[Users] Quota for VMs created from templates
Hi! We are running engine version 3.3.0 on CentOS6 and we have come across a problem, possibly a bug. When a user creates a VM from a template, the template's quota is assigned to the VM. Here is the setup: - quota is set to Enforced on the data center - quota is created for template purposes (TemplateQuota) - a template is created from a sealed VM with TemplateQuota assigned to it - quota is created for a user, the user is set as its consumer - the user creates a VM from the mentioned template and leaves the quota unchanged - the created VM consumes the user's storage quota but does not consume their memory and CPU quota This way a user can create and run an arbitrary number of VMs as long they stay within their storage quota. No errors are reported in the logs. Kind regards, Mitja Mihelic -- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
AFAIK, a user cannot create a VM that is associated with one (or more) quota objects on which he doesn't have consumer permissions. i.e. if the VM was created successfully by the user, and this VM is associated with TemplateQuota, and with the quota that has been created for the user (let's call it UserQuota), it means that the user has consumer permissions on both TemplateQuota and UserQuota. If the user doesn't have permissions on one of these Quota objects - the fact that the VM has been created successfully sounds like a bug to me. ---- Thanks, Einav ----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: users@ovirt.org Sent: Thursday, October 3, 2013 9:59:06 AM Subject: [Users] Quota for VMs created from templates
Hi!
We are running engine version 3.3.0 on CentOS6 and we have come across a problem, possibly a bug. When a user creates a VM from a template, the template's quota is assigned to the VM.
Here is the setup: - quota is set to Enforced on the data center - quota is created for template purposes (TemplateQuota) - a template is created from a sealed VM with TemplateQuota assigned to it - quota is created for a user, the user is set as its consumer - the user creates a VM from the mentioned template and leaves the quota unchanged - the created VM consumes the user's storage quota but does not consume their memory and CPU quota
This way a user can create and run an arbitrary number of VMs as long they stay within their storage quota. No errors are reported in the logs.
Kind regards, Mitja Mihelic
-- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
----- Original Message -----
From: "Einav Cohen" <ecohen@redhat.com> To: "Mitja Mihelič" <mitja.mihelic@arnes.si> Cc: users@ovirt.org Sent: Thursday, October 3, 2013 5:06:36 PM Subject: Re: [Users] Quota for VMs created from templates
AFAIK, a user cannot create a VM that is associated with one (or more) quota objects on which he doesn't have consumer permissions. i.e. if the VM was created successfully by the user, and this VM is associated with TemplateQuota, and with the quota that has been created for the user (let's call it UserQuota), it means that the user has consumer permissions on both TemplateQuota and UserQuota. If the user doesn't have permissions on one of these Quota objects - the fact that the VM has been created successfully sounds like a bug to me.
---- Thanks, Einav
Thanks Einav. Mitja, Compute resources (CPU, RAM) are being consumed when the VM is running. So yes, you can create how many VMs you'd like as long as you don't exceed storage limit, but run VMs only as many as your quota permit (cpu and memory limitations). The difference between storage to compute resources is that storage is being consumed when the disks are copied while memory and cpu consumed when the VM is running. Thanks, Gilad.
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: users@ovirt.org Sent: Thursday, October 3, 2013 9:59:06 AM Subject: [Users] Quota for VMs created from templates
Hi!
We are running engine version 3.3.0 on CentOS6 and we have come across a problem, possibly a bug. When a user creates a VM from a template, the template's quota is assigned to the VM.
Here is the setup: - quota is set to Enforced on the data center - quota is created for template purposes (TemplateQuota) - a template is created from a sealed VM with TemplateQuota assigned to it - quota is created for a user, the user is set as its consumer - the user creates a VM from the mentioned template and leaves the quota unchanged - the created VM consumes the user's storage quota but does not consume their memory and CPU quota
This way a user can create and run an arbitrary number of VMs as long they stay within their storage quota. No errors are reported in the logs.
Kind regards, Mitja Mihelic
-- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
In addition to the described setup: The user was also given a permission on the data center with the role VmCreator. The user is not listed as a consumer of TemplateQuota, but they have an inherited role VmCreator in the permissions tab. Could this permission be the reason the user can create and run VMs that are associated with TemplateQuota? Regards, Mitja -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78 On 10/03/2013 05:06 PM, Einav Cohen wrote:
AFAIK, a user cannot create a VM that is associated with one (or more) quota objects on which he doesn't have consumer permissions. i.e. if the VM was created successfully by the user, and this VM is associated with TemplateQuota, and with the quota that has been created for the user (let's call it UserQuota), it means that the user has consumer permissions on both TemplateQuota and UserQuota. If the user doesn't have permissions on one of these Quota objects - the fact that the VM has been created successfully sounds like a bug to me.
---- Thanks, Einav
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: users@ovirt.org Sent: Thursday, October 3, 2013 9:59:06 AM Subject: [Users] Quota for VMs created from templates
Hi!
We are running engine version 3.3.0 on CentOS6 and we have come across a problem, possibly a bug. When a user creates a VM from a template, the template's quota is assigned to the VM.
Here is the setup: - quota is set to Enforced on the data center - quota is created for template purposes (TemplateQuota) - a template is created from a sealed VM with TemplateQuota assigned to it - quota is created for a user, the user is set as its consumer - the user creates a VM from the mentioned template and leaves the quota unchanged - the created VM consumes the user's storage quota but does not consume their memory and CPU quota
This way a user can create and run an arbitrary number of VMs as long they stay within their storage quota. No errors are reported in the logs.
Kind regards, Mitja Mihelic
-- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Good question, Mitja. @Gilad: 1. Does the 'VmCreator' Role contain the 'consume-quota' action? so when granting "VmCreator" on Data Center "DC1" to user "User1", "User1" can automatically consume any quota defined in "DC1" (including, for example, "TemplateQuota", in Mitja's case)? 2. Related to both your previous reply and my previous reply: Can a user associate a CPU/RAM Quota to a VM that he is now *creating*, even if he doesn't have consume-quota permissions on that CPU/RAM Quota? In Mitja's case, he attempted to create a VM associated with both "TemplateQuota" and "UserQuota", while the user (maybe - depends on answer to 1) didn't have permission to consume "TemplateQuota", and the VM creation succeeded. Is that OK? [if the answer to both questions is "no", there is a chance that Mitja discovered a bug] ---- Thanks, Einav ----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: "Einav Cohen" <ecohen@redhat.com> Cc: users@ovirt.org Sent: Friday, October 4, 2013 8:14:10 AM Subject: Re: [Users] Quota for VMs created from templates
In addition to the described setup: The user was also given a permission on the data center with the role VmCreator. The user is not listed as a consumer of TemplateQuota, but they have an inherited role VmCreator in the permissions tab. Could this permission be the reason the user can create and run VMs that are associated with TemplateQuota?
Regards, Mitja
-- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
On 10/03/2013 05:06 PM, Einav Cohen wrote:
AFAIK, a user cannot create a VM that is associated with one (or more) quota objects on which he doesn't have consumer permissions. i.e. if the VM was created successfully by the user, and this VM is associated with TemplateQuota, and with the quota that has been created for the user (let's call it UserQuota), it means that the user has consumer permissions on both TemplateQuota and UserQuota. If the user doesn't have permissions on one of these Quota objects - the fact that the VM has been created successfully sounds like a bug to me.
---- Thanks, Einav
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: users@ovirt.org Sent: Thursday, October 3, 2013 9:59:06 AM Subject: [Users] Quota for VMs created from templates
Hi!
We are running engine version 3.3.0 on CentOS6 and we have come across a problem, possibly a bug. When a user creates a VM from a template, the template's quota is assigned to the VM.
Here is the setup: - quota is set to Enforced on the data center - quota is created for template purposes (TemplateQuota) - a template is created from a sealed VM with TemplateQuota assigned to it - quota is created for a user, the user is set as its consumer - the user creates a VM from the mentioned template and leaves the quota unchanged - the created VM consumes the user's storage quota but does not consume their memory and CPU quota
This way a user can create and run an arbitrary number of VMs as long they stay within their storage quota. No errors are reported in the logs.
Kind regards, Mitja Mihelic
-- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
------=_Part_1976703_416272913.1381051854025 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Einav, Thanks for the questions, see inline.
=20 @Gilad: =20 1. Does the 'VmCreator' Role contain the 'consume-quota' action? so when granting "VmCreator" on Data Center "DC1" to user "User1", "User1" can automatically consume a= ny quota defined in "DC1" (including, for example, "TemplateQuota", in Mitja's case)?
No, only SuperUser and DataCenterAdmin roles contains consume_quota action.
=20 2. Related to both your previous reply and my previous reply: Can a user associate a CPU/RAM Quota to a VM that he is now *creating*, even if he doesn't have consume-quota permissions on that CPU/RAM Quota? In Mitja's case, he attempted to create a VM associated with both "TemplateQuota" and "UserQuota", while the user (maybe - depends on answe= r to 1) didn't have permission to consume "TemplateQuota", and the VM creation succeeded= . Is that OK?
=20 [if the answer to both questions is "no", there is a chance that Mitja discovered a bug] =20 ---- Thanks, Einav =20 =20 ----- Original Message -----
From: "Mitja Miheli=C4=8D" <mitja.mihelic@arnes.si> To: "Einav Cohen" <ecohen@redhat.com> Cc: users@ovirt.org Sent: Friday, October 4, 2013 8:14:10 AM Subject: Re: [Users] Quota for VMs created from templates =20 In addition to the described setup: The user was also given a permission on the data center with the role VmCreator. The user is not listed as a consumer of TemplateQuota, but they have an inherited role VmCreator in the permissions tab. Could this permission be the reason the user can create and run VMs tha= t are associated with TemplateQuota? =20 Regards, Mitja =20 -- Mitja Miheli=C4=8D ARNES, Tehnolo=C5=A1ki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78 =20 On 10/03/2013 05:06 PM, Einav Cohen wrote:
AFAIK, a user cannot create a VM that is associated with one (or more= ) quota objects on which he doesn't have consumer permissions. i.e. if the VM was created successfully by the user, and this VM is associated with TemplateQuota, and with the quota that has been created for the user (let's call it UserQuota), it means that the user has consumer permissions on both TemplateQuota and UserQuota. If the user doesn't have permissions on one of these Quota objects - =
Yes, you should be able to assign a VM to a CPU/RAM quota, without=20 being a consumer of that quota, the check is done only when running the VM = (when the resources are consumed). There is a difference between User and Admin Portal: in User portal quota l= ist is being populated by quota that can be consumed by the user, so leaving the quota u= nchanged will selected an appropriate quota; also while creating a VM, disk's quota is set in 'Resource Allocatio= n' tab (see image). @Mitja,=20 Please check which quota(s) are assigned to VM while consuming the resource= s, and who is the user performing the task. the
fact that the VM has been created successfully sounds like a bug to me.
---- Thanks, Einav
----- Original Message -----
From: "Mitja Miheli=C4=8D" <mitja.mihelic@arnes.si> To: users@ovirt.org Sent: Thursday, October 3, 2013 9:59:06 AM Subject: [Users] Quota for VMs created from templates
Hi!
We are running engine version 3.3.0 on CentOS6 and we have come acro= ss a problem, possibly a bug. When a user creates a VM from a template, the template's quota is assigned to the VM.
Here is the setup: - quota is set to Enforced on the data center - quota is created for template purposes (TemplateQuota) - a template is created from a sealed VM with TemplateQuota assigned= to it - quota is created for a user, the user is set as its consumer - the user creates a VM from the mentioned template and leaves the q= uota unchanged - the created VM consumes the user's storage quota but does not cons= ume their memory and CPU quota
This way a user can create and run an arbitrary number of VMs as lon= g they stay within their storage quota. No errors are reported in the logs.
Kind regards, Mitja Mihelic
-- -- Mitja Miheli=C4=8D ARNES, Tehnolo=C5=A1ki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
=20 =20
Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
=20
------=_Part_1976703_416272913.1381051854025 Content-Type: image/png; name=diskQuota1.png Content-Disposition: attachment; filename=diskQuota1.png Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAArkAAAJVCAIAAABVunoaAAAAhnpUWHRSYXcgcHJvZmlsZSB0eXBl IGV4aWYAAHjaVY7bCcRACEX/rWJL8O1Yzm5IIB2k/DiYZcj50MtFDsJ+nQd8JoQMajE83bHQ1ORv hYGNIBIjzV2zebZQJV41CHfwHIG6DvXp/5j48CM0ws0337jsvAv1LNG04nwjl+SX2Bp592b40sMN SK0sUtg/QrkAAAnsaVRYdFhNTDpjb20uYWRvYmUueG1wAAAAAAA8P3hwYWNrZXQgYmVnaW49Iu+7 vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6a2M5ZCI/Pgo8eDp4bXBtZXRhIHhtbG5zOng9ImFk b2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJYTVAgQ29yZSA0LjQuMC1FeGl2MiI+CiA8cmRmOlJERiB4 bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPgog IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAgICB4bWxuczpleGlmPSJodHRwOi8vbnMu YWRvYmUuY29tL2V4aWYvMS4wLyIKICAgIHhtbG5zOnRpZmY9Imh0dHA6Ly9ucy5hZG9iZS5jb20v dGlmZi8xLjAvIgogICBleGlmOlBpeGVsWERpbWVuc2lvbj0iNjk3IgogICBleGlmOlBpeGVsWURp bWVuc2lvbj0iNTk3IgogICB0aWZmOkltYWdlV2lkdGg9IjEiCiAgIHRpZmY6SW1hZ2VIZWlnaHQ9 IjU5NyIvPgogPC9yZGY6UkRGPgo8L3g6eG1wbWV0YT4KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg CiAgICAgICAgICAgICAgICAgICAgICAgICAgIAo8P3hwYWNrZXQgZW5kPSJ3Ij8+MxM9rQAAAANz QklUCAgI2+FP4AAAIABJREFUeNrs3XlcjOv/P/BrRovKNJqaaioVZTm0OSTLEbK1kFNIRaFPllN2 JxxShCgOEjnJnv1YPqckHKcj+7G02KNEkWiftmmqmd8f9/nd3/nUNCUieT0fHg/3XPd1X/d1X/c0 857rvu7rZmzbto20MkVFRQwGgxAiFovV1NRIW4fjxfG21eP9/vvvCXwuSUlJ+Mv6pnzOFmC4uLjg bwwAvjWlpaXa2toDBw7U1tZuNHNqampSUpJQKFRWVkbTwTeIERsbi1YAgG/QvXv38vLyLCwsZIcL qampL168+O6773r06IFGg28TE00AAN+mPn36cLnclJSU3NxcBAoAMsihCQDgm2Vubv7+/fvk5GRt bW0LCwvq6i+lsrLy5s2b7dq1Gzp0qKqqKtoKvmW4BgEA3zSRSFRWVvb06dOioqK+ffuqq6sTQrKy sh49etS5c2d9fX2MUQBArAAAQAQCQXZ2dnp6uq6uLhU9dO/eXU1NTU4Ona8AuAYBAEBI+/btjYyM FBUVc3JylJSUzMzMcN0BALECAMD/YDKZ+vr6+vr6aAqAun8daAIAAACQ4QP6FQoKCl6/fv3+/Xs+ n19VVYW2AwAA+EopKiqqqqpqamrq6elRQ3plaNLYxtzc3OTk5IKCAjQuAABAG6Ourt67d28Zk5I1 EisIBIKbN2++efMGTQkAANCG6erqDhgwoH379h8WKxQVFV2+fLm8vJx6KScn5+rqamlpyeFwcB8R AADA16umpqawsPDOnTvHjh2rqamhElVUVIYOHVr/SVQNxgpFRUUXL16srq6mXs6cOdPa2hohAgAA QBsLGq5cubJr1y7qpby8/KhRo+qEC4yTJ0/W1NQ8ePCgtLSUxWKZmJh06NChsrIyPj6+oqKCEMJm s0NDQ9lsNrWBWCwuLy9PS0tLTU29ceNGWVkZGhoAAKD1U1LuIKgsV1JW4Wpqde3atU9vi969LahV JSUlS5YsKSkpIYQoKyvb2dkpKSn9T7/C3bt3O3XqpKGh8fbt25ycnH79+v3999/UGIWOHTuGh4fL y8tTUUJmZubKlStra2vR4gAAAF81BoPRy9RijL2thYU5IaS6unru3LnFxcWEEF1d3WHDhtE527m7 uz9+/DgnJ+fFixfv378XCoUqKiqpqanU6m3btlFzoQsEgj179uzZs0csFqN9AQAA2oD373KTUx9W Vdf26tmjXbt21tbW1MiE0tJSTU3NDh06/F+s8OLFCxsbm27duhkbGxsZGU2ePFlHR0dJSWnmzJnU Y1gNDQ2Li4uTkpLQrAAAAG1JtVCQ+SJDWMvo1bOHoqIih8O5d+8eIaSkpKRr165UHiYhRE1NLTMz s6amJisr69q1a4SQhw8fMhgMa2trQohYLP7+++/T09PRoAAAAG2PQFB59mzsvaQUQgh9H0NBQUFp aSmVQY4Q0rNnzwcPHrx8+VJJSUlRUVEsFnfr1q28vJzKnZmZqaCggKYEAAD4KnA4HHV1dRaLRV1E KCsrKy0tLSgoKCwsbGgTYWXZ72f+6PO9hZyc3OjRo+Pi4gghr169MjExIdQ1CHl5eV1dXSMjI319 /cePH//zzz9WVlZsNltLS0tXV3fu3LkYowAAAND6KSoqdu7c2cjIqKCggBqJmJ2dXVpaKi8v361b N3l5+fLy8oZuUCguzDcw7Kyro6OhoXHx4kVCiFgsNjIyIvWfHUVPqBAaGhoUFFRQUIC7HgAAAL6K QKFLly7V1dXXr1/Pysri8/k1NTU1NTV8Pj8rK+v69evV1dVdunRRVFRsqISb/9yhuiXqhAR1YwU+ n0/3YPzyyy8HDhxA6wMAALR+nTp1qqioePXqldQf+bW1ta9evaqoqOjUqVNDJaSlPaNiDsmQIDMz s26sIBKJqAUGgzF48OD379+j9QEAAFo5Doejo6Pz+vVr6qWDg4PkWvrl69evdXR06J6DOoqLCqgA QDIk6Ny5M1P2vvPz83ECAAAAWjl1dfWXL19SPQoODg5qamp0fCD5sra29uXLlw09hLq2Wig1vZFY gX5wFAAAALRaLBaLmnKREBIXF1dUVETFB1SgUFRURN3aQAgpLi5msVgNFCNuaqwwadIkNDoAAMBX pEOHDtRTnCTDhZ49e/bs2VMyUCCEVFRU0BMyNhET7QsAAACIFQAAANqysrIy6vlNFOrSw+PHjx8/ fiw5doEQoqys/KHPiEasAAAA8NUrLS3t2LGjZKBAXXqQHLtAre3YsSM9eTNiBQAAgG9FQUGBoaFh u3btyP8frECPUZB82a5dO0NDw4KCAsQKAAAA35bCwsKcnBw9PT06PpBcS7/U09PLycmR8WAIxAoA AABtVnZ2trKysoGBAdW7UEe7du0MDAyUlZWzs7M/tGTECgAAAG1BVVXVixcv5OXlBw0apK+vr6qq KicnJycnp6qqqq+vP2jQIHl5+RcvXlRVVX1oyXL5pVVoXwAAgLYRLqSnpxcWFqqrqxsbG0s+k/rh w4cfeumBEEIFCXJKcopoXAAAgDajsLCwGWGBVFSQgGsQAAAAIAtiBQAAAECsAAAAAIgVAAAAALEC AAAAfG5yslcfO3YMbQQAAPAtQ78CAAAAyCLXaI7ktJdoJgAAgDavd3fDZsYKhBAtlgJasA17VyqU ry5DOwAAtDEmPXsQQjZs3fnseWZDebp17bxswU+EkOTnrxvKI9fE/amqqqLR2yQ+n49GAABoq7x8 l+zdEfqReeTQjkDjcDhoBACANoCa43nD1p2NBgqEkL07Qjds3TnaYWz9Vc+fPd0ZsQVjGwEAANom GZcempKztla0+ddgR0cXxAoAAABApMUKNbW1tXp6PRArAAAAgBTy8gpKSionT+5FrAAAAPAN8fJd 0sScDAZxGPPj8+ePECsAAAB8W4FC08OFYTYj1dU1ECsAAAB8Q4FC/WUZ5OXlQzdu/6hY4datW7a2 trq6ugYGBlOmTHn9+vVnO2AWi4WzDgAA0IxA4YPCBcL4iPkVkpOT3dzctmzZYmNjU1lZuWvXrsWL Fx8/fhznAwAAoLVpykQLDWl+v8LGjRtXrlz5448/qqqqamlprVy5UjJQePfu3bhx43R1dSdMmFBc XEwIqaqqMjAwOHr0aJcuXTp37nzixImGcgoEAgMDg5CQEE1NTUJIYmKilZUVj8cbP378rVu3cL4B AAA+p+bHCikpKXZ2dg2tDQwM7NWrV2pqqpaWVlBQECFEQUGhtLT00aNHqampmzdvphKl5lRUVCwr KxOJRK9evSKE+Pn5BQUFvXz58scff1y3bh3OGQAAwOfU/GsQeXl59JTAkqMHSktLCSF///33lStX NDQ0FixY4OTkRAhhMBjV1dULFy5ksVgODg7Tpk2j8kvNKRQKvby8lJSUCCG3b9+mck6aNGnOnDk4 ZwAAAF9HrKCnp5eVldW1a1c6PpAMGgoKCoyNjallRUVFeit1dXWqj0EkEsnOSV2AIIRcvXrV39// 2bNnFRUV9FYAAC0qKioKjQBfnRkzZtRJafrtkbJiBRWlZm5pbW0dHR1NX0oghEh+kWtoaNy5c6cp dys0lJPBYFALPj4+/v7+9vb2DAaDx+PhrQAAn0dgYCAaAb6s2traJubMynp18GB0/XRLp5/rJ1YJ Kuqk3I+PkFosFSQ0f7zCsmXLDh8+HBoa+urVK4FAcPv27YkTJ/r7+1NrR4wYsW3btpKSkqioqDFj xsgop9GcXC5XX19fKBSGhYVpaGhkZGTg3QMAACAZKNB3DLSE5l+D4PF41NWBMWPG5ObmGhoazp07 19PTk1q7atUqHx+fHj166OnphYWFySin0ZwhISHjx49XVVUNDw8nhAwcOPDdu3d4ZwAAwDdCKKyS naFFA4WPihUIITo6Onv37pW6SkNDo37V6WENksuN5rS0tMzKyqKWhw0btmLFijoZoEU9efLk4MGD L1++1NDQMDExmTZtGjWsxNHRMSYm5oOKWrly5Zo1a9CkAABfF8zxDLKkp6evWbPGzs5u9+7dAQEB DAbjyJEjzS4tJycHTQptBj2mqulGjhz5QfnLysr69+//8fsFQKwALejEiRNubm7W1tYqKipcLnfm zJnTp0+vk8fR0bH+cnJysr+/v7u7e0BAADXExM/PLy8vz9HRMTo6mhBSWFgYEBDg6uoaFBRUVlZG CKmqqnJ3dz9+/PiECRPQ8tAmPXv27IPyHz9+3MHBAe0GX4pIJLp27RpiBWhERkZG/Z81TbFv377x 48fv27dv+PDhVHCwceNGQkhMTIyHhwch5ODBgwYGBpGRkWpqalQGBQUFgUAgEokOHTqElodWJT8/ 38HBQVlZ2cLC4s6dOzJ+6NPLf/75p42NDYfDGTVqVHJyMiGkf//+WVlZDAaDGgOem5s7atQoNpvt 4OBAT1mrrq6+Zs0aZWVl+u/IxcWFEPL06VMzM7OuXbvGx8c3sVbQ9kRHH1JWVpH8Fx3dsp+WTCYT /QrQuJKSEjab3bxo9MGDByUlJUOGDFm1alX9DKmpqU5OTmw229nZ+d69e9SHbE1NzejRo9u3b4+W h1bl559/NjMze/v27bx582bPnt2UTRYvXvzLL7/k5ORMnz59+fLlhBBqinqxWLx27VpCyLJly0xN TdPT03k8HjUMi56ytqCggBCSlpZWXl7evXt3KvP48eOTkpIkY4Jm1Aq+ah4eUyIjI+mXkZGRHh5T Ps+u5dD6IIOamlpBQUEzprXw9/c/efLk4sWLORzOjBkzTExM6mTg8/n03J3y8vKSe0SzQ2sTHx// 4MEDNpvt5eXl5eXVxHA5ISGhW7dubm5ubm5u9TNcunTp7t27XC53yZIlo0ePJv9/ytpZs2ZRU9bS nQqEkBs3bkRFRbFYLG9vb3rWh2bUCtpAuEAImTVr1ucMFBArQCN69Ohx/fp12QMIqP4AOTm5oqIi OlFbW3vOnDm+vr6XL1/evHlz/ftlVFVVd+zYQfe1SpaGZofWpqioiJ7SvoliY2ODg4P79euno6MT FhZmbW1dJ0N+fj4dhUtOWaulpUUIqa2tjY6OvnLlCpVYXFxMhdEaGhofUytoM+HC5wwUCK5BgGzO zs6nT59OSEgoLy8vKSk5efLkhg0b6uThcDi3b9+uqKg4c+ZMu3btqEQ/P7/z588LhUJtbW16Qk8e j5eRkVFdXU0I6dOnz5kzZ8rLy8+dO0d1wAK0WhoaGrm5uQ1+jDKZ1LtacuqXzp07R0VF5ebmLl68 eMoUKR/rXC6Xz+eLxWKxWCwQCOqEy/Hx8Twez8jIiEpks9lULC65C9m1gjYfLnxOTe1X4PP5OD3f oM6dOwcEBBw4cCAyMlJBQaFPnz71L4t6eHhEREQQQv7zn/8oKSmJxWIGg+Hu7r5r165du3Zpamr6 +vpSOdevX79q1arCwsJDhw55eHiEhYVNnz6dy+X6+PigqaE1s7e3Dw0NDQoK+u9//7tp06aHDx9K ruXxeLGxsSNHjty4caOc3L8fqv379/fy8poyZUqXLl3oaXqNjY2TkpJMTEwUFBRsbW03bdq0aNGi w4cPnzp16q+//pIsc+/evZMmTaJfWlpaRkVFzZs3b8+ePXTfm+xaAXyBWAG+WT169Fi/fn39dHoi JhsbGxsbG2p52LBh1ELv3r137txZvwdi27Zt9O+kgICAhsoEaFVCQkKmT5+ur69vYGCwe/fuOmvX rVs3a9YsQsiWLVtYLBYVLgcFBc2bN2/u3LmGhoa7du2icl69etXW1jYnJ+f9+/fBwcFeXl56enr6 +vq//fabZIF5eXlxcXFbtmyhUzZs2ODq6rp3796tW7e2b9+e2oXsWgF8gVhBVVUVjdUmoccIoFHq 6ur1A1mxWEwtTJ06derUqdQyfblh1KhRT58+rbOJtrZ2SkoKtczlcmNjY6WWyeVyq6r+Z05fMzOz x48fU8sVFRUyagXQEjBeAQAAAD5FvwIAAAB8ftevX7t58+aXrQP6FQAAABAoyIJ+BQAA6VavXo1G AECsAAAg3YwZM9AIABRcgwAAAAAp6Jn0ECsAAACAFEwm84cffvioWCEnJ8fb27tr164cDsfQ0NDZ 2Tk1NfVDC3F0dMTJAAAAaNVBQ7O3nD59eteuXa9cufL+/fukpKQJEyYcPHjwQwtJT0/HOQAAAGib scL9+/d/+uknHo8nJyfH4XDc3d1//fXXoqIiMzMzyeegVFRUmJubFxUVJSQkODg46Ovrjxs3juqB sLGxyc7OZrFYQUFBhJB3796NGzdOV1d3woQJxcXFhJCqqqpOnTqdOHHCyMjIzMwsPj7+4MGDXbp0 MTQ0PHHiBE4eAABAq44Vxo8ff/78+bi4uKdPn9JznaqpqdnZ2R09epTOtmvXLnt7ezU1teXLly9e vPjZs2dTpkyh7kRKSEgghJSWllLPBQgMDOzVq1dqaqqWlhYVPSgoKJSVlT148CAlJWX16tVz5sx5 +vRpamrqli1bqAwAAADQemMF6iFAhw8ftre379y588KFCwsKCgghvr6+O3fupKKH8vLyiIgI6jGD IpEoMTHx/fv3EydOPH36dP0C//777/nz52toaCxYsODixYuEEAaDUVNTs2DBAhaL5eDg8P79+8WL F1PL2dnZOHkAAACfI1YoLSuX/PcBWzKZLi4uR44cefHiRUJCAovFop6eoq+vb2JiEhcXR3UqDBs2 TE9PjxBy4sSJgoKCoUOHDho06Pr16/ULLCgoMDY2ZrFY33//veRD2dXV1ak+Bsll+kYOAAAAaCFU bCAnp9D+48vq0qXLwoULe/bsSb2cP3++k5PTgAEDduzYQT8GzdDQcPv27WKx+Pjx497e3k+ePKlT iIaGxp07d1gsFs4NAABAa0AFCc2/BjFz5sxNmza9f/++pqbm3bt3GzduHDhwILXK3Ny8V69erq6u FhYWdABhY2Ozb9++yspKQ0PD2tpaKtHIyCglJUUoFBJCRowYsW3btpKSkqioqDFjxuAMAQAAtIqI odlbhoSELFy4sH///iUlJZqamjY2Nr/99hu9lupaiI+Pp1NWrFjh5+f3888/GxgYUGMdCCEXLlxw cnJ6+/ZtZmbmqlWrfHx8evTooaenFxYWhnMDAF9QVFQUGgG+Oi00N3nzYwU1NbX9+/c3tPbt27eW lpbUfE+U4cOHJyUl1cmmpaV148YNallDQ6P+nZClpaWNLgMAtITAwEA0AnxZdDd8o7KyXh08GN3q +hUaIhQK//rrr2XLlkneOQkAAAAtJCvrVYtOO/TpYwUej8flckNCQqytrXH+AAAAPvpHeJXsDC0U KIhEonu3b/bpN+DTxwrULAvQZmRnZ+/bty89PZ3BYHTv3n3q1Km6urofWsjKlSvXrFmDxgQA+Iow mf/eAIHnTIIsOTk5y5Yt69Onz9atW7ds2WJqarp06dK3b982oxw0JnzLRo4cSS8zGIxWWCsAWUED mgBkOHbsmJOTk4ODA4fD4XA4Y8eOHTt27LFjx6i1ko8JpZfz8/NXrFjh4uKybNmy9+/fE0L8/Pzy 8vIcHR2jo6MJIampqXPnznVxcVm9enX9aTYA2qRnz57Ry/Sk+K2qVgCIFaCZ0tLSBg8eLJlibW39 9OlTGZscOHCgW7du+/fvNzExOXDgACFk48aNhJCYmBgPDw9CSFRUlKen56FDhwYNGnT48GE0MrRy AoFAXV19zZo1ysrKdXoFqOWqqioNDY3o6GgtLS1NTc0jR47UKaF///5ZWVkMBsPf319yKzU1tSNH jmhraxsZGZ09e3bPnj1aWlpcLpcuITc3d9SoUWw228HBgXqiXh1PnjwxNTVVU1M7deqUkpJSdXW1 1BoSQt68eTNs2DAWi2Vtbf3q1av6tUpISDA1NWWxWPb29vTtadCqREcfUlZWkfwXHX0IsQJ8eQUF BR07dpRM4XA4soekPHjwwNHRUVlZ2c7O7tGjR/UzbN++3dLSUkFBYciQIQ8ePEAjQyunqKhYVlYm EokaeucrKCjw+fz79++np6fv2LFjxYoVdTLcunWL6k5Yu3at5FZlZWWpqanPnz/fsGGDt7f348eP 09PTIyIi6BKWLVtmamqanp7O4/HqF0tlGD9+fFZWVnJyskAgkJeXb+goli5damVllZOTM2TIkGXL ltWv1bx580JCQvLz8ydOnEg9zw9aGw+PKZGRkfTLyMhID48pn2fXTR3byOfzcZ6+QWw2u7CwkMfj 0SnFxcUcDkf2W4WaqFtVVVXq2+b+/fv79+9//fp1VVVV6+mMBWgIg8EQCoWzZs1SUlJqKEN1dfXS pUtZLNa4ceNcXV2bWGxNTY2fnx+1lYuLy/Lly+uUcOnSpbt373K53CVLlowePbp+ITdv3oyKimKx WD4+PuvWrZOxu4SEhOTkZBaL9dNPP1laWtbP8PDhQ2ph8uTJ3t7eOO+tNlwghMyaNetzBgroV4BG 9OzZ8/Lly5IpV65cMTU1lfywI4QUFRVJhhdUiMDn89lsdv0yw8PDHR0d9+/fT497AGj9tLS0ZGfQ 0NAg//tkOwaD0egwRnorIu3ZePn5+Twej7oFiR5TLFlscXExtRVVjgwFBQVUlK+hoZGfn18/w+XL ly0tLVkslpKSEh7O1/p7Fz5noPAB/Qqqqqo4Q22S7B6jiRMnLlu2TEVFhZqC8+bNm3FxcevXr6fW cjic27dvW1hYnDlzpl27dlSiubl5XFzcxIkTY2NjzczMqEQej5eRkaGvry8vL9+xY0dNTc2amprY 2FhVVdWcnBwdHR2cCGj9vQv//sBiMqurq+Xl5d+9eyd7k4/vNuNyuY8fP67zRD3JYtlsdklJCYfD kXw2r9QacrlcKvLIz8/ncrn19+Xl5bVmzRpHR0cGg4Fn+H0VvQufE/oVQBZ9ff21a9empKT89NNP M2bMePjw4erVq+lLEh4eHhERETNnzuzcubOSkhL1Eebh4fHkyRNPT8/09HRPT08q5/r168PCwqZP n04I8fb2Xrt27aJFi3r16mVnZzd//ny0M3xFeDxebGxsaWnpxo0b5eSa+nPL2Ng4KSmJek5e09na 2m7atKmkpCQiImL48OH1M1haWkZGRpaVle3cuVN2DUeMGLFjx47y8vKwsDC6KMlaaWpqGhoaCoXC jRs3crnc9PR0nGv44H4F+GZ16dIlICDgzZs3CxcudHR0lOwDsLGxsbGxoZaHDRtGLairqwcHB9cp hMPh0A8M6969Oz3M28LCYvLkyWhk+IqsW7du1qxZhJAtW7awWCyxWNyU+RKuXr1qa2ubk5ND3Ujc RMHBwV5eXnp6evr6+pIP56Nt2LDB1dU1JCRk165dsmsYHBzs7u6ura1tZWV18ODB+rUKCwuzs7Nj s9nUQ7PMzc3Ly8txugGxAnwAXV3dadOmrVu3rra2Fk/6gG+NZLf/1KlTp06dSi1PmTKlfgaplx60 tbVTUlLqZGhoK3qZy+XGxsbKqJiZmdnjx4+p5UmTJsmooY6OTp2xR3VqZWVlVVhYSHdCrF69Gucd ECvAB7O3t7e3t0c7AAAgVgAAAIDW4vr1azdv3vyydcDYRgCAtgCzlSBQ+OTou2fRrwAAIB2u2cM3 jslk9uk34KNiBRaLVVpa2uhaR0fHmJiYD9qkTiK9rKamNmDAgJCQEENDQ5xCAGhRM2bMQCMA/Bs0 tFC59Le+5E26MgIF2UVRUlJSzM3NZ86cidMGAADw1cQKVVVVBgYGR48e7dKlS+fOnU+cOCHZH2Bj Y5Odnc1isYKCgiQ7CRITE62srHg83vjx46nnlzQFh8OZO3fu/fv363c5UMsNVQYAAAC+WKygoKBQ Wlr66NGj1NTUzZs3UzEBLSEhgeoYqPPUMj8/v6CgoJcvX/7444+yn3ciqbi4eNOmTf369WteZQAA AOALxArUA9YWLlzIYrEcHByys7ObstXt27dHjx6tqKg4adKkK1euyM7MYrFYLBabzXZ0dMzLy9u9 e/enrQwAAADIIFcjFHx8KfUfjybb1atX/f39nz17VlFR0egm1CgHPz+/vn370hOTfcLKAAAAgFRU kMBkdVCR/Pd59u3j4+Pj4/Ps2bM3b940cZO1a9fu3r372bNndAr1LDVCyAfNrw4AAABNRMUGLT4X k5GRUUpKSp2nq3G5XH19faFQGBYWpqGhkZGR0Wg5ioqKO3bsmD17dmVlJZWira0dHx9fWloaFhbW 9Ke9AQAAwAdp8VjhwoULPj4+3bt3l0wMCQmZNGnSkCFDBg4c6O3tPXDgwKYU1a1bt+nTpy9atIh6 GRAQMG/ePFNTU1NTU+pZajidAAAAn1zzf47TkyVIzppQP1FLS+vGjRt1Ei0tLbOysqjlYcOGrVix gjQw+0KdRA8PDw8PD2p58uTJ9OOMXV1dZVQGAAAAWm+/AgAAAHyj/QoAAG1YVFQUGgG+Op92bnKR SHTt2rUffvgBsQIAgHSBgYFoBPiyamtrm5gzK+vVwYPRn3bvTOa/Fx9wDQIAAODrlpX1qkUfa4B+ BQAAgFZNKKySnaGln3+EWAFkcXR0pBYYDAabze7Vq5enpyePx/vke6EfXP5Jaivpk5TcxKquXLly zZo1eNsAQBuDWAEaQX011tTUvH79+uzZsxs3bty8eXNrruonDD4+VE5ODt4wbdLIkSP//PPPT7VV 80prFIPBkDHNTAvtFBAr/A8+n4/G+qbfKHJyhoaGHh4e3t7eVEpqauru3bvfvXvXq1cvFxeX7777 jhCSnJx86tSpFy9eGBsbT5061cjIiBBSWFi4devWZ8+e9ezZc9GiRR06dCCEvH79OjQ0tKqqqqFR u/n5+Vu2bHn+/HmXLl0WLVqkqakpFAqnT5/+n//8Z9++fWKxeMaMGUOGDGlK5etXQCgUTp06dfbs 2Xv27Gnfvv2MGTOKioqio6PpYmtqatzd3efNm7d9+3YNDY2ff/7Z0NBQssz6h+/n55eXl+fo6Dhx 4kQNi6W9AAAgAElEQVQPDw+pRw1fKcnZ5T9+q+aV9kUOAYCCsY3QJCKRqKCg4OTJk3379qVSoqKi PD09Dx06NGjQoMOHD1OJ+/btGz9+/L59+4YPHx4d/e+I3IMHDxoYGERGRqqpqdGJBw4cGDBgwJYt W9LT06Xu8cCBA926ddu/f7+JicmBAwcIIfLy8pWVlS9fvoyMjJw9ezZdVKPqV0BeXl4gEGRmZv72 22+enp7h4eHZ2dmSxcrJyVVVVWVmZu7du3fQoEEHDx6sU2b9w9+4cSPVt0FNFyb1qOFr1L9//6ys LAaD4e/vTwjJzc0dNWoUm812cHAoLi6m8vz55582NjYcDmfUqFHJycn1t2p6aVVVVWpqakeOHNHW 1jYyMjp79uyePXu0tLS4XO6RI0cIITU1NSwW68SJE2w228TE5OHDh3UqnJCQQM1ma29vT02F15RD gNYvOvqQsrKK5L/o6EOtq19BVVUV56lNarTHSHIQgJqa2vr166nl7du3UwtDhgwJDw+nQ4oHDx7o 6uoOGTKE/tGfmpr666+/stlsZ2dn+ia0J0+ezJkzR1lZeeTIkdQnYB0PHjzYsmWLsrKynZ3d4sWL CSEMBqOmpmbChAnKyspWVlbUd3NT1K8Ag8Gora11dnamigoNDZ04cWKdYsVisa2trbKysr29vY+P T50ypR6+7J3CV+rWrVuS3fvLli0zNTU9fPjwL7/8smLFih07dhBCFi9e/Ouvvw4ePPjMmTPLly+P j4+vs1XTS1NQUCgrK0tNTX3+/Pn58+e9vb0nT56cnp5+/vz5JUuWuLu7y8nJVVRU3L9///Xr15s3 b166dGlcXJzkLubNmxcaGjp8+PAjR44EBARcunSpKYcArZ+HxxRCyKxZs6iXkZGRVEorihXgm0Vd +Kf6FWJjY7dt27ZhwwZCyP379/fv3//69euqqir6M8jf3//kyZOLFy/mcDgzZswwMTGhwpFp06ZR GeTl5amFiooKFRUVGWEon89nsVhUBsmAhsovLy/f9CeASK2AZFENFaumpkYIUVFRoZ9YRpN6+E3Z KXztLl26dPfuXS6Xu2TJktGjR9NRckJCQrdu3dzc3Nzc3D6mNCom9vPzY7FY48aNc3FxWb58ObVM T2YvEolmz57NYrF8fHzqh6p0T8PkyZPpi4aNHgJ8XeHC5wwUECtAUzGZTC6X6+LiMn36dColPDx8 8uTJ/fr1YzAYkyZNohK1tbXnzJnj6+t7+fLlzZs37927l/oa3rFjh7KysmSBysrK5eXlbDa7oS5Q NpvN5/M5HA6fz2ez2R9TeakVaIrS0lI1NbXy8vL620o9/E+yU2jl8vPz6VuBFBUVqYXY2Njg4OB+ /frp6OiEhYVZW1vX2YrBYFCdVU0pjRCioaFBCFFQUCCEqKurU8sikYjOoKWlRYWz9bsGL1++7Ofn 9/Tp04qKCslNGt0pfEXhwucMFAjGK0ATicViPp9/8uTJHj16UCkdO3bU1NSsqak5ffq0qqoqdQuA n5/f+fPnhUKhtrY2/SHVp0+fM2fOlJeXnzt3jnpOGCGka9euFy5cqKysbGhstrm5eVxcnEAgiI2N NTMz+5jKS61AU1y8eLGiouLcuXP0UdOkHj6Px8vIyKiurv6YnUIrx+Vy+Xy+WCwWi8UCgYBK7Ny5 c1RUVG5u7uLFi6dMmSL1L0hq/5PU0pqisLCQEFJUVFQ/kvby8lqwYEFOTk5JSUnTDwG+unABsQK0 Io6Ojo6OjuPGjfPx8cnLy1u4cCGV7u3tvXbt2kWLFvXq1cvOzm7+/PmEEHd39z/++MPNzS0sLMzX 1/f/v609MjIypk+fHhcX5+7uTiV6enpevnx5wYIFXbt2VVBQqP8x6uHh8eTJE09Pz/T0dE9Pz4/7 u5JSgaYwNDT09fW9efMmfTWBJvXw169fHxYWRnW9NHun0AoZGxsnJSUJhUJCiK2t7aZNm0pKSiIi IoYPH05l6N+//65duyorK7t06UJPyiu51QeV1igGgxEVFVVaWhoRETFw4MA6azU1NQ0NDYVC4caN G7lcLjV8+ON3Ct8yRmxsrOTrI0eOUD8Hjx49SnWaJae91GIpYGxjW8Xn89+VCuWrywghHA4HDSIZ JH2RSRqglYiKiqIHpebm5tra2ubk5Lx//z4vL8/Ly+vy5cv6+vq//fbb4MGDCSEXL16cN29eZmam oaHh5s2bHRwc6mwlWXKjpUmOQ5S6zGQy//vf//r6+nI4nBMnTnTv3l1y7T///GNnZ8dms6Oioq5e vbpp06by8vJGdwqtExV6Njpv47Zt2wghAsH/3YVO9Txt3rHX0unn+vmrBBV1Uu7HR8xdMK93d0NC iFgspobdMJlMfX19PDsKAKBx2traKSkp1DKXy63zE4sQMmrUqKdPn8rY6oNKk+xmk7osFoupDj+p W1lZWVHfE4SQESNGrF69uik7BaiPvpSMaxAAAAAgBZPJ/OGHH8hH3gdx69atVatWPXz4UFdXd/Dg wWvXrm3fvn0L1ZjFYpWWluLMwWeDCxAA0Bpcv37t5s2bXzhoaPaWycnJkyZN8vb2fvz48alTpxgM xrp163BSAQBaWtMnFwEECp9E8/sVNm7c+Msvv0yYMIEQoqqqKjmJXk5Ojre3d3JyspmZWVRUlL6+ flVVVbdu3TZs2LBixQqxWBwSEuLi4kIISUhI+PXXXx88eNC7d++goCBzc3Opm0vu9927dzNnzrx7 9+6AAQN2797dsWNHvJkAoCVQV/oBoPmxQkpKSmhoqNRVAQEBffv2PX78+NatWwMDA/ft26egoFBa Wvro0aPU1NRLly6tXLmSihWWL18eHBw8cODA2NjY1atXnz59WurmkoUHBgb26tVrz549gYGBQUFB rfaZhwDwVWvoqWYAiBU+QF5eHpfLlboqMTHx+vXrLBbL29ubeigAg8Gorq5euHAhi8VycHCg71YX iUSJiYnGxsYTJ06cOHFiQ5tL+vvvv69cuaKhobFgwQInJyecQgAAgBbFLC0rl/zX9C21tbWpuerq KywspCbSV1dXLygooNPrz1R64sSJgoKCoUOHDho06Pr167I3pxQUFBgbG7NYrO+//z43NxenEAAA oIVQsQFTTqG95L+mb9+vX78zZ85IXaWhoUF9xxcUFFCzmjfE0NBw+/btGRkZc+fOpZ9xIntzDQ2N nJyc0tLS0tLS/Px8nEgAAIAWQsUGzb8PYuHChVu3bj18+HBJSUl+fv6WLVvoWdCHDRu2a9eu8vLy iIiIoUOHyijExsZm3759lZWVhoaG9MSosjcfMWLEtm3bSkpKoqKixowZgxMJAADQopofK5iYmPz+ ++/R0dHfffddv3790tLStmzZQq0KDAy8efOmsbFxSkrKqlWrZBSyYsWK8PDwTp06+fj4UFNUNrr5 qlWrUlNTe/TosWvXruXLl+MUAgAAtGzvwsdsbGVldf78+frpPB4vPj6+TqLkTEr08vDhw5OSkj5o cw0NjRMnTuDMAQAAtPZ+BQAAAECsAAAAAN8okUh07/ZNxAoAAAAgHZP5b5CAZ1IDAEgRFRWFRoCv SIvONIpYAQBAusDAQDQCfBVa+tkluAYBAAAAiBUAAACguZp6DYLP56OxAAAAvkHoV4BGZGVlBQUF eXp6Tp06NTg4+M2bNy2xl5UrV9LLjo6OH1NUfn7+r7/+Om3aNGdn5ylTpqxatSojI+Nj6gNAe/z4 8ZgxY7S1tXk8npOT0/Pnz+lVI0eOpJcZDEaL7uvNmzdTpkzR0dFRUFDgcrl2dnbJyck4O/Dl+xVU VVXRWG2S7B6jN2/eLFu2bPLkyXPmzCGEXL9+fenSpRs3buTxeJ+2GpLPLI2JifmYojZt2tS7d+9p 06ax2eyKioo7d+78+eefRkZGza4PAOXZs2eDBw8OCgqKiopiMBi///77wIED//nnny5dulBrP9u+ 3NzcRo4cGRoaqqmpyefzz549u2fPnu3bt+MctUkjR468dOkS/dLGxuavv/5CvwK0IseOHXN2dnZw cOBwOBwOZ+zYsWPHjj127BghpKamxsXF5dq1a66urnPmzHn58iW1SWFhYUBAgKura1BQUFlZGSGk qqrK3d39+PHjEyZMIISkpqbOnTvXxcVl9erVT548IYT4+fnl5eU5OjpGR0fT/QpCoXDy5MkJCQke Hh5TpkxJTEykw5d58+Z5eXnduHFjwoQJYrG4Tp1fvHgxZswYdXV1OTk5VVXV4cOHz549u7S0dObM mVVVVXS2qqqqWbNmlZaWJicn+/v7u7u7BwQEUD0QdepT/4iEQqGbm1tiYqKnp+fMmTPv3Llz8eLF OvWEtmf16tVLlizx9fXl8Xja2tpz586dP38+9cya/v37Z2VlMRgMf39/QgiTyTx06JCGhgaPxzt6 9Ci1eW5u7qhRo9hstoODQ3FxMSFEIBCoq6uvWbNGWVm56fsihCQnJ8+fP19HR0dOTo7D4Xh6eiJQ aMP8/f0le6oCAgI+fx0QK4AsaWlpgwcPlkyxtrZ++vQpIUROTq6qqiozM3Pv3r2DBg06ePAgleHg wYMGBgaRkZFqamrUd62CgoJAIBCJRIcOHSKEREVFeXp6Hjp0aNCgQYcPHyaEbNy4kepO8PDwoHck Ly9fWVn58uXLyMjI2bNnU0URQvbu3WtlZRUeHv7o0SOhUFi/s9fa2vru3bu3bt3KysqiIwkWi2Vp afn333/T2eLi4iwtLVks1r59+8aPH79v377hw4dTe6lTn/pHJC8vLxAIMjMzf/vtN09Pz/Dw8Ozs 7Dr1hLbn1q1bkyZNkkxxc3O7efMmtYoQIhaL165dS8UK9+/ff/HiRXh4+C+//EJlXrZsmampaXp6 Oo/HW7FiBSFEUVGxrKxMJBIVFBQ0fV+EEFdX17Nnz/7xxx+PHz+uHy5DGzNkyJDhw4fTnQpDhgxB rACtS2FhYceOHSVTOBwO/bkmFottbW2VlZXt7e3T0tKoxNTUVCcnJzab7ezsfO/ePUIIg8GoqakZ PXp0+/btCSHbt2+3tLRUUFAYMmTIgwcPGto1tdWECROUlZWtrKzy8vKo9KdPn9rb26uoqNjb20vd 0MfHhxCSkJCwYsUKDw+PnTt3UtdZxo0bd/bsWeqDVSAQxMTEjBs3jhAiEokePHhQUlIyZMgQqY9F lXpEtbW1zs7OVN2Ki4snTpxYp57Q9uTk5Ghra0um6OrqSh3BU1NTs3TpUlVV1R9//DE7O5tKvHTp kp+fH5fLXbJkyblz56g3klAonDVrlpKS0gftKzIykhBy4MCBYcOGaWpq+vj41I82oE12LXyRTgWC uZhANnV19cLCQsnRCcXFxZqamvRLNTU1QoiKikplZSWVwufzp02bRvcN1MlJCLl///7+/ftfv35d VVXV6E8iaqCMvLw8nbOiooLFYhFCNDQ0pMe/TOaQIUOo0Pvt27cXL14MCQlZt26dpqamoaHhP//8 079//7i4OHNzcy6XS/0Rnjx5cvHixRwOZ8aMGSYmJnUKbOiI6LpJrSe0PdS3teTYl9zcXAMDg4b+ dqjuN5FIRKXk5+fTf0qKiop0Ti0trQ/dF5PJdHd3d3d3J4RkZGRERUW5uLh8/mvY8Jm7FkQi0Rfp VEC/AjSiZ8+ely9flky5cuVKz5496ZfUs8LLy8vpC66qqqrHjh2LiYmJiYk5deqUZD8BtRAeHu7o 6Lh//35q3MOHUlJSqqioIIQ05YcUj8dzdnamB5A7OTnt2LGDz+fHxMQ4OTlRidra2nPmzDl48OCP P/64efNmqfGK1COCb421tTV1HY129OjROhfpZOByuXw+XywWi8VigUBQ/0+jefsyMjJaunTp7du3 cYLafNfCl+pUQKwAjXBxcTl79mxMTExhYWFhYWFcXFxMTIzkZdSLFy9WVFScO3euR48eVEqfPn3O nDlTXl5+7tw56qJsHR07dtTU1KypqTl9+rSqqip1xwGPx8vIyKiurm60SkZGRhcvXiwvL4+NjZWa YcuWLSdOnCgqKqqpqSksLDxx4kSvXr3obQ0MDNatW2dkZGRoaEgl+vn5nT9/XigUamtr0z8BJevT 6BHBt/NhHR4eHhYWlpub+/bt2x07dmzdupW+vdbY2DgpKUkoFDa0ua2t7aZNm0pKSiIiIujLz83b l6enZ3Bw8Lt372pqanJzc9euXdv0kAW+3q6Fz9+pQH8kIlaARn6Xh4SEpKSkLFiwYMGCBcnJyaGh oVTXPcXQ0NDX1/fmzZt0L72Hh0dGRsb06dPj4uKoPtI6vL29165du2jRol69etnZ2c2fP58Qsn79 +rCwsOnTpzdaJU9Pzz///HPWrFl0BFC//JcvX86bN8/FxeXnn3+uqKigdkFxdnZ+8uQJ3alACHF3 d//jjz/c3NzCwsJ8fX2pRMn6NHpE8I3o0qXL9evXL126ZGFh0bt374sXL964caNTp07U2qtXr3p5 eenp6TW0eXBwcFJSkp6e3o4dO6SOjGn6vsLCwu7fv29mZqaiotKvX7+SkpL9+/fjBMGn705gMvv0 G0AIYZw49V/JFWdOHqfiiKNHj1I9Y8lpL7VYCvXnV2CxWFT/s4yURjk6On7kzfTwkfh8/rtSoXx1 GSGEw+F8RaevuLj4p59+om9Ia6JLly5duHCButMBQIaoqCg8Owq+FqtXr67znMnCwkJCyOYdey2d fq6fv0pQUSflfnzE3AXzenc3JISIxWI3NzcqVnCaMOnL9yukp6fjHMMHCQ4OvnbtWkVFxenTp7t1 69b0Daurq+/cubN7927JOzMBAKDxDoaWKDQnJ8fe3p7H440ePTorK4tKTEhIcHBw0NfXHzduXGpq KiHExsYmOzubxWIFBQXhTEATjRw5Mjo62tPTMy0tbebMmU3fcNKkSRERETNmzDAzM0MzAgA0XYvc MxkQENC3b9/jx49v3bo1MDBw3759hJDly5cHBwcPHDgwNjZ29erVp0+fTkhIaMZlC2g9vsgFCEtL S0tLy2ZsePr0aZwyAIDPHStQt7nXl5iYeP36dRaL5e3tTY/bFIlEiYmJxsbGEydOnDhxIpoeAFq5 1atXoxEACCFyNUJBszeuP7aRWigsLKQm3lFXV6dvgj9x4sSmTZuGDh3K4/FCQ0MHDRqE1geAVqvO SDGAbxMVJMixOqh88qI1NDQKCgq0tbULCgroyfUMDQ23b98uFouPHz/u7e1NPTQIAAAAWi0qSGiR sY3Dhg3btWtXeXl5RETE0KFDqUQbG5t9+/ZVVlYaGhrW1tZSiUZGRikpKTJmLwEAAIAvq0VihcDA wJs3bxobG6ekpNBTjqxYsSI8PLxTp04+Pj7btm2jEi9cuODj49O9e3ecCQAAgNap+WMb69+/QKfw eLz4+Pg6a4cPH56UlFQnUUtL68aNGzgNAAAArRbmeAYAAADECgAAAPCBRCLRtWvXECsAAACAdEzm v0ECYgUAAACQGTSgCQAAAACxAgAAADSTHJoAAKC+qKgoNAJ8RVp0VvKmxgp8Ph9nAgC+KYGBgWgE +Cq09HPOcA0CAAAAZGlqv4Kqqioaq01CjxEAAMiGfgUAAABArAAfISsrKygoyNPTc+rUqcHBwW/e vJGdf+XKlfSyo6NjE/fS9JxN3Ly2tjY6OnrSpEk4g/CpvHnzZsqUKTo6OgoKClwu187OLjk5Gc0C iBUAH45vli1b1qdPn61bt27ZssXU1HTp0qVv376VsUlOTg69HBMT08QdNT1nE+Xl5f3++++7d+/G SYRPxc3NrXv37nfv3q2oqEhLS3Nzc9uzZw+aBVrayJEjGRKGDx+OWAFal2PHjjk7Ozs4OHA4HA6H M3bs2LFjxx47dowQUlNT4+Licu3aNVdX1zlz5rx8+ZIQ4ufnl5eX5+joGB0dTf/cFwqFbm5uiYmJ np6eM2fOvHPnzsWLFz08PKZMmZKYmFinY2D58uWOEqjEwsLCgIAAV1fXoKCgsrIyKvH169fz5s2b NWvW3bt369fc19eXEDJ58mRCSH5+/ooVK1xcXJYtW/b+/XtCSFVVlbu7+/HjxydMmICzDE2UnJw8 f/58HR0dOTk5Dofj6em5fft2alVubu6oUaPYbLaDg0NxcTEhRCAQqKurr1mzRklJiclkFhYWEkJK SkratWv35s0bGfmVlZXR1CDJ39+fwWDQLwMCAhArQOuSlpY2ePBgyRRra+unT58SQuTk5KqqqjIz M/fu3Tto0KCDBw8SQjZu3Eh1Enh4eNCbyMvLCwSCzMzM3377zdPTMzw8PDs7OzIycvbs2VRIISk4 ODgmJiYmJsbLy8vW1pZKPHjwoIGBQWRkpJqaGr3JgQMHBgwYsGXLlvT09Po1P3XqFN1dceDAgW7d uu3fv9/ExOTAgQOEEAUFBYFAIBKJDh06hLMMTeTq6nr27Nk//vjj8ePHYrFYctWyZctMTU3T09N5 PN6KFSsIIYqKimVlZSKRqLCw0MLCgopo7969a25urqurKyN/QUEBmhokDRkyhO5LsLGxGTJkCGIF aF0KCws7duwomcLhcOjPMrFYbGtrq6ysbG9vn5aW1lAhDAajtrbW2dlZWVnZysqquLh44sSJ1HJe Xp7UTe7fv3/r1i16apHU1FQnJyc2m+3s7Hzv3j0q8cmTJ/b29srKyiNHjpR9FA8ePHB0dFRWVraz s3v06BFVpZqamtGjR7dv3x5nGZooMjKSCj2HDRumqanp4+ND/y1cunTJz8+Py+UuWbLk3Llz1HtM KBTOmjVLSUlpzJgxdKwwZsyYRvOjqaGhroXP3KkgEomoBczbCLKoq6sXFhbyeDw6pbi4WFNTk36p pqZGCFFRUamsrJRdFHXbrby8vORynR9nlLy8vN27dwcGBlKZCSF8Pn/atGl0LwW1UFFRoaKiQppw Qy+fz2exWFROyXtEqcoDNPWnFZPp7u7u7u5OCMnIyIiKinJxcfnrr78IIfn5+fSfiaKiIr2JlpYW IWTMmDHr168nhNy5c2fJkiWN5geQ2rUgEok+c6cCk8n84YcfPqpfgfrwlZpSf5XsDaWKjo5msVjN GDr0MdWovy298JED9b9SPXv2vHz5smTKlStXevbsSb8sLS0lhJSXl3+qi6xCoXDTpk2zZ89WV1eX jDOOHTtGXZugLi4QQpSVlcvLy6nwRXaZbDabChH4fD6bzZbs8MBnEDSPkZHR0qVLb9++Tb3kcrl8 Pl8sFovFYoFAUOc9ZmlpmZmZ+e7du8zMTEtLy0bzA0jtWvgiIxX+DRpaolDq++Mj7dmzx9fXd+/e vZ9z7/W3pVOkXhRv81xcXM6ePRsTE1NYWFhYWBgXFxcTEyN5I+LFixcrKirOnTvXo0cPKoXH42Vk ZFRXVzdvj7t27frhhx8kwxFCSJ8+fc6cOVNeXn7u3Dnq4i4hpGvXrhcuXKisrPzzzz9ll2lubh4X FycQCGJjY83MzPChA83j6ekZHBz87t27mpqa3NzctWvX0qN5bG1tN23aVFJSEhERUX+YOoPB+P77 7z09Pc3NzaloQHZ+AKldC19kpEILxgr0b/Hnz58PHDjwu+++i4mJ0dTUpDqcmUzmsWPHDAwMjI2N f//9d6klJCcn8/n8devWCQQCKnLPyclRVVWlxxKz2eycnJzExEQrKysejzd+/Phbt2411GEgNRsh 5Ny5c999913fvn0fP34su7PExsYmOzubxWItX77czMxM8ndARUWFubl5UVFRm3x38ni8kJCQlJSU BQsWLFiwIDk5OTQ0lMvl0hkMDQ19fX1v3rxJXyNYv359WFjY9OnTm7fHixcvRkVF0fdBUKfGw8Mj IyNj+vTpcXFxVA8w9cF9+fLlBQsWdO3aVUFBQerlDIqHh8eTJ088PT3T09M9PT3xoQPNExYWdv/+ fTMzMxUVlX79+pWUlOzfv59aFRwcnJSUpKent2PHjlWrVtXfdsyYMRcvXqQGKzQlP0Cr0rLjFfz9 /R0cHObMmUN961MBNZPJfPTo0YMHDxISElasWDFx4sT6G0ZFRc2ZM6ddu3Zz587ds2dPv379dHR0 zMzMkpOThw8fnpycbGpqqqOj8+OPP65Zs2bo0KEnTpxYt25dbGys1Gr4+fnVz8ZgMO7du/fPP//s 3LkzMDCwoaiFkpCQwGKxqD6G2trao0eP0t+Fu3btsre3b8NXvvX09GR0fFlZWVlZWUmmcDicbdu2 Ucv0rAmS0ydIXZaak8Zms+vXoXPnzhEREdTyyZMn629FF6Wurh4cHNzQWoAmUlNTo24Yro/L5db/ /JGMX52dnSVfNpofoFX5qH4F1v+qn4Eays5ms2fMmEH/GdTU1CxYsEBVVXXMmDGvX7+uv1VxcfHl y5fd3NwIIa6urteuXaO6E2xtbalZ0pKTk6m76W7fvj169GhFRcVJkyZduXKloXpKzSYWi729vVVV Vb28vKTeoN8QX1/fnTt3UodTXl4eERFB3coPAADQNmOF0rJyyX8ftHHp/6qfgc/nczgcQkinTp0k 06lha3JycvT9GJKOHDmSnZ2tqanJYrG4XG5WVtbhw4epWIG6X+7evXtUrHD16tUhQ4bweDwulyu1 KEpD2TQ0NAghHTt2/KDnJ+nr65uYmMTFxVGdCsOGDdPT08M7CQAA2h4qNmDKKbSX/Pdp98FisUpK SgghjT5EQNKePXvu3r1LhyBJSUn79u0Ti8V9+vR59erV+/fvX7161adPH0KIj4+Pj4/Ps2fPZJff UDZqkEH9KQQaNX/+/Hnz5hUUFOzYsWP+/Pnf7HsI3fgAAG3bv+FBi+7DwsLiwIED3t7eO3fubOIm iYmJHTp06N69O53StWvXjh07JiYmDh061MLCYubMmaamptTQBy6Xq6+vLxQKf/vtNw0NjYyMDCMj o/plSs3GZDL379/v4+Nz4MCBfv36NVoxIyOjlJSUnj17KigomJub9+rVy9XV1cLCos6IfQBoMxCc 22gAACAASURBVFavXo1GACAtPbZx1apV06dPDw8P//XXX6kpzxq1e/duV1fXOomurq579uwZOnSo ra3t5MmTqUsShJCQkJDx48erqqqGh4cTQgYOHPju3bv6ZdbP9ubNG2Vl5V69evXt25fNZtefabi+ CxcuODk5vX37NjMzk+pacHJyio+Px3sIoE2ipw0FAMaJU/+VfH3m5HHqiv7Ro0ep3+7JaS+1WAqN To0nW15e3vfff5+dnd1mGi46Onrfvn0JCQlf+4Hw+fx3pUL56jJCCDW4BAAAvnbUPQGbd+y1dPq5 /toqQUWdlPvxEXMXzOvd3ZAQIhaLqdsLmEym04RJpKWfB+Hu7n7mzJnS0tKtW7f27du3bZwAoVAY Hx+/bNky3BUNAADfgpaNFaZOnbpq1SojI6Pbt2+Hhoa2jSbj8XgLFy4MCQmxtrbGGwgAANoqkUh0 7/ZN0tLjFUaPHj169Og21nZ4YiwAAHwLmMx/OxTwTGoAAACQGTSgCQAAAACxAgAAACBWAAAAgBbQ 1LGNH/TEBAAAAPi2YoVxS3agpdqwXSsxPx0AAHxcrEAIcRx3Ho3VJsX8YYtGAACATxArwLeAmhMU AABAEsY2AgAAgCzoVwBCCDExMUEjAACAVOhXAAAAAMQKAAAAgFgBAAAAPiGRSIRYAQAAABrEZDL7 9BtAPmZs48qJ9+hlQXXp6/zU88kbi8pffzVNwJBb5HhBSaGjsKbi15gRNbVVkse15vc+dZY/CUvj Sba9l7RQ4QAAAC3hY++DWPN7H0IYfY0m2n2/dJwCa3+C19dy5Ma8gUoKHYvL33RU0e2mM+Rx9sXP sNPv9Gz+t+kAAADaeqxACCFEfP/VWbvvl2p37P5voe0Uh5vN66k3gkEYj7IvXkzdIhbX6qj1HGG+ QLtjdwaD+abgwfmUjfn8zHZM+RFm87/TG8FgMNLeXL6Q8mutSNjQj3smU27F+H/KBPm3nx+z7jlj /emB7Zjyw0x8eumPbi/fITs/NT45pKjstdS916+0qYE9IeRc0nr3wdtN9e0ajRUaqqrUOqizDEZb /KzLMWEwmK8L7scnhRSVv6Z7YlZOvLfm9z6Sxyi1cCZDbsWEf8oE+bF314y2+LkdUz7mzqqX7+/g XQsAAJ/TpxmvYKw9iBCSU/iQemndc2Y/Y9eEB9tvpB3o19VtYHcPQsj4ARsMuH2iE2cfSvTppGE+ 2mIxIWRwzxn9urrdfn70ZtrBPkYThpr8JGMvIlENIaS9PKu9AuvXmBGEkB++8xrQ3TP5xZmTN5d2 1uo3tm9gQ3uvQ0FOpRvPOrf4aUbuzdziNGPtge0VVGUfY0NVlVqHsZaBnbX6Hbric+LGz0baA8da Bkp2JNTvUZBauEhcQwhRUlBtL9/hz9TNbGVtqtEAAAC+pn4F+rfyq7x7Z/7xp5apnva0N5fl2imO NF9kom93/el+uXaKhBBzQ8enbxJC/zu0VlRNCDHRH00ISco8Q8TikeaLenUa+df9sEZq3E4xNTNG WFNBCDHVtyeE3H8VV1yes+6klYy91ymkp95wuXaKT7L/IoQ8yb6kbdq9p96IpBenZey3oapKrQN9 LaYdU4EQoqduKvugZLRDO6bC87fXqOEUGqzOeMsCAMDnjhVqhIKP2X7N733k2in+7PhXpbCktDKP SlRV0iSE+P14mXrZUUWHEBJ7d41tbz9LYxdLYxeBkB+fHPIw6zyrPZcQUlVdRgiDEKKiyGnKTvNL X1ELLCUuIaS0Ml9yrdS910FdgBhm6jvM1JdOkR0rNFRVqXXorNlvlMViDZYhk9mOENKOKS/7iGS3 Q1V12b+9QEzMswkAAJ8PFSTIsTqofGxBtVXpudd76NqoqehR90HwK/M4HToFnxpAXdGnpL+9tv3t NU6HTr06jRpq4jPKfNHDrPNlgvyOKrqKcirUdyodbYhENUymXDumPNUbUY+Y+q9MUNBRRUdVWbOo 7P/uv5C69//5YlbSNOD2KSh9GXF+PJXia3dGX8NCVVmbX5Hb0GE2VFWpdRhrGchW1t7719R3Jc9/ cb7RaBs2VDgAAMAXRAUJn2a8wpPXfzEYTKtu7tTLR9kXCCG9Oo3qrGX1i/MN1x+2EkJcf9i61OmK onyHx68vEUIE1aWEkAdZ8YSQ7rrDeujaEEIeZJ2jSigoe0UI6aLVvytvcE1tgz0fD7PPE0JM9e2N tAf4T7g9zWZvQ3v/n04FfVsGg0lVg/L49SVCGCadRss4xoaqKrUOCnLtCSHVtVV9jSZWVBUTQhTk lAkh5YICQogGy7CJhQMAAHxxn6ZP+/nba7UioYWh4+WHOwXVpVcf75Fvp2RjOkdBTull3t34pBBC yJVHu0b1/nnqsN1isehV3r0LKZsIIVcf724vzxpuOkdMxP88P3L1yR6qwIspW8b09bft7XchZVOl kM9Sas9kyFFj/SRdeRQl3679912cBnSfkvHu1vmkUEKI1L3/T6xgYE8IeZz9f7HCk+y/fujhZWpg dyPtQEPH2FBVpdbhz9SwEWbzJw3afOPp/nNJwSPMFvxnRPTO8+NvpB0c3NN76rDd1NjMRgsHAAD4 4hixsbGSr48cOULN6Xj06FEGg0EISU57OXNNlOO482isNinmD9tdK2f07m6IpgAAaGO8flpk6fRz /fQqQUWdlPvxEXMXzKO+C8RisZubGyGEyWS6u7sTzPEMAAAAsiFWAAAAAClEItG1a9cQKwAAAIB0 TOa/QQJiBQAAAJAZNKAJAAAAALECAAAAIFYAAACAFtDUuZhi/rBFYwEAACBWkO6PUF+0VBv2rlSI RgAAgI+KFQghqqqqaKw2ic/noxEAAEAGjFcAAAAAxAoAAACAWAEAAAAQK8Bn9eeffw4aNEhVVdXA wMDf37+2tpZKZ0jQ0tJycXHJysqSXEWXUOelpOrqag0NDQaDwWKxKisrpW4iY/PmCQ8Pb7nCAQAQ K8C35fr167a2tmpqaunp6aNGjVq3bl1AQIBkBrFYLBAIlixZ8vvvv0+ZMuVDy4+Pjy8oKOjcuXNZ WVlMTMznOajTp09L1l8sFuNEAwAgVoBm2rBhg0gk+uWXXzQ1Nf39/fX09PLz8+vkUVRUnDlzJiEk OTn5Q8s/dOgQISQiIoIQcvjw4UbzV1VVzZ8/X1dXl8fj/fTTTwKBgE738/Pr1KmTqqqqnZ1deno6 ISQtLc3Ozo7D4bDZbDs7u4yMDKoj4fLly9RCnX4FqYVXV1czGAwejxcXF9e1a1cDA4O//voLfRIA 8O0QiUTUghzaAqRKSUkhhJiYmBBCDAwMsrOzpb6NTp06RQgZPHjwBxXO5/NjY2N79+5ta2trYWFx /vz5wsJCDocjY5M1a9Zs27Ztw4YN8vLyixcvZrFYoaGhhJDg4OBNmzatXr26X79+Y8eO/c9//pOY mOjl5XX79u1bt24VFxePGDHCy8srMTFRLBZTX/D1uxOkFi4vL08IKSoq+n/s3Xlczdn/B/Bz21P3 ti9XqbQIqbEUQxIKpa8JU5OyfAkztiyTGDJMtmaQJcQXM8ZWIzNEg6yjoSlKCaNGIZU27bftduve 3x/nO5/f/d5NjBnh9Xz0x73ncz7nnM/5fO7n8/6cz7m3urq6qKgoX1/fJUuW3L17F8cGALwvwwlK SkOHDv1L4wrsP+no6NjY2EydOvXJkycvW8hHH30kb1Fubq6/v7+NjY2trW1gYCC9X+xgUWw2G/v4 L3r+/DkhRFtbW14GFoulrKz8+eefT5gw4cCBAy9V+I8//tjS0uLn50cI8ff3FwgEJ06cULxKXFwc IWT27NkzZswghMTHx9N0OiYxdepULy8vgUCQnJxMCElJSREIBAMGDHB1dSWEpKWlvVrhdMjBx8dn zJgx9JikiXh+AQDvV9DwV1bm8Xg8Hq+qqioxMVFHR2f69OkvW4K8CCAvL2/MmDGjRo1KSUlJSUlx d3f39PRUHIuIF8Xj8bBr/yJTU1NCSGNjo7wM9HpZXV198uTJrl270kQVFRXxDIQQNTU16XXpA4jw 8HAWixUeHk468BiipKSEEKKjo0MDwfLycpr+7NkzQgiXyxXPfPnyZUdHRzU1tS5duhBCWltbX61w SkdHR11dnRAiEAhwYAAAYoVXoaKi0rt376+++oq56yopKRk7diyXyx0zZgwzQ146ceTIkUVFRWw2 e+3atRJlfv3114sXL/70009NTU1NTEzmzJkzb968yMhIQkhbWxuXyz158qSZmdnAgQMfPHggXRQz riBdKZ/Pt7S0jIuLs7a27t69O3MHefXqVR8fHwsLC19f3+zsbBwZAwcOJITcu3ePEPLo0SM7O7uV K1e+cC1ra2tCCJ3ZUFpaSgjp0aOHRJ7i4uLk5GR7e3vRn+zs7G7cuMEcKjLRaKC+vr6mpoYQYmZm Jh7TFBcXi2eeOXPm/fv3r1+/riDW6UjhAADwemIFoVBYWlq6devW0aNH05TVq1c7Ozs/fPhw6NCh a9askZd49epVOgYgMcGeEJKenj5x4kTxFD8/v1u3btHQpKmp6f79+7m5uRMmTKDryitKulI1NTUe j/f7779nZ2dv3bqVCVNWrlwZGhr68OHDKVOmRERE4MhYtmyZqqrqxo0bKyoqNmzYkJ+fLz5mIM/k yZMJITt27ODxeN988w0hZM6cORJ5YmNjhUKhv7+/+M4ViUT0QYDikhMSEuh3GZhvXgQGBtJhiaSk JBUVFfrQgYYImpqaMTExhoaGzFCTiYkJISQnJ6eDhcuDuY0A8F5hJSYmSp/HCSFxcXH0bJj1R4EJ W036/0FIzAkwMTG5cOGCjY0NIcTOzi4lJcXY2Li0tNTd3f3hw4fyEtlstsznBUZGRkVFRRoaGkxK S0uLhYVFRUUFXSs3N9fMzKyysnLAgAFPnz6VKIp5La/SgoICAwOD1tZWIyOjuro6ehvt7e09c+ZM CwuL9+oIqK+vL+e19rO3kl50/fr18PDw7OxsPT294ODgVatWKSkpkT+/RyDzgb1AIFi/fv2hQ4cq KiosLS3nz58/f/58icuqk5PTvXv3srOznZycaEpmZuaAAQMcHR3v3r0rXrj4az6fv3Tp0hMnTrBY rICAgE2bNtGnGy0tLStWrDhx4kR9ff3QoUN37txpY2Nz8ODBZcuWaWtrL1++3NDQMCwsTENDIycn Jyoqav369aqqqhUVFR0pXF5jFPQAAEDnETz3c5cJS6XT+S1NEil3z8eELF5IrwUikYjehikpKQUF BRFCWLFxP4jnTjxzuuOxAr0eC4XCkpKSPXv2pKenX7x4kRBiYGBQVlamqqra2trK5XKrqqrkJcqL FT744INTp07RAW3q6dOnEydOvH37Nl2rurpaVVW1ra3N2Ni4urpaXqzwwkqZ1wUFBVu2bDl37hyX y920aRO9PX3PYwUAAHjPY4VxH/kSQpRU1DTE/16hKUpKSubm5mFhYczXyQwNDelVuaqqio4Ay0uU x9XV9fjx4+IpP/7445AhQ5i39LlybW2t4n+A2fFKraysdu3a9ejRo5CQkFmzZuEIAwAAoLHBa5iv IBKJqqqqoqKi6Gw4QsiIESP27dvX2NgYExMzfPhwBYk2NjZ37tyRnqYeFha2d+/emJiY8vLysrKy ffv27d69e/ny5XQpi8X6/vvveTze/v37Bw0apKAomZXKNHLkyIMHDzY3N1tZWTE/ZgwAAAB/6beY 6JQFFoulr68/YsSI/fv30/Q1a9YEBwfb2to6Ozvv27dPQeKFCxcmTJhQWloq8X3I7t27X7p0adWq VVFRUYQQZ2fny5cvm5ubMxkcHBxcXFz09PQOHTqkoCiZlcoUHh4eFha2dOlSS0vL6OhoHBkAAAB/ NVZQ8BsGXC73/PnzHUk0MTH57bffZBbSo0cP8Z/EkRjJ8PHx8fHxkVcU0zaZlYq3nHnt4eGRmZmJ AwIAAEAC/h8EAAAA/D3jCgAAAPAWST+1Rfytk/c8xfmFQuHtW6kDBg5+K2MF/IQzAADAy2K+Pyn9 nUmZ6G/qEDyDAAAAAMXwDAIAoEPovy9pb28XCoXML3gqKSkpKyvjZ7/hrfCyzyAQKwAAvIT29vb2 9naBQNDS0iIQCNra2gghKioqqqqqGhoaqqqqysrKysrK6CjozF72GQRiBQCAlwgUWltbm5ubGxsb RSKRuro6/cVYmtLU1KSlpaWpqammpoZwAd5JHY0V6uvr0VkA8N4GCvX19Xw+X11dnc02KSggtbWE EKKry7GyIjxeeUNDg0Ag4HA4CBegM8MzCACA149OUGhububz+UZGRg8eaMbGkqQk8vQpIYRYWhIv LxIUZNK7d/Pz58+bm5uVlZWVlJQk5i7g39zD323NmjUdyfa3P4NQ/C+a4O2FESMAxbGCQCBobGxU V1d/8EBz8WKSkkKY/0b+4AHJySG3bpHt2zXNzdVpNhUVFel5jvPn4z/Swd9l9+4Df3cV+M4kAIBc 7e3tLS0tIpGIzTaJjSUpKURFhQQEkIwMkpJCEhJInz4kJYXExhI220QkErW0tOCfz8G7B7ECAIBc QqFQIBCoq6sXFJCkJCISETU1IhSSiAjy738TU1MyeDARiUhSEikoIOrq6gKBQCgUot/gHYP5CgAA colEora2Ng6HU1v73zkKjY3kxAnSpQs5eJA8f05SUwkh5OlTUltLzMw0eDyeiHlEAYBYAd43RUVF V65cKSsr09HRsbKyGjVqlIqKCvnfeVtaWlpWVlajR4+mE1wiIiIkZtxIp7xsCS/0CquIO3LkyNSp U19Lj/3FlkBnNngw4fHI4sWktJQQQvA7TIBYAYCUlpbGxcWNHTvWzs6Oz+enpKT88ssvo0aNokvp FVEkEj1//jwtLe3UqVP//ve/X6p8eSW8wrX2L16eq6qqsLuBwWKxVFRUmpubdXU5lpbkwYP/ptfW klu3SEPDf99aWBBdXdLS0iJzYiPA2w7zFaBDfv311+HDh/fp04f+Co23tzcTKIifVY2NjYcNG1ZS UvLK52WJEuiQQ3t7+6ZNm+7evbtly5bNmzffu3dPXqLiVWgosHfv3m3btuXk5GzYsEGiAQcOHKir q4uIiLh69SohhMfjHTp0KDIy8uDBg3V1dYQQoVAYGRn5+++/f/311zExMRUVFXRF6ZziZC6VaElL S0t0dDT9NUBKIBBER0e3tLTg8HuTp0glJVVVVT6fb2VFvLz+f/xgwADy6aeEzf7voIKXF7GyInw+ X1VVlfl3OwBvO2byDY5p6Oi4Qs+ePV+YraKi4tdff7WwsHjlimSWoKyszOfzy8vLFy5c6OPjQy/k MhMVr0IIuXjxYs+ePefNm/f06VPxCzM1a9YsOjIxcuRIQsilS5fMzMxCQ0OtrKwuX75MrxwCgaC8 vPzzzz93cHCgiTJzipO5VKIlGhoaPXr0yM7OZtZKT0+3t7fX0NDA4fcGKSsra2hosFgsHq88KIi4 uv43XNi3jzg7k5ISwmIRV1cSFER4vHIWi6WhoYHfYoJ3KVYeMHDwX40V0tLSvLy8zM3NBw0atHTp 0le4Afroo49e41axxdjY2EyfPv3Zs2d/az+Kt59NbzHeUY2NjVpaWvKWRvzpyJEjQqFw/PjxL1v+ C0sQCoWurq5qamr29vbMrbnMRMWrFBUVubi4qKuru7i4vLBVT548GTx4sJqamrOz81M6sY0QkUjk 7Oyspqbm4uJSXFysIKficqRbMnjw4Js3bzKDCmlpaYMHD8bZ6s1isViqqqpaWlp8Pr937+bt28mS JaR3b6KlRbS0SO/eZMkSsn076d27mc/na2lpqaqq4hkEvHtefb5CVlZWQEBAVFTU6NGj6+vrd+zY sWHDhnXr1r1UIfn5+a93e3g8Hr1I5OTk7N69e/bs2efOnfv7uk+8/bTqd5W2tnZ9fb2enp7MpfKm CLBYLKFQyAzJtre3yxue7cgkgy5dutD7PPF55jITFSzl8/mampqEEB0dnRfW2NzcTDN36dKlqalJ vDcIIRoaGnw+X3FOBUulW6Kjo2NiYpKbm9uzZ89bt25ZW1vjN9A6Q6ygrKysqakpEAieP39ubq6+ bp3JzJnMbzwT+hvPz5/z1dXVNTU16f+cRL/BuzbA8Mprbt68ecWKFX5+fhwOx9zcfPPmzUygIH6H zby+evWqj4+PhYWFr68vHWgdOXJkUVERm81eu3YtIaSkpGTs2LFcLnfMmDGFhYX0ZNqtW7f4+Hgb GxsnJ6fz588fPnzY2traysoqPj5e8bCJg4PD8uXL79y5QwhpaWmxtLT85ptvjI2NZVbU1tbG5XJP njxpZmY2cODAB3/OXyovL/f19TUzM/Pz86utrZUoSqL9zJZKryVz898u3bp1+/333192LQMDg8rK SuZtWVkZ3QVvkJqaGr3Ad+QHK5lLe1NTEw07mGs/PRiYBwTycipYKrMlrq6uP//8c1NTU1pa2pAh Q3CG6gyUlZXV1NQ4HI62tnZra2tlZaGBQbmDQ52DQ52BQXllZWFra6u2tjb+GQQgVpDhzp07//rX vzqef+XKlaGhoQ8fPpwyZQqdfcZMH1u9ejUhZPXq1c7Ozg8fPhw6dCi9y1RTU2toaLh3796dO3ci IiIWLFiQm5ubnZ29bds2enmWRyQSPXjwYNOmTXQIV11dvaGhQSgU0uFf6YpUVFSampru37+fm5s7 YcIE2h56s+vg4JCdnW1iYkJrFC9Kov3it8gSa8nc/LeLq6trSkpKdnY2n89vampKSUlRHK5Rw4YN +/nnn58/f97W1vbs2bMzZ864ubm92Q3p2rXr7du3+Xw+M9ovQV9fv7S0lP70nrW19a1btwQCwc2b N62trZk8t2/fbm1tTU9P79atG02Rl1PBUpktMTU1NTY2/uGHH7hc7huPq0AiXNDW1tbX19fS0hKJ RDwej/6UgpaWlr6+vra2NgIFQKwgw/Pnz42MjDqeXygUJicnV1RU+Pv7nzx5UjpDcnLyggUL2Gz2 rFmzUlJSCCEsFqutrW3x4sVsNtvHx6eioiI0NJS+LioqklkLnazA4XA++uijtra2vXv30nJaW1uD g4PpkK90RbR5M2fOZLPZs2fPTk9Pp4m//PLLokWLDA0NFy9efPHiRemiZJJeqyOb38mZmJhMnjw5 Kytr69atMTExz58/9/HxeeFajo6O7u7uiYmJmzZtSkhIGDZsWO/evd/shnh4eGRmZkZHR8ubgDlj xozTp09v3bqVZi4sLNyyZUtJSYmHh4d4b+zevTsnJ4f5Moi8nAqWymuJq6trUVGRq6srTk+dLVxQ VVXV1NTkcDh6enqGhoaGhoZ6enocDkdTU1NVVRWBArzDVNpaX/EbWaampiUlJd27d+9g/vj4+C1b tgwfPpzL5W7atEn6VFhdXU0fhxsYGIh/x93AwICOMYi/lvcrqgomDTB3afIqohl0dXWZQqqqqmxt belrdXV16aJkkrnWCze/8zM3N58+fbp0uuKpBjY2NjY2NopLVlACs0g8TwcTZS7t2rXrwoULCSGN jY0yv2Kgra09Z84cJvSUucn29vb29vYSQap0TqZSmUvltYTH45mZmVlaWuL01NmwWCwWi4WvRMJ7 hQYJSmxtLfG/jq8/cODAU6dOyR6sUFISCASEEObb54QQKyurXbt2PXr0KCQkhH4zTYKhoSG9cldV VRkaGv4dn3PFFdXU1BBCamtrmQllhoaGJSUldLBR/Lm74rlLMtd64ebDP+P48eMPHjxobW1NSUkx MzPrVC1pb29/+PBhUlKSp6cn9hQAdAY0Nnj1AHnJkiXbt28/duxYXV1dZWXltm3bpkyZwgw5nD9/ nsfj7dixg/4MMCFk5MiRBw8ebG5utrKyYv4Pm42NzZ07d1pbWwkhI0aM2LdvX2NjY0xMzPDhw/++ LZdZEYvF+v7773k83v79+wcNGkQTPT09o6Oj6+rq9u/fL3Nyhnj7GTLXkrn58M/r37//5cuXN2/e XFxc7O3t3alaEhkZefbsWS8vLysrK+wpAOg8Xv07k3369Dlx4sSaNWvCwsI0NDRGjx69bds2umj1 6tV0cPXrr79ms9kikYjFYoWHh4eFhS1dutTS0jI6OprmvHDhwoQJE0pLS588ebJmzZrg4GBbW1tn Z+d9+/b9fdssryIHBwcXFxc9Pb1Dhw7RlK+++mrevHk9e/Y0NzffsWOHdFHi7WcSZa4lc/Phn2dn Z2dnZ/cXj5+/qSWrVq3CDgKAToiVmJgo/j42NpZOBYiLi6Mj7Vl/FJiw1d7573mz2ex3+wcS5Kmv ry/ntfazx40swN/lbfzqE7xd5N3DBM/93GXCUul0fovkz8DcPR8TsnghvRaIRKLAwEBCiJKSUlBQ EMH/jgIAeFPncYC3BSb0AgAAgAxCofDGjRuIFf7f+/kAAgAAQB7mG8KIFQAAAEBh0IAuAAAAAMQK AAAAgFgBAAAA/gYd/c5kR/6BLwAAALx7MK4AAAAAiBUAAAAAsQIAAAAgVgAAAADECgAAAIBYAQAA ABArAAAAAGIFAAAAeEcJhULECgAAACCXkpLS0KFDESsAAADAi4IGdAEAAAAgVgAAAADECgAAAIBY AQAAAP5hKryGRvQCAAAASKNBgoqKmgb6AgAAAKTRIAHPIAAAAEARxAogG4vFYrFYbDa7ra2NECIU CnV1dWlip2qnQCAwNDSkTW1ubpZov/Tr12Lnzp1/X+EAAIgV4G3S0NCQmZlJCLlz505dXV0nbOH5 8+erqqq6d+/e0NBw5syZf6bSkydPMq9FIpFIJMKhAgCIFeB9pKGhweFwrl27Rgj59ddfdXV11dXV maXNzc0LFy7kcrmmpqaLFi2iww8CgYDFYnG53KSkpB49ejg4OCQnJ+/fv9/AwMDS0vLKlSt0XT6f v2jRIjMzMy6XO3fu3JaWFkJIa2srXTcyMlJTU9PHx4fFYj158oSu0qtXL11dXZpT3NGjn35AKAAA IABJREFURwkhMTExhJBjx469cKNkVk3Tw8LCunXrxuFwvL298/PzCSF//PGHt7e3vr6+jo6Ot7f3 o0eP6EAC7RM6nCA+riCzcKZPzp49a2dnJ94PGJMAAMQK8HZrbW11dXVNTk6mscKQIUP4fD6zNCIi YufOnZGRkcuWLYuOjt6yZQshRFVVlRBSU1NTW1u7ZcuWBw8ezJgxQygUHjx4sLCwcMmSJXTddevW RUdHL1y4MCwsbO/evatXryaEqKmpEUJqa2tra2srKiqmTp1KCPn5558JIYWFhbm5uR9//LGGxv9M xa2vr09MTOzXr5+Xl1ffvn2TkpKqq6sVb5TMqgkhGzdu3LJly+zZs+Pj4y9fvjxz5kxCSHBw8OXL ly9dunTy5MmkpKTg4GA6kMCMKHSkcKZP6urqoqKixPsBAKAzEwqFt2+lIlaAFxwlHh4eN27caGtr u379+pgxY8SX0nF4X1/fwMBAiXt6Pp/v7e1N8z958iQgIIC+zs3NpRni4uIIIbNnz54xYwYhJD4+ nlm3paVl+vTpbDbb19eXw+HQWOHixYuEkClTpki08Mcff2xpafHz8yOE+Pv7CwSCEydOKN4oeVXT 9k+dOtXLy0sgENAIKSUlRSAQDBgwwNXVlRCSlpb2aoXTPvHx8ZHoBzy/AIBOPZygpIRxBXgxb2/v +vr6uLi4yspKb29v8UXFxcWEEH19/a5duxJCCgoKxJfq6OgwDyyYhxcCgYCmlJSU0DxsNpsQUl5e Lr6uvb09IURTU9PPzy85ObmxsfHixYvm5ubDhw+XaB59ABEeHs5iscLDw0kHHkPIq/rZs2eEEC6X K5758uXLjo6OampqXbp0oQMtr1a4RJ8w/QAA8HYEDegCUKB3794WFhY7d+60tra2s7MTX2RmZkYI aW5upjfHPB6v48XSS3J9fX1NTQ1TlHQkO3XqVD6ff+HChStXrgQFBUk82i8uLk5OTra3txf9yc7O 7saNG4WFha9QtampKRMAMWbOnHn//v3r1683Njb+9e0CAECsAO8mLy+v9PR0iUEFQsikSZMIIceP H7906ZKmpua4ceM6XubkyZMJIQkJCfRBhvTDBcrd3d3S0nLdunXV1dXSeWJjY4VCob+/P5Pi5+cn Eonog4CXrZp5kpKUlKSiokIfOtAQQVNTMyYmxtDQkBBCQyITExNCSE5OzqttFwNzGwHgraCCLgDF vL299+3b5+XlJZEeHh7e2Ni4cuXKhoaGESNG7Ny5s+Nlrlq1qra2dsWKFSwWa9GiRStXrpR3KZ08 efLGjRudnJwcHR0lltIHEBKxQmRk5LFjx5YvX/6yVa9evbq5uXn//v1RUVGjR4+mm7N58+Zly5b5 +vouX758z549YWFhAwcOzMnJCQsLW79+vbu7e0VFxStsFwDA24UV/1OC+PtTPx4XCoWEkLi4OHrH k/VHgQlbDT31Divntfazt+qcbTt//vzYsWOjoqI+//xz7CkAgJcSPPdzlwlLpdP5LU0SKXfPx4Qs XkivBSKRiA61KikpWVhYDBg4GOMK0EkJhcKmpqZNmzYZGBjMmjULHQIA8KZgvgJ0UomJiQYGBkpK SqdOneJwOOgQAIA3BeMK0En5+vqK//QTAAC8KRhXAAAAAMQKAAAAgFgBAAAAECsAAAAAYgUAAADo BOjvLSFWAAAAANmUlJQGDByMWAEAAABeFDSgCwAAAACxAgAAALwi/G4jAIBcERER6AR466xZswax AgDAW3zaBXjrAlyVttYW9CwAAABIo0GCCltbC30BAAAA0miQgLmNAAAAoAhiBegQZzGjR49esWJF eXk5s+gvlvxaVnF2dk5NTZVIvHPnzl9s3muRnZ09e/Zsd3d3Dw+PZcuWlZWV/WNVz5s376/vehz/ hJAffvhBSel/Tpg8Hm/ChAk6OjoTJkxoaGigiU+ePBkxYoS2tvYHH3xw8+ZN8fxHjx5lsVgyC2ex WBcuXJBITElJYfKz/qSsrGxqaurv7//48WPsFECsAJ1ORkZGRkbGrVu3YmJiNDU1V69e/bqKfS3l qKioHD9+XCQSiSfGxcWpqqq+2X7LyckJDQ0NCAg4e/bs8ePHu3fvvmnTpn+s9sLCQhy6f11KSsrd u3cljq6oqKg+ffoUFRU5Ojru2LGDJs6cOXPUqFEVFRULFiz47LPPmMwikei7776TV76qququXbsk yt++fbu6urp4CSKRiM/nX758WVdXNyAgAPsFECtAZz1ilJRsbW1nzZqVk5PD3PGcO3fOw8NjzJgx SUlJ9fX1vr6+fD6fWaWlpWX8+PH19fVpaWlz5swZMWLE/Pnzc3NzJW5ba2trFy1a5OrqGhgY+Pvv v9PE9PT0gIAANze3hQsXZmdnK2hYW1ubmZnZlStXxM/v+vr6AoGAvq2srJw/f767u/uiRYt4PB4h pLW1dfjw4UlJSaNHj/b19b1+/XpCQsKoUaM8PT2TkpLoWhUVFZ999pmbm9usWbNKS0sJIXw+f+TI kQcOHBgyZIi8LRVv2Lfffjt37lxPT09tbW1DQ8O5c+du3bpV5l0781p6q5lKXV1dZWZobW318PA4 e/asePunT59eVlbm7OwcExMjswfkJRYUFEyaNGn8+PEpKSk45gkht27d2rhxo0RiQkLCtGnTOBxO UFDQqVOnaOKUKVNCQ0O7dOkyadKk/Px8JnNiYqKLi4u88gUCQffu3X/66Scm5fz58yYmJuJHFxMT 9+nTZ+PGjQ8ePMB+AcQK0EmJRKL8/Pxvv/22b9++TPSQl5d3+vTpsLCwXbt2cTgcNze3s2fPMqvE x8cPGzaMw+Fs3759+vTpSUlJ48aN2717t0TJ27dvt7Ozu3DhwqRJkyIjI2ni5s2bQ0JCrly54unp uXfvXsVt8/f3/89//tPe3k7buWfPHn9/f2bprl27bG1tExISDA0Nae2qqqrNzc0PHz48depUSEjI unXrnjx5kpCQ8MUXXzDNi46O7tOnT1JS0oABA3bu3EkIUVNTa2pqEgqFV69elbel4q3Kzc0dNmzY S3Wy9FYzldJgSDqDqqpqY2NjXl6eePu///57OnJDn0RI94C8xJ07d44cOfLYsWO4IFFLliyRTnz2 7JmJiQkhxMTEpLi4mCYGBwfTwYDLly9/+OGHTOZvvvlmzpw5CqqYN2/emjVrmKP3yy+/lPn8SCgU lpSUfP3112PHjsV+AcQK0OnQyQouLi7z589va2v76quvaHp7e/u///1vbW3t4cOH00kMkydP/uGH H+iAanNzc2xsbFBQED3NZWRkVFdXe3l50euuuJSUlKCgIG1tbV9f36NHjzJX36FDh6qpqXl7e7/w aYWVlZWZmRm9eF++fNnAwMDa2ppZevPmzalTp+rp6U2bNo3eLrNYrPb29mnTpmlpabm7u1dXV8+Y MYO+ZqYUZGRkBAUFaWlp+fn5ZWZm0rXa2tomTpyooaEhb0vFVVdX6+joiPchpWBDpLdavFIFGaZP ny7RfnHSPSAvMTs729/fX0tLa/z48Tjy5amrq9PS0iKEsNnsmpoaiQBxyZIlUVFR9O21a9f09PS6 d++uoLSePXtaW1sfPnyYEHLixAkTE5PevXuLZ2DmK5iZmcXGxjLxNMA/AL/FBB2l4FKtq6tLCFFR UaFXTS6Xa2dnl5ycPHz48Pj4+EGDBpmamhJCtm3bdvDgwWnTphkZGS1durR///7ihfB4PIk7clrp jh07CgoKWlpaJJ7myjRlypSvvvpq9OjRe/fuXbFihfii2tpaLy8v+lp8EgNtPE1hXjN11dbW0iu9 rq5ubW0ts5aBgYGCLRVnYmJSWlpqaWkp3oeKYwV5W00rVZBBuv0v7AGZiQ0NDWw2mykQ5B32jY2N HA6Hx+Pp6+sz6ffu3Rs3btyePXs++OADmvL1118vXrz4hQWGhoZOnz590qRJq1ev3rNnj/SQHg24 nz17tmPHjhkzZly/fh17ATCuAG+xqVOnbtiwoba2NjY2durUqTTRzMxs1apVFy9enDJlypdffil9 5q2qqpJIXLt2bVBQUFJSUnJycgcHP3R1dbdv366pqSlxPdbT00tOTqYzNKW/MSGPnp4eDRFqa2v1 9PTEb/IUbKk4FxeXM2fOiKcw/xKeGQ8ghIhvu7ytZip92W5R0AMyE7W1tencBek9Aoxu3brR8ZvS 0lILCwuaWFJS8q9//Wv37t3e3t5MzgsXLnh7e9Pdx2Kxhg8fLrPA4cOHGxoaLl26VFtbe8SIEbJP 2UpK3bp1W7VqVVZWFnYBIFaAt1vPnj1tbW1DQ0PpC5o4ffr0kydP8vl8MzMz+lxWnKur6+HDh3k8 XmJi4ieffEIT9fX1uVyuQCA4fPiwrq5uUVFRR4YWfvzxxylTpkikDxky5MiRIw0NDSdOnFD85Fjc oEGD4uPjm5ub4+LiBg4c2MEtFTd79uzExMQDBw6UlJTw+fx79+4tXryYaYChoeGvv/7a2Nh45MgR ZWXlDm51x7vF3Nw8NzeXTvCU2QMyE3v37n3q1KmmpqbTp0/jYJZn4sSJhw8frq+vP3z48Mcff0wT w8LCpk2b5uPjIzEkQNHX165dUzC0sGfPntDQUHkZRCJRZWVlZGTk4MGDsQsAsQK89aZNm5adnT1t 2jQmZc6cOceOHRs+fHhERMSqVask8oeEhJSUlPj4+Bw9epQZdVi6dOmSJUumTp3ar18/Pz+/wMDA F9br6enZt29fT09PiXT65Qtvb+/4+HjxL7MpNn/+/Dt37owePTonJ2fBggUd3FJxRkZGR48effLk Cf0OyNq1az08PGbNmsWUv3HjRl9f3x49enTp0oVeTl641R3vlgMHDkRERNB7XJk9IDMxJCTk3Llz QUFBvXv3VldX78jTn3cbnSsg/oIQsnjx4vv373fr1u3Ro0chISE0MS4ubv369czPIYh/FaIj/P39 XV1dxefkSrRBWVm5V69ehYWFR44cwUkG/rmPQGJiovj72NhYOkAaFxdHPxJZfxSYsNXQU++wcl5r P3ur117smTNnTp48Safiv9veny19D0VEROB/R8Hbe9AGz/3cZcJS6Tz8liaJlLvnY0IWL6TXApFI RO9AlJSU6HxtjCvA6ycQCK5fvx4VFSXvRhxbCgDwFsH3IOD1c3Nz09fXX7p06Tv/88Dvz5YCAGIF gNcpLS0NWwoAgFgBAOC9EBERgU4AxAoAACAbJjYCEMxtBAAAAMQKAAAAgFgBAAAAECsAAAAAYgUA AABArAAAAACIFQAAAACxAgAAACBWAAAAAMQKAAAAAIgVAAAAALECAAAAIFYAAAAAxAoAAACAWAEA AAAQKwAAAABiBQAAAECsAAAAAIgVAAAAABArAAAAAGIFAAAAQKwAAAAAiBUAAAAAsQIAAAAgVoC3 UVlZ2YwZM8zMzNTU1AwNDX18fB48eEAX7dy5k8VidYZGCgQCQ0NDFovFZrObm5uZdBaLxbRQ/PVr Ib75r71wcffu3fPw8GC2q7KyUl9f/9atW69QVElJiampKSGkuLi4W7du8rIVFRUZGxtLpyte69X8 xTKLi4ttbGz+mcOsqalp9uzZr71YxT3wUpUy+/fN7qCXanNRUVGvXr0GDBjw7NkznG8RK8DbKjAw 8Pvvv4+Kiqqqqlq/fv2vv/66fPlyuujkyZOdpJHnz5+vqqrq3r17Q0PDmTNn/plKxTdfJBKJRKK/ o5bq6urPPvvs2LFjmpqaNGXVqlX+/v6vFit07dq1rKyMEJKamjp48GB52VJTUwcNGiQzXcFar+Yv lpmamurm5vaPHWYVFRWvvVjFPfBSlTL7983uoJdqc0pKypAhQwIDAw8cOIDzLWIFeFvRa9Lo0aPZ bPacOXN4PF5iYiK9k7527Rp9QQjh8/mLFi0yMzPjcrlz585taWkhhLS2trJYLC6XGxkZSS91f/zx h7e3t76+vo6Ojre396NHj2gtBQUFLi4upqam3333nb6+PovFam1tJYQ0NzcvXLiQy+WampouWrSo ra1NZiOPHj1KCImJiSGEHDt27IUbJbO1ND0sLKxbt24cDsfb2zs/P19emyU2X3xcQWbhAoGAdsXZ s2ft7OwsLS2vXLnSkTGJxYsXf/rpp8zNYmZmZmtr64wZM5hY4fnz52ZmZgKBgBl1sLGxqa+vz8rK Gjp0qJaWlpWVVXx8PF0aGhoaFRUlfgGQmS01NdXIyGjYsGEaGho9evS4evWqxGXjypUrLi4uHA5n +PDhubm50s2Oi4vr2bOnlpbW4MGD79+/TxOnTJmydu3aDz74oFu3bufOnWPKdHBwsLS0ZIKt+vp6 a2vruro6+jY9PZ2JBm7cuGFoaEgIaWxstLW1raurS01NtbCw6N+/P5vNTkhIoNlkNk9m7eJkdgXD ysrKz8/vzJkzdF/Iq+LLL790dHS0sbE5c+ZMZmZmnz59evbsyVQXGhoaGhpqa2urr6/PHKgK9kVH KhXH7N9z5845OjpqaGjY2dnJ3FiZGWSWr3innzlzxsnJSUNDo1evXhcuXOhgm48cOWJjY2NgYBAS EvLbb78NHjx4xIgRSUlJON8iVoC3Vf/+/Qkhw4YN27x58+3bt5kTusSLdevWRUdHL1y4MCwsbO/e vatXryaEqKmpEUJqa2tra2vpfUZwcPDly5cvXbp08uTJpKSk4OBgWsiyZcsyMjI2btwoEolqa2uZ dSMiInbu3BkZGbls2bLo6OgtW7ZIt7C+vj4xMbFfv35eXl59+/ZNSkqqrq5WvFEyW0sI2bhx45Yt W2bPnh0fH3/58uWZM2fKa7N0PyguXFVVlRBSU1NTV1cXFRVVWFi4ZMmSF3Z+RkZGenr6tGnTmJQv vvhi3bp1Tk5Ot2/fpilGRkYDBw48f/48fRsRERESEsLhcBYuXDhjxgw6GjR37lzmvD9kyBDxC4C8 bDdv3oyMjKyoqPj0008/++wz8ctGZmbmlClTNm/eXF5ePnHiROnR5suXL4eFhR06dKiysjIgIGDO nDk0PS8vLyMj4+zZs8eOHVuwYIFQKKRljhkzpnv37mlpaTRbTEzMjBkzdHR06FtjY+P6+npCSEtL y7Fjx2gQefDgweDgYB0dndTU1OLi4sTExDNnzoSGhgqFQnnNk1m7OJldwSgoKBgyZEhKSkpZWZmC Km7fvn327Nn4+PipU6fGxMRcuHDh2LFj/v7+9DhJTU0tKSlJS0vbunXrihUrJC7G0g3oSKUSYwB0 /wYHB+/du7empmbZsmXM4S1OOoO88hXs9PT09E8//XT79u01NTVff/310qVLO9LmmzdvhoeHnzhx oqioSFtbe//+/YMHDzY3Ny8qKsL5tvNj0ZtFRmxsLP0sxcXF0ZuerD8KTNhq6Kl3WDmvtZ+9lURi SUlJWFjY6dOnGxsbCSHW1tbHjh378MMPmVtqehK0sbF5/PhxVVUVi8XS19e3tLQsKChg8jx48KBX r17ixba0tGhqaqqpqfH5fEKIiYlJRUVFdXW1QCAwMTFhiu3Ro0deXl51dXVLS0vXrl379Olz7949 iRZ+9913M2fO3LBhw8qVKzdu3BgeHr537156eRNvYUdaa2tr++jRo8ePH3fv3l26fyTa/LKF0zy1 tbUaGhoaGhqqqqr0sqfAihUrVFRU1q1bxwyf/PHHH/Rt7969U1NT6QX19OnThw4dOnnyZH5+vo+P z71792ikxYw0uLi4PHnypLW11cjIiAZtxsbGz58/l5mNz+dzOJz09HQnJydCCI/H09fXFwgEfD6f rjVp0iRPT8958+bRPtHT0xOfI0IIGTdu3MSJE2fMmEFHhgwMDJqamvh8vr6+/uPHj01MTFpaWoyM jOrr61tbW2mZBw4cePToUVRUVEtLS//+/W/evMlms2lpzc3NDg4Ojx8/Xrlypbe3t4+PT21traur 66VLl1RVVQ0MDAoKCgwNDZubm42MjHg83scffyzdPJm1yxvOYbpCYizK2Ni4oqJCXV194sSJMqvQ 09PLy8szMzOjW11cXKyvr8/n801MTGpra+nGFhUVsdnspqYmHR0d8V6Vty8UVyreQmb/qqur9+rV a9q0aYsWLerSpYvMbZTOIG+jFOz0wMBAd3d3JhbsYEcFBwc7OzvTxLy8PBcXl5qamtbWVg6HQz9Z 8HcInvu5y4SlMgZZW5okUu6ejwlZvJBeC0QiUWBgICFESUkpKCgI4wogV9euXY8dO1ZTU3Pjxg1/ f//Hjx/PmjVLOltJSQkhREdHh57iy8vLxZfa29szd5yOjo5qamr0DMVcLGtqaggh2traenp64isW FxcTQvT19bt27UpvWeQ9gAgPD2exWOHh4R15DCGvtXR2FZfLlbhLltnmly2c0tHRUVdXp08lXtj5 V65c8fb2pq8bGhqWLVu2fv16+swiJycnIyODLvLx8UlPT6+qqlq5cuXq1avV1NTu3bvn7e1tYGCg rKxsampKC8nMzOzdu7e6unpmZqaDg4O8bBkZGXZ2djRQoH1Cp7Yxa2VkZMyfP582Q1NTU0tLS6LZ 169fHzduHH1dW1tL+yEzM9PJyYkGgpmZmf369WOxWEyZH3/8MX2CcODAgalTpzKBAiFEU1NTJBJl ZWVVVla6ubmJRKKEhAQ/Pz9tbW1aDn0qkZWV1b9/fxaLJbN5MmsXb7PMrpAY43F0dKT7TkEVZmZm tDFDhgzR19cnhNy+fZt2Jq2XblplZSU9zF64LxRXKo7Zv/TRQGpqqqWlJfNcRoJ0BnkbpWCnX7ly Zfz48S/bUb/88svo0aNp5rKyskGDBrFYrIqKCgMDA5xv8QwC3m6qqqqurq50QsDTp0+lM9ATX319 Pb3q0zPm/x9eSv89wGbOnHn//v3r16/TUQoGDRGKi4vp6gxaTnNzM508yOPxJOotLi5OTk62t7cX /cnOzu7GjRuFhYUKNkdea5nvCIhnltfmly38FRQVFVlYWDCPNtasWcNsZnR0NDNlQUVFxd/ff+3a tfn5+TT2DwwMHDdu3OPHj9vb2z/99FNfX1/xsW7mhbxsTKV00IJet5i1KisrGxsbmZZUVlZKNFsg EDB3q2fOnPH09CT/O0UuLS1NoiUmJiYWFha3bt36/vvvQ0JCJArU1NT8+uuvIyMjCSFCoTAuLo7e lcosU2bzZOYUJ7MrxKWkpLi6ujL3/TKroOP/9DUde5Podmbeya+//jp06NAX7osXVirxAILZLjs7 uzNnzpw8eZJ5fiRBOoPifpO5tK6uTltb+2U7qri4mOmH69ev0/ILCwvNzc1xpkWsAG+riRMncjic H3/8sbGx8dtvvyWEjBgxgi6id2k5OTmEkMmTJxNCEhIS6LcDpkyZIrM0ernV1NSMiYmht4P08k8n rx0/fvznn38Wzz9p0iSafunSJU1NTeZulUEflvn7+zMpfn5+IpEoLi5OwUbJay0dbTt27FhSUpKK igo95clrs/jmd6RweRTMbayurqbfXczLy7t69ar4iM6oUaPEvwoxY8aM6OjoyMhIWlRhYSG9bp04 ceLgwYMDBw6UGSvIzJaWlpaVlZWamtrS0nLlypWtW7fOnz9ffC1HR8d9+/bxeLxt27ZJ31YSQgYN GhQTE9PS0pKRkbFhwwZ67Re/kkm3hBDyySefzJs3LyAgQPryo6enN27cOHrfyWKx3N3d6VRZmWXK bJ7MnOJkdsX/DMzevaunp0cHyV9YRVpaGvNFEiY0+e233zIyMp48eVJYWBgVFSXRLTIb8MJKZcYK o0aNio2NFQgETU1N0sMP8jIo3iiZS52cnL799tvGxsatW7cyIzEvbDOXyz1y5EhDQ8MPP/ywceNG Wv758+dHjRqF8+1bIPF/BQYGBgQEBAQECIVCGhJm5j55Bu+0zNwnIin5+fkTJkwwMjJSVVU1NzcP Dg6uqKigi7Zs2aKrq2tkZCQSiVpaWhYsWGBiYkK/sMDn88W/RsiU9t133xkaGlpZWe3Zs+fEiRNW VlY9e/YUiUR5eXl9+vTp2rUrDUeYVZqbm5csWdK1a1f6xYQnTyRb6OjoSAjJzs5mUuikP0dHR4na xV/La21zc/PixYvNzMzYbDb9HoSCNotvfkcKl9cYiS4Sx+VyaW/7+PhcunRJYumHH34o/nbZsmXi ow46OjpWVlaXLl0aO3bsyJEjRSIRnT4mEonMzMzoC3nZLl++PGjQIC0trQ8++OD8+fO0TGatzMzM vn37ampqDho0KCsrS7rZDx8+dHNz69KlS69evX766SeJ1WkVpaWlEonl5eVdu3YVvw1l7Nq1i3nt 4ODQ0tIiUY74a5nNk1m7OJldIS41NdXExKRXr14drKKsrEx6Y+Pj421tba2srM6dOyexlswGvLBS ccz+TUhI6N69u4aGxgcffHDt2jXpnDIzKN4omUtv3brl4OCgoaHx4Ycf3r9/v4Md9dNPP3Xt2pXN ZoeGhvbu3bu6urq9vd3e3p5OnYa/yYw5S2IuPJP+23Y6T+JvxpwlzLVAKBTSSCAwMJDGBpjbCLLn Nv7D6urqdHV1TU1NS0tLsUc+/PDD//znPx988MH7sLGHDx9WUlJ64TDMW6qoqOiTTz5JTU3FUS3t 4MGDp0+flje1Al6L1zW3UQVdCW/QmDFjfvvttx9//JHOBPTy8kKf0G65du3aux0rtLe3FxQUxMbG Pnr06Pvvv39XNzM1NXXhwoU4pKWVlZVt2bLl9OnT6Iq3AuYrwJu0fv16JyeniRMnhoWF/fvf/6a/ JwOzZ8+m3/J4h/Xu3XvIkCH19fX79u17hzfz6dOnfn5+OKQl0C9eHjhwwNbWFr3xVsC4ArxJLi4u KSkp6AcJ5ubm6enp7/Y2/vHHH+/DrgwLC8PxLE1TU/OXX35BP2BcAQAAABArAAAAAGIFAAAAQKwA AAAAgFgBAAAAECsAAAAAYgUAAABArAAAAACIFQAAAACxAgAAACBWAAAAAMQKAAAh5UE6AAAgAElE QVQAgFgBAAAAQAb8n0kAkKugoKC4uJjH4xFC2Gx2t27dLC0t0S0AiBUAJDk7O0snZmRkvN4qFBQ4 b968mJiYV2itvr7+gAEDFi9ebGJi8tpbpXjp61rlTREKhVlZWa2trVwu18bGhhDS2NhYUlJSVVXV t29fJSUMSQIgVgCQFRa8qUtdYWHhKzRYKBQ+fvw4NjZ29erV//nPf/7Khr/C0te1ypuSmZnZ1tZm Z2fHpOjq6urq6ubl5WVlZQ0YMACfC4D3B24O4NVVVlbOnz/f3d190aJFdJi6tbV1+PDhSUlJo0eP 9vX1vX79ekJCwqhRozw9PZOSkgghbW1tbm5uly5dcnd3/+STT/Lz8yXKTE9PDwgIcHNzW7hwYXZ2 NiFk+vTpZWVlzs7OdGhBulK5B7eSkq2t7axZs3JycgghfD5/5MiRBw4ccHV1JYRUVFR89tlnbm5u s2bNKi0traiocHZ2rqurI4Q0NDS4uLjQFFpUWlranDlzRowYMX/+/NzcXIkBDImiaD94eHicPXtW fNuZVeQtffr0aWBgoI+Pz9WrV11dXUUi0Zvas48fP25sbLSwsGiVYmlpyePxHj9+jOMfALECwIvt 2rXL1tY2ISHB0NBw9+7dhBBVVdXm5uaHDx+eOnUqJCRk3bp1T548SUhI+OKLL2gGFRWVlpaWvLy8 c+fOeXp67ty5U6LMzZs3h4SEXLlyxdPTc+/evYSQ77//nt6Rz5s3T2al8ohEovz8/G+//bZv376E EDU1taamJqFQeOXKFUJIdHR0nz59kpKSBgwYsHPnTmNjY3t7expVPHjwoEePHsbGxkxR27dvnz59 elJS0rhx46QrlSiK9kNjY2NeXp74tjPkLd2+fbu7u/vx48czMzP5fD6LxXpTezY/P5/D4fDl4HA4 jx49Es/PkoWmSxf+BrcLABArwD/t5s2bU6dO1dPTmzZtWkpKCr0MtLe3T5s2TUtLy93dvbq6esaM GfR1WVkZcwn/+OOPtbS0/P3979+/L1FmfHz80KFD1dTUvL29ZY7YS1cqzdnZ2dnZ2cXFZf78+W1t bV999RVtW1tb28SJEzU0NGjwERQUpKWl5efnl5mZSQhxc3N78OABjRXc3NzECxQKhRkZGdXV1V5e XtLxjXRRtK7p06dLbDtzsZS59O7du/7+/tra2v7+/m92z9bV1Wlqaspb2qVLl9raWomwjJJ4LS+G w2cH4O2C+Qrw6mpra728vJh7ZSZdV1eXSWFei18hDAwMCCFsNruxsVH6urtjx46CgoKWlhaZFxV5 lUoUIq/NtGpajo6ODm0hvfINHTqUjmE8ePBg2rRp4mtt27bt4MGD06ZNMzIyWrp0af/+/SWaJFGU RD/I3BDppQ0NDbQcU1PTd+ReREnp6NGjixcvVlVV3bp1a2BgIA2VRCIRn883MzPbtm3b0qVLRSLR 9u3bg4KC8JkCwLgCvGv09PSSk5MzMjIyMjJSU1Nf6raVEMLj8bS1tSUWrV27NigoKCkpKTk5+fVW ytzTM+XQ63ptba2enh4hxMHB4dmzZ1VVVSUlJQ4ODuJrmZmZrVq16uLFi1OmTPnyyy+lmyRR1Kvp 0qVLQ0MDIaSiouLN7lltbe2mpiZ5S5uamthsdgdjhbt37z5+/Hjnzp0rVqwQX6SmplZfX3/37t38 /Pzdu3eHh4fjAwWAWAHeQUOGDDly5EhDQ8OJEyfmzJnT8RVPnTrV2Nh44sQJJycniUX6+vpcLlcg EBw+fFhXV7eoqIgQYm5unpubKxAI/kqlEgYNGhQfH9/c3BwXFzdw4EAaRvTs2XPNmjV2dnYSz9Sn T59+8uRJeivc3t7+wqJeTa9evRISEhoaGuLi4t7snjUzM6uqqpK39Pnz5+bm5h0pp62tbfny5RwO Z/z48XRXigdtAoFg+fLlbDbb19f3Zb/qAgCIFeDtQL8U4O3tHR8f/9lnn3V8RTs7O39//6tXry5c uFBi0dKlS5csWTJ16tR+/fr5+fnRUesDBw5ERER4e3v/lUqlG3/nzp3Ro0fn5OQsWLCAJrq5uaWl pUlMViCEzJkz59ixY8OHD4+IiFi1alVHinoFCxYsSEhIGD9+fL9+/d7snrW3t1dTU5OYwEjl5+dr aGiIf5dSMfrQR0VFRSgUSi81NDSkYwwylwJAJ8FKTEwUfx8bG0s/tHFxcfTWKuuPAhO2GnrqHVbO a+1nb/WPVfcW/R7Rm1JdXT1x4sRr1669wTbU1NRkZ2fz+XwjI6MuXboQQpqamiorK9XV1Z2cnOQ9 aqFzEWS+ZV5Lv5BeEQBei+C5n7tMWCqdzm+RfMh493xMyOKF9FogEonofZqSkhKdSIS5jQCdxdKl S728vAYPHnz48OE+ffq82cbo6ur269fv8ePH5eXlzG88c7lcKysrDoeDnQXwXkGsANBZjB8/fsuW LWvWrOnZs+fq1avfbGNYLJaOjk7v3r2tra3b2toIISoqKhoaGurq6thTAIgVAP5eeAAhz9ChQ4cO HdqpmqSurv5SwYHEcwTxt8xr6RcEP7oA0LlhbiMAAAAgVgAAAADECgAAAIBYAQAAABArAAAAAGIF AAAAQKwAAAAAiBUAAAAAsQIAAAAgVgAAAABArAAAAACIFQAAAACxAgAAACBWAAAAAMQKAAAAgFgB AAAAECsAAAAAYgUAAABArAAAAAAgSQVdAADyFBQUFBcX83g8Qgibze7WrZulpSW6BQCxAgAAEQqF WVlZra2tXC7XxsaGENLY2FhSUlJVVdW3b18lJQxJArxH8IEHABkyMzMFAoGdnZ2Ojo6qqqqqqqqu rq6dnR2fz8/KykL/ALxXMK4AAJIeP37c2NhoZ2fX2tpaUFBw8+ZNQsigQYOsrKwsLS0fPnz4+PFj a2trdBTAewLjCgAgKT8/n8Ph8Pn8vLy8w4cP5+bm5ubmHjp0KC8vj8/nczicR48eSa/122+/ubu7 6+rqOjo6hoSEtLS00HQWi4UuBUCsAADvlLq6Ok1NTUJIRkaGSCRi0jMyMgghXbp0qa2tlVjl9u3b 48aNmzt3bmFh4blz51gs1urVq9GTAIgVAAD+a8OGDV999dWkSZM4HE63bt2io6M3bdokkefZs2cj Roxgs9nDhg17+vQpIYTP5xsaGh45csTExMTY2Dg2NpbmLCsrGz16tI6Ojo+Pj3RcAgCIFQDgDdPW 1m5qaiKEODs7i6fTt01NTWw2W3pcYfz48YqLXb58+aBBg0pKStzd3b/44gtCiJqaWn19/d27d/Pz 83fv3h0eHk5zfvHFF46Ojvn5+Vwul0kEgDcFcxsBQJKZmVl5ebmenp6FhUVQUBB99ODs7GxhYUEI ef78ubm5ucQqFRUVxsbGiou9evVqVlYWm82eO3eui4sLIYTFYgkEguXLl7PZbF9f30mTJtGcly9f zsjIMDIyWrZs2ZgxY7BHABArAEDnYm9vX1NT8+jRIxsbGwsLCxoiUPn5+RoaGnZ2dhKrcLncZ8+e Kf5yRFVVlb6+PiHE0NCwsrKSSTc0NKRjDEKhkKZUVlZyuVz6Wl1dHXsE4M3CMwgAkKSuru7k5KSi ovLw4cOamho+n8/n82tqavLy8tTU1JycnKSv34MHD46Pj1dcrJGREQ0RKisrjYyMFOesr68XiUQi kYj5PgUAIFYAgE5EV1e3X79+xsbGFRUV9+7du3fvXkVFhYmJSd++fXV1daXzL1++fNOmTYcOHaqr q3v+/Pk333zj5+cnkcfT03P37t2NjY07duzw8PBQULuXl9eWLVvq6upiYmIU5wSAfwCeQQCADCwW S0dHp3fv3tbW1m1tbYQQFRUVDQ0NeU8EnJyczp49+8UXX4SEhGhqanp7e8fExEjk2bhxY1BQkKmp 6aBBgw4fPqyg9o0bNwYHB5ubm1tYWOzduxe7AwCxAgB0Uurq6h2fLjB48ODk5GTpdOYXGrp27Xrt 2jV5S8VfGxkZJSYmov8BOgk8gwAAAADECgAAAIBYAQAAABArAAAAAGIFAAAAQKwAAAAAiBUAAAAA sQIAAAAgVgAAAADECgAAAACIFQAAAODl4f9BAAAAvLPST21BrAAAAAByLQsJ7ki2TTu/U7AUzyAA AACAIFYAAACAV4RnECBDbm6htrER+kGxhorn6CX0EnoJvdSpmOtrIlaAf44pRxWdoFh+BXoJvYRe Qi+9F/AMAgAAABArAAAAAGIFAAAAQKwAAAAAiBUAAAAAsQIAAAAgVgAAAADECgAAAIBYAYAqLy83 /lN5eTlNpG/FX7y3KisruVzuqlWrmJQ1a9ZwudzKysrX2DnSRd27d2/8+PHW1tZWVlZeXl63bt3q /LvjnzyW/kppTCPNzc09PDyuX7/+wlpeV+ONpeAUJNOJEydGjBjRvXt3T0/Pn3/+GR2CWAHesBs3 bhBC9PQMCSGnT6e2t///osJClYqKioyM6sLC9/eXQA0NDUeO9Pj556Samv9+rJKSktzcPJqaTEtL 5XZOaGjoK1wGxIuaO3fub7/9tn9/wsaN3+Xm/rFhwxY+n9XJd4fiY0l6G18B07F/vSsyMqpjYk7f u3dv7twFLS0sxfvldfU8LYdpwN+xN1/t2OtUTp8+PX/+fFvbnmfPZnG5tsHBwWfPXnkP+wGxAnQi v/32GyHEzy+YEHL79g2Jk6axsbGzs76FRVtkZGS/fv3MzMxcXV2vXbtGCLly5YqXl1f37t3Nzc1d XV337NnzrnZRQMAnJSWFd+48IITk5uY+efJk7NhJmpoiLtfY2Vmfy202NjZ2cHBYt26dubk57bQj R46I30RK3KRKd6a0oqIiQkh7u4qfn0dOTsGuXSfr6pSY3SF9b1pbWxsSEtKzZ087O7vp06czt/Wd 51hi1NbWLly40MHBoVevXnPnzq2uriaEPHv2zN/fv3v37iNHjszKypLZSxIdS7tCurS2tja6R+Lj 4/v37+/o6CjvxtTaWp0QoqSkXFWlLLNV0h8E6XYGBQUNGTKEZps1a5aLi4tIJFLQSxYWbeKvpT9c AoFA4oj6/fffhw8f3rNnz507d9ra2hobGwuFQpl7XLyL3t5P3N69ewkhgYFLTEwMli0LIYTs3Lmz uZkl89Mkc8eJ90NHPm6IFQBefC+orKzs7z9LRUUlPf06n68k875qxYoVv/ySffFiTl5e3uLFoS0t rPnz52dmZh4+fCE1tSwu7ub48SE83rt54I0ZM4bD0bly5WxrK7lw4QKHw3F19dbSEtKlpaWahJDq 6urmZrW0tIf0HpS5cZS+mZbZmdKVTpo0iRAybdrICRN8vv12p75+nbFxu8Rt7po1uwkhH300mZZ5 /Pjx3btjN2789ty5c6Gh4eK39Z3nWCKErFq16ocffvjss9A5c8J/+umn0NBwoZCEh4cnJyeHh2/O yclZunRlaytLupdkdqx0aUpKKoSQqqqq+nq1jRu3lZeXh4evbmqS7GRnZ30PDw87ux5r1uxisWS3 SvqDIN3OKVOm5OfnX7+eJxAIfvnll48+Ciwtfbn/biCxpe3tahJHVHh4+IMHD1as2KKh0a2+vp4Q UlysJnOPi3fR2zscmJeXRwgxN+/OZrfb2loTQh49yqmvV5L5aZK548T7YfLkL1/4cUOsAKDIs2fP njx5YmfnoK9v6OjoWFz8pKCgRGbO2NjYgQNtR4ywJYSUlBRVVys7OTkRQubN+2T9+tm//PItm13L ZgvfyV5SV1efMGH8tWtnm5uVzp8/P3bseE1NdU3N/7l3bG9vnzgxWFtbu1u3thcWKN2Z0nm++eab gwd/+uST2Y8fF6xdu3bWrLkSN6vNzb9v3hxmb99r2bJN2toiesMUGOg1f74fISQ1NbmmRrlzHkuX Ll0ihAwbNnHCBB9CyPXrV2pqlFNSUgghbm4f5eeXHTx4qbpaqSO9JK80QohQKHR3/9eQIW6EkNLS 4tpaydUzMqrT06vi4tKGDBmmr98urxwJ0u0cPXq0iYnppUs///prakNDw5gxQUwc2UEyt1T8iMrO ziaEDB48xtd3FLPWC/e4+ADG20gkEqmqEqFQSAhpbeULBKyXOgDEQtjDHTmQECsAyEVPfLm5d52d 9emA6s2bN2Tej65bt662tvbnn+/Qt21t5NixYzt2HPb0HH/v3oOwsLCAgMkKR17fbgEBAQ8f3k9P z87MzPTyCtDUFLKkTlzGxlw2W0Y6Pe/z+XwFnSmTj4/bpk3rf/rpEiEkJSW5slJZLFBo/vTTTwkh 69d/x+Fo6um1/7lDS+hT8F9+efIP3z91/FiiunTR0tVVI4SwWKzmZhYdtxeJRF26iCws2kxN2zvY SzJL+zPI02CzlRSsTh8BcLltGhoiBeVIXMAk2qmiohIYOOnq1TMXLlxydXUzNTV/2VhB3pZKHFHN zU0SEeqb3eN/nx49ehBCCgsfEUIeP35MCOFyLZjTi8Sn6YU77qUOJMQKAHLP719+GZ2RUf3VVzGE kIyM6zLPOAKBgBDy++93lJWV6WlLVVU1MNBrw4aIPXuOEEIePcqvqHhnA3ZnZ2dra5utW7+ytLTq 02ewtrbssEhZmTlzdSGElJQUmpmZEUIyM3/7+eeflf9cLN2Z0kVNnjzZ2tr67t2bJSW/E0IsLW3F 90t4eHhOTs6KFZutre0NDNpYLOLh4UEIuXjx1KNHl11duStWBJibt3XOY2nUqFGEkJSUS5cuJRFC hg4dTQgZNGgQIeTatbNcrqmnp6e8XmI6VnFpDFaHr56Ky2FIt5MQMmXKlLy8BwkJJ8aPn6yhIVJ5 ybF/BccDPWQcHR0JIVeunD537hyzSN4el+6it86sWbMIIYcPR5eVVcXExBBCPDw+UlEhMj9N8nYc 0w8d+bghVgBQhE5c79v3Q3399rFjnen5XeZj5rlz52prc9LTf1279hsTk66TJ7vv2rV74MCBtrZc X99h/fv337Bhf1vbu/wgMCDgk4yM6z4+n6ioEHX1FwyhzJkzR0tLe9o0jy+/XGNoaBIRMb+1lejq 6hFChEKhdGdKl7Bs2bIePfp88knAZ599NmTI0IiIPapiD8GPHj1KCPnyy/kDBuibmRkTQtavXz9h QlB09JpZs2YOGTJ04cLNz58rd85jaf369R999Elk5Ofh4as+/jggNDRSU1MUGRnp/H/t3XlcE2f+ B/AnIchlOBMIhyiu1VpFOUTAiigqWMV6oK1arYVqqaKubq1XQawHVG2r1rW2oJb+UGrXtf0p/e22 q0vxVjBgPSlYDxAEGo6EOwmZ3x/TnWaTSUhUKCSf9ysvX+PM5JnJd548z3eemQkjRqWm/uX554es Xr27spKnHSWK+j2w+kt7gv03sBzt/SSEeHt7jxr1olKpfPHFqcYOKrB+uTRW2Lx5c79+Az77LLWs rFp9h1mPOBOinnsCPXPmzJSUj4qKfho+fPDx48fHjJmwcOGfbW1Vycks3yZdB46JQ3w8S0WC35Lp 7Oxs9f9nZWXRV32++uorDodDCCn8+YEbvxciZcKqGuT+g/qpzykqKh0wwENjtYoKnlJJ3N2VlpZE qSQVFTwej3h4KOkbiLy9f5+QSrkNDVxbW5WlJSWTWXC5pHdvVUMDV6kkHA6xtKQcHVXMWG7Pdfdu hXaUaDIZt76e6+CgcnD4rT/QjhKzslTKlcm4HA5xdm6vq7PgcIiDQ3t9vUV7O3swFQqiUYJcTurq LORyDiHEyopydGzv1Utziwxvb6VKRerrLVpaOCoVsbKinJ3bebwujZLhdUmlInV1FvRYsY0N5eTU zuUSpZLU1FjI5RxLS+LkpLSyItpRcndXMoGl7z3UVZr6EdE+OtpzCCH6y2EmNPbT0lJVXl4eERGx YMGSuLg1np5KZjBDT13S2IEO60NbG6mt5UmlDWPG9LWz633mTKmeI86EqIvHlp7tN66xkRMZOebu 3TtHj14YOvR5obCdwyHNzRztbxPrgVOPA5+v0q5IPatd4v33lzluyV/WLI8z5I079h5avnIF3RdQ FDV37lxCCJfLnTdvHiHEfJ+GB2N5eCjVquPvbZP2hHofyecr/zOhMp9Y2dur7O1VGj20xgRDPVy2 tr8ttbPTF0wNvXoRNzfNC/56tsjlEmfn9h5Rl7hc4uLSrtUaan5e1iipz9RTmsajiXqWGlgOM6Gx n1988eXmzZsjIye99tqfdd2wok1jB/TXh1deeSU/P//gwYN1dXWEkMDA0fRWdB1x7RD1RL17Uzt2 bHvrrbdjYycWF9+nz3JtbSntbxPrgdOIQ4dfN/OEXAEAoCvExsbOnv1mXR3X1payt++UXG39+vVr 1ya98UasjY1NdPT0ZctSTWAAzxCjR48uKLhVU2NRXU0MecIIkCsAAHTbM2BV796deB7v7+//3Xf/ V1vLVSg4HA6xtqaYJ19MnrU15emJLAG5AgAAdKRXL0okakcc4NnCcxAAAACAXAEAAACQKwAAAABy BQAAAECuAAAAAMgVAAAAoKfAM5PArlKmQBAQJUQJUUKUehYv507p1pErAIvnn/dGEDrmjCghSogS omQWcA0CAAAAkCsAAAAAcgUAAABArgAAAADIFQAAAAC5AgAAAPQUeGYSOvb+++8jCMnJyQgC6lLX 1CJECVHqbi0ScgVAT4lWCXWp29UiRAlR6lYtEq5BAAAAAHIFAAAAQK4AAAAAyBXgD9Pe3p6YmGhv b69rBQ6Hw+FwLCwsfHx85s2bd//+ffVFekrWtfTo0aNcbs+rnx3u9sWLF8PDwx0cHAQCwaxZs8rK yjRiSIdRJBLNnj373r17pl2vOGx01Qr9FUlXsSKRaM6cOY8ePXriPeyGQdOzdOLEiU9fSwsLCwMC Apqbm4uLi0ePHm1nZxcQEJCfn6+nBO2D2E0YEhBArgDPRmlp6bZt2x4+fKhnHYqiFApFTk7OwIED g4KCSktLmfnGbu7ChQvXr19/gjf+sTrcbbFYPH369OXLl5eVld28eXPw4MHLli3TiCFFUW1tbadP n3Z0dHz11VdNu15R/6ExrWtlY0tub28/deqUnZ3dggULnngPDeyQ1HvK8ePH/1EhLS4ufspa2t7e vmDBgkOHDtna2i5evDgsLOzevXvTpk1788039ZTAHL79+/e/8sor3SdKHQaku+k+dQm5Ahht8ODB hBBnZ+cO6hOX6+Pjs2nTpuXLl7/33nsap0GnTp2KiIhwdnaOjIwsLCzUeK9cLp8/f35qaiohJC8v LyUlpcdFqcPd3rZt25YtW2bNmmVvby8SibZs2XLixAnt1Xg83tChQ1NSUm7fvm2mJzFc7uHDhwUC gbu7+1dffaVekdra2gQCQWZmppubm6ura1ZWlv5yfH19k5KSxGIxIaS1tdXFxWXLli22traEkPLy 8nHjxvH5/DFjxjx8+LC8vJzL5dbW1hJCpFKphYVFeXm5du1l3VBiYqL6yfTGjRufbUCKioqGDRv2 3HPP/fOf/2Rm5uTk+Pr68vn8yZMnX7x4kRASEhJSWlrK4XASExNZVzCklh47dmzgwIF+fn6EkMWL FyclJbm5ua1YseLu3bsdllBbW7t9+/Zdu3b9IVHSbmE0AqJxxLWrBGvEiouL/fz8vL29v/nmG1tb WzpJqqysjIyMdHBwmDJlSn19vfbO3Llzx9fX18nJ6fjx4zY2NgqFQmNMSNfoS2dHCbkCdKLW1laj Tuzmzp2bl5enMfOdd95Zv359RUVFbGzshg0b1BfV1dVFRUUFBwevX7+eELJq1aqeGKUOd1ssFk+d OrXDclQqVUVFxQcffDB58mSzzRWuX79+7969vXv30lWC0atXL5lMdv369bt37+7bt49JSXWNCty8 eXPr1q2jR48mhFhZWTU2NqpUqpqaGkLI2rVrg4ODKyoqwsPD161b5+np6efnd/XqVULI1atXhw8f 7unpqV17WTcUHh7OnP9FRESEh4c/24CsW7cuJiamoKBA/ULAihUrtm/fLpFIZs+eTfcoly9fpj/1 1q1bWVcwpJYeP36cGRiYP3++ra2tUqnMysqKiIjosIRdu3YtXLjQw8PjD4mSdgujERCNI65dJVgj tnr16mnTpt24cePMmTOtra10R75u3TpfX9+7d++6u7uzVkL6kJWWlhYWFra2tlpaWhr4KTo7SsgV oBvx8vLSvkKsUqlycnKqqqrmzp2rfnp0//79sLCw119/ffny5aYdlurqahcXF+asQvviLnO/gqen Z1ZWFj3KYoaUSuXatWvt7e2nT5+ufksHHSKFQrF27Vo+nz9t2jTmUpcGOpJcLnfixIkKhSIjI4Oe KZfL4+PjbWxs6JPIVatW8fn8JUuWnD17lhASHR3N5ArR0dGstVfXPjOng51xInjx4sWlS5fy+fxF ixYxM2/evDl58mQrK6vXXnvtxx9/1H5XhyvoGh4LDQ1Vn2NpaZmamrp79279b2xqajpy5MjKlSv1 rNOpUdLVwqiPxGgccY0qwRoxOvgODg4JCQnM+dLp06ffffddoVC4Zs2af/zjH9rbunTpEn3Ili5d auwH6dQoIVeAbuTBgwf9+/fXmJmdnS2RSEaOHOnv709/UWmjR48uKyvz9vY2+bD06dOHueeD9fI8 c5W9tLT0tddei42NNdsqRCdVPB5PpVJpLxUIBPQYA+tS9fA+fvz4yy+/dHV1ZRa5ubnREzU1NfQ1 BYFAIJFI6FyBPnHPz8/XyBWY2qv/dLCTTgTr6+udnJyYD07Lzc0NCgri8/k2NjascehwBV0ZrXq4 CCEKhWLDhg1xcXH63/jdd9+FhYU5Ojp2eNLcSVHS1cIwtI+4RpVgjZhUKqVro3obJZFI3N3dORzO oEGDHj9+rJ6hMoeMfpf6ITNqaKH7DCogV4DO8sUXX9Cjvup8fHzS09MrKyvfeeed+fPnM/NPnjx5 /Pjx+fPn37lzx7TDEhERcejQIY0zIZavJZfbp0+fxMRE7bs64OkxrblQKD1yaD4AABQ3SURBVKQ7 DIlEIhQKCSFBQUH379+vqqq6f/9+UFAQa+3VfzrYSSeCDg4OdXV1hBD1gY24uLiVK1dWVFRIpVLW d3W4Qod27tzZ1tbG4/HmzJlDj7jocfLkyZdfftmQk+ZOipKuFoahfcQ1qgRrxPh8Pv1f9bFSoVAo k8nofJS+RMtkqMwho9+lXme4XC5944KeAarOjhJyBegWysvLt23blpGRoV3RQ0JC0tLSWlpa+vfv 397ezswPDAycMGHCgQMHpk+fXl1dbcLB2bhxY0ZGxtatWx88eNDa2nr58uXo6OjNmzdrnxNLJJLU 1FSNoWB4tiZMmLBv376mpqY9e/bQV4g5HE5AQMDrr78+fPhwjVvPmNqr/3Swk04Eg4KC0tPTGxsb Dx48yOyYq6trv3795HL5zp07hUIhfe/hgAEDCgoK5HK5rhU65OrqynwNs7Ozd+/eLZVK9+7d+8IL L+h/Y2Fhoa+vryEnzZ0UJdYWRj0g2kdc+7NrRywwMDA9PV0mk+3Zs4dZc9KkSR9++KFUKv30009Z iwoKCvr8888bGxv379/PzHR3d8/Ozm5oaNi5cyePx/tDooRcAf740zUOh+Pv7y8Wi/Pz893d3TVW 2Lx588cff+zk5BQbG5uWlqaxdMqUKSkpKTNnzmxpaVF/zr4bPuCuPwJ6dtvDw0MsFt++fTsiIsLJ yenNN9+cNWtWUlKSRgkWFhaDBw8uLS3NzMxEveo8KSkp58+fF4lEYrGYuTUkOjr6X//6l8YFCPXa +4fs6gcffHD48GE/P78RI0ZYW1vTJ6979uyZOnXqiBEjwsLClixZMnz4cELIuXPn4uLivLy8dK3Q YS0dOXIkfUsgISQ9Pf3EiRMeHh7ffvst0+fpKuHRo0e67mrsGqwtjHpAWI+4OtaIpaamHjhwYMCA AWFhYeqVp6CgwMvLa9++fZs2bWI9ZJmZmV5eXv7+/szMbdu2xcfH9+/f38/Pj8/n96AvC/52FBhK /0MQhjwWHxkZWVRUpOeNMTExMTEx5Il+kqH7h4hG37T4xG83k9ql/l9mWntCV9AM/JEGDw+P3Nxc jRVmzpzJWj5r7e0yw4YNYx6gbW5upieCg4PpJzzpM2b67wmJRKJr167pWaHDahYTE3Ps2DH6tz0G DRrEPDrYYXhlMtkfW4tYj5F6QFiPuPrHYY3YiBEj6AGG6upq5m4MoVCYnZ1t4CFjfihl4cKFCxcu pKdZr5J0WxhXAACA382ePfvOnTvXr19HKJj08dixYw0NDTt27AgODjbPICBXAOPo+lFeADANFhYW mZmZsbGxzACGmVu0aNH69evd3NwuX778ySefmGcQcA0CjGPO4+QAZiIgIID+pUsghEyePPkpfxXN BJpN5ApgEPq6HQDqEqJkzlGin4o0w/FU5ArQseTkZAQBUJcQJURJqVTeuHFjwIABdnZ2PfEP4T4x 3K8AAABgkLa2Nn9//xs3bkgkEsN/ChO5AgAAgLmg84OBAwfevn27trbWfNIF5AoAAABGmDRpkp+f X2FhYV1dnZmkC8gVAAAAjFBSUjJjxoyQkJArV65IpVJzSBeQKwAAABhBoVDcunVr7ty54eHh58+f l8lkJp8uIFcAAAAwLldQKBTXr1+Pi4ubMGHCmTNnGhoaTPu3Z5ArAAAAGEGpVCoUCrlcXlBQkJCQ EBUVlZOTY9rpAnIFAAAA48jlcnp0IS8vb82aNZMnTz59+nRjY6OppgvIFQAAAIxDJwp0xnDhwoXk 5OQpU6acPn26qanJJNMF5AoAAABGoxMF+t9z587t3LmTHl1obm42vXQBuQIAAIDRFGrkcnlOTs7e vXsnTZqUk5PT0tJiYukC/h4EAACA0VQqlVwub29vP3HiRN++fQkhHA7H0tLypZdeys3NDQ8Pt7S0 RK4AAABgvkQiUVRU1MmTJ48cORIfH//111/z+Xwej9erVy8fHx+lUolcAQAAwHx5enpeunTJ0dHx +++/z8zMXL16tZOTU0REBJ/Pp0cXrKysTOnz4n4FAAAAI/Tp0+fKlStFRUVVVVVvvfWWTCZLT08P DQ2lKMrBwcHR0dH0/mI1cgUAAAAj5OXlXb9+vbm5+datW6tXr+bxeOnp6d7e3mKxuKWlxSQ/MnIF AAAAI1y9epWiqNDQ0HHjxtXU1CxatEgikdy4caOtrc30noBArgAAAGBMl8nlnj592tHRMSgoSCAQ 2NnZlZSUvPfee8eOHRsyZIhUKjXVD457GwEAAAxiZWU1YsQIHo9na2tL35EQFhZ26tQpuVyemZk5 atSo3r17czgc5AoAAABmysLCwt7ensPhMAmBtbV1ZGRkY2Mjh8Pp3bt3r169TPKDI1cAAAAwiHqW wMyxtra2trY27Q+O+xUAAAAAuQIAAAA8KVyDAAAAMFk79h5CrgAAAAA6Hdq3w5DV4hLW6FmKaxAA AABAkCsAAAAAcgUAAABArgAAAABdDPc2AgAAmD6OhaX2TKpdYch7Ma4AAABg+rTTAgMTBeQKAAAA 5pguGJ4oIFcAAAAwu3TBqEQBuQIAAIA5pgvIFQAAAOCZQa4AAABgmgY+5/NM1kSuAAAAYJrWrVyi /w890OIS1qxbuUTPCvh9BQAAAJN1aN+OD3bvLy65r2uFgc/5dPj3pQzKFaoa5Ai3aSv8+QGCAABg kqKmTI3S3wWUPHraXMF/UD8EGgAAwGzhfgUAAABArgAAAADIFQAAAAC5AgAAACBXAAAAgO7EuN9X EIvFCFlPFBgYiCAAgHnq1J5Lu3Xtzh3lE/cFPKPCHRgYKJcrUPN6ll9/lWRmZi5YsAChAAAzTBQ6 r+fSbl27c0f5NH2BceMKFCEUhbrXw1A4ZgBgzm1gp/VcrK1rt+0on6Yv4Bm7KSQLyBUAAHpWI9hJ PRd769pdO8qn6Qu4xm5KpfWytrHSNUd7ka6Zel4ZX35pbWOVlp6mawVjC3xWL13bvXX79oyZ0/v2 8+7n03f2K7OLS0r0lzN5ykud+lmQKgCAmecKxrbVGk3x/QcP/AP89n+236DWVcfmLl66OGHiBDeR a+CIgJWrVja3tHRx9/Q0fYFxuQLFZEzqL+2Z/5nT3NRi0Pp6X+npacuWLT944IDOdYws8Jm92LZb Ulw8ceL4yImRFy9eunjx0tjw8IiIsffv3dNTTklJCTPNHrGne1EqJAsAYMapwhO01Wpv+emna9On v7x9+474t+INaV1ZN1dQIJ41K2bxosU/FxV/+83/cjicLZvf7+Lu6Wn6Au4TBF3jRXTPsbWzoSeK fv55ZHCQ77ChP/zrB2ZpZVVl9NRokbvbjJkz6urrKbbCCwoLGhpkKSmprW2tV/KuMPM1CiyvKLfr bVtTW0sRUi+V9ubblVeU/5ibGzRyhKubcPqM6ZcuX6YIaW1r6+PtdSQrq59P3779vI9+/TVd2q8S yYyZM1wEzsEhwVfFV/XsHusHUX+lpG5bteovb8W/LRK5u7mJ3l6ydOnShK3btlKEKJRKVzfh348f F7m7jQgKvHnrFkVI+NjwsrIyWzubTe9vUo9YeUX5pJeiXN2EEyMnPCwt1bPzp//975cmT/L08oie Gn3tp2ssYcTAAgCYfbpgeFut3ov9mJsbHx+flXV0/PgJhreu2mvu2LFjw4b3Zs2ezbe39/Ty+vDD j7ZuS2E28cy7KtZ96LprECqKaA92EEJ0zWEmNiYlvvzytPPnLl69epWZmZSUNGTIkJ9+uiFyE23a lMw6kpL2eVpCwnIuh7ts2fL09HRmvkaB7iKPYcOGF4jFlIoqEIt9fYe5izxWr35n8/tbHj4omzF9 xpYtmykVZcmzlMlkN2/e+OnajY8+2vX++79tdMOG9UOHDL1bcm/J20tWrFihZ/dYP4j6Ky8vb+aM GPU5s2Jm5+VdoVSUBdeiubn55o0bPxeVTJ8+IykpkVJRP+bkEkIaG5o3JiWrRywxMXFEYFBJ8S+j Xwyj19S18+vXr3vnL6tLin9ZMH9BcjJbGNFOAIAZY+259LTVTFP892PHtm//4OTJ7EEDB7GP9Ru8 ucLCgugpU1kL6YyuirV7epq+gJOdna3+/6ysLJVKRQj56quvOByO+iKxWDx8uF9ra5tGEXy+nXa5 DQ1N9CJ6wsenX35+vkAgfPz48cCBA+iZgwY9d/bseTc3t5KSkhkzpt28eVujkPr6+lGjQsTiQhsb m9bW1sBA/3PnLjg7O7MWuHXrFmtr69Wr39216+OmpqbExCSmHLlcLhS6SKUN9C49ePDQxUWgPrN/ f58rV64Iha7qW2fdPdYPok4odCkrK7e2tmbmtLa2ent7VVdL6K0XFRV7enpKJL8GBgY+fFiqHiX1 6eee+9OFCxddXd0eP34cHh5WXHxX186PHBn00ksvvfnmIm9vb9Zj/GuV5PzFM3hmEgDMkK6eq8O2 evv2HQcOHOBwOD/88INAIDSwddWzuUePKqysrPTs6jPsqtS7lSfoCyiKmjt3LiGEy+XOmzfP6HEF iqJYxxVk0kb1l/a4glRa72DvSKkoZydnZmZNTc2AAf35fLuAAL/KykrtkrOOHCkrK3N1FfD5dkKh S2lp6ZHDh3UVGBU1SSwWUypKLBZHRU2iVNTZM2fDx4S5u7sJhS4qlYrZJWcnFzpxY2bW19c5Ojhp bJ1191g/iPrLw92jvLxcfU7l48o+fbyZrQsFQkpFOdg7NjTItBNAZrq2tpbeJWcn55qaGj07//XR v9XU1IwdO+bFF0PPnzvHlktiZAEAzBdrz9VhW61qV13NF8fExLz88tTamlod4wqUgZsTiUTlj8pZ C+mMrkrHuEJXXYOg2GjPZ+YwE/b29nV1dRRFVVVVMTMFAsGjsgppfYO0vqG6SqJd8sFDB/KuXKVX kNY3iK8WfJFxSKVSsRYY4B/w8OGDqqqqhw8eBPgHUBSVkLBkyZKlRXeKy0rLtXdJfdrFxaWyslJj 66y7x/pB1I0a9eLXR4+qz/n734+NCg1ltlhbW0tRVF1dnb29vZ5dEggEEomEoiiJRCIQCPSs2bdv 30/27C0p/mVZwvLFby3ScYgAAMw4VzC+rV66NIEQsm7t+tfmzZ8ZM0MqlRrYurJuLiho5LfffsO6 qDO6Kh278eQxNPaZSePubWQmAgICM77MaGhszDz8PxwOh545fvyEvX/9pF4qTT+QPvXlaI1Czpw9 Y2fXe+CgQcycPw14zsHB8czZM6wFEg5n2DC/+LffGjLUl3A4FCECobCPt7dcIf9k7x6BQPDLvV80 9paZnjgxcs8nu+ul9UeyDoeEjtSze6wfRP21+t13P0/77NP9n1ZWVT2urExLT/t0/77V766ll3I4 nIwvM2QNDekH0oODg+mZ/fv/6dpP19rkcvVdGjt2XPqBtMampv2ffRoePlY71Mz0+AkRX2R80dzS 0rdfv/b2du1dwh0LAGDeyQIxtq1Wb2zfXrI0Li5u7rxXG5uaDGpd2Tb35z+v2r1n95GsI/VS6a8S ya7duxa8Pp9e1BldFWG7t1FFdeW4whPd25i8cdPf/nY0LOxFv+H+1tbWqnYVpaKSEpOvXbs2ZMjz B9LT1q1dr1HIwYMHXn1ljsbMV1959dChg7oKjIqMysn5d1RkFL1yasr2OXNeHTs2PCQ4NC5u0ejR o3QN+G9K3vzw4cOhQ1/46969e3b/9bcbRth2j3W76q++3v2+/+ep3Nwfw8JGjRnzYk7Ov3/4/pSn hyezxSEvDAkJDsrOPrkpeQs98x//931CwtIXXhj0X/c2vrfx0qVLgwYNuHbtWlJisp6rFevXbdi3 b2+/fn0SEpbs2vUJfmABAKDDnqvDtlp95Xlz5y9eFB/7xustzS0dtq6smxvywpCvvz52+HDm0KGD Q0NH/vxz0Yc7P+68roqwXoN4ir7AuHsbhwwZ2trShpr3xJycHepqpV280epfa65cOY97GwHADHVq z6XdunbnjtLwvkD73kbjfuOZvsECle9pdH0AMa4AAGbd6nZaz8XaunbbjvJZ/j0ILpdLjytQFKUx rvDbtvAjgE95tLo+gMgVAMC8293Oanh1/8hz9wyDsVkFl8tlzxXs7e1ra2sJIW1tbTY2Nlr9HPqd p/JrdR0CCADQtWdoXdpzmUBH2dbWxqQE7LmCpaUlPVFbW+vp6akZgt/vyoSe8z1BCADArNvAzuq5 qK7dXJf1BfSQgXpKoJkruLu7078ckJOTo30HBEXhAbye+EXBIQMAs24CO6vnYn8Oort2lAbvVU5O DpMS0BOaz0E0NDScOHGCEMLj8TIyMni8/0omMjMzUe16IjwEAQBmq1N7Lu3WtTt3lIb0BUql8o03 3lAqlYSQadOm8fl8lnEFPp/v4uJSU1OjVCrPnj0bERGBLgcAAHCyZCbnZmfPnqUTBRcXFzpRIKy/ xeTv709PpKWlyWQy1DMAAABzIJPJ0tLSNJIB9lxBJBIxdzWuWbNGoVAgfAAAAKZNoVCsWbOGnvb0 9BSJRPpyBUJISEiIra0tIaS+vn7ZsmVSqRRBBAAAMFVSqXTZsmX19fWEEFtb25CQEPWl7LmCjY3N uHHj6IclpFJpfHx8Tk4OfQEDAAAATIZSqczJyYmPj6fHBSwtLceNG6fxA0uaz0Goq6ury83NbWpq ov/L4/HmzJkTFBTk7Oys8XwEAAAA9KwUoba2Nj8//+jRo8xYgJ2d3dixY52cnDRW1pcrEEJaW1sv XbpUXl6OsAIAAJgwT0/P0NBQa2tr7UUdDA9YW1uPGzeusrKysLCwpqYGoQQAADAxLi4u/v7+6jcz auhgXEFdTU3No0ePqqurZTIZ82PRAAAA0ONYWVnZ29u7urp6eXm5uLjoX9mI2w5cXFw6LA4AAABM DBchAAAAAOQKAAAAgFwBAAAAkCsAAAAAcgUAAABArgAAAAA9xP8DPWS7l4de52oAAAAASUVORK5C YII= ------=_Part_1976703_416272913.1381051854025--
On 10/06/2013 11:30 AM, Gilad Chaplik wrote:
Einav, Thanks for the questions, see inline.
@Gilad:
1. Does the 'VmCreator' Role contain the 'consume-quota' action? so when granting "VmCreator" on Data Center "DC1" to user "User1", "User1" can automatically consume any quota defined in "DC1" (including, for example, "TemplateQuota", in Mitja's case)? No, only SuperUser and DataCenterAdmin roles contains consume_quota action.
2. Related to both your previous reply and my previous reply: Can a user associate a CPU/RAM Quota to a VM that he is now *creating*, even if he doesn't have consume-quota permissions on that CPU/RAM Quota? In Mitja's case, he attempted to create a VM associated with both "TemplateQuota" and "UserQuota", while the user (maybe - depends on answer to 1) didn't have permission to consume "TemplateQuota", and the VM creation succeeded. Is that OK? Yes, you should be able to assign a VM to a CPU/RAM quota, without being a consumer of that quota, the check is done only when running the VM (when the resources are consumed).
There is a difference between User and Admin Portal: in User portal quota list is being populated by quota that can be consumed by the user, so leaving the quota unchanged will selected an appropriate quota; also while creating a VM, disk's quota is set in 'Resource Allocation' tab (see image).
@Mitja,
Please check which quota(s) are assigned to VM while consuming the resources, and who is the user performing the task. All tasks are performed by the same user (Helpdesk User).
Quotas assigned to VM by default at creation time: - RAM/CPU - TemplateQuota (as displayed in User Portal->htvm10->General) - disk - UserQuota (as displayed in User Portal->htvm10->Disks and then Edit on the disk) Quotas assigned to VM after power-on: - RAM/CPU - TemplateQuota (as displayed in User Portal->htvm10->General) - disk - UserQuota (as displayed in User Portal->htvm10->Disks and then Edit on the disk) Please see the screenshots of the quota/resources consumed by the VM. In the Admin portal, I could see, that TemplateQuota (CPU/RAM) was consumed when the VM was started by the user. Regards, Mitja
[if the answer to both questions is "no", there is a chance that Mitja discovered a bug]
---- Thanks, Einav
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: "Einav Cohen" <ecohen@redhat.com> Cc: users@ovirt.org Sent: Friday, October 4, 2013 8:14:10 AM Subject: Re: [Users] Quota for VMs created from templates
In addition to the described setup: The user was also given a permission on the data center with the role VmCreator. The user is not listed as a consumer of TemplateQuota, but they have an inherited role VmCreator in the permissions tab. Could this permission be the reason the user can create and run VMs that are associated with TemplateQuota?
Regards, Mitja
-- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
On 10/03/2013 05:06 PM, Einav Cohen wrote:
AFAIK, a user cannot create a VM that is associated with one (or more) quota objects on which he doesn't have consumer permissions. i.e. if the VM was created successfully by the user, and this VM is associated with TemplateQuota, and with the quota that has been created for the user (let's call it UserQuota), it means that the user has consumer permissions on both TemplateQuota and UserQuota. If the user doesn't have permissions on one of these Quota objects - the fact that the VM has been created successfully sounds like a bug to me.
---- Thanks, Einav
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: users@ovirt.org Sent: Thursday, October 3, 2013 9:59:06 AM Subject: [Users] Quota for VMs created from templates
Hi!
We are running engine version 3.3.0 on CentOS6 and we have come across a problem, possibly a bug. When a user creates a VM from a template, the template's quota is assigned to the VM.
Here is the setup: - quota is set to Enforced on the data center - quota is created for template purposes (TemplateQuota) - a template is created from a sealed VM with TemplateQuota assigned to it - quota is created for a user, the user is set as its consumer - the user creates a VM from the mentioned template and leaves the quota unchanged - the created VM consumes the user's storage quota but does not consume their memory and CPU quota
This way a user can create and run an arbitrary number of VMs as long they stay within their storage quota. No errors are reported in the logs.
Kind regards, Mitja Mihelic
-- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: "Gilad Chaplik" <gchaplik@redhat.com> Cc: "Einav Cohen" <ecohen@redhat.com>, users@ovirt.org Sent: Monday, October 7, 2013 1:30:34 PM Subject: Re: [Users] Quota for VMs created from templates
On 10/06/2013 11:30 AM, Gilad Chaplik wrote:
Einav, Thanks for the questions, see inline.
@Gilad:
1. Does the 'VmCreator' Role contain the 'consume-quota' action? so when granting "VmCreator" on Data Center "DC1" to user "User1", "User1" can automatically consume any quota defined in "DC1" (including, for example, "TemplateQuota", in Mitja's case)? No, only SuperUser and DataCenterAdmin roles contains consume_quota action.
2. Related to both your previous reply and my previous reply: Can a user associate a CPU/RAM Quota to a VM that he is now *creating*, even if he doesn't have consume-quota permissions on that CPU/RAM Quota? In Mitja's case, he attempted to create a VM associated with both "TemplateQuota" and "UserQuota", while the user (maybe - depends on answer to 1) didn't have permission to consume "TemplateQuota", and the VM creation succeeded. Is that OK? Yes, you should be able to assign a VM to a CPU/RAM quota, without being a consumer of that quota, the check is done only when running the VM (when the resources are consumed).
There is a difference between User and Admin Portal: in User portal quota list is being populated by quota that can be consumed by the user, so leaving the quota unchanged will selected an appropriate quota; also while creating a VM, disk's quota is set in 'Resource Allocation' tab (see image).
@Mitja,
Please check which quota(s) are assigned to VM while consuming the resources, and who is the user performing the task. All tasks are performed by the same user (Helpdesk User).
Quotas assigned to VM by default at creation time: - RAM/CPU - TemplateQuota (as displayed in User Portal->htvm10->General) - disk - UserQuota (as displayed in User Portal->htvm10->Disks and then Edit on the disk)
Quotas assigned to VM after power-on: - RAM/CPU - TemplateQuota (as displayed in User Portal->htvm10->General) - disk - UserQuota (as displayed in User Portal->htvm10->Disks and then Edit on the disk)
Please see the screenshots of the quota/resources consumed by the VM.
In the Admin portal, I could see, that TemplateQuota (CPU/RAM) was consumed when the VM was started by the user.
Regards, Mitja
Mitja, Thank you for the detailed description (a picture worth a thousand words), now it seems like a bug :-) let me just confirm and get back to you. Thanks, Gilad.
[if the answer to both questions is "no", there is a chance that Mitja discovered a bug]
---- Thanks, Einav
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: "Einav Cohen" <ecohen@redhat.com> Cc: users@ovirt.org Sent: Friday, October 4, 2013 8:14:10 AM Subject: Re: [Users] Quota for VMs created from templates
In addition to the described setup: The user was also given a permission on the data center with the role VmCreator. The user is not listed as a consumer of TemplateQuota, but they have an inherited role VmCreator in the permissions tab. Could this permission be the reason the user can create and run VMs that are associated with TemplateQuota?
Regards, Mitja
-- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
On 10/03/2013 05:06 PM, Einav Cohen wrote:
AFAIK, a user cannot create a VM that is associated with one (or more) quota objects on which he doesn't have consumer permissions. i.e. if the VM was created successfully by the user, and this VM is associated with TemplateQuota, and with the quota that has been created for the user (let's call it UserQuota), it means that the user has consumer permissions on both TemplateQuota and UserQuota. If the user doesn't have permissions on one of these Quota objects - the fact that the VM has been created successfully sounds like a bug to me.
---- Thanks, Einav
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: users@ovirt.org Sent: Thursday, October 3, 2013 9:59:06 AM Subject: [Users] Quota for VMs created from templates
Hi!
We are running engine version 3.3.0 on CentOS6 and we have come across a problem, possibly a bug. When a user creates a VM from a template, the template's quota is assigned to the VM.
Here is the setup: - quota is set to Enforced on the data center - quota is created for template purposes (TemplateQuota) - a template is created from a sealed VM with TemplateQuota assigned to it - quota is created for a user, the user is set as its consumer - the user creates a VM from the mentioned template and leaves the quota unchanged - the created VM consumes the user's storage quota but does not consume their memory and CPU quota
This way a user can create and run an arbitrary number of VMs as long they stay within their storage quota. No errors are reported in the logs.
Kind regards, Mitja Mihelic
-- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
----- Original Message ----- From: "Gilad Chaplik" <gchaplik@redhat.com> Sent: Sunday, October 6, 2013 5:30:54 AM
Einav, Thanks for the questions, see inline.
@Gilad:
1. Does the 'VmCreator' Role contain the 'consume-quota' action? so when granting "VmCreator" on Data Center "DC1" to user "User1", "User1" can automatically consume any quota defined in "DC1" (including, for example, "TemplateQuota", in Mitja's case)?
No, only SuperUser and DataCenterAdmin roles contains consume_quota action.
2. Related to both your previous reply and my previous reply: Can a user associate a CPU/RAM Quota to a VM that he is now *creating*, even if he doesn't have consume-quota permissions on that CPU/RAM Quota? In Mitja's case, he attempted to create a VM associated with both "TemplateQuota" and "UserQuota", while the user (maybe - depends on answer to 1) didn't have permission to consume "TemplateQuota", and the VM creation succeeded. Is that OK?
Yes, you should be able to assign a VM to a CPU/RAM quota, without being a consumer of that quota, the check is done only when running the VM (when the resources are consumed).
so let's say that user 'a' has permissions to consume the quota and user 'b' doesn't have permissions to consume that quota, but both 'a' and 'b' have permissions to run the VM. only 'a' will succeed running the VM? so if I am a team leader (power user) and I want to create VMs to be used by my team members ('simple' users), I have to grant them permissions on the VM, as well as permissions to consume the relevant CPU/RAM quota?...
There is a difference between User and Admin Portal: in User portal quota list is being populated by quota that can be consumed by the user, so leaving the quota unchanged will selected an appropriate quota; also while creating a VM, disk's quota is set in 'Resource Allocation' tab (see image).
@Mitja,
Please check which quota(s) are assigned to VM while consuming the resources, and who is the user performing the task.
[if the answer to both questions is "no", there is a chance that Mitja discovered a bug]
---- Thanks, Einav
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: "Einav Cohen" <ecohen@redhat.com> Cc: users@ovirt.org Sent: Friday, October 4, 2013 8:14:10 AM Subject: Re: [Users] Quota for VMs created from templates
In addition to the described setup: The user was also given a permission on the data center with the role VmCreator. The user is not listed as a consumer of TemplateQuota, but they have an inherited role VmCreator in the permissions tab. Could this permission be the reason the user can create and run VMs that are associated with TemplateQuota?
Regards, Mitja
-- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
On 10/03/2013 05:06 PM, Einav Cohen wrote:
AFAIK, a user cannot create a VM that is associated with one (or more) quota objects on which he doesn't have consumer permissions. i.e. if the VM was created successfully by the user, and this VM is associated with TemplateQuota, and with the quota that has been created for the user (let's call it UserQuota), it means that the user has consumer permissions on both TemplateQuota and UserQuota. If the user doesn't have permissions on one of these Quota objects - the fact that the VM has been created successfully sounds like a bug to me.
---- Thanks, Einav
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: users@ovirt.org Sent: Thursday, October 3, 2013 9:59:06 AM Subject: [Users] Quota for VMs created from templates
Hi!
We are running engine version 3.3.0 on CentOS6 and we have come across a problem, possibly a bug. When a user creates a VM from a template, the template's quota is assigned to the VM.
Here is the setup: - quota is set to Enforced on the data center - quota is created for template purposes (TemplateQuota) - a template is created from a sealed VM with TemplateQuota assigned to it - quota is created for a user, the user is set as its consumer - the user creates a VM from the mentioned template and leaves the quota unchanged - the created VM consumes the user's storage quota but does not consume their memory and CPU quota
This way a user can create and run an arbitrary number of VMs as long they stay within their storage quota. No errors are reported in the logs.
Kind regards, Mitja Mihelic
-- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
----- Original Message -----
From: "Einav Cohen" <ecohen@redhat.com> To: "Gilad Chaplik" <gchaplik@redhat.com> Cc: users@ovirt.org Sent: Monday, October 7, 2013 2:39:29 PM Subject: Re: [Users] Quota for VMs created from templates
----- Original Message ----- From: "Gilad Chaplik" <gchaplik@redhat.com> Sent: Sunday, October 6, 2013 5:30:54 AM
Einav, Thanks for the questions, see inline.
@Gilad:
1. Does the 'VmCreator' Role contain the 'consume-quota' action? so when granting "VmCreator" on Data Center "DC1" to user "User1", "User1" can automatically consume any quota defined in "DC1" (including, for example, "TemplateQuota", in Mitja's case)?
No, only SuperUser and DataCenterAdmin roles contains consume_quota action.
2. Related to both your previous reply and my previous reply: Can a user associate a CPU/RAM Quota to a VM that he is now *creating*, even if he doesn't have consume-quota permissions on that CPU/RAM Quota? In Mitja's case, he attempted to create a VM associated with both "TemplateQuota" and "UserQuota", while the user (maybe - depends on answer to 1) didn't have permission to consume "TemplateQuota", and the VM creation succeeded. Is that OK?
Yes, you should be able to assign a VM to a CPU/RAM quota, without being a consumer of that quota, the check is done only when running the VM (when the resources are consumed).
so let's say that user 'a' has permissions to consume the quota and user 'b' doesn't have permissions to consume that quota, but both 'a' and 'b' have permissions to run the VM. only 'a' will succeed running the VM? so if I am a team leader (power user) and I want to create VMs to be used by my team members ('simple' users), I have to grant them permissions on the VM, as well as permissions to consume the relevant CPU/RAM quota?...
Generally speaking yes, but let's clarify it for the rest of the readers; There are 2 different cases here- 1. An admin creates everything, including a template using template-quota. In this case users will create VMs for themselves in the power user portal and should have VMCreator and consumption right only to the user-quota. So during creation the template-quota should disappear as the user does not have any rights for it. 2. Admin creates template using template-quota and a user quota. In this case helpdesk or team-leader have vm-creator, plus a permission on the user-quota, and also a consumption right on the user quota. In this case the helpdesk / team-leader can create a VM for a user, using the user-quota and assign permission for the relevant user / group on the newly created VMs. 2 things worth mentioning here: - Disk quota is being consumed during VM creation (and snapshotting, copy, etc). - RAM/CPU quota is being consumed only when the VM is running.
There is a difference between User and Admin Portal: in User portal quota list is being populated by quota that can be consumed by the user, so leaving the quota unchanged will selected an appropriate quota; also while creating a VM, disk's quota is set in 'Resource Allocation' tab (see image).
@Mitja,
Please check which quota(s) are assigned to VM while consuming the resources, and who is the user performing the task.
[if the answer to both questions is "no", there is a chance that Mitja discovered a bug]
---- Thanks, Einav
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: "Einav Cohen" <ecohen@redhat.com> Cc: users@ovirt.org Sent: Friday, October 4, 2013 8:14:10 AM Subject: Re: [Users] Quota for VMs created from templates
In addition to the described setup: The user was also given a permission on the data center with the role VmCreator. The user is not listed as a consumer of TemplateQuota, but they have an inherited role VmCreator in the permissions tab. Could this permission be the reason the user can create and run VMs that are associated with TemplateQuota?
Regards, Mitja
-- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
On 10/03/2013 05:06 PM, Einav Cohen wrote:
AFAIK, a user cannot create a VM that is associated with one (or more) quota objects on which he doesn't have consumer permissions. i.e. if the VM was created successfully by the user, and this VM is associated with TemplateQuota, and with the quota that has been created for the user (let's call it UserQuota), it means that the user has consumer permissions on both TemplateQuota and UserQuota. If the user doesn't have permissions on one of these Quota objects - the fact that the VM has been created successfully sounds like a bug to me.
---- Thanks, Einav
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: users@ovirt.org Sent: Thursday, October 3, 2013 9:59:06 AM Subject: [Users] Quota for VMs created from templates
Hi!
We are running engine version 3.3.0 on CentOS6 and we have come across a problem, possibly a bug. When a user creates a VM from a template, the template's quota is assigned to the VM.
Here is the setup: - quota is set to Enforced on the data center - quota is created for template purposes (TemplateQuota) - a template is created from a sealed VM with TemplateQuota assigned to it - quota is created for a user, the user is set as its consumer - the user creates a VM from the mentioned template and leaves the quota unchanged - the created VM consumes the user's storage quota but does not consume their memory and CPU quota
This way a user can create and run an arbitrary number of VMs as long they stay within their storage quota. No errors are reported in the logs.
Kind regards, Mitja Mihelic
-- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
Hi all, After investigating it a bit, I've found several bugs in that area :-P the most significant one is not checking whether the assigned quota can be consumed by the user, as you mentioned. I've proposed a fix for it: http://gerrit.ovirt.org/19994 @Mitja, I really appreciate your effort and time :-) Thanks, Gilad. ----- Original Message -----
From: "Doron Fediuck" <dfediuck@redhat.com> To: "Einav Cohen" <ecohen@redhat.com> Cc: "Gilad Chaplik" <gchaplik@redhat.com>, users@ovirt.org Sent: Monday, October 7, 2013 3:19:52 PM Subject: Re: [Users] Quota for VMs created from templates
----- Original Message -----
From: "Einav Cohen" <ecohen@redhat.com> To: "Gilad Chaplik" <gchaplik@redhat.com> Cc: users@ovirt.org Sent: Monday, October 7, 2013 2:39:29 PM Subject: Re: [Users] Quota for VMs created from templates
----- Original Message ----- From: "Gilad Chaplik" <gchaplik@redhat.com> Sent: Sunday, October 6, 2013 5:30:54 AM
Einav, Thanks for the questions, see inline.
@Gilad:
1. Does the 'VmCreator' Role contain the 'consume-quota' action? so when granting "VmCreator" on Data Center "DC1" to user "User1", "User1" can automatically consume any quota defined in "DC1" (including, for example, "TemplateQuota", in Mitja's case)?
No, only SuperUser and DataCenterAdmin roles contains consume_quota action.
2. Related to both your previous reply and my previous reply: Can a user associate a CPU/RAM Quota to a VM that he is now *creating*, even if he doesn't have consume-quota permissions on that CPU/RAM Quota? In Mitja's case, he attempted to create a VM associated with both "TemplateQuota" and "UserQuota", while the user (maybe - depends on answer to 1) didn't have permission to consume "TemplateQuota", and the VM creation succeeded. Is that OK?
Yes, you should be able to assign a VM to a CPU/RAM quota, without being a consumer of that quota, the check is done only when running the VM (when the resources are consumed).
so let's say that user 'a' has permissions to consume the quota and user 'b' doesn't have permissions to consume that quota, but both 'a' and 'b' have permissions to run the VM. only 'a' will succeed running the VM? so if I am a team leader (power user) and I want to create VMs to be used by my team members ('simple' users), I have to grant them permissions on the VM, as well as permissions to consume the relevant CPU/RAM quota?...
Generally speaking yes, but let's clarify it for the rest of the readers; There are 2 different cases here-
1. An admin creates everything, including a template using template-quota. In this case users will create VMs for themselves in the power user portal and should have VMCreator and consumption right only to the user-quota. So during creation the template-quota should disappear as the user does not have any rights for it.
2. Admin creates template using template-quota and a user quota. In this case helpdesk or team-leader have vm-creator, plus a permission on the user-quota, and also a consumption right on the user quota. In this case the helpdesk / team-leader can create a VM for a user, using the user-quota and assign permission for the relevant user / group on the newly created VMs.
2 things worth mentioning here: - Disk quota is being consumed during VM creation (and snapshotting, copy, etc). - RAM/CPU quota is being consumed only when the VM is running.
There is a difference between User and Admin Portal: in User portal quota list is being populated by quota that can be consumed by the user, so leaving the quota unchanged will selected an appropriate quota; also while creating a VM, disk's quota is set in 'Resource Allocation' tab (see image).
@Mitja,
Please check which quota(s) are assigned to VM while consuming the resources, and who is the user performing the task.
[if the answer to both questions is "no", there is a chance that Mitja discovered a bug]
---- Thanks, Einav
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: "Einav Cohen" <ecohen@redhat.com> Cc: users@ovirt.org Sent: Friday, October 4, 2013 8:14:10 AM Subject: Re: [Users] Quota for VMs created from templates
In addition to the described setup: The user was also given a permission on the data center with the role VmCreator. The user is not listed as a consumer of TemplateQuota, but they have an inherited role VmCreator in the permissions tab. Could this permission be the reason the user can create and run VMs that are associated with TemplateQuota?
Regards, Mitja
-- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
On 10/03/2013 05:06 PM, Einav Cohen wrote:
AFAIK, a user cannot create a VM that is associated with one (or more) quota objects on which he doesn't have consumer permissions. i.e. if the VM was created successfully by the user, and this VM is associated with TemplateQuota, and with the quota that has been created for the user (let's call it UserQuota), it means that the user has consumer permissions on both TemplateQuota and UserQuota. If the user doesn't have permissions on one of these Quota objects - the fact that the VM has been created successfully sounds like a bug to me.
---- Thanks, Einav
----- Original Message ----- > From: "Mitja Mihelič" <mitja.mihelic@arnes.si> > To: users@ovirt.org > Sent: Thursday, October 3, 2013 9:59:06 AM > Subject: [Users] Quota for VMs created from templates > > Hi! > > We are running engine version 3.3.0 on CentOS6 and we have come > across > a > problem, possibly a bug. > When a user creates a VM from a template, the template's quota is > assigned to the VM. > > Here is the setup: > - quota is set to Enforced on the data center > - quota is created for template purposes (TemplateQuota) > - a template is created from a sealed VM with TemplateQuota > assigned > to > it > - quota is created for a user, the user is set as its consumer > - the user creates a VM from the mentioned template and leaves the > quota > unchanged > - the created VM consumes the user's storage quota but does not > consume > their memory and CPU quota > > This way a user can create and run an arbitrary number of VMs as > long > they stay within their storage quota. > No errors are reported in the logs. > > Kind regards, > Mitja Mihelic > > -- > -- > Mitja Mihelič > ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia > tel: +386 1 479 8877, fax: +386 1 479 88 78 >
On 10/04/2013 03:14 PM, Mitja Mihelič wrote:
In addition to the described setup: The user was also given a permission on the data center with the role VmCreator. The user is not listed as a consumer of TemplateQuota, but they have an inherited role VmCreator in the permissions tab. Could this permission be the reason the user can create and run VMs that are associated with TemplateQuota?
there is a difference between permission to run a VM, and permission to a quota. user A has a permission to consume a quota Q. user A assigns that quota Q to resource R user B has permission to run resource R. user B doesn't need a permission to any quota. i.e., permission to run is a relation between user and a resource. permission to quota, is to associate a resource with a quota.
Regards, Mitja
-- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
On 10/03/2013 05:06 PM, Einav Cohen wrote:
AFAIK, a user cannot create a VM that is associated with one (or more) quota objects on which he doesn't have consumer permissions. i.e. if the VM was created successfully by the user, and this VM is associated with TemplateQuota, and with the quota that has been created for the user (let's call it UserQuota), it means that the user has consumer permissions on both TemplateQuota and UserQuota. If the user doesn't have permissions on one of these Quota objects - the fact that the VM has been created successfully sounds like a bug to me.
---- Thanks, Einav
----- Original Message -----
From: "Mitja Mihelič" <mitja.mihelic@arnes.si> To: users@ovirt.org Sent: Thursday, October 3, 2013 9:59:06 AM Subject: [Users] Quota for VMs created from templates
Hi!
We are running engine version 3.3.0 on CentOS6 and we have come across a problem, possibly a bug. When a user creates a VM from a template, the template's quota is assigned to the VM.
Here is the setup: - quota is set to Enforced on the data center - quota is created for template purposes (TemplateQuota) - a template is created from a sealed VM with TemplateQuota assigned to it - quota is created for a user, the user is set as its consumer - the user creates a VM from the mentioned template and leaves the quota unchanged - the created VM consumes the user's storage quota but does not consume their memory and CPU quota
This way a user can create and run an arbitrary number of VMs as long they stay within their storage quota. No errors are reported in the logs.
Kind regards, Mitja Mihelic
-- -- Mitja Mihelič ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia tel: +386 1 479 8877, fax: +386 1 479 88 78
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
participants (5)
-
Doron Fediuck -
Einav Cohen -
Gilad Chaplik -
Itamar Heim -
Mitja Mihelič