83#5TN%I*Y=LAaQ1PXNV1W&OtOVRY3f
zA%NGO?db%enM>AEHO;62E5vH@q^dvUzjkB_j{(12Rt@Q0_C{2(<AWR*6KtAXeY{+F
zADoJeU0Af`AwDf}d-Dhkc%(C_M_*BGdgtL7O`AIJ#psi3Wg2kJ6D3vyxg6rVd|(5a
zmny{S3ivXOr5C_32VRplV%vIVvU_xm!*emV7@4Wa00l%+#iMSQOF)?&iyMgoDVxrk
zQ|QnQbYQ4Y3!Fx(8smV*Qb_m)7>3vtVC_QYfJCs+$Qh_wiWf6JI_D_q-Mt{zR?Nz@
z{=J+39Dfb3dkMb}uiwEj&+S2za50P^37b+;jQX8HB}ebvMPe`;ka;&tS+j)fAW7BI
zQ-FnFlx@?oLkhNEgdU!^ho2z^kbnZYP2XBAabXV}i1GT~6GtAhQrBfNL35GCFa_iI
zk-u!?5=^^a+_5;<utfvN#XZ))JaJ!dB5?g+riG=!Pcs)~<CQ`?QEGu-0kGAtLwgm~
zilW}Vz9)~R_#DBlm;q#;m7iIf3IsZkQqT-8NSIHOMz7D?;OD)OQ18oaZ;?{uTmo)k
z01B3+j1AB=8Y1@ThR*!BUY`qVVdBaNUSWgJn4=)x5)vVs^+nWnxvr09XHg-m(2>5q
z-Tbz%&UucdT6054uCPF+YN>_wqUKYRv(+Nn?eCq<c4Hl;dq^a=D^*`pajB*E^bg<x
zhF(n0={;{DXUm&rz(z+B#_?lH(_T?i(G6M_1O;L=;n(OQm|btup)Ea26(fp#?`SV#
zEwm)Mw|(uX7dcQw&eMWwAc7%u+<jXIZRc0(RX0CSG!_-V6;Qbz#zlu-Naq)u$Noga
z0*B#Uz%$-$OSZZXe`wTx-O|cO!M|Ov!%q4Ko!`BW?!I(4nG$1*R1B7LmOBR0ZHg=2
zSzBLM*`ea@PZU)Wnk?8KUw&;xzs#0}-CJ$=_E%B&#R{MO!HU@P6PKE3B{#mCv|yp`
zVdL}>Wh1&^m89GaO#UM|wkBAa`&#c|#7<*pkF_%%vAA+nh}(9ShEL55{d^O-rU%Cl
z%mlFBw+X)Vu;d-yJ~tDDmm(SG8RSnIO7DucLh*!cK}&oj5gi|~P1A?fw1|uaD9$-H
zLipe!ZTp2tiD3=M-?gE|)ZM9;iRMhn%^A1_lZ0#RSoBfBsSH%fx|i6snMr5U0oWkY
z&VaN)>Z#G#jwm&bc)&|UgNlNJ0!{>N)hGJ+G~}ETp0q<y<dHH+Y7-Qte}fI8g~jXP
zPIo#QY%VMnL}8%4T0HISKprU-MJGz`pAmXtuvl)rVMrG?jWSF=m#OBzrv6P>-bRg&
zN`~Tn&l3jQ7`hjBxuPTYw1a)QXJ)1I8sD-R)X28&IY>CxfL#+&`574NjzfFq%G)QA
z*;FP}Gf2BY*G*A>5sPytbfRYZuRK<*c8gmS*bSRiN3gx6If(^qW*2fMzAXbQBz2N7
zt|s+R`sDW>PlXX>>ZxWyFp;1u>3H#umoQ2ix-h~Xkv#0<kvLY!?JN=@-EBG&&sjsl
z=4q}#{0{w^XcLaHpsZA^S#G1IEenqQgua%CJnp7f2~8pXM<rhXk+kyEvPE~3qFMhM
zd|j6c&^ds#`97@-Veb=tb^UjE-FR;p80Km3GKa?~4M_!4nb@`SO{Kp~mLYj{4VxW5
zo4a{?g@zSJDWKmFgDI_R&eFrD!N_w(N)Vjw8030?{bTn!NN!{Wlz_dES<1T$+=h)-
zpCVpk<*>}Q0y(HB1~XLzJ5hG*GuKb2O5d@cEuvp7*tEC@A=S8*8%TsG2I<%+g?|OC
z&pC#|-yAVphZ{eZdKuw2?!Sy&h6-;gnk_xSp{=YFi$kQ8##@w#LH7aY({O4Da0dA<
zhj3Wcf7r=oSenPzSe#`#{;uMrSy2{<s%v9KJF4pG{26=kLR^Kv3}7|{On0q`t;s}X
zg*oKO(8r6#M<|fI^qSSwOl{VX;cf^drDmAaxKS6#J9huxc&JtVx=KBII3iROoxG`&
zP5VZfYg!yspD{6&mY@soxuZk_hO~~!D^A$`C^PK<#$*Dyht1?KF$&o6>64hDe9cC!
z)s}TTUq0Z##FZ>1u3e-Tz7Xe(7syts_i8w(ztqCSZ<^^e@RMjapHzsK*Mh0Ku`g9d
z;&~ffNUw>h@YRDbv{OUxn||1bpg`sqwC)s|Hec)qhe|-ji+wtReS~Inr?0_n`nDTW
zpma*}oq3sLZSS4u+Trm>h5W?JCmCU`ZNJqp%&urMv`bB-yKWAJiB8+(bTlU8oXYc-
zvngfHI(pr$lO6Z0{K*X%X3?qP-!UrYQ^|Hpz>G}gn0Ar0yZQK@Xe0XD^Re#l#~=t+
zd9b&K6+W{a^)bOdd4B8D81CVoIMoiZI2D%+9WVNzPAtvTqp=T4sHQh0(}`zOkkn8U
zVt;%%#kYcq9rxF6M}aXsO=uC?9$z_C>8CK8r20%xQQNuW6E~kn&z3a`ya(F|@9%B=
zFj`B@O!gO9P2Q<<y^E=QYSN3_RO}ib;>fe9vx&R#hjsX@n&R$?2JNu!U2`Y5)2m&a
zMGcK)$GkVpMa9+x<z&EWXeVdR?kco6zk%}vZ1(cJugUb(+hK>Mdf59%{&l1)hdhY9
zu{X4K$%-}m`XUa;jl1$bWn(xi1>i5v-qaS`iJI4KWQuO0FQng`_!RM8P}K6|EuMux
z<nuJI3%2c>XMD>-o3;j45tf&8t1@e1D-{v{e<_lqu-#(uA>bkL_@aL5awshRI_b)r
z<sKD}>0r^GQG<OlJtR0lVGcjw!9Iq|?fFskl6&HJb{fUm!e-;tC%_n~gCqrsLq&U*
z?rv`F5pN+DBtQRFr*0f?7s1l%|5&4vYzorEjr-gS;z#~OFlylmx+go29v*#WxVdM*
z&fTx9_IG8R>m|O0^0EssIMvp3W`;sYwqOgXAM=bRG9x)*&@LT3A81f84Lw?*xjz)I
zTi#S5x>s>b4oVq%L({l`+VthvP7CpdgT7cw`?kghW$hC*Z9#gfqI>hFPfE9GP_=K9
z;*-w)AX^eU&MoAh@4_v3Zn1%Mr{u3imGj+z?4v`Px;R4_Vz;+Bd~p-g>gHA#G{sf;
z7=-79;?%qceD&vMB|e91MGV{&?1hp=noXDqd2GCD|GGwJ-~vL5hrfFmF^9b)y$Eb9
zV%+#VlSnW%Bi{@vT2tCeTYBl81*rKl?}qKwS<RIZ{tpkE2d{3{yvsJA5)9+tGH*`C
zVp#Ug2rW!+-0{mOcuk#T^|xmt5B}qm-ph$9F4~lUhY0isjipDrY*Z3zKI`3`dWNmp
zhTC7NM@>_eD)O|OmkzmS$xTT>;^mZ<nAxnWCbQz}08dAsyYa;e@p6`d^RqAO6>wnP
zu1DT6-1VpEEV?nz%#cA@%?ig$B(Ph8*E>>`;ZG@O;S-hS1(Ns2Kzso?H*Fvzsp@Ct
zZ}U9*YD^PP1*9s!yX|=|dmAy33_q2X4fNcxfQvn~cq;e3;5A>ioZez!2G_vkfbJ{m
z&nn$>UDQY8YHH03f;ew#?J%b*EP}(|!==ODS-+;E*XxMV99F<d3zHVuGH900;K~v*
zuu2VA`24F2`FM@-L-EQ~Rz*U<fV3zZYWGz;kO-F%dpipd!~9<B+)mocu<?ksib&Au
z$?1;g8Bf~lA$y~mSz&y*)@t$)&s&;bl);%cY!9qYydQnia82t0d5M@wKXU&v-Rbu&
z@Yf3*DUFF^^K7XjDu&y3HnU|giX|uaprZ+Va$jhNt?LTc;&fZc!Jbw}{;Zv#PWEPR
zf&ZEPZfxnP>V>c<qn!a{eu89LQeSU>kSwd(ef3w@_P5r^7PXAS>&y1klPyw&gZ|Zt
zl|NnQmKcei$s@V02A?zzsMWZ288NRnrF8!%vp0G_0=fpuxDVu<aDVlreho0tM~<JU
z?q~(KK980{vs;14-rH5d#19hg6qVc4CU_ZSmk}>4bj0tME7qQp@HncGCp)dT)qAe5
z=wJPFjn=z3P53G!_bo#5yrxurxcB=nqaW)~x<>8HrYy1T|2U*VINE$?l+)ylVwHw%
z4J0)_r+I;v>f6*fM)HRBpR<M@8C2NjiL0lwh&9fvH)}^JFYFfUevl{|X~9&m4|y-c
zx1GdPVeG{8sYGb5Oj``|t>{9!fBp$DJIK|+e|(0kVW_8qTeKqNz4W95Ly|zJSlAZJ
zsXV-uu(i;npSEPkV@ubiICgw9L7-waNV?0maWmt{j6Am5cdcgcgIa(I{;9%?Ar{u@
zrYz@{&x<-%lZqRgLnl|fW@df`GDX;^3|OVtH~OU6tdNoCm_zB`e-|QuzEHtO3H5xk
zev;=w$`F(1;t`(oWLJ7ig1aEkyA0KqFk`t>b%v|R<W+*ws0|PPbJMt^?=hDrg$&^=
z;db4)XJy@+6dS_jvm$_S&M&$anL{yi3eV3}eN;15WDsd?Rj@kIAhu~0Iu#97q+HZd
zSw6lqfhb`pmD@VL$8*L8pKi>u?jiFOR1p5WzWMfw*K+3&nh`mE;wq$8GFV>mZ0p7Q
ztFhxC(dy?)wrS%?x(%}RQUZ#VQXrk`h7G<naC-Q=V*Yc2)N_iC!(!;g)kE>JO!=9m
zz}`Hz`Mpm|Lf+8uK%tH-E@2KX?WRvWw4D~JSu=`bRv&nZV{<4sM>`Kjb8{S)W|}84
zr9>8C7Y*&%aO*ho)AP$N!S{==`$X+-+<x2WF}rZYSmwg&;*L=p55s|54O(Z5ZDGN$
zt|*quZ?70iWz6Z`?JO)d87~K_vHFAc(f&YEt|lQM6Ws)+1yjAOhyT8u#?aZVdk7?1
zi@CQr#4&bvd~Gp)4AeW0d?WT!R!<kU#dUgRb!NR0dql~be{g9dRx)~BwY=iy9m|61
z7=s^DF9hnGtk0U^v{RC%JPui_yn@;a!`TiFkh2=D$;q{er6GR94TQx!jB4KNTwCgB
z^QuZyGjhY>y_scGxAjq$P0U(>vIxH2z_?Q&6+BtQxas@Z>MWbu6{X_yOv~CHS9r(X
zl~qltwo>F<`K`Dwq>$YK;z=Tx$+0_!2~V0c$sH=~6qd>kUW~Pv*iUItQ;iP|cB`*c
zmo6(DP2_lwoBzOvRST1|t&P1;KNPk67`0aZ98z+&?W7hNUOw`;`%3tr$iXq#d$Q>r
z9Ii_}y+NybsFoJVq9kN?=cw($-3jStk!9iXA0nGk%8X-|b8M9^E+_5kKf7x{cw0TU
zAUQrbILL5Y1kk)8x@`nUz_eTjOy8+5g*SdJB!6{~q2(A0_o$~kq&}0s8)?F9oQN3a
z?2z$$d@qT>VBS;nJtx_Uj{VVQYyL+owd{fnSZbirc*<MaER*HpY|ASNu9(a9IhG5J
zrpy=t&7ckSEyNu)m9n6A>-U3{W2LfPm(lHot<WgFv_<~11a&@yiS-l_yuZd+vsvq$
zX3cR(P-_FhkNZ)kcg#uyq6E>du1K7Jqezvg1WD^UP%E*S+liRAmMCdVQH`<LS@W(o
z!(3uE%b*r+F|oev&I)px7DTYrbo#;TCa!P#p9%BeK1H2++P8hpdGA;WemJ5$)vr81
zBn%fC&Qq5v$+b?55z>nozle4+=A{w8Ke6i6lHu95)Znl|BcX14t-@w&^Yma%DGaZM
z&t_B21{kC(kWD0HhEulF+2Iapk<zb%_0POhjc*Jero;%A&fSH@2QbB^-bb}E)mBn*
z=e2aCobVZ1a7CTw2k><;L*-RD?uqy0R=e07WuM7q{DG~^$7|E4#&lG>WTTwSpVc!u
zSu+~9dAiD!c|08KY_Mh=%zx1ca)~#_peo)|?IR=2w2*a;@xi#U(>!mJiSr+2)s2*<
zp#?Wpr-*~>#_miXy|iim4jDhB**a0P3wF&ml2wB2Y-~+tU1ZyIQ=NLWFHPn!Imqc&
zWN%Dln!YP%tI|K8G2K!rdvmBdDHw2IbpUto=QZ~Ttv(xu$QCMcpvaOQf;gu#Kroy{
zN?w^3HhU7&#&w$oCNIx|-ZLF^AFzdfvlf7hbnH%mcKfEB%V}r~hqjjhuv40JXeQ<=
z{%dJ<rbFAU7Q=Uk-5L{tX}TWuph|b<HQR?%hpjjnGZ1iH4ib}SV`VVP?uHh>f7@jp
zcDlPrJ`(C6WH^2x92<I9Z)_Q%;x6NyTsq-jW7niin&7qED;KSz_H}{Rsw+X!Xf7Wv
znT36|ZbW?x?mXM=RMjQBJD083{YGtKCt?RCyxw17f!`rNd>(C;{kG&#(W@}{Y6rzX
zc2S_$r8(TBqP^|yL~+Tc@ml)ks_yqm$E_+vvd@wE;mGJ_kx2F2kdV0;rgG=-D+><0
z-Gv)=)}udQCC1Z%jv~b6LPxd}{<UmxO*Y;Srx;~Z>No>+@&uB;4>6m0j6~{}ep5($
zSXqc7Ve)%dfP7K=>ct0A0}|7xUy~BT2?Aev%IiEEzTn>y*cTR)-m4h>F>GmMe4Xv?
z+MUd5c%n(kRy5`tolK3qHq3ai!c4XFRl7J<GNnz_tEf<z7G}M@7Z$E&V8yx}+AVY0
zeGlJ)Eq*(ed{)R+U3k09K|jMmZL;IUI;3>IGv?87pW=kGuBzTSbDD<>XS6JOO59qr
zn3k$qaUiyP=eGu5Q<+>RQ}tu}x(Z+KJ=Z#$ifDD&lD#?|F1g!IE#8HS<7>j`ELj6Y
z1DzJw!j;Jtm#M<wTf58?4GotC#hsQB!_E^V-@vQ}-@p&oN8v!<YZ{hH`LDf~GzSXX
zWslnlTPVCZPQe%UdRAip$K`xlA_q=@RA!F)*Us;~g68;r>=9Vn%rx_hiu<AU1mv1u
zt1e^`Jv4{Ta@%cKog0GtRqOIo!kMxe%d2XG3D+y^L`wQtd3cwCF^u}g+-!ndE#pO2
z4IuU--a`>!fejQ(KO~P`$GuqbI-1PCd{nc&W#qV(Uvi$ocOyFY41NrO=~r*rzHN?B
zGBLs*+n+XgoamciCpWJ+d|5yB?NPh;;O=I~AQq)gv%~zvOStF8Y0UksJy=WPWf8?l
z+SPeWyV<*WM%<t`&Xx3ux$Z&A&2kG|<4$J?r3llkq9F?;0}|K*qR53EOE(<$chtu|
z<zS0cj|yu_A%`kJeYh15MpWb(wm>&r{vwXQ49V-%>HQng9eI1rq&@!7`mXY{z=pg}
zy@}$~B-S@w^pfl4oXyBr?&8G;={?O9=YDCTUBt+Ws))s2>cHp6s^(|m6!X_!e)e!5
zVrwBB+n=b*UW&|!BC+4xW}JL|^`d6L!dZ|CG<=F@Gul|yzA9c>o(S+-n+`W0?rR_M
zTDM~>a};%bOskw}suCQ!Q)Y0}X8ruiszQ)^z%ws6;7XdGN_5v!MBoRfQ-rxlg}!ui
zM^dHR+{s<<iah7T{%;8~<^i5+2Fob$4z6jH8d94U1drV1E-t3(<mu;)i3larHT$gT
z=I)vDp1`Ax<ALs_wkU+VB=zhmygYO8WGp(TG{}j+oEEY<Q+#rE$h-Fde<!!g0oNUw
z&xdUPzyVg_PQ|N8nWz0(st|G`<P5Dmh*F>&iDV5V;h-yu#rxgh`g4_v;6z<{$c841
zc6xBQF}CEPNho%V;|n9;tnBeGw-yc*hw0WWaMyjm@jkn)>qr}`If#<{kO#_IGUx|i
z^$x9+H>MzK?MT5~8Y;63B}+>QH!}MWb*G*qa=N%CW~Y%GveEy|lfuAC(I(S6gStE-
zM!+EGtj#+-!e}sVe3Xeh)rG&YbEhC%@=kB_NSz%%`6jmA>FKcPfIVx!NCJ`dC?4w{
z=g?+zwm|dH={;@!cJ9|_AfQk$=WCRR2r-_j-b-ZiW*NW@jDeUrX?p(vGM=_ORIxE3
zjGy@oT)2aW{{4joQNi4*L|;_zfyDJGkRq`OG@iv?inEl6esBJLEwjKUM&(XNqr<@*
zz!SIJVa3DqM~6F<Cs&$5AV<1J+`M$bN|nWs)%6~3RAEh7vx40}htjT%(i-Qb7%&R!
zJ+YBW@184&!S21Q%Y9X~jY_*z%pEFDoIGuB-HDuF!M20loL=p@&wK^A-aHIgTqfuK
z1G@iOCcuwbQP=SMY<Gw=<+`UfTaukOZe*3Ex=`B-3|ET@G*d82QCfwqjkaTowYT5n
zfpOd4T`w$;>kf+v<$9gGDCc?&CK~;#y8N?1t9>O}Yb2;c#T7<}w|0?MLhN(4S(31^
z*T(@_>e=cZyPZ;oVQgDOqqoIp-0(idzllc0tvUjZYCeA_a+4~<<{uw1_dR|K=cvq7
zh>b@C-G2Uco1|yWv2Gn{pFanLwRdy__g>*&jN`x6bo!oX>jwn3cP_$Go@~+LbcQ~4
zf!3Y7@d)~!8})mQ%2+A_H$v9gnaJhl(uu1d=RXfI_(QHkQZtQ_u*~#cO8)n`7Q9Qj
zQ#A;u*?Q0H>=#rBKmG3^|NP1y&<kIo4xV5<C$)_FG2zsEn<uMK#IX3^|H<d^bu`;y
zey?Tre$8m>;#W_E9{#sr>+!?Dk?@ONX0IGhB0Q3k{kP-^aL8_;>`}0)g|Ji}=aO1|
zOaJfNFx|zef8J>cRbOM|V5vMy3O^9<B>dX}`g6OgkBd6Erxy;9HjocHIH-J;mlsXm
zhpl&;BO}l<tY#VPc`Ywa4=hc_i&<*qnc7>|bHSx;15$?BG8PNobz8^rTN#ECPgyQ?
zn8yj&z?kV=I-)qTL6k_RFmZuiXTJ3-rM%84j)vYEq%Hi>x5g4aq7M80mEJk44AFla
z^W#K}nVlFxyL_jmt~ev_t&zOswZV)?r{_hC{2lBCxy7=|nkkhOxV=PJBtqzfFFtd(
z%Es_#NuafXN!YqxS1hTJc)<{IDB<1mV3<KBY6h7L3g(SRWnlC$T?Lx>K~5|NKJ=%`
zZ8P>D>!uVrsXlx%frcc}On_<rCY96v%XTiS)q#)!x^@88okEhSJBhrwZ(JfVyG59q
z=U@mxoL!Mqb2;X8JnPNUxAZF9j8X&;Kv;Hhk_Ym_{#kJOhh94xoX}3TG0QvvFc{&9
zJz)Hb{OJI~Bw~JQBFgOtrZ*<u`Dm0=5u*iq6~5DQ@AsBEnJBJlK5`m+57FHvfYiX9
zHLpGuy0O<uD+M_LGA|s=RDRm*z}p6s^S@8e`1Z}bTjZ*e90FJ4ds7Id8mR_xL2zJ&
zvIN48QdRRtLX((328M>pkp$PDo+$tjFD?WJr=&4RRs!V6yR46}sC>%_F!J?(B$$Gn
zM^1p`r|CX#-z@Acqv7ngl*`Ht|7a{^g@Z^*qyvD*1<cb*e8lN?jx&)%;Xs}tc1;or
z?q?Ubj~09ohLKqhC%!TgYKY8!y--@+Vvzg1&hR33<@E5!+E|h4yLz19H^K2j%&*yA
z$14&W)G-wS<+$n)65BFMI1a|TCTIO}B1Po3ur_2Igv#>MQsC~EDJ(J??vjn>Y((Ip
z8i4C*6IkzZ>?n5Hem<$TXX+S4)BU^V;FF*?g}?TAzZ$rukQ^&WNUfw(feR2$SRiA2
zk>*DHV2Lx)7%13C^<MzXR|&lV5=bOgn>Yo6Fy2@bu7jlMeET0D8aR9H#vL*p&8XZ-
z5Zs-4L2jJuiu4Im$f2ie1E=Qwfhv%grgHK6sSkr7WK91qalI?%&4-rPQM}VHN4uT%
z=uxMC^rw+)uX-`UYBnb;VoL88^87d#$36p0_>m=05Nsfc2N}WTkJOQ~aG`@*X(5+O
z$7av!QN0-DOEAptsKe0gkobv-$D-sPDe~}X8o#{<fa*=6X29<G#)#Tev+brT2p{Ue
z?827(*E#!m?Pzs^cwYYrxx}429~g0EUBxgMmHKe9zf42*a7Z<!3hPS`bR(3T4mSJ8
z-<({PMknx^e0JJKm?=yV(7GLKWU8@`xssrJp^pOh=LF!lQ$S8=bvRXS)REPzHINAJ
z&TpIncc2V{4jqTY78L{=yrR@@4zfa`!HlM>s~qNh87VfQmG2x$k|oz!onG)0S>Xry
zfhHoAbTP+Rx9^kE9=22B+iXO1M&KTOFR-5L?rDMd;yD!>u^X-!`py&ac@)gK8xbD5
zSRj;omlg|Gi9N8OmYJ1hT}<Cxm`_+T0VB(k)-66)el7|*2R2gJM$qToImn*?22hhd
zWd50dSb0O4lu!R5n3oN9-Q6_nq9495at(2Bu_YLa09iq@duCKX-(h{J&xlQJmeW9%
z*ZoIeZ8DJDc&@cR?D?k(u#gjVf^i;)iO8!L{>7*V9eEbs+qfU-Lk$kxPCaGutbFj%
z=Ay2G%xzc7-*0Ha8dA|4Ze%?hc|6cd%8>eG(V{@z5bq=CrcPBtUq9nRBLZ`+PQfoQ
zG&;u$t2MocvG&_~nm!t*0gaUYhe=aNoz&ib9-`kfN-Vc0_{+%4V~-py+eI8>+eaK|
zc&k*wY8*<%$)TuuFIt%B;9yIfzbkW^4}NXbe&4^CLl{@HQ36fdgRwa|>!mjJGQXki
z#3L-~vAV{mc0o!(GXX>4#a;M8G|zDlJ<u#Okv_`G1|M--uQgZtc{W@Zk14uKoD!cG
zf_^fm1%T_tgEPu9I#pPGU-lm*Jkd>*SjCB>Ip_&kNLapy;Jn)GHm3`u;Ok2wY;`YS
zYE25NmvM69eW1SXeCsX+rwJzmm7kDvo+qBQBsm_Tpib~Zs0aE~o`z;s>FxMxjZCRE
z?6U^WY%B!M92@fw^4Y|N6jlU-+Z}%aB0GH}eF5p>(Qd}|G{^UGCJ3CV$HE>j>FD@~
z=ot6$^W5KIeI&cR<37@mtf=;`1wZ2J)f{mRd(IMI^BW}j%d3g2=XqL79T5+!S5oda
z<=rumecOk18XTo<LDPjoHNpC}oWO%CF~?(s&Kax?&nk|eO@qaAWA@ry42F}N&8O3(
z<(zLOublt!M1$g?qXpIpaS>ICV4t-pWb3ZJEv6A}dw^KrQb?2G=_aGPD=Nb%8>{1%
z7rRS~4LSCZrE9{$w{=fyx+4VHxvy2JKTC)nCf1{If5GDRK|sr`h}Sn^l4Gv-8~$jF
zdZd<Xi$==WT-!C%d&^29(uem2s%8iYI0|x;wzVtR7fCL4H*S+?oS=&}Zuqy*%HaeA
zP$O*duH77S$4&Kv(h=}Hw7ySW84|&9<ypdRJHG9MH`m69KBW&Mp%pifQegHqDa0CU
z^CYj#?d2Yt^}<P|&TPQiV$vlEB@>L8b$b_k-z}cIGKd`@k^&f~ULVU7&lZzh(21-3
zYtae6)^JL~?+Mr3#M%t^y}fW53GAoBb+d>n^PX!drz&yZzQez;hu$({*Lx_TLu>u$
z+F7ajmGj(D#E{LXL_Pht_}m2k($-}wTp!B%NB)7WO7i6%8gp2UNMgRjb+mdPZAMZP
zOs^F(Q1LmO?=+h*tG=Q{XA^wk@sV>BBLtVG5QR;v&w;oh56Zd5kW*co?5$C!(Cj?c
z-D(dK!;J+_of~NMqdKnN)d_EXci-D~eh?GT?t;v3%`@!ibMmkp0%=ZvgpWwmq&dpZ
z-T!tH7t4*&Tl9{!G6o`A5twY9qF1e<2woMcARi4uSDAf$7CGU{w90CC?;8OqjVxV!
zGv{WqJ&f528fpTus$<e`ZC`$K&+|byI>e19b0+Y(&*d8YI}-C}3rvLxW%Hosa4*6v
zr_0GK7S~BCey){0*)I8L?oGRmam>Z|#!(mrm)Fq-zDx4tq<=k3$f4|e2i=ZD)Pwqu
z<h!schtWXC{SO9fwm$O3b(jR5{xsSy=444I!HS=t{zJG!xWta4Z=YH9P&Hw2*5dCx
zOIVo(x;5hO4~?D)nQtUdI?gB?KQl?1w5{r^jA*oa$zY%4-`_qe`Juln5HeL7yY4CY
z?Bc#oOHK&e>W+?0RFC(~n_r2!WXfSHY?{e+8Dv3(kyn8A!^x&iaz(mp_~4)W2hVFq
zHIG6{)fwwQqF0-3bqKMax?+%VP&|4z_Q9t-If%b)v%O06n_LIU^@chJyDeha=XCaa
z*v|=bX6vu}H(i%(PtEeiLM-~?%P)w@6Zrd;?)Ey>`k+4h?taMb71%0=?r@!X3X!Vv
zs%8!WPZ#(mTUha+KIAmX>COSf%J=A#vg*zR!vSM<*H>qP<v;;%3h#?&v7g4CxcGb0
zHZyg}l|Fz;VKmGYB%1u~wssv7|8S;Ghfn&#%Lb<kC+UXyXPlkZ3l7}(24gf|qb&`}
zu-=RsZP|aRTccFLCn$RJk3|tw#LnN*aI7j#Tp?^YJ3g~_be<B@rad{Q->K`h0b;Hg
z%hYnIl2ryd{!g#-4*v^`JvT$cap^F{ThcdJ{g^z*!DU7$GM}C!|Ib?vSw3y|-}}JO
z!CcUR>f4a8bfT2=uPW7f4$Un&WP4zhs%mVMMsn&d<G*cBD7eQzaD1xivR5;&lo`*0
zU1ZI{qx|9rj=bEz{+9Uv(e;&aRc3qJiijXmf^?@!cZYz|Qj$`e-Vzc58xW9gq&q}H
z40_Wb-5mmw(p^$YzUy|5o_Ws9J0C{oH!AEq)>{87jqcGld^!_#|8X31is#!%X6bvQ
zw9m{H3s$!u)Az&aV*iw5)S^GxW+$Vf;<{p*kZ8i&e?%*TiA#=JJX{esAWypRhJO5c
zUgQ02qd1SVge0%5mvf@Kn;oEGo%jFqCmTLCq%QBzT0US$bKH+OIj$Sds+BOEJ~}OA
z@!<^h>(N=R*?HDn{a=dy&xn~HdBu3(33Y*_A60T8W!38SH(TEgmmh&Bh{Hnxe2-B+
z{~2@h{>)eZ_w|IZjW=btJ7~{pU2vaM`wYm0E$jPLDPeLRo_esU2mZjvbp5)*I$UVz
zWUDm$=bQccB0uKJOk?Un>5-NzZ_p2J&eda<o7`rbG;C5OX0_=(f|w*9wd*EGnJWhu
zmUXY6-2TVpmKW9lGDbIYl~R@o+4NRhwd0-^89jLL@;Y8yG*V4L7nd;s_Vu%eyOz58
z0ya?nj<;!iO>9bCmOB1IM_9*?w-(6FnQ~YlZO(k?q@mLTFTm2l6lF*|CU@RhEL9+H
zyFL2&Z;$=2Z-4i}x6!B1%g9CD4(vco=-r@dYINU@P)+<6*f>$SR8o;R%U5y7WkslA
zxLO=c6)+cA@GAG~H!c{-)I4KGb-|5#xl;xT2XJ)Rr%Y!&&y(yI82y}B|MzJEJ}C(!
zaD?9metws&iL!3j*$*F;$jjlwZ5pRe@h@dxd+wqVK93QP#n^y#x}zuPn3M2>V=@%~
z!TXFRT}s6NrO%8M%0xEzVtH|pXE4zqVI^T&S-9yZx9=@Uo`chT|6-+35%Y#xqm<G`
zzWN!g^rey2@)w=yItb#uk_(WPChkk&@Am-d1L38vneC}Ovf|RPzR(V5&$^kh>400=
zD|g<`>S|X+Dl%Gfi@Luk$ND!XO?U%HQni}l7xDJ<96i;NruPrv%QqLd9T>YK7G@|d
z;=Df6*<xw0&-e7+Tb!s>e8<L|MdR+2UX_@q6?=i3bTt@{>bnw~#p>Ko>bPa2|Hyp)
z;NCpm68idS!F(-u@CT{C`3RWSA!=bG!a=*3lb>#2E@hqOkzJhtz#XKk5B%iMU_8(y
zuL=lZBzs2sKDqf>VoU0?7DvmPeCyo%EBV=JU!2PJZT`*3*2To}VpSz2iU8JH+4OD6
zglsU-E=;!=*Hrlal`L1hpqC-74DG@E>?lfyG#3uuIftJq_z3a5J3eKT)NdXC^gUtl
zen(;@erW%xCtEH|F!o<Qihlzr$TgnFhTUnQp%k<3OBLjMgzMeG6h>s)L%jh@F|)DB
z_h@oMTt}PdM9}Hr7)QTs4Hzlyw7~UB^m2L#<091y@T@q7zeTaBn~7bd-Glp-H*;+{
z`XBzo2S__Wj}la86eMj8O_CsJrO3%o?+5j5U))=7qqe9irNq{0Uc3NV3GsZMXNY3}
zArsZUMDI5SkM^46#J3z{PiHku&4>6CGcQ}-8}=)7G+F16m%44Ieieh0Tt@xdhm$~O
zc=+uc2nn6=nI6AT&sF54IR*#ing_mUNmno_TdAq{upeRB%jiy)+t@TEf!L860JA2q
zL~0pO3uqa*nkl?KCSOkV=@7#Y!Pe<;!}Y1U6H|B;CoDvF+gC$5m1C?>fgFum_kTl~
zB&twxU4uAVs0xwV9*19)h-pb>!bz8)N)kz-Q`}b%&;uCSyD)@M(~rOX9Mjx=EL9uL
zUUv}v)GSV83KZ7DPX(|gk>j|oVRQ!$15CvS3nV%xCl22uIm0{)XL$q@yO#;M2sxi8
zefALk|Ge7N2vj@={Tk;oEv0X3DPkVg8-rPau9v$9G_;+eKTLvEZkc^05{Z0ZsWt{A
zP?{a$fak#v=LxS3XDQrsh#5j$)y56!c;rWSJIYS|NhW_r6s^Y3ukv5x;Ip486#fT^
z1bCzbJ_hwJF@F$siz6{(j1CBvovyTBm;y>_9du@_rbw<isSD~`Iu^z$fXQtOrw|?$
z3Fv06NZt5a`i`!L;Htdf_d8ELJ(HSj_lf6u51_>V<r&`~N$K0mVyi9Id`vueIZ2$e
zYZQUkeRTg<SK`fxE3vDTCRC;}50-03DvyIGcR<(lZj8NCrowmZ;R*5Ak-_tZr3p1L
z-`Cy&=~KPV)gXyLTVM?&>?}Y=0{8y8PdcTFVF38j-$TLKlCga6rQ`34`JO#y4`qM}
z*ZNs?B*XHs4^i~XFXtytj#Q7ka@PJC<^Sd-N)WR-p;;A(52}QsR=(ZQ12|95B)<#W
ze(jsq-SMR+$z~xGPNr`Tg&(NN<8am5h`Gumh4=uHF_tNH13w8GZ8sC8=xMsx5x5`E
zgt77sj+RZ7NMeY?JP??jM4ze^64*TJ_MYU?`2NdIyN8;nANy4f<bU5ud6}D=+vZ1}
zF2NYz=!45*P|=dej!M_WTFdCGrNx22-jl=)HN08C!$Xp`o4HrTbMY~V4x8{F1T75s
z&C$|WPFg==%zmFP<WxO7T&_CZDr{+FCm6uv$H2V;jtOnK)>x-rK}#UB%IXzy_D}V)
z&mO1M8Rwf8+fWwj3)^^lM#ZXbbpmSu`w&X$Pl**|K^~E5z_(&~inRV5Do=4xLbmJ;
zO+?3QPW4fJU|mWLL^?D7eaL;od6nmOVX6c^%{;MtP!Z<B4POq^Pt>QrxyGG*r@qIL
zPPbrkZnB}<7KFnp7D(P8(E}JGJIa<eYV=8(U^`7?E_(YEc1lE>I~OMYhzj2@Bhe{o
zekH;KNGJIidbq|1GNqsl%{3^0@fb*BE7czhwh9pq5gmW809{^WT&A)*fr9IKSyK~M
zh5DK^qp`tohfAQ9*WTQVp0aHLc+uuUgy@mB3xHkP_?!SnWmkXlrBJWJcG?&m<-f*S
zy=92ddYm%<ouHz0sGR4pnr%g-rA+JeFY4y6e@A0{6WknmA5&+JGWZDnUS=i&KPfUG
z*lhP`?<c@Rr=dM9W(1eAi*Er#$3h$>hG<4T;Fw|l-mRHt4#p@Gr|qdKRo^B=6RxB@
zs+C4v6>e|TD#Kg$1#wq)TF-~#q=QJ~yiX@7&xu983S0B*7F5oMY=cOz((^p!u&dDk
z*xQ*Fzu3cZ0WW1GU4%drg<}urHh4Om078_yq!axaGQRNJOz?zW>PJr;s>3nIP&1@(
zL`MLq>sdVg8KAh+V8eT^{M48mx!Xr|f`IoHB3YH{3c3Yx;9F1rNaLWz!UP4XnLh;~
z$gHukPikKwjwdRf&o(p@iTEQ31~t$-jd6@{U%^P46r^;zIFE22OmyJ-&M+s&SR>H!
zyb#!q8_T@ek^LqMSa=~lPm*I0U}-hj;r)<8L4E*O>rnTN{E8`nJLq(j0vt2hrw%-J
zEXuogK_t!g`}xSm*!t7yogQBTf?cp)SiOA(H{265fSLoL>@r?nUP3lkuzsW{#381k
zoPI1yk#W4oolL~9BuRH})4Z@BFM>gQlfB}(ym;PosN;wh#7?~ren@Z(qCBln1?3>u
zO$`WmX6=U%O>DtM+=`2njmcNaO<EvpdBm=xg@Nfih=X_JFz(VxzoNoqFq-Y`3Cw=m
zP}V<KHmh9w0S>wd`KMff+l>AepA7<m_KDJE%04_X=dcilg;fzf(K#HN?buSKB)?$%
zm`joZ0MsuPmXp8HNR14gL^>-;Zv+**qj<gF?Ib(S<m<Ilxq$7?0YC*N9yvJFA-J`s
zG*lKl(uXV`SkB%bNZk<XqOFGVV`>0!S_7Vk*Z$KWxT;JTIIO0D^@hwHMN@Vl<ZncX
zgm**6<(Y*G81aQb>;nRG;nv{wsT(&kWv-SFG6qS0M;jz6?`-zG1?v#KH)$DH6t49h
zjH@LggX~SxdxR$_f^`<goEg_LJ6K)YPH(#AU*DGMQGSFU(au$>_>Qm2FY$TPEJC~;
zoEOF=z8ry)LTQ{U9a0Y=DBi>?**>d&;@L;uE7EynK5W_gV6(Mt3nSSEiXq;{K!Il5
zIKRQU<T{W=cXPPaVG{(Hb=Rr^?_`yfHK^D8&e-ET0cTQJU~~sDfW=PVX+LwE_!~*T
zauBiIPP&6`lJ=Qy0K6zSp+m#ug__}%EWTJU@!4?3#i9Wq8JgsjpD}TEK|%Zet7xh|
z5??_%sys#CP+{%&E^Tulf&L&6ZZRP!ub?1Ac#5YdV)_ldHIIsO4r$hs?-tNir#aW&
z(bR7A!&S$_59ld&z1vVFtB`deKan&VkNkZ*E`Y5`SDYU#noZl+a6|^oXKt2S-MRgL
zB!~mA8X$8b!t6Q<w#*&X(3iLlQ%?hMCSl?VFK|xZW~juwKU|+T2;&T#qB>gt!mLR=
zL`<f&y1(lw6_bGeaOAD)&CUnOMA<;?LpFI9NTc#m*l9aa`B`Oy)UWE!6+g5`STqt+
zdj)tCN8*?J;*6%_vwCy~;bb-hN6wx;w?*Rd85Qk-dFY*g(F`zlIivg0mV-W9Z86j-
zaNsvN-8F(K+BU6#?l7*avg5`aO=eYi=2Sa0b4#)0*NTHI&>jR^n%p99A{x}}LdZ8@
z9YVIlN(qh`M;{uYHDx_vR^LlfPGdh|;JvkR1hIWCb?!`orvY3n3yE_}3LA#VmoG%a
zEjox?YN3AA=;0yBpR3WwNIOr^Jqv6ygY*f`5kF`c^zpIo-<yyXrql`k$ryG59xFSj
z6re6+8MI~>=|&ITx3SQDI@BlSSg=7$?ypoJdeXjgv(O31h3TYe&*E>Al>MDb#8voq
zd0u}>RC5_P0hjFG_{=gRfxTX@&FmL>+o9|64iAs(sy}Sh{q{z0PNJ3B;Z0_im8lhV
z(z2w1$0PS>{c-Lm+R4=tqT|$xpp%H0A}G*rm=2gZV)fGmI6RD`A%%RelkHg6#r{0D
z%PGc+%RYFwh3UnMv9>InX*Pj(s))>_NmN;AjUKAMNS1%6FBh;vz|Uz=WX$|74XTXD
zB<7~Lp6~)@(Iih^s&=lB_n|>3++u1^(gO~sQLgGnilL_4k4aY@wl7Id1>Cr*EVAe4
z`bO$=HnMfFZ=fEzk2`TkKevn_xe$>S82}c8FOW%&@#bDU7d7eY>c0={Mx9JX_ZfEX
zNTZ>BF<!vl@3rtGy<~rfjTcIzE>`C@F%n?Vc;-pwMU*CZ`!(qdZ>=@@!#1M%3)6Bn
zY5IkkN8zM*LfYAy2|gi~c10YnO#t=@%{BO4E8_5KVb?c?Xv8ju2<td_9kw-f;S5ii
zuo?-6fCK6D5x0RFldoh}oAm=?{0(Z`(C~%%hjWbQ=;CwOCMCq;9Y4D1P0VT9dgtut
z4sWZ13p4db%h<k0{*Zl5U<t{+jmZ3rL`J@wGSj6>WF^8}5p`3Fed?w6c~y|wTIiV^
zJTxn9DLpXPU~KS$pm3qlENl);C(qNR7*pikiPiKBCjTG~;0tlKt7qCIg}o|Xu9um0
z6SOO$$mySG%S<^BSadI@N={M=>yJrD1KBS?*nA&R59==dcVn5_dw#-PqqtZ7J4^`W
zCFQBS&i2sELio|Ix1bkF-&M0HhPqd66<zbMs#kKE<8THS<JfogS`|gn$>@rr3yM%E
z_V{o{a1y_b*nM)+LM($yerTuOKQ1ZqM&c{bS=>ZPe2}9k{k<&1fG|@=*HR|00ujvN
z2DTdtl(?j)c+r03v|L?q3ww_x+jh={TKdDCoCE{;PeS==yRGvPL~Q|WIS+9HEaGlp
z6wTL4hpQM5?IzPAlk%9}<IFvfp5n#J=eDW)fq=UX59z*5YqgOR#>s^C{w!eM5ZO&J
zU4BC8XV(j=EVJfR$`>DCESLvkku3+{P|Z*)0mICHK}&HqZw~c)eG>Qqxp)}Ny}~!)
zlpBob=gcf;XqR(8O6fC-tF4H3RJ-APlSv2uWAq3-Mx|s^Sb}1u<TzQ=IxwHIkofSq
z9a!$OaYY1s$0<_!zM~!KE++XXqdg0CM3%aIx5W{I%(Rohfo`owN|TO=u*9EHlzd8Z
z8kA?`K-l({lbVN^61PbjuaJDBq?^r=>gBFCMl+<ondtLmM9w|Ra3i6sga(MjyEfo$
zuu%HuFBB6`9!TcFs6Zoq2T$4^qI((3xe?h-(bYPy9fE}oWM7*+^7MPIcR9a)^R#O&
z>4nHTSnTV9oXxMcZjhT-<&eYu2BX`mXcS4%<UFX6f@{fdKC2PBh#dJlHgLTh&xjwL
za&9ZjN!=e9*%0EGL&&Xo-?+=s9!gBP?B^h&{ossyRC}I7<?kA+_**C!g#8Ml?3g-x
zC`BBj1N`jo@VD{<Mzu>8Z|!N1+imAf-!MPlOy7imZ&%*QIGoGSx$FvHj5{>hFEJ3{
zy}KaluCs&H<yL4q>b^>v?O*=$t80npEn{oarCNS^zVPn`MP?p%pN$4~@pUa2hDIIE
z<%1T!Vq>$rWD_de(HHh2>p}7NzVunnIE>Ye@kNn1(I2wsUsO8hrez_K$c5OH_>n-Q
z)!V7+r(A{#72Mk*(vwd+ohVohYq#48EIj-qM(ewgjZO+;mrw3(Fm=HXCRq!lCY3Iq
z-ZwYSwUQWnRd7}RS~c1WES_W1-RDjnqkSKHL1~P+2SK98`dLZAXyMowvz4(?Gol}6
z`uc3)BET6`>Nykl$%Wjss<0rP1NQd04ACXL8n0URhpBpaWFvi6-!68`yolmTvMGXl
zI4rVio}(@D@^l9y-^SWL^L4mm>kbVI`!*tHg2eFY$qdIf+dVC{%joZ=;`wRtmAkC0
zTZo*YXz2JA`@zvZyW)lLaNo79!o}){4Sv`N0)MZ1|8qY_1XnT<&b=A0zmL)lw`H#!
zzp3B|!1c;}{qSJY(_)uVXvV(MQg{LQ^X}DrwCFE54DD*6xr2<g=a!d+CEhE^S=SI{
zm7(4u&&es%!+bJ4Pb*P*7l#Kj^TwuXKeI1;aQJt4g2(qtVeW40R?0Ea$=H*`;%#-7
zmm@o+B=U7eJ#Jqtv#{w3OY(#e?Mo$eVtFN<hRK5jcmAnp`4NQ<3Vr*Wb_Rz}QR==o
z>sy*&)Jd48dF7HPy=<e;>>fSk3=*?BO06o$HGk!b%l+kxjaT;aM$zA2^}oJmeeepy
z64y^h-P-`;?KQlB#M#9h*AB@^lNsq9!CS7ZG3;DsT|H+X2><%+(j_}+zq0`T{+H!P
z{{{6f|AKnEyQK>8fl**Ty;;wP$~Q41Kejl8MBGv7<7N%%Kar_OI$WUWC0<m2t$jc#
z8Opfyai-?>d313=Rh=h=auyDIt9Jj$7uKTiY<BUSx=9dZyScPCm}IS}b3(*e!u~RP
z-E#c`Xm9$qfR<+)>N7ef;wyXEF<a;ElHyT3(!C*dF<Js8J5GbecvLsJW~AKFJ~gma
zbp^*B1#yFRCs&V0cofHeWSJtXti;x!P($}OrC|hTP)RgubBV+qN+pWoP)DT^cAy;?
zF&6vcjOUqL(UV$*+3e=K^eb?)YK77TtZX$PZ({(eFauf21&*7?JNPdy^ew~1zz?qE
zD|G+s?he|oFpwJ*FCwK9p)d?H4aX5xnJO?0)jXI1alwP<z<yhC?}UsV`8|C0;;6#5
zBa+7KkTya==X!#VVrb2dk|55~ydJqzy!+<z;v}dYn}X66R%YoY@{(IUC`l=bdMK1&
zb=gOmJq7nueh&-{%CD~cMvkdzuM7sL+6O5jU#Vw&n@!PwqduMK%Pv$?q^~_k;RR$N
zanKmIS?7DPG`^kc*k_+&T@nl>H}p!`ZIz8xL*d9OjN8+e{w-Wu5Qfw4ehPu`jCG^)
zudZR+4d*I3f-n$RlFSL*^z@$N&wIz`fuE~g5ih{;u}08wnMdeg$c{2TK#WI-bAsmg
z9#r%K51kSu?o^FESrke%Wcq}};=<EeU81=;IN4O4S{jL7v<`5$s(#}c*8WqpJ!~{c
z2*QGW2oy9}HB+(o)TcnRuo`iTwydm<j@S9&G*tWsSmJL8*bg9SSx!gHV*s&_FcdLe
ziN!xP0FbLM@lW;#WvG(06+hhGp@rokxUHT&V?m9t9ds@L!^H9favsab;IAMwWb6x&
z81<zI*MRx+YZrBZ>(Ar5;~A?!T`+M@Lyj6tb{43K%LSw>>+0$XcH{1sf#RmB+4F6e
zZQwBFEmk6I;pHEx?KqEBe{2tBrwGsa;eVofEqat#17=hTcFMwn0%u6nL?(hLf`U~%
znrP6Iu;8^VsR;uMu1mG__79}r9n$3Q%vIWVXP1ir$^0mLy1Zf{N28?2+KqGY7M!Y0
z-gZeXVt=0oA4By}ezrnn_;Rk24@_MS`#$z{z>`3Bq~d4wCVF4x1F&ufc($>|oIIXE
zI(7>RY!)?7fpqS5x1-H9fGa$$Sq5^|6od!(Sf#-$J5VD#)PBTkKU3>Us7pGL;!OF2
z0{7?~<hO8|y8NGcmEUE1s_A02OL@+PV5{(NBGNZ{D1ZP6=?@ioVfceBPa-9gaYeny
z+;#5ZV`|MLql2p2mEvlT!1d_%Q?QfU^4pB*IfhS9(X|wTu=8Q4bn2JFjDO0`*B!ia
z>Kl@{dO!lU4eF8{pz0<6N9oWpnX5`p6y#!W21ErEN2rRUaCYum0^%m!xw#$$7gXX-
z$lu-UNvcZHzC0PLPp;SpAu>f|{oqt5)I#Kn8yiF*sfHH<oh1~tizD3Ho=&`1XTsOb
z#DXtLrq46*Z-(KARojrf^M50i7wrsQ4Po2zy&l>h+Mj{G%X#=SIHCyH4&kYXwYFGN
zrIt@TV+M&ncKBT2PNrP&uw^|8|4_NpdVX^fZbQ=#rA8Ak@S3#U!k;_1VgE{_DaJu=
z<!=5ChmtX$?UX<TkRd0xr@owXo1^IjAw&j)u5Z%d9xL7trmAxEk{J%uxZomq27#1r
zc{NZ`RCk|K|Ft0GMvPF*NrNvI<u0yj5fE}kml?rVyn}q9fB~E8wOr?EwIIu@l*9}e
zQs1-79N|AG24()XDL#?BQfvXsF*w>|zcf=YfHewZIer*Kk;m*z`jBeG(+_LA$w)=1
zOv!H#!L8FQG5G9cGvaMTSU|b71>OwC6DYL)7$|=jHOs+ONeOBe1~DeHl~B}zG}b&e
z4hnxK6cIE{PD|R&Y3uM)g@_hMS+59cVAGTdBZf)FhXY`1wgrCyuZojFd_Kl`7@Kjn
zaU;OxJ)mkw+o5L>cV72{o`5q$HwZiKv)#mt1T0w^)Fg?SUJe3oT2TcKxh^oE#3B|d
zpOn2!VoF(-aE13`^oP^;AODcIQn>4b{-Bl?VO4uKL%{wm^OtxPKHDS!%zQ2c^@+hf
zO`IWx2{U!>DFX8+mg}zQPHl%2jd4#b?j|4=*WF3`0UR=gIu6auwx55Re>?#zc`1Vl
znu3lV75deciZKApKAPv)65$BG<8`evey`6#bhm<0uRaGLuQSPBGVpV?zX5dF_`BZ+
zkQDQ;FH1bz)ap%HXrK1TueVas4!GYq8=}vG3$OF`!zRnO&hGDj<>9N<3F5WAxY)V8
zD2(*>fqkNxVQC>)Lj(-9(C{};DLSYJvFcS0_>s)L4joREWg<3ti@x*}Ks7c*KD>(C
zl8G#H`NTenWEy@f>D6S<YX?OS2Ba9eb>?o??~)tuGK58uZG$R@?jsuQ5Y}u+W7;bB
zelqST&6z<*(5BHOn4@L4!#K!@WlcoexJheB@R_afLP5eny?nov-fXj}g1r;ti>e~w
z_dD>Fa*$|4=y?v2OY871c|EFRHL+x(Ojoec2vMTY-26GoY2HJ;A1|}7Q373;xC1S-
z|H8CaP-I0@UNRyszh`ExJ{+nQJHY?)gV%QL+)XrQOa-mDgRTBkx~ThSLmP74kmH-M
zmheRoxnk|pD&P8&hM<b(_2+e3#uV2ObWFP1*j-N2S1Wk-U-g<(Iu$?Iw}o34`*%7f
z_VS=lTT(KXH-7ZKD*$?prl4q;g;M!ApeE6mK{r9XBqr+UwF4VSmd?!&X~hZp)h~*R
z#A_3X-;zQ~P73a7<LpM!Y#P20i_owIHINSBVd3zWp7|YXTxwwULUH{Q;e`_exNwR)
z<@`yyriE_(@JYI}t?S*UN{JR?*cVmim6NayDP%<UVdcJr0i_UU+b+~rhrr(J%EfT+
ziXDC&5m?qX8^x<<_}>$l%GIm*uDSaT*lDRmoR_+o^`Tp}Y%DB-io{3eZnpC+B*lSk
z*BY_NXcEY5kWu0HjP>wlZnRMB(3r|~P-Ob>1la4skASFgqL+&1eb|<<T8KfNn_yEz
zvQ?N4{jC_zmq>2ESjI2ii*!@6+|Hq%v}#Eq8GG)?H3-8l>IGuqYCF2{A_eAz7c58I
zqu9;rkBHe8ctdS~pMp;neSsy3dJ(Jv&Il`xiAU)3pvYe9ZriwAC7rP#RqBmfXpQrg
z+0c%b*;i>MXcNqwFdAQZ1~U}g3fpkc*|OetMc;~G8(t4vW;RgXa3@uk#;<=sNsHSQ
z&XmFNO!|r7n1#J?NX5_Qrk$XAJk?NPoNT&-#HHBT`wNMHjvBNq9zS%L_^RtEBZ4r#
z&C+Jx_1~xJ4PXmB5!W5@hdCl5MG>g`R69(IhPdJJvTkBjlV3_#_>MkAy~1ruB=%S4
zXv4#63u?eDb>YH8jWMbP@%}VVH={|!_atdMDjz&d`%d}LoEa;?<?U^p>jpO@w-N>X
z+}J_pT9Y*2;E6U<8p9T~^$}DG<q_67znsj|mTP~lSBV+l6jv;?=#8~n)j(k7639_k
zTE+Vy@6q!lWX$ixhZ8%@ZU}(c{pLNUk`!W!lBJN)F_Eq5X&^SmGaGt82=#uUSgKsP
z2~z*zC?(1nVwv*$Z3K=ml+0|g?87=0c#r)1auxOrV-rKQry=`~D!SnoQ@neik%Bo&
z$I?*SL1a`=ChYa60}&M&WZ%GRq>xm4C4-ZOn}-7{$TdO_#C?WJH%35<Rh<07gYl3C
ziSr1-nA8%uv5{yJfgu+>Mon@7Dk~;`f_d1_Fw>}~Yv@4OSn|Ff3wJ+PX6)Z!s$?l@
zBHCm!!yt}Do4||5qiy8L_YXGE+i#&nUvtgu=#p%sMVqwgw$<5rV5A%)c7evdQHQD{
zJ_#Ge%maflf0WMUv#?J%*KE|P)NHbq#1^?Wq?l8l6du1a_Xx7c;zGup<neEh%Pq}+
z5Ac}z7=6gUgtfj;+5f4Yv)_%~dNlMq8ay-gn9%H;xMiHDD<{pDhfU7o?w8|%f_by|
z<pe9QZJ7Yv_6||^L^$Txi|R-jGD%rJynf4dK0fCpy)DKn(keyhty8;x#^8bcSWKVq
zakAODb&<~HL@3(UU8mGa=koH|D4gd0li*a+bJ4qBTyprgE;Z&E44_GQm2`l2SG@|Y
z?KN3Ketud)eww(raE3BPclFfC*@Si4Y@Y|=;_(-q8TfFng~uW+-hJqUuZtm#@ch;%
ze@-{M5-RU2b43Ua3_+!owo4hyWbAt=q5fC6$?z`}^LTa$&nIUuMmHB$T}G_^KK$i0
zg>*c3@QL|70pB}~!@ghIv_Q}jV@Z?i>682k=Nsl+4!yYteR37{`N^hEsf}f%SK`hG
zA{L{!u~Rjyx}2e!(=Xb@Zb!(-zE?!`yorkb?m!u7ooY?&{&mW8!(~Lz=l-9Xn}Kx<
z#C1#V_!EZjuY(mf&UdM(iWYNd9R@LF$VQj(IqE3`#5oo7p3SD6n9F=NWbKDxzyAEc
z;+QvI@W2mSyYV%vrV9OIq7#}~(6@b2*crAtck&5?ByJ(?Op8vbMYRT6f${V7j-JA9
zrBmCg!+!}eK0!}Jk;XlFeXmJx^=?X@)LDS)M=qkQS)!y!M)m1jn}0f+z`~$Qa<zr>
zd%tuBYaO}tmG3ycmLZ(%<mW=kQMkh_+s(CR6J<6;qh<eU$Wc6_LG9J(7z(X-^D}%*
zSb}`5^mw72bb`<Xm&l2a8`gw;_%w=lUiJLRMsbF0xn|7-G^F0+tnDx6butCV7AFw%
zr)wP(I*dpl-ATpVYc2LScGlEo%l$B-4=K#kZkXpUPA7;5+~GduoOolxMyt}tyC<ce
z5vp7EB0tWt_f#u$To~xuC5q!5BSN|@|FGmnocI#A+;WIS0xQuR)0<N*I98YsY#N$Z
zuV-(S!4-+hLSZ4rP|va8<wf!MYcFw_brOTq3Y2_yc1ldf^Be>&zJQoY8=-SFjC`Yo
z-~6n#Lg;Wgh><-0Xn5ZB(?y)Gi>jT$RGyjWJF+D@<qRCe+bP^Pi?=~{jCJt+6g?Tv
zQsm8{#GJU(d+&JTbOgtwbH*&xCrgm&6%GYI0eLiS9&@;(W#gBb>Nt`Y>HJ6f!=i~2
zcCY0r@tL2%O;%%q#uf4S00fd>V{zKw01J&NTJXkcVWp%s9iaH0xBwkfP0VAV&LOCs
zdeVHh)^*>wo8`SQ4j@u1pn9bDy-z=FRYSxnIQFmRDp_sPJYI;_EMOoz10-M-#60eC
zyyev<Egc=WpvnqYGSlqiRb4y$I#PZ{T&vs6*)1rOpGoyB>p$Z)ixMhJ^2o;rZFtMI
zKA&9(pC;pn-<3A!%zxbyRnqH4%$=y&|1rNTe7=y=q;0%lSM6xe^VtZ9Li!MC1L#hE
z<^ES!uT4SKH?}ofe8=Ew5e&s>jsg<F1r(DAbnP3|L*@t?>Ehq>C$L1A+cx@KXCy{E
zaDLANX3a14US6OLwz~>SOh`^9{g_}4m{B+l|C}lU7gYQ%LdySN+BMyN`h3>7qfEPj
z#5+w-@#K7O;P5?P-uzlRT?A{M0>kvyhmRjI;eKv=81b=>>iYn-*&UF`gyhjCB@zjf
zTe_R^V&(=mx#i}snes`~KG4hBfo`vev=!uqzca5{)$g%)+5Q#|b3xsaE>!na(;355
z15y0Hiq!$%TjY2N#^Ndv8#ptw5Zw~Cz*M#mW^1|Hc-)yd19rGa?pAHsizYt|Lbq<$
zcQ{!xuODv;*Q*xHW$!oaLGcyGP+sCRIC??svVxT)4Qp_BOE5mZP9do3df#(1jvvOb
zRh^rhJ!?L}OLhD$8$&6icOrUh1qe<yMWDm3vuL|MerkKR<CFF0vT9Yk6&bTfz)~}|
z>OwHNch-lT1({Vje*{iX9yj<=rc2d&KUt{P?)HzIe<aOwlIB^I`4g*-qvzz9Y7}1=
z07DhC%hE>Us(sNZPeg*l9zs1<6zmz$3_T4f6oV3h`RAY=i+50h0=P_^GkX9PW{DC(
z_6@|*e(^Kj{gIP%=l)&Yub}*5O2;D2j9&>#Zp|+Zx5GFZtH1ctg2|rA^u!UWddfyF
zXiNm!^~^J{=}kC6hF@qLp>c=@F^XfQ7Rucr=(OavQ<e7HK-*-m{_ZjBlc?AL3CSYB
za<qrHG3DCJF()|B2s>}C0v=z(<%@>a9RybaMtaVP)~X`DX5~-QDF*(oMsz1g#Du{+
z1T{19gE_SZ+#>X+EWtXu!o!KG7CB>>W-(z_-+=w(Mg7HL;q>lYbMI-l_E+TRcWHrk
z<OR&@Yh#6m<8jrB3%4h3w^tLCj`%Xt=jvw=$eq}*MU>O?3_9OnW3~5iP&x)yvUR0u
z#-TpE>&#WlTdyuQK)`C)Ifeg0rP;&|4O{)upBuuH@d`t1|E8OAW})q1yV~XzKJoB-
zGWEgQda<T!U!vTtCRO{!z?sY12NS0i5*$IMxf)k9wJ30mVlBIwuI6|xG;kdR{PNR0
zxY~Bb7EHy<KYv1wIUodp&)lvJ5)o9EZ_bJ_1vGHXg48K)Dk9D&AJEz5LdGrVP&3xV
z36w_S!;;TRUKlL~=4jv$vxA0EjBO~=al&T>bHN<904i#R@?@>4B#WPr_N?+R_@gt2
z>yi?EXNUt?Mo<za#oI)SotZj)-OIOI&(@qIXDj8F&?r8GDb}nJlc=2=fZRRz>kPWq
zo_l!Ig`c_s9Zip;@4EtWaOlk>UpWRwE(ajB!vF?mxSnLAz$kiK_N?LEu@SQgCnbHk
z`d;L|)(5O#SY&ahpPtCsZnGu}YyOiu`yQVJf$fu9hpqbf07u_?E~{H*S6k`qAj+uo
zepX6NaO;mn(^Bl}TUl<t0gfGp0}b<96g{4+N&=5Osb(H_XFSz(S>I$LOC;xtt5`Jm
zP2usQDYu)G417c9R~oBt*La;UAfU)p1kj~3tLO>F->==e>T?5UVYv*b<=(^Ni%ATB
z(WVEff{rYH-1)4g1=%?MzAc|Vff=;?7<x-$Nrx)GvX>)~^R=wS`hBji7f2>Z#_HoO
zwbUqr@WWDEB@^+wGFjmwDHDD2g+vn?U4YtLY6=&isV0sojxDL&$7S`sQJ{y}GgR49
z%vNy`-;;1K$r9+KCX9XvLf9l|lB%KV@0x<>p_@tSn)8X*NA1Tf^6qaZj{^#eRdAae
zWHJuTclj^0mT_mdvMQWY&Uaa6{6<+N_AwUC@AtaiVtqM+DQ;lb!OG;4W?eGx;`(6K
z5H`pEgS|(wPxP@<8r9_3lV<k^;{>pPFn(zpE;fc<VZw;Lxj-u2AbNfV8FG6+C=TP7
z_$c%JBJ7OH<nk?{!6a@1VQ&Jm??-DkiKgpKLu<cIW4ZQ^**LB3LADEWOQxWN$Y2fE
zoQMGntl!%Oz_3`(&f3cr`$K-=wiYsVpAtMpUiR(xEU0kkIYb_Y_0#(SuD1XyWJuiF
z7mLphjI{Qt6+GsEn~l%`Z}m)#8ew~B>gV=2W~Wct2M$##VqHQbMC~luWd~eq6(rhP
zL-C*}N}xDN4!)F{m1~fZi3jDDk(agb_7^Yo*;uN-&{;pm?fvNVTW;+gPZx>rZ9rHu
zf87Z7DN|hfF_RljVoVStv7^i*5n2kz__fhG1#NcspI|7}WvF#~Wp7>^@J6f9AYwO*
zhprzii{`KZr~}+28aIsW3^)m!P-#s9o;`b}X#M?WKz{keeO|x>(O~V#$<mm(B!<!X
z#ReSAo9RBiza_QD`F4^{CW6OXsd5!;8dfmB>|ujiRALr%c2Qu8u}&#OA|)B?CAAsm
z>kwf&_t;vO?u+ig&qK>&f_*J5aO($=^G<EIjr~IBc`-5@2VWxGou{3&T-r!1DnXoD
zHCQ$T!MSED%tUkT@V1SW`e^r>yRL^wBFtI4Z7$Aa$u8K0Vm-oya7dnYxFC3bgL|uj
zBw{$V+)t=WC*Cn)K9S)(H_HpT5Ru^=5xt(Bj&zt4u;01`X9?|B1*@O#<BdO~KdZ9Q
zAhF~=MKS@>L&Jb_)Z+UM>08UFH0jN&zANi{__?Po2EnYD{0uO;N9M#!!Ge<5>_l)N
zJ9O#%Dlf=^-vestDV?Pntr6gG@oD;v%8f&PQ0f@5XJySTh{;bHt01pnjiC456ZT6H
z1x=2cJ7x*`=CC5u;3lKAg<Oi)Ncj_7_~R^%HZ2e_9uomS!mu$zLHDDMQTdi{!q^1b
zGrQZcZwCkiEwz=2uC4(3In4Pn<J3=J&n4~AC2jW?(blU%?o%@U3|>eYt+y1$YeqVP
zoNqz{@}c?op7Bm4b`$QZh{To^up*Z`2cGq`$qB6e#U%s5^zfeCyv}3cm_!Es4EUIW
zrNvNmiE28Hq3*2IMN#&xjnsZ4#i?d2ac+06L8W`lfePdsD$j41My4aPd*#NYrw--B
zV?0ylh~vr`V%c4ioFgPD?0e=5l-ne4DARj{rBAA80SVEmaFiyS9yhoL?cu^QNcOd3
z+%EVZvriE*`Zvl0!ZzUAJ8<##oZMM77+~L{n9zrL{-O@w-<dI0nfyeh@F<<pt9G^H
zWNp1v%(PU_?A}V9l+NX%czG(0R__UJBjdZALvIs%MXCalr_a^CW|#B4!;x$M9#dg@
zuKr{E$hA;*^mUSzgYHmq(}jHH6StY+6QYUXk(}cI^Yh9PG`-pcfen9?_yyO(7rsap
zFVcRsEyZ8Y;KY|$GrigFdpnm`OwXn1!z<(NleOoNkB+3YeHyV(Nj6xo_$gJ+09H26
z{nCz!*;jTRCrN3gGYe^u4cNGF!I;l}<?bSeQ^3|LSAHs$WaJOwkWsvf^aJ;x?vEZy
zmtIAQ!AZZ#VCh0{kS1@j()+QuFJni%Y`@gWX}@&;Cm7U5dyl&(CakAX>J1WRj}(U9
zJx+^0#91tzVt!Is)|YI%$-Jcec#cekqpip9n1;|fzF1PQsU|wiK1?n?KK@C-xrnQ>
zusOIi3%t;!N#=p8sYTb-u-_}b7ZXY_rizgu-|wz_88WG{&9^hF$kj$0;6hEfB4?uc
z;jfJ|WKyfoS$B50YvF5S>6a%83(;-K3)!4j&xGZd*bgVqXeOhb!3&7D4%IL|Mdw*l
z9B9?HHBV%1AL>)h8GA{*qt~|=x=(*j8L|)mGh4m+iJBPMHZSYQ-B)Staq*RlQtGl;
zLS3^q*F5U**ssT0SEFq8i`^GTs}=rwh7S)=<Ec>;gB~F6)8v%2DoA`v>EjP4nOmxD
ze~}f=SHjuk*Z9cr=kP(+d%xeiN`tch75o8QvE)N3%&1pl#yszC>KqG2!3B~sN1RV<
z8S!l-Xlc1DG&TyqvI*NidY)25w>k1Zc`pzSaEMF1LbvYbyaRiSyB4_pu^+*?>i?!w
zyuR50Hg|ndvc4HL`<T4%=((binymOin;GGvA;y4Pb$<NcdF;PNGHDDyEp6(PA0wxQ
zA8I*xZqSs*xv3^H#PTo^*$g%5{dhmS^U%aeBi9D`IRBqMFJLMT5;IVW!lYc9q<;&1
zGg=OCLH$I9GN*aP{rLAxd>a3Bd<{GULfsbi4yIL6dTIkH^_R<H2h+{&mY8~>RW5G>
zA6o#`64k$s=HaNd1I;@L`;^P^K@H#J4zA&zKYNTj(UZ%FcmC<S6Q*O;OI>rC#=L(?
z$<S12FlT<an<T*^D><8yD*Zyk^RwEHeoKiW{28;DVM;2cX%Eai-M}pBTGl@-UzRzj
z#P-BZ@{aoGj~k{AxHS-1N@OQ5UGah=d!8)$(XJ)=W4bQ*{|zDg4>bAa@b+$W|AAqj
zaL^S~vWFex%`6d8n9PU90~Va#tMx=I+D7_({jgjmr;V+8-TxcP0PPO12zr#ne6O^;
zT(yL8C8v@CupFTwYx%xEIwf%=p>u`5A13--;$K`TNL>`h@88oU^?bjcZDtcPg)kn7
zF2p26_?xBh*?j6>7EBejaQ=AxO~5~I=^{i@7|W5!1Q8q<4}5%ZN`2$JUN7%G!_v_H
z&+%OoY$68BzpKmtf~Vdb;u+ndDa`9|Mbpv6z4wfBmSjii;G?4Mv-s{+!qLDN?AUaY
zoEZw3zfTW;jAGuJ52*|Hd@Lf1)EM73>RT@0oqx!`(?-AiF1xc|Q{Ip}>6w!3@Q26M
zr2pvYd5Ee=z~+E*(rI}XP<0a&9K{STHYuqFnRa;$1ncB-9-8A1A+09+{>?@OvP%$U
zfk(|I+Wi&5;+GDmVMMRQ8hsuQ`iu4UgtniYqzWK0;4G{O+5dPPaJ@C<t~4g3<Pc;A
zGU4W1s1JYB<Qc4#J@*f``oQIyDLXS!J)!y4iT95J;SYpIt=#YeTwbpMcS5%H>u>W*
zt)e)xQDepuQ#gfadYi7ps*_*l=>7pq{(OPFj}j!hm=P@Yl=jv+<wYim66dmimZ1zc
z7aOO-CVYm=X3|PB`HGan|6X3pa8#gZ*Q?AU@)bba!1EN;=@=5b1$vn9h%%|dE&G}W
z48?WcGiGCO{3DzO`jnij4-I$8=Sh29u^rPJQws-<Z{cLQFiaRoDm!+LE-CWW6lomk
zhySU=`x7qMfoG&hGt=~qsYTTiFDpp=vY4mE#5N>Zk4BsX3xCWAv?cxAUs<_r{FzmX
zap9eq{y}i3=1~FUe#n#x)CKLHn!r3%0l2^k3lPJ{{<r{9lPdNJ@UKv`lM}?)ET{x1
z7q@OP_u-er7_CT9pyFNO<wO(Xez|V)%o1HFqN2SF-=Y-`Ad(>mdmH)5vD@`fz{?+z
zi32FGm6(`|)%0n=ahg%!$&%}A9eWvblezTwk}Xk+G2X(xN?eGd)TvEy?<OY`scMjh
zn0nnTb{pR%415g5TqRj6Bst{i23>)qFDtKp8Uc;wPRD`bXN_ebVn+4O)U7S3;2K~g
zPE6?t<E#UDm+ZqiqWT~HrvL|7g7`)tJs7K!p>%D*Za#tvO20)S$q1LmfuY;6+Z`yw
z<6}IEmw#I*>a<@MS2EB3mW+($Kdor>$YcC+3Bkr#BwY06iuSs?RA95yts1|kRash9
zUmvHb+lfWS*Fynf<O{qmFAAn^h`>Dxi<lK279;mRXLB)sULJnj5<L-!<on|uiGP8@
zcu>2|tjMvzn}JdPiAqa$q1S4a2qvb+ehWi5zd}dJvF@YoY<b#8<sg>UQzyXV^W)0L
zFew|b=z&@o!S<B_DI6zo0}Vqd=-%Uid>$vD>?m;uqvI5$v>;^B{<dokqTqp6V+u4e
zOhK)(#)LFF1uGorXz}R1RKvU96jS(mp%@!+03ADRf^x6vX%L5E3l5IGA6D8~Qbz-k
zj<EpqI~|^yodvktvUzXv5|FV-Xn}v6hlfrKoEa2gZQxV#a6BbFDIzd%UXT8DgC&@m
zj4m2#wQy%)yEtz3u*c*l7o6hZ7!Pklg4@qKUu-6jas+{kNuuuMDd3nQ=5EUgrTIa|
zQ4r@dB_b4bS9(-%CDnvK0K_lZ{ZV`XkmZZF77RE_G_NkbhH7n$ev3o&Jv<_du&_18
zSEs5<gR4MGN{`<ZNcdO+Y5X&iZWDk}?U*e#k=cJ_zv+)j1a<oG<^_-$w9N5MS}zEJ
z*dJ<E_%+UI5NS~bRohEqYiYx-^8?QHmm22pxSZv{F=$a`=L|2$`yTR29|&o}cYsxG
z`7y9hWHXL?*774<@fy+fD`9_GFV>r+gpC@mK(5Q0N!yxUsC*=zX)CncvG<oS<rUsY
zYCS05>CZ`{>w=nPY{8uGB<g;|BbHhZ?kiU@d1k~fU5UkibS2I}AN!Q763y2>eRp)e
z@f#xOGS`4zZfyHEI6209j*Wva;HmcOdBrmr%Kq$Fo4v2K_B`f7!x)%qORd~NW5Wvo
zc{#BZg96=-!FWiALx|Pzvl#*;@lW&u<;Iu{I<g(0;pg1*eid5&RSZLTeX)GO2AJeD
zM*_zTy+rqF-|4eU>%G{SnLgip?Zt9n2MB9ts6FSj_qnI~kIAR9J%zg!Ou@W3C@~l2
zdoK6ZlHaXo&klmm6^)p24T@_M+9JPmtngc@ysOU8P}vmb@?z-`W%8|q$w3TDl%zAU
z3<iM)ZSxWaX%dqUpc>xd6xG{1PZuO0PHSlCn;HA#Dz>Enbq==XPY4pEY=Ce++h27l
z_^6rpfMYTTiqM2KT3hBRWYcQSpmBR5Tujo>Vd@7YWXK88anqyPwcUL|dG++Q*I6@!
zVPUN&1ApS-4SWALNdor9z6aUipeCRLm5DZzEbrUH#oRz=J)jl{KS_^ovtNY-xmNS1
zA<PAK5N<g%hk5D(OdRd5-xzIvxj4Y%5=6TGpu+$ZbU}Htj^LpwhnR89r5H_t1Vo@G
zh@=vhbgs%=$R$t^mYI43+8h36>bT~e?J$)}tBbeVYH~U*L+p?t=5bSL$r}|VBM?{4
ziIA)P)2^><jdN8nBYA|09;oqR43OlNgTp;Q!Z>_ssL#;RD<xBWiOv0R-K?jw0G%w5
ziVD@BvH;Ja5#4afTNOI{t19P=8CgnAac%L(JF_zAkHsC)Y}LNwbO+Lut>?SBDYm++
zl=bSAXMTYW{(c?uy24VrQ?o1|WUH5lJ!Rk?Z~Ayf;VVHUzYmK)-s5-lJ_%uIQSqo^
z;Eo|A_w)2W{BU3VU6^wF#~{WA>z=vVs!sf&$l!NnVRZApKSC!!k@hCq9ON}8TLQ|G
z8s1UuW-w|wJMX`2yiW8>9s{Iik3w~R+*Piu!fVJX0-Fz?Ec=W$&^b}?i?Y}5`nb|V
zab8w0aX+^H46TSck?3HWA+arg4$6e_MKW1va{;PjTUd9*r7ADp#o0n_&<y7OF|bs)
zM{MQceNGrT&gMa-<R3xAKz9ob_Ia>6YXibKCqW_96tE{My(#Up7|By*Ja~`4!#*Q9
z;p-BI;oZe4&2GXWxbsVwy@GV~3-l)Y0yTv+SsS`<@jh+h$tQ<}EV=@?pNw|{z*&6H
z*-`Ko$O{34M~IfDX^|B|D?C)7kBaefm0L2|xsgyo0Te@kF`K!)IazI`aA?*XRYvC{
zx>*4;<+xpsUD}+WVktn8<1pb$b!bvm*=9q}S+;cLYYJi_@TaN90+IXaZMTkQU+#yC
z)_x=A71O=K&NesRTUJ@G03Ulfv2!;c2mWbI3eu)rJ~8-@wlkg(#Xm`2=fP1DEs}jW
zIE=mJeUN$2QqGEjz%p0K+=q=AG;-Y%N64SD;I(SsM$gtrjMLV8n}3y9lC2YQJA4pV
z1YwUqBHcY7)lhj4+t{ir_FhC}xdRJ`kp%+I-cTnHs+eRE8mV;4TLzs#`D4`@si@nF
zPN}_?R28<CTQp9Fo<DOY0hB@UR#01aHf9L-tDg(aaw5j}HnQh0pkyase3Er`i_UNg
z{>%eRy6pIrpAJl9l17leO!J7GN<M5);!3En49Kr5-PNr1Xw_V+YBdR7`3^Xd91JB&
z1KbZmca^Oa_V%(S;bXS43yihnLqj3^<t@&Fzb>-^awjk^>;0I~dp?HqwxNQ4<VN+#
zp6u%lDM3J>Q}Z<YVoK9Qk^7a>O{7@adnF7N{EUo0x_nj1ms8B>H6$2vfx}v0@Viae
zJLC3MGO3`G{kO0E^W8iWTa`LqNjctLMy0FTC3m30`y@mZL&}#@9;Qhke;ZW!eZr$6
zE+r)F=jvQ!Ctlb^cu2qRR6}=f@dVyD;ih-G6X-Oe005;}C}>K&7vX&zIq=1yE}-Y8
zd?MXEJvzbqgMkPt@pKI`_D-&X9XY*kQUY}R`Veedc4zMdyjrRnA5>R>G<TR9ho;0Y
zY>ty*^OkC8;=@}BCiW|$TjYBKS8zD3NlZw~kPd?{?Ki@7TGX%Ow~+;Ky2XtqId4S=
z_-`cR>Pa#cBYC=2=9vLJa_8R4St}6FU*u2}4)IV586jToD$;51w#l#->@3BC&K*z+
zazqcV<+@@`0rQqrtkRGhIrsPPE+L!&;DA!=iv7H5DLxt}vJ0%5&2PO*!6kJlD6JIB
zE?)j2x007y?;D%&A8w;TO}QcV4Uu2vjovdW=Gq^nO0~Y86*#nqRL_5Ih0S8aayE}P
zGC5Mh!&Ner_`YWEV(?!NcU(RS0|`{5eu;Bw7JgL5eh<;eK(k2rf-q?LBgg0GxL|n}
zwlDR`FJ%WpP1{=MT0yv8F^_>wLks(oHrOAQDL{oAUpyA|LDa&~g^?c{SMW{l@_3UV
z3C5*w8iZkHi~E42O%k}ZG<-st(3V&*{8+fR$*CTwSA8ny18T^nq;HpFdYyEPcLCYy
zpe-q|(iUfhU0)RNd#&*dtea#HB07ChTFBGcC4H*CDl!w<U@nYSGVYF|nkX{!2ZVXG
z#DLc8er>fXrvSGmuC0mIZeROpJcE#T;5E_h00~(*o3DjsHgPod3WoL*M(gcZ;#=$M
zEp^pLNwmWD-k{=~Bw3_?%|k$t*H|8Heb&%^`Vko@irA_yK;jH~-pM$QBy11k@uOVG
z`x)+tjZx2T204*-)FyZh`<w{J0-^Q&?m<+bh2oR8%16Hik!SQ61Z{-#_oeBV{WG=v
zbAKq}o_J6`*0=~&8MZ#qAUr%=ZAUDuiCkudU-ZW(L<PP(g2};0_lR%H2e*g6@510U
z`%Yq;yO-y`OVxIQ_qZ!j#60DeNkv{D@SibOHD-Y>CnvgF>{W}mT>!D8OX+u&A3rCo
z#NMMJrtwoeI=$_ON<2DK+~NmhcLOUz7mPB!;Oz_3rnQ(+wT<Zc#%~GQCSh=o*9yMZ
zXB4FG@V``KYYYol#UqQjQ_<osAutMbqqgVOAi-~QI-=(YLmidu{Na@Z?x*)WLXX(V
zV?4mk;cG~gV?n>M+?Kqn-6R3_O7X2`g=XGHVwr+QBLoir48jD{3%gL|E)YqUBfwiS
zpKtO=v+d0`u=$N1fdPy(6p6G8LyEPe(VYaJUv8z{c%%2Q?s8>&o3&HvIsJ&=75Ny0
zhdJmz@~Vw!UWZ?cyVb3~sk8LId)u*~gG+!%@Bmj@HRMT7P!RRQNQ3ArYn{FMHK&)J
zo~4eZUpLchsxXqtJRNto1ufQ}f97^{{=9OWB6v6iJDJKmA16lBntqfTqpW$(67@Mq
zOZY-fdo+scLpMEJ?sz1+;@h=~%_kw|p<K})wOo1{N{7BMho0?HePGXV`1m^8il;4-
zm%0DZIcYRsst|qE-3rx=!a$vM_QXy)cHI`~Gqv=?h+d>>-RbS)%|{EFNuHy5*x^Ne
z&$6Dd^9lQOlw1(UIJ!i<qWgv}fD+MwiFLK(4X1dN^thpph;pg$J~umxU=-C2KE~D%
zWRBU=vNx<NTT&-ERbGCWt02Y^zT8F2?X({)XQGo_SPd&i3tx)7XR4D6Z<c?WQqjZO
z?bc-wUuB|0`rawp!iHo`ccP|*G1ScNeZIS<wtQi*u}<<x3Hm5$w;btESFKANa`C;E
zO>84gTq#?Gjt#xBWr>QjjgHRRvjskP(NvMrlL8)Mv-~K1CFjM?n`H7ck8EP&Y%8}C
zH0nQn4<KtBe>+W<^Zdzi<`8ce&gC5PRK<h^x;Sn&>yaAuj}q4&XzSqQb-8Ull&alW
zdaB%KzOA6+;h6_r6rHVvFON#D+_U0N?fI-(xV=60<9M{#-nteCLA5K!QF78SRkh!x
zW*g^z>elVy;j#4D(?dX0tZsSCkaBe=Aw#ULWsS8PrI2OmRj*kyQqHCyQ}Cb<`OHEd
zKi^H7g}KLG?~Y7+^WLslksH;(sc5&`F<ghSeF?{7Rmw{G7TMg|an2WeTfewdVa=Hv
ze|^^?u><d_{pC1!cefjzu=)<e!VW_(+MrY%3G5~D)iJ}-5&^nEk#Sb!t>R^sJ5CkY
zxJISdduU_UOq}9%U|;smrts`g$-UjsjUK;$=TqKB<~Zs!clH^{rg9)cepRO7*Z=jR
zKw)K>j;gvFko9sr75VTeON6&=9;r8KEP0;5$x!ALu*XX{cou7yFO$lbnXgAI+R7L3
zb1Zn9K@jElgY%!~2m0j`GitWr$P6AnGJs>Kxe_b<D4m0gSV2xWi4-rE=%vHYkR{kr
ze5uXY(3FH(%}*zW*p&t7+56jH@$0{K3m;zTrAd|)gEy<98&AAzdyI?0`j$e4wT<F1
zCc8?_eyK0HbNKZ?{v7lm)1hC*6P@%Q$)iGz6xZWn#bQu>gbX=rCT7lTz4&4K3>gyq
zM3?K*0rmGq_|LU~ej#>6kA(%`ipjq1yC2JOqMAl{?|Ly^T<Kw;GwqJZ+U_tj_P*QI
zGZkAfP?fvLfM62myu4=Y3=Wu29ZvDrgc_WhH!C!m2Kg}d&nu#SWo*nWtzQU#db=#c
znU59^eZ=^DzhaWUIehaSLSw#t{?-TGg+D)l(YeGGuEZYsEa|8NhGfePtZ=gX2L95L
z^p31izKP2!n?*1iY@t<ZcbE|SgNvEt&qUC4!XH*seic-}!hamR6SraiW*a+JGjmu_
z1f)V^SbaA?rWjGUJ;VID3w}R8!N#ZAo|_7^z?8&S-u-4KBcXQm>)vc|w;l7~E%WBy
z$>Dr5)ERIb3<QI**R*MQ`Xbj<G1t_K4Y@M?TYo(?(2qNAgp0exoevwqmb{{rgbw$^
zek;IJs<tQokkcn`$J_g=)RkUXCLW<>qZo(<2n0ZeC^^tn#iL`5)eqPGKf2yBs;({R
z8V-`+?(XjH!QCOa9$bS3f=h6B5AMM=xVyVUf(8xl_HDZR>wDklrvGG&i~*c|)?TYt
z)ts|t?aSN2x=R~30-3!A8X28U{ovuGG2k2l4`k)`t~V_|2xJP>7VOLd%SBOGYwtgA
z#L;|^_<8TE734}-2S&#HuP4G|PSEH0>xpi;h&y3LS3D`(zA05!_`b;%teXqAfZ_4y
zJ7^`}wb($GXw`JmWZ~n8Uap+VlMFuF8o=8ZrsD)!KDwxl`y*h0;@7be828%)v?i6F
z_H(sYmsE90At(S+vGCK36Hh8#pt9WnG-Fmm>41<a{jC&4fb)ErmdiLtVX+nnm}Bb1
zeY5J+1NfWZjdO2BoB{|HCq5ur@!w77``u`KyS&hj=?#3jRP{?>)`Xt;H^47rtviZm
zH%0AnMqEcn=XRS)5Qnj8JI)@kNT#skn-6N+reI>x`Zi|v>Ok?Xu6D>4NXANsQWK+Y
z1%bI<JwV?JZ^)8H`#DAr4P0^=e>{C;)Sc)1)-8e)Xe@nKP$M851J~YpHQvZQ0kqE>
zWwqn1FRz{}8$eyo=ELrne>bG)ZM2a>t`F2{V8^QUrF{`qWk5`PN@J*OKKis?j2Pf^
z>Q4kubT=poZsL2d{378+wv(L5SV~Z{%()}*;YIH3TXZDzNL=7$pa{vHI8Z?eK7ty7
zOS>CT4!uvY#WeGewNePeP1n*yD&h|VLUdWR2yZ`q64<L{L=Vt9Y;{7n<ENzFoO5bJ
z4!6_f^!Fpd4V|)7e8#^>q}@|2%zl-qkXLyoGV)%f8#(32R_<<9+@R;Tc2}(jK%<Sd
zevx?-0KkuYp1`p{0$#?1A$$m)*fEsgtzW8pu4yX(==8k$mXJ9|cE4k@us;Xz5VlqK
z!*WhAj~@@~SO7e^%j|W3*>x3y9Hr5^iIIeh!^|ddK1gN@u7M{Zu7!2g0ZcdBc%2Ko
z^U(0UZ7k|l1Y;=yb_Qo~E3$WV1kYwRsww_WI-U{-tl-fdv760mw)hm#8vE4$TxOO+
ztRX*@X7;$YVav-X`W*L@xUb$Z&L{8F1pkHHBGB#E4e0mVVa<H*XR^A1qG}Zx>tK~y
z5siE+oRbI0SR%G_y59P*7g{7L0<*nO0fzaV6endc;HmMer#ld?hcev;H45mPe%0~>
zzEauuP*(xu>c$%3I7TK{Z1=it*VYZK%T{J{U`t)-smY9bxZckfS;4R3!Fx&D_w@^r
z)23IUWetIvTR{g|^^W#y(6#hhQa7QBp4|rzz>6i(1&mKNjENqw*He!X%_4PaE2kE1
z0+y6)XN&nC@#db?D&5t3s=M1lf(@BGmPWc?CEiKsS$Cu6@DF95L?f#uYD|VsKz|S2
zCM1U2(M<agso_#wnmmdDO5XS1sjtO#Th;Z^4MQUFwMi&Th=3N=9w1A$)P~5+tbK0}
zK#b5pwq9*H`l@|N*UcHzY4>#NVGh|+`VBbXAW>y}iW3*b8-m2PMJK8YjZq$!{|#8Y
zSYp3g0BF?#&D`@+?|P2_@fZB9DB=_}`SG6ff*uxe?_AV5u+WHP+;h)g^ELv=y?|*$
z4ZIq`=7DMhr2>^yR69sJRxIhPrZSXfz;-%O(waw*^tjyR>R4j$yF}0>eG~KX^bzo~
z#U}K5bg-tQoI(DK?`@&=igL`<i69DIl_+Xq8(cAu9GG7glwIR}Ywh|{sxaxx`Azg2
zl^C|8&`WATFc}aHb=43f6@$|&^j8X1YVOU$R6Rz!%Q!zaD<I)wKdeI8m(})g_@|27
zoT^n$_%l=xnpvyr=QW$J8R!EazarodMbrUIEtac5Q{e83(%KKgHI6i?j(8gR+m+)7
zB1V=M+qxH_CT1$6c93()=QWp{`MQ_IB6ORl5LS@rsbp4g%juG0WF#@LEGkz@tZtM2
z#W*);9=4nmmvj`owi`FOhBYA4E>5S~C@{6Q;BbR*O5rDQH*#m)860H_;Hl0m;$O0Q
zsDIN8JEE_Jx^V@433NDGK>ESBmyf`fM(TL2NsS+HUyWxWjUFWWzr&bW2h8Dp>J6bG
zk=_xTa*xKa)XOhxN(qtvNI9D~(nhMyxmQttKu}w^!iX7AawbMVB13f(-ik;Cv3+dZ
z53*X3c&d$+(@Noxsa<nf(LxrhpXcz`vQ0ZUEPHQ&R9jDDXL~R%8tJ?rL^je)|KsAX
zM8FRL*$;L=_7bsHWgl5h*&=V;*~+|7E#W(9Tz)}~4owL9`Sd%4og{iK)Rb1hcxw&>
zK!`A}5@QCKmhk5tCLb*dp53rUcTlOAjlEw(cC0ZK!6^M<Q%<*34=<JeKrCn7M##H>
zAtuVm*)w1jm~BCAtZ_epJLLcf$9#(t0z*s$c!32Oa#Pr!oSjqMNGolMT`Y^Tt$5O<
zzZa%(#GBXa?&Du9WM&c`LUi1X*~NV)n92sxhAjO6!k#sGy0eqTt*f|XeFTuCmgd_A
zECJe7%QM`o0*PbE+_H0Zn$`o-QbZbU=k}q>RO7Z!V|AjyKM4!e3S^@-Cc-UI{*PPC
z2nyDS>0P6!9Jk*VeyPs7I~$~*<IV|K{yJO}E#^aFRarB*8`fCnJt8L?aNn;vB_C6&
zK_1BXcNy{TRL=T~Z>)&12MY$Ss4A|Nf0`pq95l+dY%D#oe)3ZPY<IpI{kFOf7m;5I
zW&2gRT|FS^{=M`FUXEh@257?F=<LmKW&?&5z{dCjs_o+jMk=}p&xL;B)k$52uiR7H
ze%Tbs7@WX}gEwGZ5e@)5vH`%u#woz4f>fUNJ#i*jAUtSFnLwQ<;pfNJo0c)iL?O5@
zCIpPB0b<IMZQFq|=J}EhW@|6to)EO)wa!eeba&*8ui%YdzHo13k2h~?W`lY4r-wi@
znP182>q@|84Ht~Jkc-iR3QfX^nEGkjL_b<{ufhhDA0OMQHs*8m^~Y{GW)QXRX07we
zZnaWOhrYZ+8o(Zqy9F9&ap=u#SxOgvL9tajv96xi9At)-aH%)`0M$;2lFyGBsYGlM
zCg`?((sJb_lO109e-hg=6!5g~olle4Nw=6dCQ+Fqp>Js4=;fBc@ob_e5e}kND$!#c
zwoiZ~;I&AzF8!k6KD=V4lT}<I3Hou{&t<b9!Rii(Y$Mp?-14fZg`ZByKk%Z4JDn>;
zaVVx3SCc?J|G1z3{*G&?1S^Tt9pr^i83_<{8n@TqI|z~(bj;%U=Fx;5iQCrJ*8Ije
zQ{X8Ff>_wZ>6f%(uACZQ>lZM2+LnO%=CUd%Lf1|?RIN%et)maahfKwi-;4!#YNsj6
zrcvC|x+2!pQcoA+DdtM_*I*!g?!oaA3?<+}CQ!02fu_GSmI=?LG8h|wg0CDW5@^Lo
z;LikeYo(x6DjSfNDL)9e!weMEa8rI|$R1yKwJ{BHE*>vcn3k&~7q!i=w_TC2{h*`J
zED<G<BJ7KM1ykp2BjUew1<-Cr$6mcClGqKRph6$@qW|9uAZhsHr?Q1#p)1g}8%fD(
zH{?2P9)qs~tZEZF>j>FCb4Gq4R?Oh#ps3Z8vp$j4GA_f>ddGHy_E)-T51A(Mrkm;`
z3R2G7$ei63_tKoGSonrcd^$wIUEf~3Px1XO2?b!J^HxNu_DKa9bR!9MWmjgUf$<V%
z0j8;v6%Lwh=V@nXEHoqe<@Av=R;Keo(j%Jl0pIBvEVOXD<~CI`Ikl=ErF3-K*$YiA
zF-J&+{Xx@l9KCdO^g9Sqb9WRzQLH02)aL5V2mA*a3!8D9COcY{zi9|04}|!94eA9K
zmKo~gew19>eOiY%%eS4Ks9CO5P8GeYv?K@`wktj@a~YK3`+&zGlOCv*L_h7CSg-&6
zV@m~%*;vGw#Q9c7;Z8wo&4I#K3FAPI5Ma7GP_{SI^9RRK3>^*3`K05c4fH<v-hiDz
zyjHAb>rlXu5RKo*$8$xMWv06Kmj^QjzYiCh9`BtQ0#m(=8Xqwl?7P0yl;sYOUTOD7
ze`NTqkYcr)1n%bVn3A2l)|-H4o52Sxu%;mLX?2r#oxkkHU!@@)A~-OF0|AXv0ah6W
zTVAHRpq3&C|E}r|ez!m~RsD8ndPfgLrzKaDz|6&5b#REsiSPQQJe>dK@dE1e&}z)V
zuCoKA1S@!%)^#;coX(`_=l|xIepd*7b(zemF~hm+b&C@0n4}JL5=zLTC}JUG5=ClB
zg~Dk)U)h6axTMB5?&l2|qyHY~{*%T`K!LN;&GBtgE%J(7etE<b4nXUd)y!dBydWnG
zt<tqqF=T?9!FP$U@_27@!B6ntg705N_`m=6EDmi*35z4=E|MX}2#qv5(49{?3rDvN
zW}Fa@K$|}OlY94_OliB*xX9z*Z}9*ADZ^f3!(ky8A`Ce8W~di`l$!p@Mq-eApLikx
z&BEh`jrq*MvE0}~$6wXv-#%Od9bDp4415Gbp7`rTh=JB2Y)Pmkg0o>Yi9&A`eFtjG
z%m>{H`IB3xUw^%lzcM&xN0g9Z;r0TWI=k^{wX)=6MKp}SSbFVT?EcRc6wzZPudns*
zb?(2hhu8>Tt=P0od;6UnXaf^p`|d={f}z<D-gDN7vIU7&y|M5CBftOod7W?=U`cS@
z7w<|8>nP^5yKf~#d&K<$F4{%cgF~WX^<*3xcB?e$mjiwN2vJ1HK~CbPwNJWaNvCxQ
zf3rA*BZ;=}$4+(+<JNxE{H5Fe)2sjm_QmDD`{S<_-X^V@wqgG*42!}ps0pGudk<|)
z9%+GC${_7DC+D!;{WFg54^RfU#2ZTL<ay*=3=^=NGMT(@O7tjWMzf5ls(6#98Z316
zhu@sSe;WL?oc}`O{(X&-!TWX92bvks#$hiIi=akw8NCn7`ey1exfiaXl~8J6Iu$n(
zU8UX9_{ZO#gI;_%l$R}L3L&!UQDG+$_prbfS0$6MHPXV155pVwp&%N?2yfT1<S6$3
z(?Uy$`szt9S-!K)R;a=$FNWSKNKKK*Q!x(SLxb8<r!D0OPGl4O1A6ll`gM^JB_LGd
zJH%~}&#6va$C~u2u8|W-)|<N4WTxnM9q;O_<>j`2{PDTT;QTOkRIz!8S}XG_lZJW4
zR4Hq8O1ME<<T19E_BIOIoHH}7`qYT<0o^ies^Q!JW9^{8q_Qj_>1L5&7iVfo`LBD?
zK>M2%{kT*SS;(9K`8GK<g@O@m-%G0ps<>~%Br7^#EcwIPjuI02Hx_l;mYJDpe<E-b
z)CY$p&8JzTCym9RP2S-lqG(qcLjJ7}`TQ<1ty{NiE(k_ZkoTWkff?Xmr)mW(X({uf
z1<zdfk`pat!{;%+N$ilCR8hdAhi`;Z5%vrmXdN*vPtD_FLV12y5$*ZYiN(%=Ui?__
zic=j_eHt<<m2T3Fpv-R&m0wLTJKHp^P7<4-^TR(xf-4vX@5Mg&AIppYrjDPcW!b0u
ziDDvtSLu<7%ICVQx=ltFLV~o!SRqaPt0f|x*cAW&2sq@V#OLPPqL)FArsZtx1=;0{
z@G;_?<uEbA>_LSF38^J=iVV#udC>U<%t-$eZp%j5PQ<WylQ)vyfGj8{q2tH^)<>K^
zW3SJ;OZ_6_85OA8&U|k58}$z->nAiksUi7<D`*x!$zO{2UKmA~MOaV#<*Sq-OpT^=
zstaA95G}nM((WPEpSKw_SaH^E#{1J23t}s65xpFm(S0NdY<YPNb^5gA{=-!vpE?#j
zoFnr;|27PmlzzC4RNg^!o~Im&MTBxr>!DH|OLb3JRF!7EuqES(Spiwen4bC{f}gtN
zo4Fj_O>g|A(Am0B3H&We_E_fr5b_OykfEI_F6aLhW|>tq<&W#m<W@c3eHlb7D26SN
zpJgm;u0jgyb48F&*thhtdl?k(r1<N0`)~B>L<xZo`MDHTV5Wk*K#(Mcdf}#T40=e_
zZWXr8K@SYrvJp-5EIm=TvbatD!zm!c1Y`HdK&76>`pjfXhHI;?t&G|49BP4tF~J^6
z8gpc(?GUKTm^J>i_s@v!OU8_f!W^%1BzCo-MEec%thFzM7@h@HbX0n&HONrkDfa7$
zdRokB-k&}f9c+-0eL^ZLs_E-IuE_JY<q3CPr1>NPsw}SPX0C7mjrv#gV7kvm(wW|$
z{u#3YNS6nCQI@{<A-9QIQeOvbp*DHtkhg+CEF9V|BB_ux)V?pQc7dc2?oS662xNeq
z@toL8+9|}UDqm2Ypr$|OhA<5m1%V7QmR1B?gBG#CwyYW354myh54)uGCknH_GJ7ya
zgT}nJ$Y5q_EbgzF<R?+gJWORK5%koEfJuGRsrmWmFHqB9|F|H*Bn`>Q3=iRs)i5#K
zp_NV2Rci5orJqws?v)*ZAM0h0l@=dFfUgP%B>sQAU&DM+1fW4i-t@#KXt?tPM(W@E
z-%96Mh$+*@ekMwa!&JtYxcYPxF?-*#`iF<-1{ZnLXE=+RMpBX*wK;%6nRoqBlwL~S
zX)yVb0R<*6e%GEj<6-Kb7d!CW0i?bX%(nbJC?Y9n5OoNaV#pgo-1GQp*Gj*D+a0dF
zyc`o4<rOAn_M-5;4^t-~<MaBG*xtbbEa00n#*1bSI6!Z_LNl*}L;V`YS;q%00K^@U
zfPi2FX#ap4Nn#iY;d#uKuuaayg%|v_QM3vG+TDQ3boZCHaNT*)?{Q@og}C-{hXhvn
zUx!y(JOHyIdHDfE&|hWy;;sr1lm!A^tpTq>E`FfL(H}IHd8&|l(Cnahcr+xBwnba&
z9eE%GkWX>+^^TM;Wn{-U)5-1ZHbAf4tJ3XN&?v5c`HQ1WIcw2%D-t3LK(3kT0jVYi
zPFj~~BBUBt<S-fRokG@o0sgC5RS=*ND_xZZWST3JD=XGpZOsNBO!aQq=@e1ni=Ju@
zlr*4k{@T5MDE>mLCG1wnk?*=8SqLx^{m0G}dQcbcdsY)7rH@-#HB7y=snM5l)o;xO
zAGB@{4PJ2D&m!&EBiO$Ber`L|d)4V60N}cv>QHKL#|DBOG$2z%wBTK!;8_JEH9Y__
zeQiG_juqG!j>SbWVNdp|l-vMpJCI)OHdrp7pP%hJ!Jya^*V2rx^N60P>%M;v{tguC
z{&zmRY*{dX_RlqY{6&Tfz&7mxyJ75{z2CnPGcqzZ06+|p=wWdHd_n6Y&;+~j3Vgo$
zl7K&*y*j4uS;tekc^#-`!S)%koZ1I8yu6l~{n123jKCnzNx+E@gxq%mfaDvk7vm$S
z4vAF&bj|*_;Pa$$`wFSODlLLj+027p5zo@z4e-r70H}B1c-dz8@Ps?(7mPS&s7Gf`
z%XQdzx0@dP3L1j$&UYj}y`p|Ta6C4%RK&8cx>Rle(k;hb{rL($1R6Y_CxfW@YY*0n
z`KJK|Cd1>z%cG*}S-1iI{r!E}N$XA93Bs!Za!<JaW$r0}^DKqX);LT&06#XNMu<O4
z$3-`R?jyg#1VAf)zxg`{C5YpMrbHBoy?L?0>d5k|(9cN&wH>JkoOh&p!{|)fM!vux
zWH}$NUlwxVpjap2>w6s6`%M7dyjZWifHN&3+RJOJTA60GQO2%LIu7~v7SW4qBS7u+
zyqczyCrcaFew1es6=k-bFY}$>1ll^ea-n(pUJQ<jFM&Pp4zS#OB8rNNu5+dO811Kl
zOaTDvAn-cF8li709xi=RG@qD!t_F!qv5qC{`Ld{I$vlg|`*DjX_%pyFYzUmVDc%Cx
z1@j}|!F3uN?MeQ4k@dpvcnh!wtU|*8^B-4u54Frb{WGo%fMcqmz)RvHsGxg**Ot(F
zKv;Va+~1^3(CI{7b~vP^5rR9h(7MYpj|iAUr$ZodJ`*sODz*Z>x8K{}^5h}7-P(7<
zP%T0*-cKqu&Xy{wyVdOgqG4yUK>km{WC|}bX?sYXKOqW9eu0gR7(6>#-vCD4i~!0n
za23Ydk#kNyoz`HWPJj!$3HDb!V<ttZ;t1eeGiOU1L>@y*(wwEEcSP>8Fq3&Zg|Du|
ziE;mMFX~}DG98qio#VQ)vW^KjbY?L-Z1(y#QQ?LI4qd!Qz#>ZczM4O$i?J$ih4P?L
zjZPEGASb^LCpjN@w6?8tNx0ZR^5Gr@8oWl|yrTC(ugc9NF0?#yDiioPzrwv&7nLF0
zSYmqQfbE7=N7<RjY<ZDV=&mob!WPr{*hUuxOkOnEIb<DXtFMMCeBuz<_1*MLO%krp
zz$@3J8%>!MMKm}I(@5$6SbT2Lf#iMa4_3Ye_=_29W7|J;A$d=J5>Un2hyE9NFm1YM
z5-&e`6y-AEXeicV_(kT&H<z((t;$IKrvnWgj~U6mV8ETf((Bmz7z`3u9)DT>U`!O^
zUefXEoIIj+4+;4vu*aChxi;UN$whg?I*8>Z?$jK727Lca=SkoWB^=F$zEEP+{?>C@
zqM+BV8;t7h0BqcB_)V{pC5+=Az)WDrc$@`*@;mZhW@U&!08SAvEPjsa)q1a1LdZI}
zWiyPf?B#W+-^L5z1~u<Sv<k@h<oE^!jGiCw)OXPo`9YHHjYWPqH~dkTWTOhTt4eN&
zK(qv?roNuP%2>ky62pA^f;bWL2E39vkw^awX;URyJ1^RimV8)Uahw#o#DzySOu3JW
z@9#`zwsXL`E~7Z!$5YDJ)J(;Icwtg`kLzZRh6KPYBBY>DjJo@Ihz1wz3D8`Je}+B)
z4%Ak=?*HOffTL-u<-LiP#e9q;76C&l28@O&;baLU7W%3Qp?OT~P{t=Z6GK@cXN2_r
z_Gg#HEQTt>JPya!AQS_I32yluBHs~n3O(FJeV5Hp90esCnv9h4w1r7xuu>hxa?Z<b
z^b7Q>Bv#(B<gnSkOv3|U3T<t{?nWI`-ip8nJ4T+DElAX1p}ESvVbORS4j9#ctRir$
z0^`}(07r9X_nT8xJ=h8L+!oJzInd~69(J#_TACtk+hMSSDf;R-Oq^PbX!l89rz7Ve
z=Db8c*oV!r@Nz$d=QD26t3&0_#=cSXh2jpANO?l!))TK2wwh2k+Qu_vOKLU%Hy8FX
zq8BxD;79Hf9{;8%p!=<-bfR|Hn1LM$iJ1sE1x`IcmnCN7k5eJoU>L^TvJ{NGx!zgV
z;$TD39iFe(Bi}@w^`8EvNBDO>D!~ojkQu`(#TW7=CK-3QJ_NoS@9tylJ0LHyf|U~@
zk5H?unG9lgAQkO4BZw#Abnr_kK%im%A%l3HTxTNJN+Q9{>9yemwEm}3!a9xDJ6m{D
zM~5!F%7xrSEi^v|(BMdpLcNk|bg*o~__$)*hI;F-XrOn!0iclf;@;1XA5Fgk0iEYK
z5hB`kVsKcD_?LJGkPKvKnst(cJ=-WtHK)3GqnZ~%JO==I!8<cuV}=wzUv{oSKrB|K
zEY`y-tGzBpuX<}AWue%9o>;j^jw?UaY_H`uZ%xLTCOm=w1Bo{(Me=mJWigR%*S<7A
z+Xnnp-Iad|jYyrt)p@|F=sj^<B<0Ix#)S8Ety!)+FiSyGf6Q~P^asFd{BYk-i>=L+
z<Jau6iK`zdL)qDoEiYX#sOhKN$Eh@Q0fge%j6MK&XUkw=yFRA>dXaJ<oW9y>T1$pt
z_J%x&I$qgJgRI^0xjuef`{j!Ls;*8mLuMeQ>{`Wx`LzLYBlw$*pC5bJbjJ;#3lWwk
zf`)(e{Dn;!_K5o;SVp`JBgcK1iA@YF;|M^<HAgov@iux_kalA1zC0aA1St;tox?zN
zuo(wGzS$iS+;<2&AhKvbCZ1ZXZPEHy@H}|#fEZdZ494z93%IziF|8Yoz~=JsADToa
zj}$u3kCJ=8(97Z%m|$24yWa`PGPDFe!7<dq%ZST5s*>93_zYx$n)Ylv!iK~_-0Yn;
zvo)NEk%-&ij(xo4&Kqe%wGENPJ{IM~Pcgqb9(R~PyQ8W8<XLO7Q{X^kGhjo&S!R(_
zDAlvgOi`QeaPxiT@dxS_Urt`01j(Q+Y#l6ynCZkk*2=6u00(1|T93_<lTOFB)%}UW
z+9od3xp%({C2g65K(?MW+s*SA-w#WqGFR$8e`01u+yjZm+1;5VXV&m`Ks6x0;t3=|
zkiR)nMrMAe6bJ%71rlYk!5lH7w(k-Xe_bqjkIgS_{e?(%-iHg}s8E0Wa#tKH$VL`<
zo>UJfAIcn(>y}FB!2I!>T8@w5*aAKP8j(WL^yGj*MFZQ57D1sn<N*kRi^9l`UkVWh
z;+;p!=L1Fa0x933aq9DRl4o%E$B=IKQt+^F$QRm=CFt2IEXqBaZDj|7qs`ys3>gw=
zU}kRf>5dW$9pyvQ$bKxoCR=YV<2%H1Q}Tsj%D1+aeshk%rFc)m=QaH<1)=C!MKL{@
z6Hz!leuo*a?DtEI|7+t8p^7ir6I!i)$c9o&ZJ}e$L9$vf!0isD4ik=7>-!Ahrt>F!
zQ}9ncX|^|nXd0M0X_^pftg*-W*ktKtb+rttn{Ira^U5Ba5_8dvOBixW4DA?V)*L%B
zd~s*fA#vW=@mD1nK@8b@KZ!xPK*|7;#+$6FKn7GN^p5(hx!8GD@o8Z-;chIIjf0<3
zM5<vV@0nrD97T<we**5Pw!6V5-R|$_sX(+r`<uqgYG+&>cab{=w#$8xQK6`3L*Lz>
z^a`0_w?p~2nPT}}Qu0MotZEdHZSh&N6Q$6+<=U8;Ov|wt!3?qPjW(q+$0~@(33`)<
zaIL}99a1oAtVx#PDEnvAn|)0&GigpXjDmJC8Rp+&>BiJp0i5pO;m-hPD}cjdt?A9@
zxhgO_&E#<^tVehXeiq@IqDmjC)yD%lM!2LxVashVfnlBZ?@}CrOZ!M{_2J6ad2!dZ
z4$Y0A*)mhM>_hB>RIw{)!aXgW2sPOc|GV5vWj15|Be>~fyUI-ZdGEpc%g}Z<psYow
zQu0j2=~4q_Y4h|~Q0I&J<w9_hQ&w{$&1{?me<otAKI}mO9Bao=Pd|UeO`R6v-8>x=
z-Gte4rGBQCGx6x(m^>S7=zI-LA*8zmQyHt?Dn|ySkQi4|a^`s){Qz~80XLFlyHUi{
z)hdNhMMs;Q=sRQWiJ&Hm!cQ?wobDtDibtu;EI1;n=db-?(9*;H&MqmLtR#}qE+6Hz
z)6k37V;hkn=Sy?$K=NpXCKh=q(79dYh+@>KCDrlNX60pcCXqyiK5~okY{+$fkZz<9
zEygNPy1a!>o0J1BSgGtaE|Ej`N>NxzwW*NgN#`W_DcKaZR%HCD?bcy9HKc-O&inN+
zx?9oebfx^8Y6}8G%&W%k%$*h0o^i$k6lsYPQO^)vo5GM$940m<y~}k@Cf&g!!@!HF
zE+zLmamsr5dS!fG2v2z__fv~+L?P{Gz!2H;dpX7U(qwa3*?|D3W(C}%x{oY(<^;jr
zWy%DTVp}!#(mV6RsgHOBcvs;P&sxUu3*TZ8lc$}^2#v3{2M^Hr6GZU7o_EH*QB|mm
z6Wx&3x?1KeZH@N6%xj2Ma8D+6W6s>4;deFcp<ACA1{{bXwRUsV9IuASBF5Yfc2cJc
zj0IW`c6dGzsCfSk@bHU`6w<oTE+(2~_C72glRS&AwY)p{u{+;DsH_~SDGsGmC}&Ie
zy<P#PHQH95V40b+)pAYA*?s<3jvoj?g9As_fmo8?mg*@@E=~1*nQSLVSwuBP?q>3t
zS-OWFc}AsT3G&yg^aVn3W1&B%KuERoW7=3+FKDxWJ8}rO&;np*bi@Pb`9m8kSO7_b
zS^%COmX>XADXoPdyWnN&_8yr956f18ZM?K2?8Goz-<<{l-rR<Pns@EaEMEFpq27#Z
z9g+ImI-Titj`RWhm83Q0>IBW^PbF7HVhS|L&9!(JY1aj1K#|6_%4@Q-|2F{%Gb?fm
zl{bsSCOMhUo;qNx#+eryOZ^QoMo1?a8_DCOo{KQ2rHF5I)u>Rbxn3@FTKl72IxoFr
zV|!0;KU0b$AVTtCj|(Y8vF!$&J`Iv5D^9K)?*2+J|BI~@2Y0r*IrTse=728+USewX
zZ@4Ckr!J^vGmO&BmXVCOUlDC9J=D_c5SrO>te`8qM~i=8)gF9z9k@@P-c~gpd1aeo
zrrx1#3{hI4G4K!IL_hl#)Sdb`TP8k5*bTwL&{tJAipZh;Im9RQDwumzjwIqMt)noB
zOErl%sA8BgV~)@HW60Gd?_amde{__caCl(qxDAWiBC!Hn9-duSfGCrOsgk)Sgop|g
ziouvXtW2C<6ZokCEZyT7#)>Oi{kA)$Hv5~uE3f`d(p;f{)%g$hdFS)S(v;XrkdY2L
z!xUs+%L4<M>rjYI;;{6p7J>>yoKhMXIf!1|yNH#dA<bg@vEZ5YmH!VaWe7=X$W$Uk
zlCrLfa=r&IFKYp6T^9LT4b3tuJyaJ#8nu`@ti~REW&}C^L;Mf?OD764xWswHawzif
zexFMr%eGfAJw*cH)Z<cFp~<pXOI@S|efwjCoW#j)2iLNP1o!Exs3@rJx>ieZHNciK
zC_`~oz{X`y4&G{^Y2{|65_$#yVYBd@pkpqeswdb5@#lv_PC*;>#Va<Cpz`%PdFoGP
ze2=gFgZ4lDpyn}uE&Nqf{)eJD1s8gAK;>P81kdu3UzPJ>s#tzhI1U|MUQq-5i<_lm
zprgZ%_&NRo_rqR!B=wrZa5-p5G(0%0U1CF0-$(BD*90N-O@`ZN)qTf6UG4)#JJ=bQ
zAJpg%G9*8e;GRYvdQ2Y-uy=pl>8iT1qge(c9pPuTY^9$5yn7jp@Sb!F4lMt1p4-I@
zccO#L2spojR?E&d#%|gLwzV}_7oIDg?YkNTVe}N4h$1=)saj`_fv#KxpvTQ)5tuyG
z%`$**TzQ~5<H_It*KPYBHYY+ClGu%bA@M5c>tQ81tHn0bG&Br4+vrHqAP>Guu+iMR
z0wY?wq2c>CeG$pFsGL4mqlMx;w^)@hs-IIaE8Gq-HiAAIV0?TUC4$I53^`oKCXNE&
zqKl9v33#kWFK_P8TWmd#9RgUCwp=`|N0$(yKXTXYUzTnH!d-X-zj9nhoGzM12h5Mp
zSIzkR=CnZp)R8@ai4G<(z5_iI7&&D>M3Ec-AS14ecWxs8XP*I>Zw_?G-bS2R3>jZ+
z8mBUSOhI4+jJ#<i35s;L2XZ`}Smmdt^V_)S->BD*!`{<28E8p@O{3uJO}G9VS-;kZ
z!UP;7)3qvBXphcI1VmN>t|zZ%YwWua1rb)-tRI5*cc0Jpt6r9Z13J8(T-aJ{vKCR)
zM-O4K+O~^82bnXG+scyxSn}*Mvg1T;M;ld3UFlq-PP-^NK}D4wwD_N%OGVwXP12gu
zUoQHqPPhyRucypcZjLm+w`K+kY)}xba2z=dzh{lMMJQ-Da=pbu3bKCLk_oHlC2$|w
z03Ce93v3+~bP}O$a;O~$UeLb_Vs^Qxes`^^A%I!I{a91ABJH7-K&S6iLO^xQycDI=
zb|=13h@^-2@&0E$P52~>Z9;~i^A(!Ex5Z2QWdTzl(bJyfMs7GG?xo!)6>9Vd>~#QA
z0c~^#ZUAW%0szU%=k5JI`3J6#M-46k8+oioOC7HwC#Q4Xq!d?QT#e(ESRY<e0#6sf
zqA!YC4~ksMoCmYGj9|%OrX|uIXg~;Rh_Xa5=EUQ3ZM#{xo<S_xnS2_Bz3>?d{*0)#
zFJZ^7eRy;Zx|uj3a70CA8ym;T*eLk1BzWXD+zyInI<|JJ^^S3R&*VLDjc^elRx>l+
z$S@H6T;R1aI#s0O9-{ve_RMTKK!Y%{a_cMK(_YlRS{ELzcW;la$%5SAw$cEaVCtAX
z=e}ne2#PeQw#42eghn#B%#IZTpOir5blGh@y~T(Qs^A$Z*#C;rAoxrHy1bmqS=3=?
zn_AGncn5)v3j1*mag*083uhx$=T{Jw_syOmGHxdf8fC!#OcBz(X~w6|pM!yxHzs_b
zF$n}TNx~f;A8SnsjQ%6!bDBVkotkLTl2T)2vwxw6ktGeiYmJb>P|69Rs}EG6Lye+a
z31YVfL$ux*PrZJ!--!C9&1f;0=CF3r!mvi+@w6(X@r%;9yU*j9{xRD=jl$>XT=MAa
zp^idpH7Kd6p*7H14#(7*=tl6uu!V6@m#wm@oubV}ud;PbumhOZcA8n*lPGCGIR4{6
z(xt7OJxd3_y<i?X3U1=*YUwn7Ul7`d`}b#(^08HswBZH^ThJZaNH-a2<jvPJE?KUJ
z6kE9-%>$;u48f+B)cEJ)bRU-KWfjx)Fqbn5q91d0)gA6jO!T(*&43qtx3$5;vOQoq
zMP4~M#X^JcGC0wV7v0Wd)2>x!z^DNo+<J~5?liAu9ysCk+X=KkU9bUIO4e}%`-eXD
z{$t_viJ`Oc%3_32+8RAd>io_*p3U=F?nNP?xGF$gGhuWIa^)$Ewb69(eXbooYdbC~
zaXeJ-N}H~w=B=Dc<UemcRKO%jpiJ@aY9AJrjuqXf@jqbR;5Ho@EYn>~SYDHi>l=8{
zoOr@ti2pVt;NhF4vrDM+Y=rV5<Vqo_Y&U(%vGr^zAc^4k;$NW>I)=E^-P-?=g%kfY
zUi4UZQD#IN+G|=rS6S>~k)w!i^?FG#kU+3CJhcqf0XXN#*SDMRCE%G{&lG26k~|YD
z-@;**IeIOYGQ#7@uc%$o2azFlh>)MgPOh|&M-X7`5T64E?RZhV2gR>VwLyTMljIe0
z8<W)#o?`kxd5RwbK9~dQr=W(t7|{~!O6PSW&Y~D3OY}(Y1Nv{+#~fJsy`fUHE(96}
zRJF*<RN|`Q^RV+0@@YKmpa6k~Uv4?6pZeB$%Zf=M#7fJD6EIH7_@V0VM!&TD!i#ND
zw!W`OraX<6C4^0up<C!En{X`G(4TNx!)(~6BO4mFOjaEgTpFcJop!MnApiKou1&<O
z3Z>}RN1y)3=leN9BrC2dd;OY;x1gmwSvlvG+{O;RO%)Hdx0Mf_bqUU?OnjnvGa<e;
zoKD#_A7@xcZgKYv2)&(`NH(C%<q;P2Z{8nM&Jsy{RzTufy^Wny$pCJGoYGRdBS6|-
z8rT&4k9*9f5nAZ_XRyTmr%_8Vkan=ezsSQyhagQ>9tuX>-a6sP3b<Cp>P%w>f~b05
ziZ)UsRa;oqLuRs!+zb(x9+TLu41*TE!%NO;3!o9{qNJU0QoGC2LmsIWDTc$xMl+rQ
zZdrhHqUpDuMljTP(}IcH!MB0P;+l%e*p`#gj^M}-<HGI+TY5j5MJsm~=R?-wHQqDk
z-raN_@?P^jy;+$wtJN68AKlHGW^X@gfm-6jNFFKUq~bW5AF#FFS$po&>86DGXqI1R
zKz<6{mIQJ0v*{+#7CrbXjBb}6rp3!8y6bUwo!#7iZ36&Su@nGLvsXeU05G4#+tT&!
zQ}%Z_X?v0MQ*=zXZP2>ygnEzs+B2Y2>bmMM5I8<QZa+ZqIiLD(mBfDtV?V4n07R$M
z8cpVjRG?EaYJD7@s3$9Xz7S5om`{nNMJ!Q7jqK1sB0p!%kZZT|;Fq;Z6{%5)QYUZF
z<Yq`f{MHar8#jc<kd)`Jcu69t!fWNEhqP^mi7jJ(Ya@<wk}*N8sWC2l{ppy`_ISP2
z$0>jQ_c12ty3fogzuo(dAm*EBr|xHS0{r!rn<@Ln0?B~7>)0!w$YFn}_xWqmlJW!?
z*Uu+U;C$iduwjSmZl)=DYl>J;#vnt6?cLyUctwMYfVp(%U>n_whdggvvr?v)4u~G_
z7Z0J7)|n5-Kegd6$OrtF#}YY0?c9D6fR+jIv@*YETvB=1zOAVWMdWKOoT$iJn=#q8
z2FS=)TnPlM6#nH1FGw^E=p9+n?s+xsiy#!>_1wby0sV?9s<R^fGl51x06U`v<^>b4
zpq)$;K~Bm^%WFvGH?B_}k!ppTQ^iP64Lck&?6Aa}2LMB6W&_RpM>r9}e`nYg#@3@O
zHhs!&5xg8dDM5hM+E)+P-BO+`CF6W=SX*_u(FZ#74}T|Gd*18ml)lvfw|1csAZe<;
zTt*jRS*u||?`99u%+b>*CCHDi_ZOHbKgimYn>pliH)U<!&gmN(iTcT^YEAHK{qmEh
z{en|zfT>>g{Tk2<ah!<m<uyglN$2gnNK^C`74T0zu%D6VQuA04c(s)2e*e&m;P#D-
z{k$@2>(@V$;;Ls7X1m|3%pg)brx41#@9XZRZA*Rv`oz8szhlG$r}1k}M%O(~Y@hW;
zT5L|@JoUBvs!4;5*#<Z6HEfeDY*8%4!13-XZQU~0{}J{x4Ip>N)A1-3zV;TfnvuRj
zrrnT{Z<f{Bs9~m1YxqhAHvpKPVSLfZBWZNmF-iY(ES0Tz^zGyDLDL@<B>aldK$Yas
z)rDXt2JU1dlII*;hO|99n8O}Qk7e>5cik&xUEfd3vWt{o5!}7ukO|xZX6>K#R*>Ht
z&k6QG-YOb-t>vy7Y?7AvU9o#&pF$3DTv!nlQS|VkY7+S_@VICq17zq~9lP5v#f=)%
z|L6NH`l5t9B8@2Rfye`RScD!)d{`jGb3^j(#9tt#5m!|H+p78hw9AoU`8BH2)FB6(
zF%yoYL_5-QYEC!z#6>YoQ!h`8)`cy1Qu5F%&NLDI1?~Q~qP2&VAO^PppTbI$Q8Jfi
zlTsTk`+(cqS}q#!q6SSSNve*2w)&56`}*k-_K@loBqnTWQs`sR7b>1VNYGJhRqzi{
zWQ)=0qA<dCtAziDhy@&_c(N(6RY6<$mV^kU(=q)0hY=U%$SdRE8MRTFrFQg;tzkI{
zVr0gee?)U`a3&MT>17e>?CQ>96caC!*4Puw)I<?<d8T5f#-Bja$`^v$EMB1JOtNWM
zob^X#TG<VB6-i{Z(1*Y(L4rI&CGyxcb7Fs9jsoJY7%_@eL7xr7wS4i}Om^5)Jy|H0
zv;Rl(`=7fOP)i=kScM5<6CDT=$omZ@>U&Nw7Tj|_Yfh2jrg~mZNs@v-@UMKY)5V1j
z6ak5;tp_^)Nt#kj?CV%1@^m_dDoPe&0ecrdEV@S|hJryF>$m|#Y0_q%*`OTuNi1Go
zUUjXA6w=#2i!GicvI8|#u!YM`+rO-vVmtfwLx^h4PSgc6sKD<!f4jYZ9VJG`5o}|;
z{9}bcJJA(z$T<8QsmJ?|y6LrFbPk!iws7)U=_QaE^eE;aNCQ5W!k(5;_!&2fh-*D$
z18{6Yd9|)i+>W`?jwv?3Q<))b`2M|8J;vkD3*G^p&9gm+e(eq$+60jDvS5o=>Ej>h
zr6M6Q&+n>IyB+UDUg?;3p(Gq5XK8Twg#~x#zG%JB!9IUDvCNLh$Pje`miaWj^`Gm4
zk3TPx$Yt`2%fh+Eiocip%FbicvgT5QZHvY7sM`pn;2I?cBXwuC(=16nLM6p-C@c@*
z3zFt1XJ*ivTUzR4X=J4Te5elTz@2`Lqur$&rgb*5AdsVEfE-)fne84%JpuIsB484u
z9x-CgM5~aV5GFoMX22-rp$QA|L?=SCfD4QiHr5uC+U)EUqQ(rDK(AJnZ}>)o_Gf|7
z;{&o`UruUb81i||gAq&nQ9JR>^t0cy(%`Rd+wbd`3cPpZD}ZGpOF3zfl)kTGO*zeV
z!H(`MYLe_zPK&khAl9<nPRc|yYx)ON3$zc2zyD7@`0wj{9u1P2V5}O>vhUn!<I5dr
zW0PXz`Qdl`-QJIG2Cg6YzndQ_=IR3HHowc^Bs2Z05}qp}cNyYiTAX?}jV)MAB#z%l
z>)Z(rAoi_dEVRTssca)3U_{cSn4N4A)7TRVFh`PQho_R?E`?)XiS*~v#;msp<8uzO
z6qeQ))?rer47;s5Cer?_T)dam-mbY3=x37k_eqF%HJUVu$}{T4EAzk8exs?~fKJ<V
zH<JDaeC0gE8SGQV(6{3HG`A89J_+Z5`G(fI%IUhWj3RKTcVXZ1?8)0vl?=|`3QO@^
z(Q0ReClO5(b2aAOGicw#I#5A0@q>(BXvOx8pKP5-M%3C_22HY;6U0N$n2dOf!7BO#
zN1X{|OCXgBz39n|#9A3L+qvU9PeW*o5oa|hMg%L7uAoLV&8N$H<J$f6v>dg`!)ueB
zVd*@O!eNIF^}d#jCsl5KL3_dgJIy;Gj_DI6)LVfQrsE(ruqq(Fv+rl|@>l+ZpP12o
zY0jF@ooHVgzMarHA00|B>B*{mD3)&5%JSU*BX=<wBqEl1AZAWcBDYDSxC4jD;I^zG
ziJOp<CwO2MhpI^Q>?$M1ldYWaR;cWAfm9!*&O=RW0!H6?=q9z|BQ@Ma2;Hp??}hRw
zR4qMpM9M@?<42vlFsv2gVVoWH_6WE5oH!xV!W!!J14C>l@t4Ui$h`L~6DkF(u1KAV
zEDX$>Xegl=HOwjps9&YfY9VRx7tZ*Td<~8e25mNXM{>&B80w;EHSsPnA4EF(c{ph5
z8iLM!<<2<9M{4?`&q+TYeOC`z4)+eH4-C6|H;>hqJB?i|g>EX!-AY=h{BgUBX*0A;
z9pWMBd*D9up_GBNPhu;5+fT|0j`S#sWz~(|f;Jr;r)C2T_6qXSB#d4a`Y%Iq`bn~$
z(+An?w!=(V4ALKn;?vzRF)GgKGhu0pf9%!|t}W{e58dY*G$tOk)232r3OiU3)%<F=
zFdoZ~a#RtARkkm9alkpWzEKs~gBI(=!JKV6_sH=@t&w)wbjt70%8Wx}k}X8bF>)~C
z568X`XAC4|I<u6F_p3XgXGr`Z*rLdSiC$SQAO7NebbJiw<;9Zzg|Kh8$y}%Dr%*+6
z@{BFHib3=N4gAVVpe&urkk0b~tFR!Lf0Tpd%A$bUtuo`)&P~gzO5HP`)hF3S*LaxW
zBIG0nEi<&Y!<y@JdP7uL_Yc@T=LzVZs!17pyiw9u4s;q|7)MfH`-yAd-aOIi-Vv+z
zW<7YyiDV|ROK|e+VLcXJU0cx?Gd6Nla)+Y0SvnQe_S<`vhMj$-hHZ$jOqS8ro@8Zb
z>1;mt$cy3uiI}J4E4~ONZzgxo(rk%VmgOcf9M-&V%q?Z2*H=NmZkk-De7s71@6}pX
zq}|iX16R(#mBy)H%!7r=sB5&S_;nI=5?uJz`)T!a<sMr#Hksknn&`?+@KoN)+{=Tr
z;83u1JQekCA<b```@i=!o{z1Vrm-ln2uO%_>0Wm9#PPC>2O`xB4xmRgE`#2}VU?cr
zRcA9|OITiXzIU!L9g(HHD2_^EHr|RPH->iF<wxV?TlsKpF*H}sYvrB$u;j}-Q?sLY
zU`=rqiCHdgrPewHdb~XYZR8e!0D1Gb(*E!3UTwLuNhY|Jwqaamx-GVD9iDFAe|uCL
zRPDdL=w8>aLIkZgDucwM?~_lnxGg>R4v*E|8!lIHx4AI=^jcmMXv_I-M+}I)DCDM_
zi^RjRfXBp?8DAWNd+U9uR?&}~Zeee5r0VHC6BCTIGqwH+0#7o||A8|rw;RUr5heMo
z=LrzFRnP0oCNaz*K6UGCaGt0=JK)Dq?O(2xH~ZBGCEPhgn;cDN$wv6})rw$`(9Zlu
zLYFl#@%(}ids*#~y<IDa(aBuxkvy%<`?$>m>YlCow68Mamha{4;u2I*Q4vdd?M}yZ
zv$)YLVHqzt@JRt@?pKN2BP=|>6EEgm`f)H?6TAK1%4#Dv{h3*`!J`9{^(2{3naHK&
zg#|$td?F%gCozrX={5(6A@O2#!=pn4S&$a6c#a=10}qS?<Z@XSQ?cU%V5qw|mDR=G
z;ho!?3Ch4rWzdG|sbV3RSIDV%)B8kS3%?%^%|n8sC@f>oK5i99!+rq!;EVbO-+5Sz
zcj#L>FWNPDng*B>?KR!9@6(==i}W*!<XR4TCK@L9_OEepoZ&N|O&yk1Qa5##T5bm&
zBa0U$D?MaRmyjh{ie3KWklhTnsiAWXbZ@lUmIbLQRsp5m2#1*o*Zn1#tv>A!<e<Ho
z^@NPgxCEOc*$ug{PZv>YrD7@|b;9H!SxHm6BktI*;sR^La)MR!m?h6)y^)x!Ix=oO
zkRlPac$IVPnPho${>**CR<hatV(QeNtyTIpEjMGOuCi@tf+)Vvmn4`D#y5FiCMI`V
zDpJ0c-o2z3n^qr=Qc-4fkTP*d{Mry^E33<xYkvksaqX`OC9Z}O6p!d1<s@&P;(O|E
zDHt_ODq}O%q^V`j%i{PGhB)!u0^CG<sj!*Y+UsZ_{QgW5m9+|aWLN=ZtwJS+lvRt^
z$|f(Rn=l_)Lzo9vwLQe7n3hqEo`&r{Ix*05TNM2KLy-)c5GxcPT%oSlU_1*>d@LjH
zZ>oUwue_vqO#T$4)x~+BqC??U459U2Y9oao<<<1Ln)8zdjq@(CG_kaV(4h?4>-^Z8
z#*QT~4%_X#onqs|8cm$<*-Jtx(p%@bV2WD9JcHo6X`-c)5+qp~ApEWEJvI87ElXMo
zYP&y`Z*!NUS4F@`Ugz4A>RVguUs=?{<cVWaKYfEk<2g6}T7OVN#+TwS-V+37t68|K
zjJuQLp{I}5xamt-pY|w{fMA~3<;B<F&x~Q_LZm@L3?G_Pu0t$6C>Owu{fQ_<sP_za
zC52On&{~H8XDLGOKxD-sn$n!CVg9pGiV6+N9Sx}i1>II6zKuw!yGrt&I1Vh8oFray
zHDqq7{%ZVC^|a)6pGQu_ZF<$P)XOD{w{;_4{MR3nr?sYd7~%K=rpScuuGB`ojb>kD
zw=HM-gIso&*4p^tFTe3WVTP#EW;SDc$vHZID)zb${9e`IU25d|b1`nqPrU0OFUx5M
zYb?0fwu5rEEe$Y!ni74ZTS|G~TJue@Hv)z){zn7nTPd@QgW@#sj3{vs^i=k9P~x1D
zAMdhVJ*rkmL3<DvOc(2Bj;e=+Qr&au2UzOT-<$(VA}#9pCiPIRi8Whod8k5WN#$4X
z!fnb)jyk*WxeT6W8u+t?)#DOf9rKW$+FOcbd+Iqx7fsTj<CpE;)J)^`N2Oy+91=_@
z3h+!+rLwvugp6tSouHJUbZNBpN7C)F@yca#D<5kh>T&up1<P}0qW4><w3-Y}1BG~Z
zl?mwkx#}v6G5kf7;^#o|@ORy_mQSFB;iIpMgp?6zQ#$SZm#`Pgq(QSD;-4#_HHDFq
zb;MWQ5iUZv#B*n{Fh>n?513fW-idWL7S)AyI#TWZKF)E!_Cv1U&zTFW*pblR(^*|f
zsrr0KIA7VSy)ruzXll^WpCg3JRjB8E9Ovbr*)AuRTEo#G8EFY<w}BC@5&MwFUc+8F
zZS`c^1NAaNx%U)L>_N_T$#co%(NfgpO?u?cAA+@guRq8N;gVGGQ(M}dD7mIH>yS1z
zi@`Q2iUd&D7X`$RevQTinU>iriYRvqm<v5=eVQ;Sif!UzL4*=3+h^N%Yt7Y$GCTrs
zJey68Nq-MQncj!D^(rr>@P`&RH1}v~aaeZ_G>mjdIK{Kc4|(_BcVx+**xq4Gc<VH3
zSRlvd@tjX%usSa1deRFRY2{yf6uBsS5s!18kS|>v#rX49(0wngsXRPis3Sa7y&L=z
z?!}l{Y3UV`1t{!R20J+QuQ+NJnSz{Ayq1&-XQbYvDH9~&aYIbq*SeiU3>z95#>I_S
zlD#AaXY{ADK}7pRViRm{DkBw?y^$^SQ-zu34x*j5#E|<EhL3KY26HhRNV<5;Vip#R
zFp2)dyZ8gA&zZR%O34Q~D@nQ!`rp!aB()zmO(dG=LQ&q##q*<^^bS}F-6aAuOyKX;
z*SuVF`6pNGxY$~x6HHf1sSJ>fXpOx(e}7OfUTdXE9D1X8DP?CWjEV79MM19|9+j?~
zK#udH=9IFm8Ps4Qv8=IVhPL!@&!#=do3}cQPPZs=evU=q<2O58mak&8Ivw<N_0Q#A
zTTbmVsoi)+Qck$Bg~S2GdIgb|SRstb6q&s!P!@*EjtnJPlj`VSYWdMAg{ACvoJ7@?
zT2Un3Y!3Bnl(i{c^V#U7ix4F<28Y}C9od;v_k0BzMY_?Wo!%ZmQ1;F!#uB6kL+>rV
z$VDYy{et>Z=Sg*D+!1~rrxX6<h~iI#YE)D$oVNHSF*nrKaYYmbjVcbJw6TK0t3ZEP
zYMlH#%LsJNhvlS4S`}&hM35!-Cc!{lUktxc<$;!!b&HIik=LFvc{MzPfVn!~K`xxN
z^h1~fEenQp%^tWs^{;FRFK6O`5P{qM<yP)#i2!ZN{MfAaMl(5K+${*)o$@kls_niG
zFB(>8-{c|17}I_j)R++5K2|aZ(RYEeoc9{x{e=SF${DWH?`7h<I3xE1*Whf=6`bF!
zZqLgh*jQ5BTh20*)K+lBc1Q1t?S8!uH%4$nuQ*c-$lq^xHuNHon&dV_7q5YTpF%8H
z5UEBb$Uh2aM@E9*lzfUj?A^QXf6gXPaYImzECnT<`T@5@y(y^Zl!gXTTczr--UB@z
z=lACTFx2CmUX$$Tj01}_`g-M7bwRQ?ZwGBBej9(GQaP{5BR?o#)$g}o^tVIq;>ve&
zFC%1^Gs(^;>F&GmNGn`>w<C@^100E+ET_dYoM7p9*`+`5FRz|M5RI_ShkKy7^+kO8
z)~eDTA~i(G=B4SXoe@BQw)Q^Oayc_uq+Z%uq-{z>O2!oRL1UaS9}#j)L$t^xe8sgN
zJvKr8s=VP8u*M0dBJz=lzjeeG_}0fx2zc`(nps<F&ew|^n<_0qX0#i{D+&nZeMXp^
z2(auJ++n*&Dz%A4-eDpnLH#lxAx+J}G}1A>z+n|xl@_s$O11V=(w)#d4pGj{S8nZi
z`S*?k6S%3l{XSneX6ZMlzPXckH}J$e5Dk|G&^5mmrn0<03<a<qPL!xl`JqR@>@}K8
zGw)cECrW<@$+leJK}^pZUV9)q#EB;kcA=uwpLK&7ty0J}i<$>N)(><?L>84GaJ*;l
z*GbJk^g9j15Fm9N5nEmcnp0-xf~K1pbSj|8?y4+=?Oe}?0zv2Gk#O;<&QqcxoGiAR
zEJ=J~F@<)sn3ReH6y>^~U6Zbn3HjN5?QcHaNC)Lk+rPvVDsP9eaF`xI4oM1Xn{8D~
z=Ep>*&EY#}!yU)vWxKY00SVdCkY4~ogK3OmIC<89M#XKlfd4P|3<&d1gSuCK%PShj
z4wVPVBtJBBXsYx1w$Qz-TMuq{5Y%HBPM$nkeQ%6pUm`jC^-xS2#POXPvuYvz5ccqZ
zp=Usw7xJ*BPx+~x)kdA8E7kzqH-y9TWy@@QG6unvhZ+#n{()|h*={3@c7KvQQ9&U*
zbSvx!M;_#;b^A51>bAL+x`E1oxECw)hBz)I6Ma?l3goi~bjpu18S`|n1@jl%J=;K3
z9?Dvd-X^CGr<8WTAPw_C`Y8RJ@nqHxx+X6kk~60HU7*i`W1N4eZShweK~c$?Jg7lD
zS|?VRQrW3Qj!s!oRvc#}u6WBY{zk;`>T_anO`6(s^Qe5)OH=DtFFt<N^3<Lap2|-$
zq$6R_=k}BU01L}WL_t)^)t1F|tzU}EF@<qnTV@JN<#1i^oV3Z+OH=EY;&M!3oUcjw
z#INV7WlZ7q{8BwqoUCIran~jeX=No5yQl6|0zx-gb#4Z#^?P+;9DUC^I~VdIAtC0k
zfk0qYch(?_0|ZY(V%H@T4Soi@`76DS<YASl_))~5ALo^ig5v;`58-z6Hvv-qicl#j
zmP!g7;mAt?$uFKFXB5JsDVWm8MY-E7CC0OXEPp{GkC?`O=#?iwL_A31hEH~ip!3QN
zhbt>n<;#nkhRI+*w)XR;U1F7!;xIuYm`8j1jZt2@Rp}VDLlNJ2JBsyJjCdoWN=i>2
zR+gnDeMKC}1HM4Tjmxm6Zd{Yp;^~WX-E4_xm`E5V=PNO>hzcSCh;Reu#-%(dn}j+N
zs^CiD{P=SoA0*_s$r1=&Oe`dilE_DYx_g5q!Q4#wal^$4nDEgxH*doz3T=H=87d85
z91=FvnbwW6LF~#*+?Cj5CTk_J5-OO)()6uzVpSxF<TZjq9b=HvMC_=E{ZlrTkhcwZ
zD^=(GQ8x=$J(ZsRWB8k}@{>IAPZ7;ea_a}Ea%yFp(t(6>$bgoNyweX5*;}Z-tSxl3
zF>JoXmD3NoA+HOItNftm_$C5IUHP#ye3is-r*JaR$9@3$k)wPbKg$z*5ekuG`%_0s
zAe=)yCuVZg*-}>W<xuI4me*iZ1&}}4SyV*foQp~%yLHLa!~y?=MUqW%)vGKYFpDX5
zRHl_Ci)C8;SdK*^E^TjVB!lv%t!cZWo>KQIj0qZfFzE<dqn+gBe#(<(OHGk>lZ)4Y
z3%+qoD=5{EdR2f2_t?T#q?Kv)Q~{J>X_PHlSGt8Ad9sc?iejPG?{vmBlS3X-nF%Qq
zMKK4PR7!Z-Rb0k0l;S~?E}7EmBtEc0Ll8e;%PkHZ`t|f(2$(!PBy7{96xn!!&y#ry
zMNS&5#Df_ni#`xF$xVFy6*VSx*E6hWJmRHxiufTt^;TT{ZnP+Vp2kpzv#zDsJXA9?
zFX~|B>WCvVUE5?_GTLO3*`Po&vvuWJ*2I-KaU#fXADu}5w3A7qxXOk+2Jf%<t8m7R
zwTs3P<g-oM5Ym@nVZy=sw7z0qjI@eOI<!hlR8pVOvqKSp5T1B^z9zpb!jy^Q497P8
z0L+*%UfPxwMmDC4n6!6{4r9k-o(Rzlp-YqO#fz7l)~Zj$p}+)Rzbj}Q=?9oZ_p6=J
zJj%*33_wJ>6;ExvbZNI_(1Q-e;dhG(dBF&+T9vwsIH+OtuupvvoFsF+4+}2Fh5RXl
z0OHfd!O<FpBd1kgcK;QSkaB{JOeq4tbE(ydPNJBV@FG){ZT(2`;_oP-(OLO4m*f#5
zimLk;p6W-)PdR9(dDuZ++efJ^#eI6tbLziQJ2y^dm!o9<xJ-m<!E*~VwnfG}^I_wS
zW%}7y40Gqn{IE|Xx>MS!!W^}?&XrL?#H^>UJ3R8p((w3WOT)~W6YU|un6U$4;>7VP
zr=)y3r9m7Y=FWY_#@|L8jgv&Gt?tF$Y70y=S1gytOy;ZYNs}ur{3w}$VhRk&vj+<5
zYiM@S)T5nac=5|tRR76~z_v^4*(p<5x<4Ao=;$MAQ;o9~m~eKNLg$!Vn7!3T+DoEa
z^<65WSPqLyJ*rbKOr1JaByn7LX0FUl)gj5dQyN1|U}=3G451Os>4D04X;6E*R~Yf^
z9F58ulh0n$7A{-Lc$AMi=+Y&N70*Vo?g@Q19%vu>F2t1fvBuU-tWPRG+8J#m_tO@Y
z(<?0cWr0;x+4KXNmhnb^wEL@d5AxGTeRp&x?b0Ulxx$ENtE>}9V-K%PN}Y4FQ+hQI
z-Nf#j+(+bPvVfs=JC1hKk7<-jGI1x+85eTY1)2HX<M+pYb1P}=fhGMBc@@_*k5-71
zBNS=ufrg=AZO3Miv5ylR{jDH<WnI^Xr8FFEK2pgm#jExkDsBo-Y3p6rhNU<htIJC9
zs{MwFo5EAtde^mKDGtZ#vQoTizoFu$@RYXRb#+*6-s!qJPQ5&m-%v;LNqMGYR+_9h
z^<=8et3Y2hM<>z%utVkCCY0RJxYnp(aM@t0q)8JH!im9+#wL$s%8z{|UYx9Iq-Yc|
zsj{xGKn7gWs_|oB{tV!FW;a2~jn{E7B48vaG(L9{1?#JF;KIsgpqq<@$xm@~ZubWT
zaMLpn((07km{pTRl^_5#^C8`Uc*@zLC*BZ0o<v$)<%calPYbcDC!+yfV^YM;gS7?h
z3}pH7v|N8?3Zx%1Awh}uLxP{(Y$`WD6H-5F9L=o4?q<XmUQCRDL|=xbZmwM7Y+`PL
zC0wGP;g9UZt<=rPg>p=ZA;YnqgoKhuGe2^TKWKI|P%CMe_)vpNp5#N(NU2&?F63cO
zz9uBH@`w1s5jC6yicjWJe^Fc>ASkmq81!RbX|$5vZ9#!BrIq7Qs^nuHR!%A<<{=SP
zCVgA}I=9JQMUH}SVJ!hg5DOQjjBOuD82QLw!G;l;$T5YqvsiKFtWh9EgfKI4Vu0cx
zV-=C@M@b<j3#FN<C247YK47A7!%Y6*U_~e^tC?k~0PFvfR&Y~{)sHx;OdR~wnc75b
z<9L;}M12(WtQv}&Cd0@nUn)lF_VkuBdunRJDA?p99s(<tz@;r{6Z@4U2pKq5oW;b?
z{3{{4pbYATAjraL{OFrT)0M?0(1<G6^09s>xs(UxS}UYFSF#5@PE~@wS02H_WYyX%
zE8jwi5X&PzrD(coI5KfYIC}el*6EarD=Y?2?u-4sGEbxb#Y}k8oY#b`AhRfB8_>Ou
zdx7-<6NdI+Y?wecLEwV+60I^BDm20(v>FDn7L;IpfD`3yNGQnqoUUoZ*ycot?QK!@
z)uI_$iCMB7YySo`)3eEluBjfyK>WCeVVZ_`V9Em<2p{H+luZ+G&u$TR#NmFACNgQ3
z?7>E*Z6X;18|1GzC9($?k`>JCzNh%s|EPohOdv(KKCixJ5ZJX^P7sB>%2qV3lo!5H
zYsEt$T<lABs*B{Ia%czDNChc-tV3kp$(UCH%C?D`{TAuE5(oL>Lodsj3qY~{p2ipQ
z+8RRjf9?}zR<9#aw@cduA%}$bOU{TDZ6Lvvml0ZBF?Kbd4Nr(1J~L-U7^Ag<ThHD|
zYrw{en8?&mn!-7ApE4Y&Cz@*r2D^y&^>?Xm#zjM$+GO;YLKsyR;Zt2Ct+ZScSwBAm
z#a`18q50_*+2Qw-32b)@yVjM|=52a~mDb5A5gJb>+eP(<_<#TnPX%Wiq>>*T^q0)#
zs1ofYZ&fIMabGYeY^*IU1<h-*3@dSgO8m-ENi3E8d2om`l87((Tltl^9PB}a<e>c(
zZVx{dH!m}A%IBdiqzbdq4rx!7LTmR#-pNlY+c6Vnh;Yvc3+F!}Enw_dn{L`7v(e>Y
z@lt8yIz$vV9ji5l%fb^+E(x3JydcxcMT-{+f2}cOU7*Mv8mw+<BfGi=!otE*t>^1g
zTa2<D-@8|^#3blN(;J(7tn0%xyI*smoJb(!XUXDjk*%nK9A^&z^Z-gEtpn5VRwWkc
zXO7XMIE$93%{BkvfkcPa<T1Whs5*UGKU!$TToltuohyucSDy$aeOcZjuxKpv>TfNf
zb1Z#b+Dkpm=;-JadF(V|+Rb`O$v1xd7-<co$t-=QTlYRRgacZ8&6>q!%Zeh9dJ-Ym
zA+043l{&}t>0yN);0Skc!D%?eBh5!&6)DCKnRHXNhYdnd?WJ?tOzjx&IdN?){hPKW
zPq3m3(8rhu+1?JyOw~1l%RL7ZU+|$0+~c^%#CegjVZ1A?pflX;{*N4dxOvzOM3>65
zEX<=LP=ymoh1(p8JS%=?!J>3@&**f{HQC97_=(KYR@{fu{tJ<CN*3<1swnA(a#?X|
z!_sv+l6Uoaby<!4tK(#)uNRi`Ovie0QvTI(l3%@JR=nD<be)d>uJY^EV>o`*WUsnT
l_43LJCoIiNYvWai{eQafgEsoo(oO&X002ovPDHLkV1lK08nXZZ

literal 0
HcmV?d00001

diff --git a/docs/images/master-1-cert.png b/images/master-1-cert.png
similarity index 100%
rename from docs/images/master-1-cert.png
rename to images/master-1-cert.png
diff --git a/docs/images/master-2-cert.png b/images/master-2-cert.png
similarity index 100%
rename from docs/images/master-2-cert.png
rename to images/master-2-cert.png
diff --git a/docs/images/tmux-screenshot.png b/images/tmux-screenshot.png
similarity index 100%
rename from docs/images/tmux-screenshot.png
rename to images/tmux-screenshot.png
diff --git a/docs/images/worker-1-cert.png b/images/worker-1-cert.png
similarity index 100%
rename from docs/images/worker-1-cert.png
rename to images/worker-1-cert.png
diff --git a/practice-questions-answers/README.md b/practice-questions-answers/README.md
deleted file mode 100644
index 2f3313a..0000000
--- a/practice-questions-answers/README.md
+++ /dev/null
@@ -1,56 +0,0 @@
-# certified-kubernetes-administrator-course-answers
-Practice question answers for Certified Kubernetes Administrator course
-
-This repository contains answers for the practice tests hosted on the course [Certified Kubernetes Administrators Course](https://kodekloud.com/p/certified-kubernetes-administrator-with-practice-tests)
-
-| Section                          | Test                               |
-|----------------------------------|------------------------------------|
-| Core Concepts                    | Practice Test Introduction         |
-| Core Concepts                    | ReplicaSets                        |
-| Core Concepts                    | Deployments                        |
-| Core Concepts                    | Namespaces                         |
-| Core Concepts                    | Services Cluster IP                |
-| Scheduling                       | Manual Scheduling                  |
-| Scheduling                       | Labels and Selectors               |
-| Scheduling                       | Resource Limits                    |
-| Scheduling                       | DaemonSets                         |
-| Scheduling                       | Multiple Schedulers                |
-| Logging & Monitoring             | Monitor Cluster Components         |
-| Logging & Monitoring             | Managing Application Logs          |
-| Application Lifecycle Management | Rolling Updates and Rollbacks      |
-| Application Lifecycle Management | Commands and Arguments             |
-| Application Lifecycle Management | ConfigMaps                         |
-| Application Lifecycle Management | Secrets                            |
-| Application Lifecycle Management | Liveness Probes                    |
-| Cluster Maintenance              | OS Upgrades                        |
-| Cluster Maintenance              | Cluster Upgrade Process            |
-| Cluster Maintenance              | [Backup ETCD](/cluster-maintenance-backup-etcd)         |
-| Security                         | View Certificate Details           |
-| Security                         | Certificates API                   |
-| Security                         | KubeConfig                         |
-| Security                         | Role Based Access Controls         |
-| Security                         | Cluster Roles                      |
-| Security                         | Image Security                     |
-| Security                         | Security Contexts                  |
-| Security                         | Network Policies                   |
-| Storage                          | Persistent Volume Claims           |
-| Networking                       | CNI in kubernetes                  |
-| Networking                       | CNI weave                          |
-| Networking                       | CNI Weave  Read                    |
-| Networking                       | CNI Deploy Weave                   |
-| Networking                       | Service Networking                 |
-| Networking                       | CoreDNS in Kubernetes              |
-| Install                          | Bootstrap worker node              |
-| Install                          | Bootstrap worker node - 2          |
-| Install                          | End to End Tests - Run and Analyze |
-| Troubleshooting                  | Application Failure                |
-| Troubleshooting                  | Control Plane Failure              |
-| Troubleshooting                  | Worker Node Failure                |
-
-
-# Contributing Guide
-
-1. The folder structure for all topics and associated practice tests are created already. Use the same pattern to create one if it doesn't exist.
-2. Create a file with your answers. If you have a different answer than the one that is already there, create a new answer file with your name in it.
-4. Do not post the entire question. Only post the question number.
-3. Send in a pull request
diff --git a/practice-questions-answers/application-lifecycle-management/commands-and-arguments/answer.md b/practice-questions-answers/application-lifecycle-management/commands-and-arguments/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/application-lifecycle-management/commands-and-arguments/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/application-lifecycle-management/configmaps/answer.md b/practice-questions-answers/application-lifecycle-management/configmaps/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/application-lifecycle-management/configmaps/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/application-lifecycle-management/liveness-probes/answer.md b/practice-questions-answers/application-lifecycle-management/liveness-probes/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/application-lifecycle-management/liveness-probes/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/application-lifecycle-management/rolling-updates-and-rollbacks/answer.md b/practice-questions-answers/application-lifecycle-management/rolling-updates-and-rollbacks/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/application-lifecycle-management/rolling-updates-and-rollbacks/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/application-lifecycle-management/secrets/answer.md b/practice-questions-answers/application-lifecycle-management/secrets/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/application-lifecycle-management/secrets/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/cluster-maintenance/backup-etcd/answer.md b/practice-questions-answers/cluster-maintenance/backup-etcd/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/cluster-maintenance/backup-etcd/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/cluster-maintenance/backup-etcd/etcd-backup-and-restore.md b/practice-questions-answers/cluster-maintenance/backup-etcd/etcd-backup-and-restore.md
deleted file mode 100644
index ad05cf8..0000000
--- a/practice-questions-answers/cluster-maintenance/backup-etcd/etcd-backup-and-restore.md
+++ /dev/null
@@ -1,79 +0,0 @@
-
-
-# 1. Get etcdctl utility if it's not already present.
-
-Reference: https://github.com/etcd-io/etcd/releases
-
-```
-ETCD_VER=v3.4.9
-
-# choose either URL
-GOOGLE_URL=https://storage.googleapis.com/etcd
-GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
-DOWNLOAD_URL=${GOOGLE_URL}
-
-rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
-rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
-
-curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
-tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1
-rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
-
-/tmp/etcd-download-test/etcd --version
-ETCDCTL_API=3 /tmp/etcd-download-test/etcdctl version
-
-mv /tmp/etcd-download-test/etcdctl /usr/bin
-```
-
-# 2. Backup
-
-```
-ETCDCTL_API=3 etcdctl --endpoints=https://[127.0.0.1]:2379 --cacert=/etc/kubernetes/pki/etcd/ca.crt \
-     --cert=/etc/kubernetes/pki/etcd/server.crt --key=/etc/kubernetes/pki/etcd/server.key \
-     snapshot save /opt/snapshot-pre-boot.db
-```
-
-Note: In this case, the **ETCD** is running on the same server where we are running the commands (which is the *controlplane* node). As a result, the **--endpoint** argument is optional and can be ignored. 
-
-The options **--cert, --cacert and --key** are mandatory to authenticate to the ETCD server to take the backup.
-
-If you want to take a backup of the ETCD service running on a different machine, you will have to provide the correct endpoint to that server (which is the IP Address and port of the etcd server with the **--endpoint** argument)
-
-# -----------------------------
-# Disaster Happens
-# -----------------------------
-
-# 3. Restore ETCD Snapshot to a new folder
-
-```
-ETCDCTL_API=3 etcdctl  --data-dir /var/lib/etcd-from-backup \
-     snapshot restore /opt/snapshot-pre-boot.db
-```
-
-Note: In this case, we are restoring the snapshot to a different directory but in the same server where we took the backup (**the controlplane node)**
-As a result, the only required option for the restore command is the **--data-dir**.  
-
-# 4. Modify /etc/kubernetes/manifests/etcd.yaml
-
-We have now restored the etcd snapshot  to a new path on the controlplane - **/var/lib/etcd-from-backup**, so, the only change to be made in the YAML file, is to change the hostPath for the volume called **etcd-data** from old directory (/var/lib/etcd) to the new directory **/var/lib/etcd-from-backup**.
-
-```
-  volumes:
-  - hostPath:
-      path: /var/lib/etcd-from-backup
-      type: DirectoryOrCreate
-    name: etcd-data
-```
-With this change, /var/lib/etcd on the **container** points to /var/lib/etcd-from-backup on the **controlplane** (which is what we want)
-
-
-When this file is updated, the ETCD pod is automatically re-created as this is a static pod placed under the `/etc/kubernetes/manifests` directory.
-
-
-> Note: as the ETCD pod has changed it will automatically restart, and also kube-controller-manager and kube-scheduler. Wait 1-2 to mins for this pods to restart. You can make a `watch "docker ps | grep etcd"` to see when the ETCD pod is restarted.
-
-> Note2: If the etcd pod is not getting `Ready 1/1`, then restart it by `kubectl delete pod -n kube-system etcd-controlplane` and wait 1 minute.
-
-> Note3: This is the simplest way to make sure that ETCD uses the restored data after the ETCD pod is recreated. You **don't** have to change anything else.
-  
-  **If** you do change **--data-dir** to **/var/lib/etcd-from-backup** in the YAML file, make sure that the **volumeMounts** for **etcd-data** is updated as well, with the mountPath pointing to /var/lib/etcd-from-backup (**THIS COMPLETE STEP IS OPTIONAL AND NEED NOT BE DONE FOR COMPLETING THE RESTORE**)
diff --git a/practice-questions-answers/cluster-maintenance/cluster-upgrade-process/answer.md b/practice-questions-answers/cluster-maintenance/cluster-upgrade-process/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/cluster-maintenance/cluster-upgrade-process/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/cluster-maintenance/os-upgrades/answer.md b/practice-questions-answers/cluster-maintenance/os-upgrades/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/cluster-maintenance/os-upgrades/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/core-concepts/deployments/answer.md b/practice-questions-answers/core-concepts/deployments/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/core-concepts/deployments/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/core-concepts/namespaces/answer.md b/practice-questions-answers/core-concepts/namespaces/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/core-concepts/namespaces/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/core-concepts/pods/answer.md b/practice-questions-answers/core-concepts/pods/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/core-concepts/pods/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/core-concepts/replicasets/answer.md b/practice-questions-answers/core-concepts/replicasets/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/core-concepts/replicasets/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/install/bootstrap-worker-node-2/answer.md b/practice-questions-answers/install/bootstrap-worker-node-2/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/install/bootstrap-worker-node-2/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/install/bootstrap-worker-node-2/tls-bootstrap-worker-node-2.md b/practice-questions-answers/install/bootstrap-worker-node-2/tls-bootstrap-worker-node-2.md
deleted file mode 100644
index 5d9c9a2..0000000
--- a/practice-questions-answers/install/bootstrap-worker-node-2/tls-bootstrap-worker-node-2.md
+++ /dev/null
@@ -1,182 +0,0 @@
-## Create Bootstrap Token on Master Node
-
-This is the solution to the practice test on TLS Bootstrapping hosted [here](https://kodekloud.com/courses/certified-kubernetes-administrator-with-practice-tests/lectures/9833234)
-
-```
-cat > bootstrap-token-09426c.yaml <<EOF
-apiVersion: v1
-kind: Secret
-metadata:
-  # Name MUST be of form "bootstrap-token-<token id>"
-  name: bootstrap-token-09426c
-  namespace: kube-system
-
-# Type MUST be 'bootstrap.kubernetes.io/token'
-type: bootstrap.kubernetes.io/token
-stringData:
-  # Human readable description. Optional.
-  description: "The default bootstrap token generated by 'kubeadm init'."
-
-  # Token ID and secret. Required.
-  token-id: 09426c
-  token-secret: g262dkeidk3dx21x
-
-  # Expiration. Optional.
-  expiration: 2020-03-10T03:22:11Z
-
-  # Allowed usages.
-  usage-bootstrap-authentication: "true"
-  usage-bootstrap-signing: "true"
-
-  # Extra groups to authenticate the token as. Must start with "system:bootstrappers:"
-  auth-extra-groups: system:bootstrappers:node03
-EOF
-```
-
-`master$ kubectl create -f bootstrap-token-09426c.yaml`
-
-## Create Cluster Role Binding
-
-```
-kubectl create clusterrolebinding crb-to-create-csr --clusterrole=system:node-bootstrapper --group=system:bootstrappers
-```
-
---------------- OR ---------------
-
-```
-cat > crb-to-create-csr <<-EOF
-# enable bootstrapping nodes to create CSR
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: crb-to-create-csr
-subjects:
-- kind: Group
-  name: system:bootstrappers
-  apiGroup: rbac.authorization.k8s.io
-roleRef:
-  kind: ClusterRole
-  name: system:node-bootstrapper
-  apiGroup: rbac.authorization.k8s.io
-EOF
-```
-
-`master$ kubectl create -f crb-to-create-csr.yaml`
-
-
-# Authorize workers(kubelets) to approve CSR
-
-```
-kubectl create clusterrolebinding crb-to-approve-csr --clusterrole=system:certificates.k8s.io:certificatesigningrequests:nodeclient --group=system:bootstrappers
-```
-
---------------- OR ---------------
-
-```
-cat > crb-to-approve-csr.yaml <<EOF
-# Approve all CSRs for the group "system:bootstrappers"
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: crb-node-autoapprove-csr
-subjects:
-- kind: Group
-  name: system:bootstrappers
-  apiGroup: rbac.authorization.k8s.io
-roleRef:
-  kind: ClusterRole
-  name: system:certificates.k8s.io:certificatesigningrequests:nodeclient
-  apiGroup: rbac.authorization.k8s.io
-EOF
-```
-
-`master$ kubectl create -f crb-to-approve-csr.yaml`
-
-
-# Auto rotate/renew certificates
-
-```
-kubectl create clusterrolebinding crb-autorenew-csr-for-nodes --clusterrole=system:certificates.k8s.io:certificatesigningrequests:selfnodeclient --group=system:nodes
-```
-
---------------- OR ---------------
-
-```
-cat > auto-approve-renewals-for-nodes.yaml <<EOF
-# Approve renewal CSRs for the group "system:nodes"
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: crb-autorenew-csr-for-nodes
-subjects:
-- kind: Group
-  name: system:nodes
-  apiGroup: rbac.authorization.k8s.io
-roleRef:
-  kind: ClusterRole
-  name: system:certificates.k8s.io:certificatesigningrequests:selfnodeclient
-  apiGroup: rbac.authorization.k8s.io
-EOF
-```
-
-`kubectl create -f auto-approve-renewals-for-nodes.yaml`
-
-
-# Create bootstrap context on node03
-
-# Important: Replace the kube-apiserver IP address in the command below with the correct one.
-This can be obtained by running the below command on the master node:
-```
-kubectl cluster-info
-```
-Create the kubeconfig file:
-
-```
-kubectl config --kubeconfig=/tmp/bootstrap-kubeconfig set-cluster bootstrap --server='https://<replace kube-apiserver IP>:6443' --certificate-authority=/etc/kubernetes/pki/ca.crt
-kubectl config --kubeconfig=/tmp/bootstrap-kubeconfig set-credentials kubelet-bootstrap --token=09426c.g262dkeidk3dx21x
-kubectl config --kubeconfig=/tmp/bootstrap-kubeconfig set-context bootstrap --user=kubelet-bootstrap --cluster=bootstrap
-kubectl config --kubeconfig=/tmp/bootstrap-kubeconfig use-context bootstrap
-```
-
-
-# Create Kubelet Service
-
-Create new service file
-
-```
-cat > /etc/systemd/system/kubelet.service <<-EOF
-[Unit]
-Description=Kubernetes Kubelet
-Documentation=https://github.com/kubernetes/kubernetes
-
-[Service]
-ExecStart=/usr/bin/kubelet \
-  --bootstrap-kubeconfig=/tmp/bootstrap-kubeconfig \
-  --kubeconfig=/var/lib/kubelet/kubeconfig \
-  --register-node=true \
-  --cgroup-driver=cgroupfs \
-  --v=2
-Restart=on-failure
-StandardOutput=file:/var/kubeletlog1.log
-StandardError=file:/var/kubeletlog2.log
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-
-EOF
-```
-
-Reload service and start kubelet
-
-```
-node03$ systemctl daemon-reload
-node03$ service kubelet start
-```
-
-Verify node has joined the cluster
-
-```
-master$ kubectl get nodes
-
-```
diff --git a/practice-questions-answers/install/bootstrap-worker-node/answer.md b/practice-questions-answers/install/bootstrap-worker-node/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/install/bootstrap-worker-node/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/install/end-to-end-tests-run-and-analyze/answer.md b/practice-questions-answers/install/end-to-end-tests-run-and-analyze/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/install/end-to-end-tests-run-and-analyze/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/logging-monitoring/managing-application-logs/answer.md b/practice-questions-answers/logging-monitoring/managing-application-logs/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/logging-monitoring/managing-application-logs/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/logging-monitoring/monitor-cluster-components/answer.md b/practice-questions-answers/logging-monitoring/monitor-cluster-components/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/logging-monitoring/monitor-cluster-components/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/networking/cni-in-kubernetes/answer.md b/practice-questions-answers/networking/cni-in-kubernetes/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/networking/cni-in-kubernetes/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/networking/cni-weave-read/answer.md b/practice-questions-answers/networking/cni-weave-read/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/networking/cni-weave-read/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/networking/cni-weave/answer.md b/practice-questions-answers/networking/cni-weave/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/networking/cni-weave/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/networking/coredns-in-kubernetes/answer.md b/practice-questions-answers/networking/coredns-in-kubernetes/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/networking/coredns-in-kubernetes/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/scheduling/daemonsets/answer.md b/practice-questions-answers/scheduling/daemonsets/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/scheduling/daemonsets/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/scheduling/labels-and-selectors/answer.md b/practice-questions-answers/scheduling/labels-and-selectors/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/scheduling/labels-and-selectors/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/scheduling/manual-scheduling/answer.md b/practice-questions-answers/scheduling/manual-scheduling/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/scheduling/manual-scheduling/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/scheduling/multiple-schedulers/answer.md b/practice-questions-answers/scheduling/multiple-schedulers/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/scheduling/multiple-schedulers/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/scheduling/resource-limits/answer.md b/practice-questions-answers/scheduling/resource-limits/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/scheduling/resource-limits/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/security/certificates-api/answer.md b/practice-questions-answers/security/certificates-api/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/security/certificates-api/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/security/cluster-roles/answer.md b/practice-questions-answers/security/cluster-roles/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/security/cluster-roles/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/security/image-security/answer.md b/practice-questions-answers/security/image-security/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/security/image-security/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/security/kubeconfig/answer.md b/practice-questions-answers/security/kubeconfig/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/security/kubeconfig/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/security/network-policies/answer.md b/practice-questions-answers/security/network-policies/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/security/network-policies/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/security/security-contexts/answer.md b/practice-questions-answers/security/security-contexts/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/security/security-contexts/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/security/view-certificate-details/answer.md b/practice-questions-answers/security/view-certificate-details/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/security/view-certificate-details/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/troubleshooting/application-failure/answer.md b/practice-questions-answers/troubleshooting/application-failure/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/troubleshooting/application-failure/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/troubleshooting/control-plane-failure/answer.md b/practice-questions-answers/troubleshooting/control-plane-failure/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/troubleshooting/control-plane-failure/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/practice-questions-answers/troubleshooting/worker-node-failure/answer.md b/practice-questions-answers/troubleshooting/worker-node-failure/answer.md
deleted file mode 100644
index e53f8f1..0000000
--- a/practice-questions-answers/troubleshooting/worker-node-failure/answer.md
+++ /dev/null
@@ -1 +0,0 @@
-# Practice Test Solution
diff --git a/tools/lab-script-generator.py b/tools/lab-script-generator.py
index 7db9c31..7aadcc8 100644
--- a/tools/lab-script-generator.py
+++ b/tools/lab-script-generator.py
@@ -24,17 +24,14 @@ class State(Enum):
     NONE = 0
     SCRIPT = 1
 
-parser = argparse.ArgumentParser(description="Extract scripts from markdown")
-parser.add_argument("--path", '-p', required=True, help='Path to markdown docs')
-args = parser.parse_args()
-
-docs_path = os.path.abspath(args.path)
+this_file_dir = os.path.dirname(os.path.abspath(__file__))
+docs_path = os.path.abspath(os.path.join(this_file_dir, '../docs'))
 
 if not os.path.isdir(docs_path):
-    print (f'Invalid path: {docs_path}')
+    print (f'Expected "docs" at: {docs_path}')
     exit(1)
 
-qs_path = os.path.abspath(os.path.join(docs_path, '../quick-steps'))
+qs_path = os.path.abspath(os.path.join(this_file_dir, '../quick-steps'))
 
 if not os.path.isdir(qs_path):
     os.makedirs(qs_path)
@@ -43,6 +40,8 @@ newline = chr(10)       # In case running on Windows (plus writing files as bina
 file_number_rx = re.compile(r'^(?P<number>\d+)')
 comment_rx = re.compile(r'^\[//\]:\s\#\s\((?P<token>\w+):(?P<value>.*)\)\s*$')
 choice_rx = re.compile(r'^\s*-+\s+OR\s+-+')
+ssh_copy_id_rx = re.compile(r'(?P<indent>\s*)ssh-copy-id.*@(?P<host>\w+)')
+script_begin_rx = re.compile(r'^(?P<indent>\s*)```bash')
 script_begin = '```bash'
 script_end = '```'
 script_open = ('{' + newline).encode('utf-8')
@@ -60,8 +59,12 @@ def write_script(filename: str, script: list):
 
 output_file_no = 1
 script = []
+indent = 0
 output_file = None
-for doc in glob.glob(os.path.join(docs_path, '*.md')):
+for doc in sorted(glob.glob(os.path.join(docs_path, '*.md'))):
+    if 'e2e-tests' in doc:
+        # Skip this for scripted install
+        continue
     print(doc)
     state = State.NONE
     ignore_next_script = False
@@ -128,12 +131,14 @@ for doc in glob.glob(os.path.join(docs_path, '*.md')):
                             '#######################################################################',
                             newline
                         ])
-                elif line == script_begin:
+                elif script_begin_rx.match(line):
+                    m = script_begin_rx.match(line)
+                    indent = len(m['indent'])
                     state = State.SCRIPT
                 elif choice_rx.match(line):
                     ignore_next_script = True
             elif state == State.SCRIPT:
-                if line == script_end:
+                if line == (' ' * indent) + script_end:
                     state = State.NONE
                     script.append(newline)
                     ignore_next_script = False
@@ -141,8 +146,12 @@ for doc in glob.glob(os.path.join(docs_path, '*.md')):
                 #     script.append('}')
                 #     script.append(line)
                 #     script.append('{')
-                elif not (ignore_next_script or line == '{' or line == '}'):
-                    script.append(line)
+                elif not (ignore_next_script or line == (' ' * indent) + '{' or line == (' ' * indent) + '}'):
+                    m = ssh_copy_id_rx.match(line)
+                    if m:
+                        script.append(f'{m["indent"]}echo $(whoami) | sshpass ssh-copy-id -f -o StrictHostKeyChecking=no $(whoami)@{m["host"]}')
+                    else:
+                        script.append(line[indent:])
 if script:
     # fns = '-'.join(file_nos[1:])
     output_file = os.path.join(qs_path, f'{output_file_no}-{current_host}.sh')
diff --git a/vagrant/README.md b/vagrant/README.md
index ea1d978..470ef79 100644
--- a/vagrant/README.md
+++ b/vagrant/README.md
@@ -6,7 +6,6 @@ A few prerequisites are handled by the VM provisioning steps.
 
 ## Kernel Settings
 
-1. Disable cgroups v2. I found that Kubernetes currently doesn't play nice with cgroups v2, therefore we need to set a kernel boot parameter in grub to switch back to v1.
 1. Install the `br_netfilter` kernel module that permits kube-proxy to manipulate IP tables rules.
 1. Add the two tunables `net.bridge.bridge-nf-call-iptables=1` and `net.ipv4.ip_forward=1` also required for successful pod networking.
 
@@ -17,4 +16,4 @@ A few prerequisites are handled by the VM provisioning steps.
 
 ## Other settings
 
-1. Install configs for `vim` and `tmux` on master-1
+1. Install configs for `vim` and `tmux` on controlplane01
diff --git a/vagrant/Vagrantfile b/vagrant/Vagrantfile
index 66b9705..f476b3a 100644
--- a/vagrant/Vagrantfile
+++ b/vagrant/Vagrantfile
@@ -20,9 +20,9 @@ if ram_selector < 8
   raise "Unsufficient memory #{RAM_SIZE}GB. min 8GB"
 end
 RESOURCES = {
-  "master" => {
+  "control" => {
     1 => {
-      # master-1 bigger since it may run e2e tests.
+      # controlplane01 bigger since it may run e2e tests.
       "ram" => [ram_selector * 128, 2048].max(),
       "cpu" => CPU_CORES >= 12 ? 4 : 2,
     },
@@ -61,7 +61,7 @@ def provision_kubernetes_node(node)
 end
 
 # Define the number of master and worker nodes. You should not change this
-NUM_MASTER_NODE = 2
+NUM_CONTROL_NODES = 2
 NUM_WORKER_NODE = 2
 
 # Host address start points
@@ -89,21 +89,21 @@ Vagrant.configure("2") do |config|
   # `vagrant box outdated`. This is not recommended.
   config.vm.box_check_update = false
 
-  # Provision Master Nodes
-  (1..NUM_MASTER_NODE).each do |i|
-    config.vm.define "master-#{i}" do |node|
+  # Provision Control Nodes
+  (1..NUM_CONTROL_NODES).each do |i|
+    config.vm.define "controlplane0#{i}" do |node|
       # Name shown in the GUI
       node.vm.provider "virtualbox" do |vb|
-        vb.name = "kubernetes-ha-master-#{i}"
-        vb.memory = RESOURCES["master"][i > 2 ? 2 : i]["ram"]
-        vb.cpus = RESOURCES["master"][i > 2 ? 2 : i]["cpu"]
+        vb.name = "kubernetes-ha-controlplane-#{i}"
+        vb.memory = RESOURCES["control"][i > 2 ? 2 : i]["ram"]
+        vb.cpus = RESOURCES["control"][i > 2 ? 2 : i]["cpu"]
       end
-      node.vm.hostname = "master-#{i}"
+      node.vm.hostname = "controlplane0#{i}"
       node.vm.network :private_network, ip: IP_NW + "#{MASTER_IP_START + i}"
       node.vm.network "forwarded_port", guest: 22, host: "#{2710 + i}"
       provision_kubernetes_node node
       if i == 1
-        # Install (opinionated) configs for vim and tmux on master-1. These used by the author for CKA exam.
+        # Install (opinionated) configs for vim and tmux on controlplane01. These used by the author for CKA exam.
         node.vm.provision "file", source: "./ubuntu/tmux.conf", destination: "$HOME/.tmux.conf"
         node.vm.provision "file", source: "./ubuntu/vimrc", destination: "$HOME/.vimrc"
       end
@@ -127,13 +127,13 @@ Vagrant.configure("2") do |config|
 
   # Provision Worker Nodes
   (1..NUM_WORKER_NODE).each do |i|
-    config.vm.define "worker-#{i}" do |node|
+    config.vm.define "node0#{i}" do |node|
       node.vm.provider "virtualbox" do |vb|
-        vb.name = "kubernetes-ha-worker-#{i}"
+        vb.name = "kubernetes-ha-node-#{i}"
         vb.memory = RESOURCES["worker"]["ram"]
         vb.cpus = RESOURCES["worker"]["cpu"]
       end
-      node.vm.hostname = "worker-#{i}"
+      node.vm.hostname = "node0#{i}"
       node.vm.network :private_network, ip: IP_NW + "#{NODE_IP_START + i}"
       node.vm.network "forwarded_port", guest: 22, host: "#{2720 + i}"
       provision_kubernetes_node node
diff --git a/vagrant/ubuntu/cert_verify.sh b/vagrant/ubuntu/cert_verify.sh
index 7fa9403..3343ac8 100755
--- a/vagrant/ubuntu/cert_verify.sh
+++ b/vagrant/ubuntu/cert_verify.sh
@@ -8,11 +8,11 @@ FAILED='\033[0;31;1m'
 NC='\033[0m'
 
 # IP addresses
-INTERNAL_IP=$(ip addr show enp0s8 | grep "inet " | awk '{print $2}' | cut -d / -f 1)
-MASTER_1=$(dig +short master-1)
-MASTER_2=$(dig +short master-2)
-WORKER_1=$(dig +short worker-1)
-WORKER_2=$(dig +short worker-2)
+PRIMARY_IP=$(ip addr show enp0s8 | grep "inet " | awk '{print $2}' | cut -d / -f 1)
+CONTROL01=$(dig +short controlplane01)
+CONTROL02=$(dig +short controlplane02)
+NODE01=$(dig +short node01)
+NODE02=$(dig +short node02)
 LOADBALANCER=$(dig +short loadbalancer)
 LOCALHOST="127.0.0.1"
 
@@ -76,21 +76,21 @@ SYSTEMD_KS_FILE=/etc/systemd/system/kube-scheduler.service
 ### WORKER NODES ###
 
 # Worker-1 cert details
-WORKER_1_CERT=/var/lib/kubelet/worker-1.crt
-WORKER_1_KEY=/var/lib/kubelet/worker-1.key
+NODE01_CERT=/var/lib/kubelet/node01.crt
+NODE01_KEY=/var/lib/kubelet/node01.key
 
 # Worker-1 kubeconfig location
-WORKER_1_KUBECONFIG=/var/lib/kubelet/kubeconfig
+NODE01_KUBECONFIG=/var/lib/kubelet/kubeconfig
 
 # Worker-1 kubelet config location
-WORKER_1_KUBELET=/var/lib/kubelet/kubelet-config.yaml
+NODE01_KUBELET=/var/lib/kubelet/kubelet-config.yaml
 
-# Systemd worker-1 kubelet location
-SYSTEMD_WORKER_1_KUBELET=/etc/systemd/system/kubelet.service
+# Systemd node01 kubelet location
+SYSTEMD_NODE01_KUBELET=/etc/systemd/system/kubelet.service
 
-# kube-proxy worker-1 location
-WORKER_1_KP_KUBECONFIG=/var/lib/kube-proxy/kubeconfig
-SYSTEMD_WORKER_1_KP=/etc/systemd/system/kube-proxy.service
+# kube-proxy node01 location
+NODE01_KP_KUBECONFIG=/var/lib/kube-proxy/kubeconfig
+SYSTEMD_NODE01_KP=/etc/systemd/system/kube-proxy.service
 
 
 # Function - Master node #
@@ -305,8 +305,8 @@ check_systemd_etcd()
                         exit 1
                 fi
 
-                if [ $IAP_URL == "https://$INTERNAL_IP:2380" ] && [ $LP_URL == "https://$INTERNAL_IP:2380"  ] && [ $LC_URL == "https://$INTERNAL_IP:2379,https://127.0.0.1:2379" ] && \
-                   [ $AC_URL == "https://$INTERNAL_IP:2379" ]
+                if [ $IAP_URL == "https://$PRIMARY_IP:2380" ] && [ $LP_URL == "https://$PRIMARY_IP:2380"  ] && [ $LC_URL == "https://$PRIMARY_IP:2379,https://127.0.0.1:2379" ] && \
+                   [ $AC_URL == "https://$PRIMARY_IP:2379" ]
                     then
                         printf "${SUCCESS}ETCD initial-advertise-peer-urls, listen-peer-urls, listen-client-urls, advertise-client-urls are correct\n${NC}"
                     else
@@ -349,7 +349,7 @@ check_systemd_api()
                 SACERT="${PKI}/service-account.crt"
                 KCCERT="${PKI}/apiserver-kubelet-client.crt"
                 KCKEY="${PKI}/apiserver-kubelet-client.key"
-                if [ $ADVERTISE_ADDRESS == $INTERNAL_IP ] && [ $CLIENT_CA_FILE == $CACERT ] && [ $ETCD_CA_FILE == $CACERT ] && \
+                if [ $ADVERTISE_ADDRESS == $PRIMARY_IP ] && [ $CLIENT_CA_FILE == $CACERT ] && [ $ETCD_CA_FILE == $CACERT ] && \
                    [ $ETCD_CERT_FILE == "${PKI}/etcd-server.crt" ] && [ $ETCD_KEY_FILE == "${PKI}/etcd-server.key" ] && \
                    [ $KUBELET_CERTIFICATE_AUTHORITY == $CACERT ] && [ $KUBELET_CLIENT_CERTIFICATE == $KCCERT ] && [ $KUBELET_CLIENT_KEY == $KCKEY ] && \
                    [ $SERVICE_ACCOUNT_KEY_FILE == $SACERT ] && [ $TLS_CERT_FILE == $APICERT ] && [ $TLS_PRIVATE_KEY_FILE == $APIKEY ]
@@ -435,15 +435,15 @@ if [ ! -z "$1" ]
 then
     choice=$1
 else
-    echo "This script will validate the certificates in master as well as worker-1 nodes. Before proceeding, make sure you ssh into the respective node [ Master or Worker-1 ] for certificate validation"
+    echo "This script will validate the certificates in master as well as node01 nodes. Before proceeding, make sure you ssh into the respective node [ Master or Worker-1 ] for certificate validation"
     while true
     do
         echo
         echo "  1. Verify certificates on Master Nodes after step 4"
         echo "  2. Verify kubeconfigs on Master Nodes after step 5"
         echo "  3. Verify kubeconfigs and PKI on Master Nodes after step 8"
-        echo "  4. Verify kubeconfigs and PKI on worker-1 Node after step 10"
-        echo "  5. Verify kubeconfigs and PKI on worker-2 Node after step 11"
+        echo "  4. Verify kubeconfigs and PKI on node01 Node after step 10"
+        echo "  5. Verify kubeconfigs and PKI on node02 Node after step 11"
         echo
         echo -n "Please select one of the above options: "
         read choice
@@ -469,9 +469,9 @@ SUBJ_APIKC="Subject:CN=kube-apiserver-kubelet-client,O=system:masters"
 case $choice in
 
   1)
-    if ! [ "${HOST}" = "master-1" -o "${HOST}" = "master-2" ]
+    if ! [ "${HOST}" = "controlplane01" -o "${HOST}" = "controlplane02" ]
     then
-        printf "${FAILED}Must run on master-1 or master-2${NC}\n"
+        printf "${FAILED}Must run on controlplane01 or controlplane02${NC}\n"
         exit 1
     fi
 
@@ -486,7 +486,7 @@ case $choice in
     check_cert_and_key "apiserver-kubelet-client" $SUBJ_APIKC $CERT_ISSUER
     check_cert_and_key "etcd-server" $SUBJ_ETCD $CERT_ISSUER
 
-    if [ "${HOST}" = "master-1" ]
+    if [ "${HOST}" = "controlplane01" ]
     then
         check_cert_and_key "admin" $SUBJ_ADMIN $CERT_ISSUER
         check_cert_and_key "kube-proxy" $SUBJ_KP $CERT_ISSUER
@@ -494,9 +494,9 @@ case $choice in
     ;;
 
   2)
-    if ! [ "${HOST}" = "master-1" -o "${HOST}" = "master-2" ]
+    if ! [ "${HOST}" = "controlplane01" -o "${HOST}" = "controlplane02" ]
     then
-        printf "${FAILED}Must run on master-1 or master-2${NC}\n"
+        printf "${FAILED}Must run on controlplane01 or controlplane02${NC}\n"
         exit 1
     fi
 
@@ -504,16 +504,16 @@ case $choice in
     check_kubeconfig_exists "kube-controller-manager" $HOME
     check_kubeconfig_exists "kube-scheduler" $HOME
 
-    if [ "${HOST}" = "master-1" ]
+    if [ "${HOST}" = "controlplane01" ]
     then
         check_kubeconfig_exists "kube-proxy" $HOME
     fi
     ;;
 
   3)
-    if ! [ "${HOST}" = "master-1" -o "${HOST}" = "master-2" ]
+    if ! [ "${HOST}" = "controlplane01" -o "${HOST}" = "controlplane02" ]
     then
-        printf "${FAILED}Must run on master-1 or master-2${NC}\n"
+        printf "${FAILED}Must run on controlplane01 or controlplane02${NC}\n"
         exit 1
     fi
 
@@ -540,24 +540,24 @@ case $choice in
     ;;
 
   4)
-    if ! [ "${HOST}" = "worker-1" ]
+    if ! [ "${HOST}" = "node01" ]
     then
-        printf "${FAILED}Must run on worker-1${NC}\n"
+        printf "${FAILED}Must run on node01${NC}\n"
         exit 1
     fi
 
     CERT_LOCATION=/var/lib/kubernetes/pki
     check_cert_only "ca" $SUBJ_CA $CERT_ISSUER
     check_cert_and_key "kube-proxy" $SUBJ_KP $CERT_ISSUER
-    check_cert_and_key "worker-1" "Subject:CN=system:node:worker-1,O=system:nodes" $CERT_ISSUER
+    check_cert_and_key "node01" "Subject:CN=system:node:node01,O=system:nodes" $CERT_ISSUER
     check_kubeconfig "kube-proxy" "/var/lib/kube-proxy" "https://${LOADBALANCER}:6443"
     check_kubeconfig "kubelet" "/var/lib/kubelet" "https://${LOADBALANCER}:6443"
     ;;
 
   5)
-    if ! [ "${HOST}" = "worker-2" ]
+    if ! [ "${HOST}" = "node02" ]
     then
-        printf "${FAILED}Must run on worker-2${NC}\n"
+        printf "${FAILED}Must run on node02${NC}\n"
         exit 1
     fi
 
@@ -566,7 +566,7 @@ case $choice in
     check_cert_and_key "kube-proxy" $SUBJ_KP $CERT_ISSUER
 
     CERT_LOCATION=/var/lib/kubelet/pki
-    check_cert_only "kubelet-client-current" "Subject:O=system:nodes,CN=system:node:worker-2" $CERT_ISSUER
+    check_cert_only "kubelet-client-current" "Subject:O=system:nodes,CN=system:node:node02" $CERT_ISSUER
     check_kubeconfig "kube-proxy" "/var/lib/kube-proxy" "https://${LOADBALANCER}:6443"
     ;;
 
diff --git a/vagrant/ubuntu/setup-kernel.sh b/vagrant/ubuntu/setup-kernel.sh
old mode 100644
new mode 100755
diff --git a/vagrant/ubuntu/ssh.sh b/vagrant/ubuntu/ssh.sh
old mode 100644
new mode 100755
index 476f681..276883a
--- a/vagrant/ubuntu/ssh.sh
+++ b/vagrant/ubuntu/ssh.sh
@@ -1,5 +1,22 @@
 #!/bin/bash
 
 # Enable password auth in sshd so we can use ssh-copy-id
-sed -i 's/PasswordAuthentication no/PasswordAuthentication yes/' /etc/ssh/sshd_config
+sed -i --regexp-extended 's/#?PasswordAuthentication (yes|no)/PasswordAuthentication yes/' /etc/ssh/sshd_config
+sed -i --regexp-extended 's/#?Include \/etc\/ssh\/sshd_config.d\/\*.conf/#Include \/etc\/ssh\/sshd_config.d\/\*.conf/' /etc/ssh/sshd_config
+sed -i 's/KbdInteractiveAuthentication no/KbdInteractiveAuthentication yes/' /etc/ssh/sshd_config
 systemctl restart sshd
+
+if [ ! -d /home/vagrant/.ssh ]
+then
+    mkdir /home/vagrant/.ssh
+    chmod 700 /home/vagrant/.ssh
+    chown vagrant:vagrant /home/vagrant/.ssh
+fi
+
+
+if [ "$(hostname)" = "controlplane01" ]
+then
+    sh -c 'sudo apt update' &> /dev/null
+    sh -c 'sudo apt-get install -y sshpass' &> /dev/null
+fi
+
diff --git a/vagrant/ubuntu/update-dns.sh b/vagrant/ubuntu/update-dns.sh
old mode 100644
new mode 100755
diff --git a/vagrant/ubuntu/vagrant/install-guest-additions.sh b/vagrant/ubuntu/vagrant/install-guest-additions.sh
old mode 100644
new mode 100755
diff --git a/vagrant/ubuntu/vagrant/setup-hosts.sh b/vagrant/ubuntu/vagrant/setup-hosts.sh
old mode 100644
new mode 100755
index eef212a..b57db59
--- a/vagrant/ubuntu/vagrant/setup-hosts.sh
+++ b/vagrant/ubuntu/vagrant/setup-hosts.sh
@@ -1,12 +1,21 @@
 #!/bin/bash
 #
 # Set up /etc/hosts so we can resolve all the machines in the VirtualBox network
-set -ex
+set -e
 IFNAME=$1
 THISHOST=$2
-ADDRESS="$(ip -4 addr show $IFNAME | grep "inet" | head -1 |awk '{print $2}' | cut -d/ -f1)"
-NETWORK=$(echo $ADDRESS | awk 'BEGIN {FS="."} ; { printf("%s.%s.%s", $1, $2, $3) }')
-sed -e "s/^.*${HOSTNAME}.*/${ADDRESS} ${HOSTNAME} ${HOSTNAME}.local/" -i /etc/hosts
+
+# Host will have 3 interfaces: lo, DHCP assigned NAT network and static on VM network
+# We want the VM network
+PRIMARY_IP="$(ip -4 addr show | grep "inet" | egrep -v '(dynamic|127\.0\.0)' | awk '{print $2}' | cut -d/ -f1)"
+NETWORK=$(echo $PRIMARY_IP | awk 'BEGIN {FS="."} ; { printf("%s.%s.%s", $1, $2, $3) }')
+#sed -e "s/^.*${HOSTNAME}.*/${PRIMARY_IP} ${HOSTNAME} ${HOSTNAME}.local/" -i /etc/hosts
+
+# Export PRIMARY IP as an environment variable
+echo "PRIMARY_IP=${PRIMARY_IP}" >> /etc/environment
+
+# Export architecture as environment variable to download correct versions of software
+echo "ARCH=amd64"  | sudo tee -a /etc/environment > /dev/null
 
 # remove ubuntu-jammy entry
 sed -e '/^.*ubuntu-jammy.*/d' -i /etc/hosts
@@ -14,9 +23,9 @@ sed -e "/^.*$2.*/d" -i /etc/hosts
 
 # Update /etc/hosts about other hosts
 cat >> /etc/hosts <<EOF
-${NETWORK}.11  master-1
-${NETWORK}.12  master-2
-${NETWORK}.21  worker-1
-${NETWORK}.22  worker-2
+${NETWORK}.11  controlplane01
+${NETWORK}.12  controlplane02
+${NETWORK}.21  node01
+${NETWORK}.22  node02
 ${NETWORK}.30  loadbalancer
 EOF