From nobody Sun Dec 6 17:00:25 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 966B31A9068 for ; Sun, 6 Dec 2015 17:00:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.701 X-Spam-Level: X-Spam-Status: No, score=0.701 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xnFWkA_5_--Y for ; Sun, 6 Dec 2015 17:00:23 -0800 (PST) Received: from mail-vk0-x236.google.com (mail-vk0-x236.google.com [IPv6:2607:f8b0:400c:c05::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D18D81A9067 for ; Sun, 6 Dec 2015 17:00:22 -0800 (PST) Received: by vkca188 with SMTP id a188so94590726vkc.0 for ; Sun, 06 Dec 2015 17:00:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=KXG+1vsnT9ER/95aW58nLo72RHJiYk06w76bvC92xdM=; b=e1mpA5FrtNom6POwef8YEGzE5Iu31nlbsz2d6oDEv8Y0n/dXM9CbJ4tbw7ROtdUNaP 1xSvcZIGuFV50WtHJ2UbKRwolOPwefwlD3fDk4D3YSnRx61euP7b+OGmac30DlZ9LrQH Z9Ci4y32xqS/rds1/6awfgT5eIiNW/1aaGUC+R+V2xOGDaT/Teb/ZiFDpgAGkH6zriTe 8RJMgf1XeH2sIEhrCq5R7Oyrcdze4KCgaEVbtkSnJhGeopF+hEUk8kwGjOmByfivtwN1 3NhXC+0IwKlpzuTi8DdUWsKTZGzgtOLoaTi0bO1FCr0CpFvqrUIRgkT16yd5zrMNN17K 1Tsw== MIME-Version: 1.0 X-Received: by 10.31.4.208 with SMTP id 199mr17013236vke.110.1449450021879; Sun, 06 Dec 2015 17:00:21 -0800 (PST) Received: by 10.103.40.131 with HTTP; Sun, 6 Dec 2015 17:00:21 -0800 (PST) Date: Sun, 6 Dec 2015 17:00:21 -0800 Message-ID: From: John Strassner To: i2nsf@ietf.org Content-Type: multipart/alternative; boundary=001a1142a4d2ac854905264461ed Archived-At: Subject: [I2nsf] Service Layer Policies - Post 0: note structure X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Dec 2015 01:00:24 -0000 --001a1142a4d2ac854905264461ed Content-Type: text/plain; charset=UTF-8 The I2NSF framework draft mentions PCIM (RFC3060) and PCIMe (RFC3460) as possible candidates for guiding the policy structure that can be mapped to the Capability Layer's "Subject-Object-Action-Function" paradigm. During IETF94, I expressed discomfort with the above paradigm. However, this is a complex subject, and is more easily understood by breaking this up into smaller discussions. Here is the order of notes that I will post: Post 0: this post Post 1: problems in using PCIM Post 2: problems in using PCIMe Post 3: differentiating between groups and roles Post 4: differentiating between context, constraints, and conditions Post 5: specific worries about the "Subject-Object-Action-Function" paradigm Post 6: proposed replacement policy structure Posts 1 and 2 clarify the problems in using PCIM and PCIMe, respectively, which I volunteered to do. Posts 3 and 4 are fundamental to posts 5 and 6, as they represent software building blocks that are critical for designing and implementing Service Policies in a scalable and robust manner. These also expand on points in posts 1 and 2. Post 5 is the heart of the manner, but can't really be tackled until the preceding posts were done. Post 6 builds on the previous posts. regards, John -- regards, John --001a1142a4d2ac854905264461ed Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
The I2NSF framework draft mentions PCIM (RFC3060) and= PCIMe (RFC3460) as possible candidates for guiding the policy structure th= at can be mapped to the Capability Layer's "Subject-Object-Action-= Function" paradigm.
During IETF94, I expressed discomfor= t with the above paradigm. However, this is a complex subject, and is more = easily understood by breaking this up into smaller discussions. Here is the= order of notes that I will post:

=C2=A0=C2=A0 Pos= t 0:=C2=A0 this post
=C2=A0=C2=A0 Post 1:=C2=A0 problems in = using=C2=A0PCIM
=C2=A0=C2=A0 Post 2:=C2=A0 problems in using=C2= =A0PCIMe
=C2=A0=C2=A0 Post 3:=C2=A0 differentiating between groups and= roles
=C2=A0=C2=A0 Post 4:=C2=A0 differentiating between context= , constraints,=C2=A0and conditions
=C2=A0=C2=A0 Post 5:=C2=A0 spe= cific worries about the "Subject-Object-Action-Function" paradigm=
=C2=A0=C2=A0 Post 6:=C2=A0 proposed replacement policy structure=

Posts 1 and 2=C2=A0clarify the problems in using = PCIM and PCIMe, respectively, which I volunteered to do.

Posts 3 and 4 are fundamental to posts 5 and 6, as they represent so= ftware building blocks that are critical for designing and implementing Ser= vice Policies in a scalable and robust manner. These also expand on points = in posts 1 and 2.

Post 5 is the heart of the manne= r, but can't really be tackled until the preceding posts were done. Pos= t 6 builds on the previous posts.

regards,
John
--
regards,
<= div>John
--001a1142a4d2ac854905264461ed-- From nobody Sun Dec 6 17:01:11 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 482DB1A906B for ; Sun, 6 Dec 2015 17:01:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.599 X-Spam-Level: X-Spam-Status: No, score=-0.599 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pGoTvwWQa7xZ for ; Sun, 6 Dec 2015 17:01:06 -0800 (PST) Received: from mail-vk0-x234.google.com (mail-vk0-x234.google.com [IPv6:2607:f8b0:400c:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A50691A9067 for ; Sun, 6 Dec 2015 17:01:05 -0800 (PST) Received: by vkha189 with SMTP id a189so93618268vkh.2 for ; Sun, 06 Dec 2015 17:01:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=WbBQcB9XKserYsvaY8mrk4sjOMVttBMkuUXAWV+GbAU=; b=WZy84/3Yy6s+xsS3CIt37wyq53eFF+er6nkyUTKflwPXUw0PipyGVqTy6J8GcUBWrQ MhlmR0Pogr5HMLdqoIQSnmrtnc1BKaTtS6Dz5qzeCnfSDH6x7jKCv/5yoG89YClF9EBp 2/ilQr5Tm7W3ClCtuZPSxbnGuZYeBuMMg9iLT1xDMcSuIqxmaWAaYjax3J8rGJ39OcNm XnXSm+sFzl+zyMnWDG7WQEWkivkznxUDuXy0s719x9IqBJVGQXAk+QVYNDVHxtDPx7zx jxJ4wKOCtL5X3aWF99JVIEojnXW0YL12XPIlvBLB7IHTH8QdmrqLWWoo3Eu8TRDl80FI w4Kg== MIME-Version: 1.0 X-Received: by 10.31.162.16 with SMTP id l16mr20568107vke.69.1449450064900; Sun, 06 Dec 2015 17:01:04 -0800 (PST) Received: by 10.103.40.131 with HTTP; Sun, 6 Dec 2015 17:01:04 -0800 (PST) Date: Sun, 6 Dec 2015 17:01:04 -0800 Message-ID: From: John Strassner To: i2nsf@ietf.org Content-Type: multipart/alternative; boundary=001a114402de3cf99a05264464ff Archived-At: Subject: [I2nsf] Service Layer Policies - Post 1: Background Information on PCIM X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Dec 2015 01:01:09 -0000 --001a114402de3cf99a05264464ff Content-Type: text/plain; charset=UTF-8 The I2NSF framework draft mentions PCIM (RFC3060) and PCIMe (RFC3460) as possible candidates for guiding the policy structure that can be mapped to the Capability Layer's "Subject-Object-Action-Function" paradigm. This note provides a brief analysis of the suitability of PCIM and PCIMe for this task. I have tried to avoid model-theoretic essays as much as possible. Sorry for the length of this note, but RFC3060 is a 100-page document, and this is a complex subject. Therefore, I have tried to keep this as brief as possible. If you need more explanation on the conclusions in section 3, please do not hesitate to ask! 1. Terminology An information model is a representation of concepts of interest to an environment in a form that is independent of data repository, data definition language, query language, implementation language, and protocol. A data model is a representation of concepts of interest to an environment in a form that is dependent on data repository, data definition language, query language, implementation language, and protocol (typically, but not necessarily, all three). 2. Brief description of PCIM The PCIM Class Hierarchy is very simple, as this is a CA (condition-action) model. Events are NOT represented. PCIM defines a PolicyRule, a PolicyGroup (group of PolicyRules), PolicyCondition, and PolicyAction. These are all siblings; their common superclass is called Policy, as shown below: ManagedElement (abstract) | +---Policy (abstract) | | | +---PolicyGroup | | | +---PolicyRule | | | +---PolicyCondition (abstract) | | | | | +---PolicyTimePeriodCondition | | | | | +---VendorPolicyCondition | | | +---PolicyAction (abstract) | | | +---VendorPolicyAction Note: PCIM does have a simple notion of Roles, but implements them as attributes, instead of objects. This is not scalable, and does not fully realize the power of using roles. This will be discussed more in Post 3. Note: It is possible to define limited constraints in PCIM as conditions. For example, the VendorPolicyCondition class has two attributes, Constraint and ConstraintEncoding, that do this. This will be discussed more in Post 4. Note: Context is NOT defined in the PCIM. 3. Summary: main drawbacks of using PCIM Note that the current CIM Policy Model (2.44.1) is significantly different than either PCIM or PCIMe. PCIM is based on CIM 2.4; PCIMe is based on CIM 2.5. PCIMe is NOT backwards compatible with PCIM in all areas. Critical Problems: - There is no unique ID that can be used to distinguish different instances of the same PolicyRule, PolicyGroup, PolicyCondition, or PolicyAction. - Relationships are implemented by defining an abstract class with keys, and then overriding the keys in the subclasses of the relationship. This is broken. Would you override keys in an RDBMS? - Most of the classes that are used to implement the relationships do NOT have attributes, so it is impossible to restrict which classes are related to which other classes (e.g., by context). Put another way, the same relationship must always be used between two types, even if the semantics varies. (The two exceptions are PolicyConditionInPolicyRule and PolicyActionInPolicyRule). - The "ignore this unless you need this" philosophy does not work. How do you know if other implementations that you are supposed to interoperate with are using them? - There is no concept of error or exception handling - There is no concept of the subject or the target of a policy - Adding a new type of policy (e.g., declarative or functional) will cause a major rewrite of the entire model - There is no approach to detecting and solving policy conflicts; this is due to the simplistic notion of just using a PDP and a PEP for applying policies. Major Problems: - The notion of "rule-specific" or "reusable" does not make sense. ANY object should be reusable. Worse, this affects the naming of the CIM classes. - PolicyGroup does not prevent defining loops of PolicyRules. - PolicyGroup uses a recursive aggregation for nesting; this causes unexpected behavior the further the nesting goes - The PolicyGroup recursive aggregation also does not support the aggregation of PolicyRules AND PolicyGroups; it is an either-or aggregation - Different classes are required to associate each condition with a PolicyRule - Different classes are required to associate each action with a PolicyRule - PolicyRule has a priority attribute; this can NOT be used to resolve priorities across nested PolicyRules and PolicyGroups - The aggregation PolicyActionInPolicyRule has an actionOrder attribute, which has 2 problems: 1) this can NOT be used to define the order of actions across nested PolicyRules and PolicyGroups 2) this is a very fragile mechanism for establishing the order of actions within a PolicyRule (e.g., no mechanisms are defined for verifying the order of actions is correct) - PolicyRule defines roles as a set of strings; this is NOT optimal, as will be explained in my next post (#3) - The associations PolicyInSystem, PolicyGroupInSystem, and PolicyRuleInSystem are superfluous; modern software techniques like introspection or reflection do the same things in more powerful ways. Minor Problems - Policy inherits at least 5 recursive relationships that are not useful for Policy-based Management. - Policy inherits at least 3 attributes that are not useful for Policy-based Management - PolicyGroup has no useful attributes defined - PolicyCondition is an abstract class with no attributes defined - PolicyTimePeriodCondition lacks full time capabilities (e.g., local time, lunar calendar, etc.) - PolicyAction is an abstract class with no attributes defined 4. Recommendations Given the large amount of problems, I recommend that we not consider PCIM further. 5. Origin of PCIM/PCIMe This is a **theory** section; please skip unless you want to understand the model in more detail. The PCIM is based on the DMTF CIM, which is actually a **data model** (despite its name) because it uses relational technologies (e.g., keys and weak references) to create its model. PCIM is based on an early version of the CIM (2.4); the current version of the CIM is 2.44.1 as of this writing. Since this is tied to the CIM, this means that: 1) Policy is subclassed from a more generic class (ManagedElement) 2) ALL relationships (associations, aggregations, and compositions) are realized as **classes** 3) As a result of 2), relationships are subclassed 4) Both attributes and associations are **inherited** 5) The same design approach (as much as possible) was used in PCIM/PCIMe as was in CIM. Specifically, it was thought better to define a generic, but optional, relationship instead of not defining the relationship. 6) The CIM does NOT have a single rooted hierarchy; this makes code generation more complex 7) The CIM uses a proprietary language and is not strictly UML compliant, even though it looks like UML (unfortunately, this language is also called MOF) Depending on the complexity of the implementation, the above have been shown to produce problems in large environments. For example, the spirit of "let's define an attribute or association in case it is useful, and make it optional so you don't have to worry about it" not only violates some well-known software architectural guidelines (e.g., Single Responsibility Principle and the Liskov Substitution Principle), but it makes things difficult to interoperate with (since you never really know if an attribute or relationship should be instantiated or not). regards, John --001a114402de3cf99a05264464ff Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
The I2NSF framework draft mentions PCIM (RFC3060) and= PCIMe (RFC3460) as possible candidates for guiding the policy structure th= at can be mapped to the Capability Layer's "Subject-Object-Action-= Function" paradigm. This note provides a brief analysis of the suitabi= lity of PCIM and PCIMe for this task. I have tried to avoid model-theoretic= essays as much as possible.

Sorry for the length = of this note, but RFC3060 is a 100-page document, and this is a complex sub= ject. Therefore, I have tried to keep this as brief as possible. If you nee= d more explanation on the conclusions in section 3, please do not hesitate = to ask!
=C2=A0
1.=C2=A0 Terminology
=C2=A0
=C2=A0=C2=A0 An information model is a repres= entation of concepts of interest
=C2=A0=C2=A0 to an environment in a f= orm that is independent of data repository,
=C2=A0=C2=A0 data de= finition language, query language, implementation language,
=C2= =A0=C2=A0 and protocol.
=C2=A0
=C2=A0= =C2=A0 A data model is a representation of concepts of interest to an
= =C2=A0=C2=A0 environment in a form that is dependent on data repository, da= ta
=C2=A0=C2=A0 definition language, query language, implementat= ion language, and
=C2=A0=C2=A0 protocol (typically, but not nece= ssarily, all three).
=C2=A0
=C2= =A0
2.=C2=A0 Brief description of PCIM
=C2=A0
The PCIM Class Hierarchy is very simple, as this is a CA (condi= tion-action) model. Events are NOT represented. PCIM defines a PolicyRule, = a PolicyGroup (group of PolicyRules), PolicyCondition, and PolicyAction. Th= ese are all siblings; their common superclass is called Policy, as shown be= low:

ManagedEle= ment (abstract)
=C2=A0 |
=C2=A0 +---Policy (abstract)
=C2=A0 |=C2= =A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyGroup=
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0=C2=A0|=C2=A0=C2=A0=C2= =A0=C2=A0 +---PolicyRule
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |= =C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyCondi= tion (abstract)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 +---PolicyTimePeriodCondition
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0+---VendorPolicyCondition
=C2= =A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +-= --PolicyAction (abstract)
=C2=A0 |=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0= |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 +---Ve= ndorPolicyAction
=C2=A0
Note: PCIM does have a simple no= tion of Roles, but implements them as attributes, instead of objects. This = is not scalable, and does not fully realize the power of using roles. This = will be discussed more in Post 3.
=C2=A0
Not= e: It is possible to define limited constraints in PCIM as conditions. For = example, the VendorPolicyCondition class has two attributes, Constraint and= ConstraintEncoding, that do this. This will be discussed more in Post 4.
=C2=A0
Note: Context is NOT defined in the PC= IM.


3.=C2=A0 Summary: main drawback= s of using PCIM
=C2=A0
Note that the c= urrent CIM Policy Model (2.44.1) is significantly different than either PCI= M or PCIMe.=C2=A0PCIM is based on CIM 2.4; PCIMe is based on CIM 2.5. PCIMe= is NOT backwards compatible with PCIM in all areas.
=C2=A0
=
Critical Problems:
  • There is no unique ID that can be used= to distinguish different
    instances of the same PolicyRule, PolicyGroup,= PolicyCondition,
    or PolicyAction.
  • Relationships are implemented= by defining an abstract class
    with keys, and then overriding the keys i= n the subclasses of the
    relationship. This is broken. Would you override= keys in an RDBMS?
  • Most of the classes that are used to implement t= he relationships
    do NOT have attributes, so it is impossible to restrict= which
    classes are related to which other classes (e.g., by context).Put another way, the same relationship must always be used
    between two= types, even if the semantics varies. (The two
    exceptions are PolicyCond= itionInPolicyRule and
    PolicyActionInPolicyRule).
  • The "ignor= e this unless you need this" philosophy does not
    work. How do you k= now if other implementations that you are
    supposed to interoperate with = are using them?
  • There is no concept of error or exception handling<= /li>
  • There is no concept of the subject or the target of a policy
    • Adding a new type of policy (e.g., declarative or functional)
    will cau= se a major rewrite of the entire model
  • There is no approach to dete= cting and solving policy conflicts;
    this is due to the simplistic notion= of just using a PDP and a
    PEP for applying policies.
Majo= r Problems:
  • The notion of "rule-specific" or "r= eusable" does not make sense.
    ANY object should be reusable. Worse,= this affects the naming
    of the CIM classes.
  • PolicyGroup does no= t prevent defining loops of PolicyRules.
  • PolicyGroup uses a recursi= ve aggregation for nesting; this
    causes unexpected behavior the further = the nesting goes
  • The PolicyGroup recursive aggregation also does no= t support
    the aggregation of PolicyRules AND PolicyGroups; it is an
    e= ither-or aggregation
  • Different classes are required to associate ea= ch condition with
    a PolicyRule
  • Different classes are requ= ired to associate each action with
    a PolicyRule
  • PolicyRul= e has a priority attribute; this can NOT be used to
    resolve priorities = across nested PolicyRules and PolicyGroups
  • The aggregati= on PolicyActionInPolicyRule has an actionOrder
    attribute, which has 2 pr= oblems:
    =C2=A0=C2=A0 1)=C2=A0this can NOT be used to define the order of= actions
    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 across nested PolicyRules = and PolicyGroups
    =C2=A0=C2=A0 2) this is a very fragile mechanism for es= tablishing the
    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 order of actions wit= hin a PolicyRule (e.g., no mechanisms
    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 are defined for verifying the order of actions is correct)
    • PolicyRule defines roles as a set of strings; this is NOT
    optimal= , as will be explained in my next post (#3)
  • The associat= ions PolicyInSystem, PolicyGroupInSystem,
    and PolicyRuleInSystem are sup= erfluous; modern software
    techniques like introspection or reflection d= o the same
    things in more powerful ways.
Minor Probl= ems
  • Policy inherits at least 5 recursive relationships that ar= e not
    useful for Policy-based Management.
  • Policy inherits= at least 3 attributes that are not useful for
    Policy-based Management
  • PolicyGroup has no useful attributes defined
  • PolicyCondition= is an abstract class with no attributes defined
  • PolicyTimePeriodCo= ndition lacks full time capabilities (e.g., local
    time, lunar calendar, = etc.)
  • PolicyAction is an abstract class with no attributes defined<= /li>
=C2=A0
4. Recommendations
=C2=A0
Given the large amount of problems, I recommen= d that we not consider PCIM further.

=C2=A0 =
5. Origin of PCIM/PCIMe
=C2=A0
Th= is is a **theory** section; please skip unless you want to understand the m= odel in more detail.
=C2=A0
The PCIM is base= d on the DMTF CIM, which is actually a **data model** (despite its name) be= cause it uses relational technologies (e.g., keys and weak references) to c= reate its model. PCIM is based on an early version of the CIM (2.4); the cu= rrent version of the CIM is 2.44.1 as of this writing. Since this is tied t= o the CIM, this means that:
=C2=A0
=C2=A0=C2= =A0 1) Policy is subclassed from a more generic class (ManagedElement)
=C2=A0=C2=A0 2) ALL relationships (associations, aggregations, and co= mpositions)
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 are realized as = **classes**
=C2=A0=C2=A0 3) As a result of 2), relationships are = subclassed
=C2=A0=C2=A0 4) Both attributes and associations are *= *inherited**
=C2=A0=C2=A0 5) The same design approach (as much as= possible) was used in
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= PCIM/PCIMe as was in CIM. Specifically, it was thought better
= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 to define a generic, but optiona= l, relationship instead of not
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 defining the relationship.
=C2=A0=C2=A0 6) The CIM does= NOT have a single rooted hierarchy; this makes
=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 code generation more complex
=C2=A0= =C2=A0 7) The CIM uses a proprietary language and is not strictly UML
=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 compliant, even though it l= ooks like UML (unfortunately, this
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 language is also called MOF)=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0
=C2=A0
Depending on the complexit= y of the implementation, the above have been shown to produce problems in l= arge environments. For example, the spirit of "let's define an att= ribute or association in case it is useful, and make it optional so you don= 't have to worry about it" not only violates some well-known softw= are architectural guidelines (e.g., Single Responsibility Principle and the= Liskov Substitution Principle), but it makes things difficult to interoper= ate with (since you never really know if an attribute or relationship shoul= d be instantiated or not).


regards,
John
--001a114402de3cf99a05264464ff-- From nobody Mon Dec 7 13:25:57 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 454CB1A903B for ; Mon, 7 Dec 2015 13:25:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d8xdesz0RhJS for ; Mon, 7 Dec 2015 13:25:54 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 477521A903A for ; Mon, 7 Dec 2015 13:25:53 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CFD15602; Mon, 07 Dec 2015 21:25:50 +0000 (GMT) Received: from LHREML705-CAH.china.huawei.com (10.201.5.168) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 7 Dec 2015 21:25:49 +0000 Received: from DFWEML705-CHM.china.huawei.com (10.193.5.142) by lhreml705-cah.china.huawei.com (10.201.5.168) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 7 Dec 2015 21:25:48 +0000 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml705-chm ([10.193.5.142]) with mapi id 14.03.0235.001; Mon, 7 Dec 2015 13:25:44 -0800 From: Linda Dunbar To: John Strassner , "i2nsf@ietf.org" Thread-Topic: [I2nsf] Service Layer Policies - Post 0: note structure Thread-Index: AQHRMIqyvnKSbbDaGE++ac31TX2i157ACZyg Date: Mon, 7 Dec 2015 21:25:44 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657DADCA6@dfweml701-chm> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.76] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657DADCA6dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A0B0206.5665F95F.0080, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=0.0.0.0, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: b2c9dfb86f3d59d2c6d5c327bc6378c2 Archived-At: Subject: Re: [I2nsf] Service Layer Policies - Post 0: note structure X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Dec 2015 21:25:56 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657DADCA6dfweml701chm_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sm9obiwNCg0KVGhhbmsgeW91IHZlcnkgbXVjaCBmb3Igc3RydWN0dXJpbmcgdGhlIGRpc2N1c3Np b24uIFRoaXMgaXMgdmVyeSBoZWxwZnVsLg0KDQoNCk1heWJlIEkgYW0ganVtcGluZyBhaGVhZC4g Rm9yIFBvc3QgNSwgIHRoZSDigJxvYmplY3TigJ0gY3VycmVudGx5IHVzZWQgaW4gSTJOU0YgZnJh bWV3b3JrIGlzIHNhbWUgYXMgdGhlICDigJxDb25kaXRpb27igJ0gaW4gUENJTSB0byBkZXNjcmli ZSB0aGUgY29uc3RyYWludHMuIElmIG5vIG9uZSBkaXNhZ3JlZSwgSSBwcm9wb3NlIHRvIGFsaWdu IHdpdGggUENJTSwgaS5lLiBjYWxsIGl0IOKAnFN1YmplY3QtQ29uZGl0aW9uLUFjdGlvbi1GdW5j dGlvbuKAnS4NCg0KUmVnYXJkcywNCkxpbmRhDQoNCkZyb206IEkybnNmIFttYWlsdG86aTJuc2Yt Ym91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEpvaG4gU3RyYXNzbmVyDQpTZW50OiBTdW5k YXksIERlY2VtYmVyIDA2LCAyMDE1IDc6MDAgUE0NClRvOiBpMm5zZkBpZXRmLm9yZw0KU3ViamVj dDogW0kybnNmXSBTZXJ2aWNlIExheWVyIFBvbGljaWVzIC0gUG9zdCAwOiBub3RlIHN0cnVjdHVy ZQ0KDQpUaGUgSTJOU0YgZnJhbWV3b3JrIGRyYWZ0IG1lbnRpb25zIFBDSU0gKFJGQzMwNjApIGFu ZCBQQ0lNZSAoUkZDMzQ2MCkgYXMgcG9zc2libGUgY2FuZGlkYXRlcyBmb3IgZ3VpZGluZyB0aGUg cG9saWN5IHN0cnVjdHVyZSB0aGF0IGNhbiBiZSBtYXBwZWQgdG8gdGhlIENhcGFiaWxpdHkgTGF5 ZXIncyAiU3ViamVjdC1PYmplY3QtQWN0aW9uLUZ1bmN0aW9uIiBwYXJhZGlnbS4NCkR1cmluZyBJ RVRGOTQsIEkgZXhwcmVzc2VkIGRpc2NvbWZvcnQgd2l0aCB0aGUgYWJvdmUgcGFyYWRpZ20uIEhv d2V2ZXIsIHRoaXMgaXMgYSBjb21wbGV4IHN1YmplY3QsIGFuZCBpcyBtb3JlIGVhc2lseSB1bmRl cnN0b29kIGJ5IGJyZWFraW5nIHRoaXMgdXAgaW50byBzbWFsbGVyIGRpc2N1c3Npb25zLiBIZXJl IGlzIHRoZSBvcmRlciBvZiBub3RlcyB0aGF0IEkgd2lsbCBwb3N0Og0KDQogICBQb3N0IDA6ICB0 aGlzIHBvc3QNCiAgIFBvc3QgMTogIHByb2JsZW1zIGluIHVzaW5nIFBDSU0NCiAgIFBvc3QgMjog IHByb2JsZW1zIGluIHVzaW5nIFBDSU1lDQogICBQb3N0IDM6ICBkaWZmZXJlbnRpYXRpbmcgYmV0 d2VlbiBncm91cHMgYW5kIHJvbGVzDQogICBQb3N0IDQ6ICBkaWZmZXJlbnRpYXRpbmcgYmV0d2Vl biBjb250ZXh0LCBjb25zdHJhaW50cywgYW5kIGNvbmRpdGlvbnMNCiAgIFBvc3QgNTogIHNwZWNp ZmljIHdvcnJpZXMgYWJvdXQgdGhlICJTdWJqZWN0LU9iamVjdC1BY3Rpb24tRnVuY3Rpb24iIHBh cmFkaWdtDQogICBQb3N0IDY6ICBwcm9wb3NlZCByZXBsYWNlbWVudCBwb2xpY3kgc3RydWN0dXJl DQoNClBvc3RzIDEgYW5kIDIgY2xhcmlmeSB0aGUgcHJvYmxlbXMgaW4gdXNpbmcgUENJTSBhbmQg UENJTWUsIHJlc3BlY3RpdmVseSwgd2hpY2ggSSB2b2x1bnRlZXJlZCB0byBkby4NCg0KUG9zdHMg MyBhbmQgNCBhcmUgZnVuZGFtZW50YWwgdG8gcG9zdHMgNSBhbmQgNiwgYXMgdGhleSByZXByZXNl bnQgc29mdHdhcmUgYnVpbGRpbmcgYmxvY2tzIHRoYXQgYXJlIGNyaXRpY2FsIGZvciBkZXNpZ25p bmcgYW5kIGltcGxlbWVudGluZyBTZXJ2aWNlIFBvbGljaWVzIGluIGEgc2NhbGFibGUgYW5kIHJv YnVzdCBtYW5uZXIuIFRoZXNlIGFsc28gZXhwYW5kIG9uIHBvaW50cyBpbiBwb3N0cyAxIGFuZCAy Lg0KDQpQb3N0IDUgaXMgdGhlIGhlYXJ0IG9mIHRoZSBtYW5uZXIsIGJ1dCBjYW4ndCByZWFsbHkg YmUgdGFja2xlZCB1bnRpbCB0aGUgcHJlY2VkaW5nIHBvc3RzIHdlcmUgZG9uZS4gUG9zdCA2IGJ1 aWxkcyBvbiB0aGUgcHJldmlvdXMgcG9zdHMuDQoNCnJlZ2FyZHMsDQpKb2huDQotLQ0KcmVnYXJk cywNCkpvaG4NCg== --_000_4A95BA014132FF49AE685FAB4B9F17F657DADCA6dfweml701chm_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 U2ltU3VuOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5v c2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJc QFNpbVN1biI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQovKiBTdHlsZSBEZWZp bml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXtt YXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFuLk1z b0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0 LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xs b3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVj b3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCglj b2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1v bmx5O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46 MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRT ZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVk ZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0t PjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0K PG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+ PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxp bms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkpvaG4sDQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPlRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHN0cnVjdHVyaW5nIHRoZSBkaXNjdXNz aW9uLiBUaGlzIGlzIHZlcnkgaGVscGZ1bC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPk1heWJlIEkgYW0ganVtcGluZyBhaGVhZC4gRm9yIFBvc3QgNSwg Jm5ic3A7dGhlIOKAnG9iamVjdOKAnSBjdXJyZW50bHkgdXNlZCBpbiBJMk5TRiBmcmFtZXdvcmsg aXMgc2FtZSBhcyB0aGUgJm5ic3A74oCcQ29uZGl0aW9u4oCdIGluIFBDSU0gdG8gZGVzY3JpYmUg dGhlIGNvbnN0cmFpbnRzLiBJZiBubw0KIG9uZSBkaXNhZ3JlZSwgSSBwcm9wb3NlIHRvIGFsaWdu IHdpdGggUENJTSwgaS5lLiBjYWxsIGl0IOKAnFN1YmplY3QtQ29uZGl0aW9uLUFjdGlvbi1GdW5j dGlvbuKAnS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+UmVnYXJkcywNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj5MaW5kYQ0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBJMm5zZiBbbWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0 Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPkpvaG4gU3RyYXNzbmVyPGJyPg0KPGI+U2VudDo8 L2I+IFN1bmRheSwgRGVjZW1iZXIgMDYsIDIwMTUgNzowMCBQTTxicj4NCjxiPlRvOjwvYj4gaTJu c2ZAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW0kybnNmXSBTZXJ2aWNlIExheWVyIFBv bGljaWVzIC0gUG9zdCAwOiBub3RlIHN0cnVjdHVyZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBJMk5TRiBmcmFtZXdvcmsgZHJhZnQgbWVu dGlvbnMgUENJTSAoUkZDMzA2MCkgYW5kIFBDSU1lIChSRkMzNDYwKSBhcyBwb3NzaWJsZSBjYW5k aWRhdGVzIGZvciBndWlkaW5nIHRoZSBwb2xpY3kgc3RydWN0dXJlIHRoYXQgY2FuIGJlIG1hcHBl ZCB0byB0aGUgQ2FwYWJpbGl0eSBMYXllcidzICZxdW90O1N1YmplY3QtT2JqZWN0LUFjdGlvbi1G dW5jdGlvbiZxdW90OyBwYXJhZGlnbS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkR1cmluZyBJRVRGOTQsIEkgZXhwcmVzc2VkIGRpc2NvbWZvcnQg d2l0aCB0aGUgYWJvdmUgcGFyYWRpZ20uIEhvd2V2ZXIsIHRoaXMgaXMgYSBjb21wbGV4IHN1Ympl Y3QsIGFuZCBpcyBtb3JlIGVhc2lseSB1bmRlcnN0b29kIGJ5IGJyZWFraW5nIHRoaXMgdXAgaW50 byBzbWFsbGVyIGRpc2N1c3Npb25zLiBIZXJlIGlzIHRoZSBvcmRlciBvZiBub3RlcyB0aGF0IEkg d2lsbCBwb3N0OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDsmbmJzcDsgUG9zdCAwOiZuYnNwOyB0aGlzIHBvc3Q8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJz cDsgUG9zdCAxOiZuYnNwOyBwcm9ibGVtcyBpbiB1c2luZyZuYnNwO1BDSU08bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyZuYnNwOyBQb3N0 IDI6Jm5ic3A7IHByb2JsZW1zIGluIHVzaW5nJm5ic3A7UENJTWU8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IFBvc3QgMzombmJzcDsgZGlm ZmVyZW50aWF0aW5nIGJldHdlZW4gZ3JvdXBzIGFuZCByb2xlczxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IFBvc3QgNDombmJz cDsgZGlmZmVyZW50aWF0aW5nIGJldHdlZW4gY29udGV4dCwgY29uc3RyYWludHMsJm5ic3A7YW5k IGNvbmRpdGlvbnM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOyZuYnNwOyBQb3N0IDU6Jm5ic3A7IHNwZWNpZmljIHdvcnJpZXMgYWJvdXQg dGhlICZxdW90O1N1YmplY3QtT2JqZWN0LUFjdGlvbi1GdW5jdGlvbiZxdW90OyBwYXJhZGlnbTxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 Jm5ic3A7IFBvc3QgNjombmJzcDsgcHJvcG9zZWQgcmVwbGFjZW1lbnQgcG9saWN5IHN0cnVjdHVy ZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Q b3N0cyAxIGFuZCAyJm5ic3A7Y2xhcmlmeSB0aGUgcHJvYmxlbXMgaW4gdXNpbmcgUENJTSBhbmQg UENJTWUsIHJlc3BlY3RpdmVseSwgd2hpY2ggSSB2b2x1bnRlZXJlZCB0byBkby48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UG9zdHMgMyBhbmQg NCBhcmUgZnVuZGFtZW50YWwgdG8gcG9zdHMgNSBhbmQgNiwgYXMgdGhleSByZXByZXNlbnQgc29m dHdhcmUgYnVpbGRpbmcgYmxvY2tzIHRoYXQgYXJlIGNyaXRpY2FsIGZvciBkZXNpZ25pbmcgYW5k IGltcGxlbWVudGluZyBTZXJ2aWNlIFBvbGljaWVzIGluIGEgc2NhbGFibGUgYW5kIHJvYnVzdCBt YW5uZXIuIFRoZXNlIGFsc28gZXhwYW5kIG9uIHBvaW50cyBpbiBwb3N0cyAxIGFuZCAyLjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Qb3N0IDUg aXMgdGhlIGhlYXJ0IG9mIHRoZSBtYW5uZXIsIGJ1dCBjYW4ndCByZWFsbHkgYmUgdGFja2xlZCB1 bnRpbCB0aGUgcHJlY2VkaW5nIHBvc3RzIHdlcmUgZG9uZS4gUG9zdCA2IGJ1aWxkcyBvbiB0aGUg cHJldmlvdXMgcG9zdHMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPnJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5Kb2huPGJyPg0KLS0gPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+cmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkpvaG48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_4A95BA014132FF49AE685FAB4B9F17F657DADCA6dfweml701chm_-- From nobody Mon Dec 7 13:34:01 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 623051ACD3A for ; Mon, 7 Dec 2015 13:34:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rm3LUOEi-NXj for ; Mon, 7 Dec 2015 13:33:58 -0800 (PST) Received: from mail-vk0-x235.google.com (mail-vk0-x235.google.com [IPv6:2607:f8b0:400c:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50E2A1AC3AC for ; Mon, 7 Dec 2015 13:33:58 -0800 (PST) Received: by vkbs1 with SMTP id s1so261574vkb.1 for ; Mon, 07 Dec 2015 13:33:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=TMoDggC+xvWA0+VENXUkNQY8ggVzxRBTSTV8w+eaak4=; b=vEUuLsJnoWgnv79lGiib0S+8C8SAGSk1JHPPXu9d3UiiEJmk79uIIl9QARGVzjQk1L R9DSmnxn5p+C3VhLJgZIh2NhFjl5/8oTBbEACKlINHfNxxESQBIvJ0+ELnT8rxDBs16q EQoUWc7NCu9I4prfKcBoTmy3lnrwzXvG29zZuokkFHwHCOp+vrbf2o6/p7dVEmPFl3RN xqtzkLpnGVSZ+IYAkSxY4oJ/bp6mhA5I82mLawyYYH8apywgErwcGxaeqApVC2ptyZ6t dEB1hb9G+H+5vRJ1DK7CecJMdfRQLfynDbXYSwNEIcFL1HNFA5RHcoVq331Kkp5LEBoS aZQw== MIME-Version: 1.0 X-Received: by 10.31.162.16 with SMTP id l16mr24709574vke.69.1449524037406; Mon, 07 Dec 2015 13:33:57 -0800 (PST) Received: by 10.103.40.131 with HTTP; Mon, 7 Dec 2015 13:33:57 -0800 (PST) In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657DADCA6@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657DADCA6@dfweml701-chm> Date: Mon, 7 Dec 2015 13:33:57 -0800 Message-ID: From: John Strassner To: Linda Dunbar Content-Type: multipart/alternative; boundary=001a114402de57d86f0526559dac Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Service Layer Policies - Post 0: note structure X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Dec 2015 21:34:00 -0000 --001a114402de57d86f0526559dac Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Linda, you are jumping ahead :-) First, read post 1. Aligning to PCIM is a BAD idea. Note that PCIMe will have a **different** set of problems, but jumping ahead, that is not advised either. Second, here are two fundamental problems with subject-object-action-function: 1) subject is currently also a condition :-( 2) the current definition of subject prohibits deontic logic in general and authorization policies in particular More later. best regards, John On Mon, Dec 7, 2015 at 1:25 PM, Linda Dunbar wrote: > John, > > > > Thank you very much for structuring the discussion. This is very helpful. > > > > > > Maybe I am jumping ahead. For Post 5, the =E2=80=9Cobject=E2=80=9D curre= ntly used in > I2NSF framework is same as the =E2=80=9CCondition=E2=80=9D in PCIM to de= scribe the > constraints. If no one disagree, I propose to align with PCIM, i.e. call = it > =E2=80=9CSubject-Condition-Action-Function=E2=80=9D. > > > > Regards, > > Linda > > > > *From:* I2nsf [mailto:i2nsf-bounces@ietf.org] *On Behalf Of *John > Strassner > *Sent:* Sunday, December 06, 2015 7:00 PM > *To:* i2nsf@ietf.org > *Subject:* [I2nsf] Service Layer Policies - Post 0: note structure > > > > The I2NSF framework draft mentions PCIM (RFC3060) and PCIMe (RFC3460) as > possible candidates for guiding the policy structure that can be mapped t= o > the Capability Layer's "Subject-Object-Action-Function" paradigm. > > During IETF94, I expressed discomfort with the above paradigm. However, > this is a complex subject, and is more easily understood by breaking this > up into smaller discussions. Here is the order of notes that I will post: > > > > Post 0: this post > > Post 1: problems in using PCIM > > Post 2: problems in using PCIMe > > Post 3: differentiating between groups and roles > > Post 4: differentiating between context, constraints, and conditions > > Post 5: specific worries about the "Subject-Object-Action-Function" > paradigm > > Post 6: proposed replacement policy structure > > > > Posts 1 and 2 clarify the problems in using PCIM and PCIMe, respectively, > which I volunteered to do. > > > > Posts 3 and 4 are fundamental to posts 5 and 6, as they represent softwar= e > building blocks that are critical for designing and implementing Service > Policies in a scalable and robust manner. These also expand on points in > posts 1 and 2. > > > > Post 5 is the heart of the manner, but can't really be tackled until the > preceding posts were done. Post 6 builds on the previous posts. > > > > regards, > > John > -- > > regards, > > John > --=20 regards, John --001a114402de57d86f0526559dac Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Linda,

you are jumping ah= ead :-)

First, read post 1. Aligning to PCIM is a = BAD idea. Note that PCIMe will have
a **different** set of problems, but= jumping ahead, that is not advised either.

Second, here are = two fundamental problems with subject-object-action-function:
=C2=A0=C2=A0 1) subject is currently also a condition :-(
=
=C2=A0=C2=A0 2) the current definition of subject prohibits deontic lo= gic in general
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 and authorizat= ion policies in particular

More later.
<= br>
best regards,
John



On Mon, = Dec 7, 2015 at 1:25 PM, Linda Dunbar <linda.dunbar@huawei.com>= ; wrote:

John,

=C2=A0=

Thank you very much = for structuring the discussion. This is very helpful.

=C2=A0=

=C2=A0=

Maybe I am jumping a= head. For Post 5, =C2=A0the =E2=80=9Cobject=E2=80=9D currently used in I2NS= F framework is same as the =C2=A0=E2=80=9CCondition=E2=80=9D in PCIM to des= cribe the constraints. If no one disagree, I propose to align with PCIM, i.e. call it =E2=80=9CSubject-= Condition-Action-Function=E2=80=9D.

=C2=A0=

Regards,

Linda

=C2=A0=

From: I2nsf [mailt= o:i2nsf-bounces= @ietf.org] On Behalf Of John Strassner
Sent: Sunday, December 06, 2015 7:00 PM
To: i2nsf@ietf.o= rg
Subject: [I2nsf] Service Layer Policies - Post 0: note structure<= /u>

=C2=A0

The I2NSF framework draft mentions PCIM (RFC3060) an= d PCIMe (RFC3460) as possible candidates for guiding the policy structure t= hat can be mapped to the Capability Layer's "Subject-Object-Action= -Function" paradigm.

During IETF94, I expressed discomfort with the above= paradigm. However, this is a complex subject, and is more easily understoo= d by breaking this up into smaller discussions. Here is the order of notes = that I will post:

=C2=A0

=C2=A0=C2=A0 Post 0:=C2=A0 this post

=C2=A0=C2=A0 Post 1:=C2=A0 problems in using=C2=A0PC= IM

=C2=A0=C2=A0 Post 2:=C2=A0 problems in using=C2=A0PC= IMe

=C2=A0=C2=A0 Post 3:=C2=A0 differentiating between g= roups and roles

=C2=A0=C2=A0 Post 4:=C2=A0 differentiating between c= ontext, constraints,=C2=A0and conditions

=C2=A0=C2=A0 Post 5:=C2=A0 specific worries about th= e "Subject-Object-Action-Function" paradigm

=C2=A0=C2=A0 Post 6:=C2=A0 proposed replacement poli= cy structure

=C2=A0

Posts 1 and 2=C2=A0clarify the problems in using PCI= M and PCIMe, respectively, which I volunteered to do.

=C2=A0

Posts 3 and 4 are fundamental to posts 5 and 6, as t= hey represent software building blocks that are critical for designing and = implementing Service Policies in a scalable and robust manner. These also e= xpand on points in posts 1 and 2.

=C2=A0

Post 5 is the heart of the manner, but can't rea= lly be tackled until the preceding posts were done. Post 6 builds on the pr= evious posts.

=C2=A0

regards,

John
--

regards,

John




--
regards,
John
--001a114402de57d86f0526559dac-- From nobody Tue Dec 8 01:38:12 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DDAF1ABD3D for ; Tue, 8 Dec 2015 01:38:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.61 X-Spam-Level: X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z1W-OvV-CTr0 for ; Tue, 8 Dec 2015 01:38:07 -0800 (PST) Received: from smtpjc.telefonica.com (smtpjc.telefonica.com [81.47.204.76]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52F351ABD36 for ; Tue, 8 Dec 2015 01:38:05 -0800 (PST) Received: from smtpjc.telefonica.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 6EF762F0195; Tue, 8 Dec 2015 10:38:03 +0100 (CET) Received: from ESTGVMSP104.EUROPE.telefonica.corp (unknown [10.92.4.9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtpjc.telefonica.com (Postfix) with ESMTPS id 549912F014B; Tue, 8 Dec 2015 10:38:03 +0100 (CET) Received: from emea01-am1-obe.outbound.protection.outlook.com (10.92.5.139) by tls.telefonica.com (10.93.6.50) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 8 Dec 2015 10:38:02 +0100 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com (10.161.13.142) by DB4PR06MB0624.eurprd06.prod.outlook.com (10.161.13.142) with Microsoft SMTP Server (TLS) id 15.1.337.19; Tue, 8 Dec 2015 09:38:00 +0000 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) by DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) with mapi id 15.01.0337.015; Tue, 8 Dec 2015 09:38:00 +0000 From: DIEGO LOPEZ GARCIA To: Linda Dunbar Thread-Topic: [I2nsf] Service Layer Policies - Post 0: note structure Thread-Index: AQHRMIqxhUeiN7iAx0uHXNErC3WMYZ7ACpMAgADMlgA= Date: Tue, 8 Dec 2015 09:37:59 +0000 Message-ID: References: <4A95BA014132FF49AE685FAB4B9F17F657DADCA6@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657DADCA6@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [195.76.49.202] x-microsoft-exchange-diagnostics: 1; DB4PR06MB0624; 5:KPnlXGvlsuzTFNz8pc2GQubEutIJnsEY8o0xtPh0M9Z3m3RwaFKnepfRZXZh5uQCyj6gITddFAT58zsuiQhXGPhDfFuUSjWIq9oWLaT/9Mdg+pRW6An3qh0qU4eAqS+luZEEzR9UyA+sye4XSBb5hA==; 24:Q6jA0kVN3PYRCSJnyVHOH0L0IiFyqrBjYxDymSW0/b5qVo0WGa6RZWwalb0LqX5wsKzta/PgY0Ft6vMKJGi6hwvZzBQA9hTA8YveFvCW1fQ= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB4PR06MB0624; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(40392960112811); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(520078)(5005006)(8121501046)(3002001)(10201501046); SRVR:DB4PR06MB0624; BCL:0; PCL:0; RULEID:; SRVR:DB4PR06MB0624; x-forefront-prvs: 0784C803FD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(45984002)(24454002)(377454003)(252514010)(189002)(199003)(87936001)(1220700001)(19617315012)(92566002)(1096002)(77096005)(105586002)(40100003)(83716003)(122556002)(6116002)(19580395003)(19580405001)(11100500001)(50986999)(33656002)(2950100001)(15975445007)(3846002)(101416001)(36756003)(2900100001)(106356001)(76176999)(66066001)(86362001)(102836003)(586003)(10400500002)(81156007)(97736004)(54356999)(106116001)(5002640100001)(110136002)(5004730100002)(5008740100001)(16236675004)(82746002)(5001960100002)(189998001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DB4PR06MB0624; H:DB4PR06MB0624.eurprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_A56B1B45FBAF49DCBB57DBC035490C3Ctelefonicacom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Dec 2015 09:37:59.9335 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR06MB0624 X-OriginatorOrg: telefonica.com X-TM-AS-MML: No Archived-At: Cc: "i2nsf@ietf.org" , John Strassner Subject: Re: [I2nsf] Service Layer Policies - Post 0: note structure X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Dec 2015 09:38:11 -0000 --_000_A56B1B45FBAF49DCBB57DBC035490C3Ctelefonicacom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCkkgc3VwcG9ydCB0aGlzLiBJIHRoaW5rIGl0IGlzIGdvb2QgdG8gYmUgYWxpZ25lZCB3 aXRoIGNvbW1vbiB1c2FnZSBvZiB0ZXJtcywgdW5sZXNzIHRoZXJlIGFyZSB2ZXJ5IGdvb2QgcmVh c29ucyB0byBkbyBvdGhlcndpc2UuDQoNCkp1c3QgZm9yIHRoZSByZWNvcmQsIHdlIGFyZSBjb2xs ZWN0aW5nIHNvbWUgb2YgdGhlIChhbHJlYWR5IG1hdHVyZSkgcmVzdWx0cyBvZiB0aGUgU0VDVVJF RCBwcm9qZWN0IHBvbGljeSBlZmZvcnRzIGludG8gYSBkb2N1bWVudCB3ZSB3aWxsIGNvbnRyaWJ1 dGUgYW55dGltZSBzb29uLiBJIGhvcGUgd2Ugd2lsbCBiZSB3ZWxsIGFsaWduZWQgd2l0aCBKb2hu 4oCZcyBpZGVhcy4NCg0KQmUgZ29vZGUsDQoNCk9uIDcgRGVjIDIwMTUsIGF0IDIyOjI1ICwgTGlu ZGEgRHVuYmFyIDxsaW5kYS5kdW5iYXJAaHVhd2VpLmNvbTxtYWlsdG86bGluZGEuZHVuYmFyQGh1 YXdlaS5jb20+PiB3cm90ZToNCg0KSm9obiwNCg0KVGhhbmsgeW91IHZlcnkgbXVjaCBmb3Igc3Ry dWN0dXJpbmcgdGhlIGRpc2N1c3Npb24uIFRoaXMgaXMgdmVyeSBoZWxwZnVsLg0KDQoNCk1heWJl IEkgYW0ganVtcGluZyBhaGVhZC4gRm9yIFBvc3QgNSwgIHRoZSDigJxvYmplY3TigJ0gY3VycmVu dGx5IHVzZWQgaW4gSTJOU0YgZnJhbWV3b3JrIGlzIHNhbWUgYXMgdGhlICDigJxDb25kaXRpb27i gJ0gaW4gUENJTSB0byBkZXNjcmliZSB0aGUgY29uc3RyYWludHMuIElmIG5vIG9uZSBkaXNhZ3Jl ZSwgSSBwcm9wb3NlIHRvIGFsaWduIHdpdGggUENJTSwgaS5lLiBjYWxsIGl0IOKAnFN1YmplY3Qt Q29uZGl0aW9uLUFjdGlvbi1GdW5jdGlvbuKAnS4NCg0KUmVnYXJkcywNCkxpbmRhDQoNCkZyb206 IEkybnNmIFttYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEpvaG4g U3RyYXNzbmVyDQpTZW50OiBTdW5kYXksIERlY2VtYmVyIDA2LCAyMDE1IDc6MDAgUE0NClRvOiBp Mm5zZkBpZXRmLm9yZzxtYWlsdG86aTJuc2ZAaWV0Zi5vcmc+DQpTdWJqZWN0OiBbSTJuc2ZdIFNl cnZpY2UgTGF5ZXIgUG9saWNpZXMgLSBQb3N0IDA6IG5vdGUgc3RydWN0dXJlDQoNClRoZSBJMk5T RiBmcmFtZXdvcmsgZHJhZnQgbWVudGlvbnMgUENJTSAoUkZDMzA2MCkgYW5kIFBDSU1lIChSRkMz NDYwKSBhcyBwb3NzaWJsZSBjYW5kaWRhdGVzIGZvciBndWlkaW5nIHRoZSBwb2xpY3kgc3RydWN0 dXJlIHRoYXQgY2FuIGJlIG1hcHBlZCB0byB0aGUgQ2FwYWJpbGl0eSBMYXllcidzICJTdWJqZWN0 LU9iamVjdC1BY3Rpb24tRnVuY3Rpb24iIHBhcmFkaWdtLg0KRHVyaW5nIElFVEY5NCwgSSBleHBy ZXNzZWQgZGlzY29tZm9ydCB3aXRoIHRoZSBhYm92ZSBwYXJhZGlnbS4gSG93ZXZlciwgdGhpcyBp cyBhIGNvbXBsZXggc3ViamVjdCwgYW5kIGlzIG1vcmUgZWFzaWx5IHVuZGVyc3Rvb2QgYnkgYnJl YWtpbmcgdGhpcyB1cCBpbnRvIHNtYWxsZXIgZGlzY3Vzc2lvbnMuIEhlcmUgaXMgdGhlIG9yZGVy IG9mIG5vdGVzIHRoYXQgSSB3aWxsIHBvc3Q6DQoNCiAgIFBvc3QgMDogIHRoaXMgcG9zdA0KICAg UG9zdCAxOiAgcHJvYmxlbXMgaW4gdXNpbmcgUENJTQ0KICAgUG9zdCAyOiAgcHJvYmxlbXMgaW4g dXNpbmcgUENJTWUNCiAgIFBvc3QgMzogIGRpZmZlcmVudGlhdGluZyBiZXR3ZWVuIGdyb3VwcyBh bmQgcm9sZXMNCiAgIFBvc3QgNDogIGRpZmZlcmVudGlhdGluZyBiZXR3ZWVuIGNvbnRleHQsIGNv bnN0cmFpbnRzLCBhbmQgY29uZGl0aW9ucw0KICAgUG9zdCA1OiAgc3BlY2lmaWMgd29ycmllcyBh Ym91dCB0aGUgIlN1YmplY3QtT2JqZWN0LUFjdGlvbi1GdW5jdGlvbiIgcGFyYWRpZ20NCiAgIFBv c3QgNjogIHByb3Bvc2VkIHJlcGxhY2VtZW50IHBvbGljeSBzdHJ1Y3R1cmUNCg0KUG9zdHMgMSBh bmQgMiBjbGFyaWZ5IHRoZSBwcm9ibGVtcyBpbiB1c2luZyBQQ0lNIGFuZCBQQ0lNZSwgcmVzcGVj dGl2ZWx5LCB3aGljaCBJIHZvbHVudGVlcmVkIHRvIGRvLg0KDQpQb3N0cyAzIGFuZCA0IGFyZSBm dW5kYW1lbnRhbCB0byBwb3N0cyA1IGFuZCA2LCBhcyB0aGV5IHJlcHJlc2VudCBzb2Z0d2FyZSBi dWlsZGluZyBibG9ja3MgdGhhdCBhcmUgY3JpdGljYWwgZm9yIGRlc2lnbmluZyBhbmQgaW1wbGVt ZW50aW5nIFNlcnZpY2UgUG9saWNpZXMgaW4gYSBzY2FsYWJsZSBhbmQgcm9idXN0IG1hbm5lci4g VGhlc2UgYWxzbyBleHBhbmQgb24gcG9pbnRzIGluIHBvc3RzIDEgYW5kIDIuDQoNClBvc3QgNSBp cyB0aGUgaGVhcnQgb2YgdGhlIG1hbm5lciwgYnV0IGNhbid0IHJlYWxseSBiZSB0YWNrbGVkIHVu dGlsIHRoZSBwcmVjZWRpbmcgcG9zdHMgd2VyZSBkb25lLiBQb3N0IDYgYnVpbGRzIG9uIHRoZSBw cmV2aW91cyBwb3N0cy4NCg0KcmVnYXJkcywNCkpvaG4NCi0tDQpyZWdhcmRzLA0KSm9obg0KX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkkybnNmIG1haWxp bmcgbGlzdA0KSTJuc2ZAaWV0Zi5vcmc8bWFpbHRvOkkybnNmQGlldGYub3JnPg0KaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZg0KDQotLQ0KIkVzdGEgdmV6IG5vIGZh bGxhcmVtb3MsIERvY3RvciBJbmZpZXJubyINCg0KRHIgRGllZ28gUi4gTG9wZXoNClRlbGVmb25p Y2EgSStEDQpodHRwOi8vcGVvcGxlLnRpZC5lcy9kaWVnby5sb3Blei8NCg0KZS1tYWlsOiBkaWVn by5yLmxvcGV6QHRlbGVmb25pY2EuY29tPG1haWx0bzpkaWVnby5yLmxvcGV6QHRlbGVmb25pY2Eu Y29tPg0KVGVsOiAgICArMzQgOTEzIDEyOSAwNDENCk1vYmlsZTogKzM0IDY4MiAwNTEgMDkxDQot LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCg0KX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCg0KRXN0ZSBtZW5zYWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4g ZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0aW5hdGFyaW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFj acOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRlbmNpYWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8g ZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUgZGVzdGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRl c3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90aWZpY2FkbyBkZSBxdWUgbGEgbGVjdHVyYSwg dXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24geS9vIGNvcGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1 ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0dWQgZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUu IFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2FqZSBwb3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5v cyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVudGUgcG9yIGVzdGEgbWlzbWEgdsOtYSB5IHByb2Nl ZGEgYSBzdSBkZXN0cnVjY2nDs24uDQoNClRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhp cyB0cmFuc21pc3Npb24gaXMgcHJpdmlsZWdlZCBhbmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9u IGludGVuZGVkIG9ubHkgZm9yIHRoZSB1c2Ugb2YgdGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5h bWVkIGFib3ZlLiBJZiB0aGUgcmVhZGVyIG9mIHRoaXMgbWVzc2FnZSBpcyBub3QgdGhlIGludGVu ZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5h dGlvbiwgZGlzdHJpYnV0aW9uIG9yIGNvcHlpbmcgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0 cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9u IGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4gUGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRo ZSBzZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJy b3IgYW5kIHRoZW4gZGVsZXRlIGl0Lg0KDQpFc3RhIG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2Ug ZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBzZXUgZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIg aW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBjb25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBl eGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRlIGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9z c2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlvIGluZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUg cXVlIGEgbGVpdHVyYSwgdXRpbGl6YcOnw6NvLCBkaXZ1bGdhw6fDo28gZS9vdSBjw7NwaWEgc2Vt IGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9pYmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHD p8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVzdGEgbWVuc2FnZW0gcG9yIGVycm8sIHJvZ2Ftb3Mt bGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2aWEg ZSBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Ojbw0K --_000_A56B1B45FBAF49DCBB57DBC035490C3Ctelefonicacom_ Content-Type: text/html; charset="utf-8" Content-ID: <1B11A510A321D049AE1F68C976EB4F21@eurprd06.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGksDQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5JIHN1cHBvcnQgdGhpcy4gSSB0aGlu ayBpdCBpcyBnb29kIHRvIGJlIGFsaWduZWQgd2l0aCBjb21tb24gdXNhZ2Ugb2YgdGVybXMsIHVu bGVzcyB0aGVyZSBhcmUgdmVyeSBnb29kIHJlYXNvbnMgdG8gZG8gb3RoZXJ3aXNlLiZuYnNwOzwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ SnVzdCBmb3IgdGhlIHJlY29yZCwgd2UgYXJlIGNvbGxlY3Rpbmcgc29tZSBvZiB0aGUgKGFscmVh ZHkgbWF0dXJlKSByZXN1bHRzIG9mIHRoZSBTRUNVUkVEIHByb2plY3QgcG9saWN5IGVmZm9ydHMg aW50byBhIGRvY3VtZW50IHdlIHdpbGwgY29udHJpYnV0ZSBhbnl0aW1lIHNvb24uIEkgaG9wZSB3 ZSB3aWxsIGJlIHdlbGwgYWxpZ25lZCB3aXRoIEpvaG7igJlzIGlkZWFzLjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+QmUgZ29vZGUsPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxkaXY+DQo8YmxvY2txdW90ZSB0eXBl PSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gNyBEZWMgMjAxNSwgYXQgMjI6MjUg LCBMaW5kYSBEdW5iYXIgJmx0OzxhIGhyZWY9Im1haWx0bzpsaW5kYS5kdW5iYXJAaHVhd2VpLmNv bSIgY2xhc3M9IiI+bGluZGEuZHVuYmFyQGh1YXdlaS5jb208L2E+Jmd0OyB3cm90ZTo8L2Rpdj4N CjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIiBzdHlsZT0icGFnZTogV29yZFNlY3Rpb24xOyBmb250 LWZhbWlseTogTHVjaWRhR3JhbmRlOyBmb250LXNpemU6IDExcHg7IGZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4w MDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBz ZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9 IiI+Sm9obiw8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1Rp bWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwg NzMsIDEyNSk7IiBjbGFzcz0iIj4mbmJzcDs8L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJn aW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1l cyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog MTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDcz LCAxMjUpOyIgY2xhc3M9IiI+VGhhbmsgeW91IHZlcnkgbXVjaCBmb3Igc3RydWN0dXJpbmcgdGhl IGRpc2N1c3Npb24uIFRoaXMgaXMgdmVyeSBoZWxwZnVsLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9z cGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0i Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBz YW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPiZuYnNwOzwvc3Bh bj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+ DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj4mbmJzcDs8L3NwYW4+ PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTog MTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0K PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMt c2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+TWF5YmUgSSBhbSBqdW1w aW5nIGFoZWFkLiBGb3IgUG9zdCA1LCAmbmJzcDt0aGUg4oCcb2JqZWN04oCdIGN1cnJlbnRseSB1 c2VkIGluIEkyTlNGIGZyYW1ld29yayBpcyBzYW1lIGFzIHRoZSAmbmJzcDvigJxDb25kaXRpb27i gJ0gaW4gUENJTSB0byBkZXNjcmliZSB0aGUgY29uc3RyYWludHMuIElmIG5vIG9uZQ0KIGRpc2Fn cmVlLCBJIHByb3Bvc2UgdG8gYWxpZ24gd2l0aCBQQ0lNLCBpLmUuIGNhbGwgaXQg4oCcU3ViamVj dC1Db25kaXRpb24tQWN0aW9uLUZ1bmN0aW9u4oCdLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFu PjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6 IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4N CjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5z LXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48 L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAx MnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8 c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj5SZWdhcmRzLDxvOnAgY2xh c3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAu MDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywg c2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFt aWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNz PSIiPkxpbmRhPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdU aW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEs IDczLCAxMjUpOyIgY2xhc3M9IiI+Jm5ic3A7PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0iYm9y ZGVyLXN0eWxlOiBzb2xpZCBub25lIG5vbmU7IGJvcmRlci10b3AtY29sb3I6IHJnYigxODEsIDE5 NiwgMjIzKTsgYm9yZGVyLXRvcC13aWR0aDogMXB0OyBwYWRkaW5nOiAzcHQgMGluIDBpbjsiIGNs YXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6 IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4N CjxiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBU YWhvbWEsIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsiIGNsYXNz PSIiPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5JMm5z ZiBbPGEgaHJlZj0ibWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmciIHN0eWxlPSJjb2xvcjog cHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPm1haWx0bzppMm5z Zi1ib3VuY2VzQGlldGYub3JnPC9hPl08c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+PGIgY2xhc3M9IiI+T24NCiBCZWhhbGYgT2Y8c3BhbiBjbGFzcz0iQXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPkpvaG4gU3RyYXNzbmVyPGJyIGNs YXNzPSIiPg0KPGIgY2xhc3M9IiI+U2VudDo8L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlN1bmRheSwgRGVjZW1iZXIgMDYsIDIwMTUgNzowMCBQTTxi ciBjbGFzcz0iIj4NCjxiIGNsYXNzPSIiPlRvOjwvYj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmkybnNmQGlldGYub3JnIiBz dHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0i Ij5pMm5zZkBpZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5TdWJqZWN0Ojwv Yj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+W0kybnNm XSBTZXJ2aWNlIExheWVyIFBvbGljaWVzIC0gUG9zdCAwOiBub3RlIHN0cnVjdHVyZTxvOnAgY2xh c3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcg Um9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rp dj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw aW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3 IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NClRoZSBJMk5TRiBmcmFtZXdvcmsgZHJhZnQgbWVu dGlvbnMgUENJTSAoUkZDMzA2MCkgYW5kIFBDSU1lIChSRkMzNDYwKSBhcyBwb3NzaWJsZSBjYW5k aWRhdGVzIGZvciBndWlkaW5nIHRoZSBwb2xpY3kgc3RydWN0dXJlIHRoYXQgY2FuIGJlIG1hcHBl ZCB0byB0aGUgQ2FwYWJpbGl0eSBMYXllcidzICZxdW90O1N1YmplY3QtT2JqZWN0LUFjdGlvbi1G dW5jdGlvbiZxdW90OyBwYXJhZGlnbS48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBm b250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBj bGFzcz0iIj4NCkR1cmluZyBJRVRGOTQsIEkgZXhwcmVzc2VkIGRpc2NvbWZvcnQgd2l0aCB0aGUg YWJvdmUgcGFyYWRpZ20uIEhvd2V2ZXIsIHRoaXMgaXMgYSBjb21wbGV4IHN1YmplY3QsIGFuZCBp cyBtb3JlIGVhc2lseSB1bmRlcnN0b29kIGJ5IGJyZWFraW5nIHRoaXMgdXAgaW50byBzbWFsbGVy IGRpc2N1c3Npb25zLiBIZXJlIGlzIHRoZSBvcmRlciBvZiBub3RlcyB0aGF0IEkgd2lsbCBwb3N0 OjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2 IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1m YW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0i Ij4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTog J1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsgUG9zdCAw OiZuYnNwOyB0aGlzIHBvc3Q8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbics IHNlcmlmOyIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsgUG9zdCAxOiZuYnNwOyBwcm9ibGVtcyBp biB1c2luZyZuYnNwO1BDSU08bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0i Ij4NCiZuYnNwOyZuYnNwOyBQb3N0IDI6Jm5ic3A7IHByb2JsZW1zIGluIHVzaW5nJm5ic3A7UENJ TWU8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46 IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBO ZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7IFBvc3QgMzombmJzcDsg ZGlmZmVyZW50aWF0aW5nIGJldHdlZW4gZ3JvdXBzIGFuZCByb2xlczxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcg Um9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7IFBvc3QgNDombmJzcDsgZGlm ZmVyZW50aWF0aW5nIGJldHdlZW4gY29udGV4dCwgY29uc3RyYWludHMsJm5ic3A7YW5kIGNvbmRp dGlvbnM8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZv bnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCiZuYnNwOyZu YnNwOyBQb3N0IDU6Jm5ic3A7IHNwZWNpZmljIHdvcnJpZXMgYWJvdXQgdGhlICZxdW90O1N1Ympl Y3QtT2JqZWN0LUFjdGlvbi1GdW5jdGlvbiZxdW90OyBwYXJhZGlnbTxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcg Um9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7IFBvc3QgNjombmJzcDsgcHJv cG9zZWQgcmVwbGFjZW1lbnQgcG9saWN5IHN0cnVjdHVyZTxvOnAgY2xhc3M9IiI+PC9vOnA+PC9k aXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4n LCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFw dDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbicsIHNlcmlm OyIgY2xhc3M9IiI+DQpQb3N0cyAxIGFuZCAyJm5ic3A7Y2xhcmlmeSB0aGUgcHJvYmxlbXMgaW4g dXNpbmcgUENJTSBhbmQgUENJTWUsIHJlc3BlY3RpdmVseSwgd2hpY2ggSSB2b2x1bnRlZXJlZCB0 byBkby48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZv bnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xh c3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1p bHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KUG9zdHMgMyBhbmQgNCBh cmUgZnVuZGFtZW50YWwgdG8gcG9zdHMgNSBhbmQgNiwgYXMgdGhleSByZXByZXNlbnQgc29mdHdh cmUgYnVpbGRpbmcgYmxvY2tzIHRoYXQgYXJlIGNyaXRpY2FsIGZvciBkZXNpZ25pbmcgYW5kIGlt cGxlbWVudGluZyBTZXJ2aWNlIFBvbGljaWVzIGluIGEgc2NhbGFibGUgYW5kIHJvYnVzdCBtYW5u ZXIuIFRoZXNlIGFsc28gZXhwYW5kIG9uIHBvaW50cyBpbiBwb3N0cyAxIGFuZCAyLjxvOnAgY2xh c3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdU aW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8 L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5l dyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQpQb3N0IDUgaXMgdGhlIGhlYXJ0IG9mIHRoZSBt YW5uZXIsIGJ1dCBjYW4ndCByZWFsbHkgYmUgdGFja2xlZCB1bnRpbCB0aGUgcHJlY2VkaW5nIHBv c3RzIHdlcmUgZG9uZS4gUG9zdCA2IGJ1aWxkcyBvbiB0aGUgcHJldmlvdXMgcG9zdHMuPG86cCBj bGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTog J1RpbWVzIE5ldyBSb21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNw OzwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2lu OiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnVGltZXMg TmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCnJlZ2FyZHMsPG86cCBjbGFzcz0iIj48L286 cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGlu IDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBS b21hbicsIHNlcmlmOyIgY2xhc3M9IiI+DQpKb2huPGJyIGNsYXNzPSIiPg0KLS08c3BhbiBjbGFz cz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286 cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1p bHk6ICdUaW1lcyBOZXcgUm9tYW4nLCBzZXJpZjsiIGNsYXNzPSIiPg0KcmVnYXJkcyw8bzpwIGNs YXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0i bWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAn VGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IiBjbGFzcz0iIj4NCkpvaG48bzpwIGNsYXNzPSIiPjwv bzpwPjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6IEx1Y2lkYUdyYW5kZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxlOiBu b3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0 LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAh aW1wb3J0YW50OyIgY2xhc3M9IiI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX188L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogTHVjaWRhR3JhbmRlOyBm b250LXNpemU6IDExcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxpbmUtaGVpZ2h0 OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBh dXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIg Y2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEx1Y2lkYUdyYW5kZTsgZm9udC1z aXplOiAxMXB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9y bWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsg dGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsg d29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZmxvYXQ6 IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+STJuc2YNCiBtYWls aW5nIGxpc3Q8L3NwYW4+PGJyIHN0eWxlPSJmb250LWZhbWlseTogTHVjaWRhR3JhbmRlOyBmb250 LXNpemU6IDExcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxpbmUtaGVpZ2h0OiBu b3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4 OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRv OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xh c3M9IiI+DQo8YSBocmVmPSJtYWlsdG86STJuc2ZAaWV0Zi5vcmciIHN0eWxlPSJjb2xvcjogcHVy cGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsgZm9udC1mYW1pbHk6IEx1Y2lkYUdyYW5k ZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBsaW5lLWhl aWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93 czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsiIGNsYXNzPSIiPkkybnNmQGlldGYub3JnPC9hPjxiciBzdHlsZT0iZm9udC1mYW1pbHk6IEx1 Y2lkYUdyYW5kZTsgZm9udC1zaXplOiAxMXB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsg dGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3Jt YWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsiIGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9pMm5zZiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlv bjogdW5kZXJsaW5lOyBmb250LWZhbWlseTogTHVjaWRhR3JhbmRlOyBmb250LXNpemU6IDExcHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhh bnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyIgY2xhc3M9IiI+aHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZjwvYT48L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBhcHBsZS1jb250ZW50LWVkaXRlZD0i dHJ1ZSIgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdp ZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgd29yZC13cmFwOiBicmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13 ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCi0tPGJyIGNs YXNzPSIiPg0KJnF1b3Q7RXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmllcm5vJnF1 b3Q7PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KRHIgRGllZ28gUi4gTG9wZXo8YnIgY2xh c3M9IiI+DQpUZWxlZm9uaWNhIEkmIzQzO0Q8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwOi8v cGVvcGxlLnRpZC5lcy9kaWVnby5sb3Blei8iIGNsYXNzPSIiPmh0dHA6Ly9wZW9wbGUudGlkLmVz L2RpZWdvLmxvcGV6LzwvYT48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQplLW1haWw6IDxh IGhyZWY9Im1haWx0bzpkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tIiBjbGFzcz0iIj5kaWVn by5yLmxvcGV6QHRlbGVmb25pY2EuY29tPC9hPjxiciBjbGFzcz0iIj4NClRlbDogJm5ic3A7ICZu YnNwOyYjNDM7MzQgOTEzIDEyOSAwNDE8YnIgY2xhc3M9IiI+DQpNb2JpbGU6ICYjNDM7MzQgNjgy IDA1MSAwOTE8YnIgY2xhc3M9IiI+DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t PC9kaXY+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGJyPg0KPGhyPg0KPGZvbnQg ZmFjZT0iQXJpYWwiIGNvbG9yPSJHcmF5IiBzaXplPSIxIj48YnI+DQpFc3RlIG1lbnNhamUgeSBz dXMgYWRqdW50b3Mgc2UgZGlyaWdlbiBleGNsdXNpdmFtZW50ZSBhIHN1IGRlc3RpbmF0YXJpbywg cHVlZGUgY29udGVuZXIgaW5mb3JtYWNpw7NuIHByaXZpbGVnaWFkYSBvIGNvbmZpZGVuY2lhbCB5 IGVzIHBhcmEgdXNvIGV4Y2x1c2l2byBkZSBsYSBwZXJzb25hIG8gZW50aWRhZCBkZSBkZXN0aW5v LiBTaSBubyBlcyB1c3RlZC4gZWwgZGVzdGluYXRhcmlvIGluZGljYWRvLCBxdWVkYSBub3RpZmlj YWRvIGRlIHF1ZSBsYQ0KIGxlY3R1cmEsIHV0aWxpemFjacOzbiwgZGl2dWxnYWNpw7NuIHkvbyBj b3BpYSBzaW4gYXV0b3JpemFjacOzbiBwdWVkZSBlc3RhciBwcm9oaWJpZGEgZW4gdmlydHVkIGRl IGxhIGxlZ2lzbGFjacOzbiB2aWdlbnRlLiBTaSBoYSByZWNpYmlkbyBlc3RlIG1lbnNhamUgcG9y IGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3MgbG8gY29tdW5pcXVlIGlubWVkaWF0YW1lbnRlIHBv ciBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRhIGEgc3UgZGVzdHJ1Y2Npw7NuLjxicj4NCjxicj4N ClRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24gaXMgcHJpdmls ZWdlZCBhbmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9ubHkgZm9yIHRoZSB1 c2Ugb2YgdGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVhZGVy IG9mIHRoaXMgbWVzc2FnZSBpcyBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBo ZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwNCiBkaXN0cmlidXRpb24gb3Ig Y29weWluZyBvZiB0aGlzIGNvbW11bmljYXRpb24gaXMgc3RyaWN0bHkgcHJvaGliaXRlZC4gSWYg eW91IGhhdmUgcmVjZWl2ZWQgdGhpcyB0cmFuc21pc3Npb24gaW4gZXJyb3IsIGRvIG5vdCByZWFk IGl0LiBQbGVhc2UgaW1tZWRpYXRlbHkgcmVwbHkgdG8gdGhlIHNlbmRlciB0aGF0IHlvdSBoYXZl IHJlY2VpdmVkIHRoaXMgY29tbXVuaWNhdGlvbiBpbiBlcnJvciBhbmQgdGhlbiBkZWxldGUgaXQu PGJyPg0KPGJyPg0KRXN0YSBtZW5zYWdlbSBlIHNldXMgYW5leG9zIHNlIGRpcmlnZW0gZXhjbHVz aXZhbWVudGUgYW8gc2V1IGRlc3RpbmF0w6FyaW8sIHBvZGUgY29udGVyIGluZm9ybWHDp8OjbyBw cml2aWxlZ2lhZGEgb3UgY29uZmlkZW5jaWFsIGUgw6kgcGFyYSB1c28gZXhjbHVzaXZvIGRhIHBl c3NvYSBvdSBlbnRpZGFkZSBkZSBkZXN0aW5vLiBTZSBuw6NvIMOpIHZvc3NhIHNlbmhvcmlhIG8g ZGVzdGluYXTDoXJpbyBpbmRpY2FkbywgZmljYSBub3RpZmljYWRvIGRlIHF1ZSBhDQogbGVpdHVy YSwgdXRpbGl6YcOnw6NvLCBkaXZ1bGdhw6fDo28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fD o28gcG9kZSBlc3RhciBwcm9pYmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRl LiBTZSByZWNlYmV1IGVzdGEgbWVuc2FnZW0gcG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3Mg byBjb211bmlxdWUgaW1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEg c3VhIGRlc3RydWnDp8Ojbzxicj4NCjwvZm9udD4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_A56B1B45FBAF49DCBB57DBC035490C3Ctelefonicacom_-- From nobody Tue Dec 8 13:11:20 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 35E941A8774 for ; Tue, 8 Dec 2015 13:11:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.61 X-Spam-Level: X-Spam-Status: No, score=-3.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_45=0.6, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0bRh53nYuVan for ; Tue, 8 Dec 2015 13:11:15 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B58F21A876F for ; Tue, 8 Dec 2015 13:11:13 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml401-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CFE42707; Tue, 08 Dec 2015 21:11:11 +0000 (GMT) Received: from DFWEML702-CHM.china.huawei.com (10.193.5.72) by lhreml401-hub.china.huawei.com (10.201.5.240) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 8 Dec 2015 21:11:10 +0000 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml702-chm ([10.193.5.72]) with mapi id 14.03.0235.001; Tue, 8 Dec 2015 13:10:57 -0800 From: Linda Dunbar To: John Strassner , "i2nsf@ietf.org" Thread-Topic: [I2nsf] Service Layer Policies - Post 1: Background Information on PCIM Thread-Index: AQHRMIrJ6daShQrvbEyJJCyiaN8JqJ7BjHvg Date: Tue, 8 Dec 2015 21:10:57 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.76] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657DAE627dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020204.5667476F.03C4, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=0.0.0.0, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 3f704aacd1979e0e6743c704efdc5d9a Archived-At: Subject: Re: [I2nsf] Service Layer Policies - Post 1: Background Information on PCIM X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Dec 2015 21:11:19 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657DAE627dfweml701chm_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sm9obiwNCg0KVGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhlIGluLWRlcHRoIGFuYWx5c2lzIG9m IFBDSU0gYW5kIGl0cyBzdWl0YWJpbGl0eSBhcyBzb21ldGhpbmcgdGhhdCBJMk5TRiBzaG91bGQg YmUgYmFzZWQgb24uIFdoYXQgeW91IHdyaXRlIGlzIHZlcnkgdmFsdWFibGUuIEkgdGhpbmsgdGhl IGFuYWx5c2lzIHNob3VsZCBiZSBhZGRlZCB0byB0aGUgSTJOU0YgZ2FwIGFuYWx5c2lzLCAob3Ig YmUgYSBzdGFuZGFsb25lIFBvbGljeSBBbmFseXNpcyBJRCkuDQoNCkkgaGF2ZSBzb21lIHF1ZXN0 aW9ucyBpbnNlcnRlZCBiZWxvdzoNCg0KRnJvbTogSTJuc2YgW21haWx0bzppMm5zZi1ib3VuY2Vz QGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSm9obiBTdHJhc3NuZXINClNlbnQ6IFN1bmRheSwgRGVj ZW1iZXIgMDYsIDIwMTUgNzowMSBQTQ0KVG86IGkybnNmQGlldGYub3JnDQpTdWJqZWN0OiBbSTJu c2ZdIFNlcnZpY2UgTGF5ZXIgUG9saWNpZXMgLSBQb3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRp b24gb24gUENJTQ0KDQo8U25pcHBlZD4NCg0KMi4gIEJyaWVmIGRlc2NyaXB0aW9uIG9mIFBDSU0N Cg0KVGhlIFBDSU0gQ2xhc3MgSGllcmFyY2h5IGlzIHZlcnkgc2ltcGxlLCBhcyB0aGlzIGlzIGEg Q0EgKGNvbmRpdGlvbi1hY3Rpb24pIG1vZGVsLiBFdmVudHMgYXJlIE5PVCByZXByZXNlbnRlZC4g UENJTSBkZWZpbmVzIGEgUG9saWN5UnVsZSwgYSBQb2xpY3lHcm91cCAoZ3JvdXAgb2YgUG9saWN5 UnVsZXMpLCBQb2xpY3lDb25kaXRpb24sIGFuZCBQb2xpY3lBY3Rpb24uIFRoZXNlIGFyZSBhbGwg c2libGluZ3M7IHRoZWlyIGNvbW1vbiBzdXBlcmNsYXNzIGlzIGNhbGxlZCBQb2xpY3ksIGFzIHNo b3duIGJlbG93Og0KDQpNYW5hZ2VkRWxlbWVudCAoYWJzdHJhY3QpDQogIHwNCiAgKy0tLVBvbGlj eSAoYWJzdHJhY3QpDQogIHwgICAgIHwNCiAgfCAgICAgKy0tLVBvbGljeUdyb3VwDQogIHwgICAg IHwNCiAgfCAgICAgKy0tLVBvbGljeVJ1bGUNCiAgfCAgICAgfA0KICB8ICAgICArLS0tUG9saWN5 Q29uZGl0aW9uIChhYnN0cmFjdCkNCiAgfCAgICAgfCAgICAgIHwNCiAgfCAgICAgfCAgICAgICst LS1Qb2xpY3lUaW1lUGVyaW9kQ29uZGl0aW9uDQogIHwgICAgIHwgICAgICB8DQogIHwgICAgIHwg ICAgICArLS0tVmVuZG9yUG9saWN5Q29uZGl0aW9uDQogIHwgICAgIHwNCiAgfCAgICAgKy0tLVBv bGljeUFjdGlvbiAoYWJzdHJhY3QpDQogIHwgICAgICAgICAgICB8DQogIHwgICAgICAgICAgICAr LS0tVmVuZG9yUG9saWN5QWN0aW9uDQoNCk5vdGU6IFBDSU0gZG9lcyBoYXZlIGEgc2ltcGxlIG5v dGlvbiBvZiBSb2xlcywgYnV0IGltcGxlbWVudHMgdGhlbSBhcyBhdHRyaWJ1dGVzLCBpbnN0ZWFk IG9mIG9iamVjdHMuIFRoaXMgaXMgbm90IHNjYWxhYmxlLCBhbmQgZG9lcyBub3QgZnVsbHkgcmVh bGl6ZSB0aGUgcG93ZXIgb2YgdXNpbmcgcm9sZXMuIFRoaXMgd2lsbCBiZSBkaXNjdXNzZWQgbW9y ZSBpbiBQb3N0IDMuDQoNCk5vdGU6IEl0IGlzIHBvc3NpYmxlIHRvIGRlZmluZSBsaW1pdGVkIGNv bnN0cmFpbnRzIGluIFBDSU0gYXMgY29uZGl0aW9ucy4gRm9yIGV4YW1wbGUsIHRoZSBWZW5kb3JQ b2xpY3lDb25kaXRpb24gY2xhc3MgaGFzIHR3byBhdHRyaWJ1dGVzLCBDb25zdHJhaW50IGFuZCBD b25zdHJhaW50RW5jb2RpbmcsIHRoYXQgZG8gdGhpcy4gVGhpcyB3aWxsIGJlIGRpc2N1c3NlZCBt b3JlIGluIFBvc3QgNC4NCg0KTm90ZTogQ29udGV4dCBpcyBOT1QgZGVmaW5lZCBpbiB0aGUgUENJ TS4NCg0KW0xpbmRhXSAgRG8geW91IGFncmVlIHRoYXQg4oCcQ29uZGl0aW9uIG9mIHRoZSBQQ0lN 4oCdID09IOKAnEkyTlNGIHN1YmplY3TigJ0gJiDigJx0aGUgQ29udGV4dHVhbCBzdGF0ZXMgKG9y IHRoZSBJMk5TRiBvYmplY3Qp4oCdPw0KDQoNCjMuICBTdW1tYXJ5OiBtYWluIGRyYXdiYWNrcyBv ZiB1c2luZyBQQ0lNDQoNCk5vdGUgdGhhdCB0aGUgY3VycmVudCBDSU0gUG9saWN5IE1vZGVsICgy LjQ0LjEpIGlzIHNpZ25pZmljYW50bHkgZGlmZmVyZW50IHRoYW4gZWl0aGVyIFBDSU0gb3IgUENJ TWUuIFBDSU0gaXMgYmFzZWQgb24gQ0lNIDIuNDsgUENJTWUgaXMgYmFzZWQgb24gQ0lNIDIuNS4g UENJTWUgaXMgTk9UIGJhY2t3YXJkcyBjb21wYXRpYmxlIHdpdGggUENJTSBpbiBhbGwgYXJlYXMu DQoNCkNyaXRpY2FsIFByb2JsZW1zOg0KDQogICogICBUaGVyZSBpcyBubyB1bmlxdWUgSUQgdGhh dCBjYW4gYmUgdXNlZCB0byBkaXN0aW5ndWlzaCBkaWZmZXJlbnQNCmluc3RhbmNlcyBvZiB0aGUg c2FtZSBQb2xpY3lSdWxlLCBQb2xpY3lHcm91cCwgUG9saWN5Q29uZGl0aW9uLA0Kb3IgUG9saWN5 QWN0aW9uLg0KW0xpbmRhXSBDYW4gd2Ugc2ltcGx5IGNyZWF0ZSBhbiBJRCAoc3RyaW5nIG9yIG51 bWVyaWMpIGZvciBpbnN0YW5jZXMgb2YgdGhlIHNhbWUgUG9saWN5UnVsZT8gT3IgaXQgaXMgbW9y ZSBjb21wbGljYXRlZD8NCg0KICAqICAgUmVsYXRpb25zaGlwcyBhcmUgaW1wbGVtZW50ZWQgYnkg ZGVmaW5pbmcgYW4gYWJzdHJhY3QgY2xhc3MNCndpdGgga2V5cywgYW5kIHRoZW4gb3ZlcnJpZGlu ZyB0aGUga2V5cyBpbiB0aGUgc3ViY2xhc3NlcyBvZiB0aGUNCnJlbGF0aW9uc2hpcC4gVGhpcyBp cyBicm9rZW4uIFdvdWxkIHlvdSBvdmVycmlkZSBrZXlzIGluIGFuIFJEQk1TPw0KW0xpbmRhXSBJ cyB0aGUg4oCcS2V54oCdIHRvIGRpZmZlcmVudGlhdGluZyBkaWZmZXJlbnQg4oCcUG9saWN5UnVs ZeKAnT8gICBDYW4geW91IGdpdmUgYW4gZXhhbXBsZSBvZiDigJxzdWJjbGFzc2VzIG9mIHRoZSBy ZWxhdGlvbnNoaXDigJ0/DQpXaGF0IGV2ZW50cyBjYW4gY2F1c2Ug4oCcb3ZlcnJpZGluZyB0aGUg a2V5cyBpbiB0aGUgc3ViY2xhc3NlcyBvZiB0aGUgcmVsYXRpb25zaGlw4oCdPw0KDQogICogICBN b3N0IG9mIHRoZSBjbGFzc2VzIHRoYXQgYXJlIHVzZWQgdG8gaW1wbGVtZW50IHRoZSByZWxhdGlv bnNoaXBzDQpkbyBOT1QgaGF2ZSBhdHRyaWJ1dGVzLCBzbyBpdCBpcyBpbXBvc3NpYmxlIHRvIHJl c3RyaWN0IHdoaWNoDQpjbGFzc2VzIGFyZSByZWxhdGVkIHRvIHdoaWNoIG90aGVyIGNsYXNzZXMg KGUuZy4sIGJ5IGNvbnRleHQpLg0KUHV0IGFub3RoZXIgd2F5LCB0aGUgc2FtZSByZWxhdGlvbnNo aXAgbXVzdCBhbHdheXMgYmUgdXNlZA0KYmV0d2VlbiB0d28gdHlwZXMsIGV2ZW4gaWYgdGhlIHNl bWFudGljcyB2YXJpZXMuIChUaGUgdHdvDQpleGNlcHRpb25zIGFyZSBQb2xpY3lDb25kaXRpb25J blBvbGljeVJ1bGUgYW5kDQpQb2xpY3lBY3Rpb25JblBvbGljeVJ1bGUpLg0KW0xpbmRhXSBEb2Vz IOKAnGNsYXNzZXPigJ0gPT0g4oCcUG9saWN5UnVsZeKAnT8NCg0KICAqICAgVGhlICJpZ25vcmUg dGhpcyB1bmxlc3MgeW91IG5lZWQgdGhpcyIgcGhpbG9zb3BoeSBkb2VzIG5vdA0Kd29yay4gSG93 IGRvIHlvdSBrbm93IGlmIG90aGVyIGltcGxlbWVudGF0aW9ucyB0aGF0IHlvdSBhcmUNCnN1cHBv c2VkIHRvIGludGVyb3BlcmF0ZSB3aXRoIGFyZSB1c2luZyB0aGVtPw0KW0xpbmRhXSBJcyDigJxJ Z25vcmUgdGhpcyB1bmxlc3MgeW91IG5lZWQgdGhpc+KAnSBhbiBuZXcgdHlwZSBvZiDigJxQb2xp Y3lSdWxl4oCdPw0KDQogICogICBUaGVyZSBpcyBubyBjb25jZXB0IG9mIGVycm9yIG9yIGV4Y2Vw dGlvbiBoYW5kbGluZw0KICAqICAgVGhlcmUgaXMgbm8gY29uY2VwdCBvZiB0aGUgc3ViamVjdCBv ciB0aGUgdGFyZ2V0IG9mIGEgcG9saWN5DQpbTGluZGFdIERvZXMgeW91ciDigJxzdWJqZWN04oCd IGhhdmUgdGhlIHNhbWUgbWVhbmluZyBhcyB0aGUg4oCcSTJOU0Ygc3ViamVjdOKAnSB3aGljaCBt ZWFucyBiaXRzJmJ5dGVzIGV4dHJhY3RlZCBmcm9tIHBhY2tldHM/DQoNCiAgKiAgIEFkZGluZyBh IG5ldyB0eXBlIG9mIHBvbGljeSAoZS5nLiwgZGVjbGFyYXRpdmUgb3IgZnVuY3Rpb25hbCkNCndp bGwgY2F1c2UgYSBtYWpvciByZXdyaXRlIG9mIHRoZSBlbnRpcmUgbW9kZWwNCg0KW0xpbmRhXSBD YW4gd2Ugc2F5IHRoYXQgIEkyTlNGIHBvbGljaWVzIGhhdmUgb25lIHR5cGUg4oCcU3ViamVjdC1D b250ZXh0dWFsU3RhdGVzLSBhY3Rpb24tIGZ1bmN0aW9uPyBTbyBpbiBJMk5TRiBlbnZpcm9ubWVu dCwgdGhlcmUgaXMgb25seSB0aGUgbm90aW9uIG9mIGFkZGluZyBhIG5ldyDigJxQb2xpY3lSdWxl 4oCdLCBidXQgbm8gYWRkaW5nIGEgbmV3IHBvbGljeSB0eXBlLiBJcyB0aGlzIGNvcnJlY3Qgc3Rh dGVtZW50Pw0KDQogICogICBUaGVyZSBpcyBubyBhcHByb2FjaCB0byBkZXRlY3RpbmcgYW5kIHNv bHZpbmcgcG9saWN5IGNvbmZsaWN0czsNCnRoaXMgaXMgZHVlIHRvIHRoZSBzaW1wbGlzdGljIG5v dGlvbiBvZiBqdXN0IHVzaW5nIGEgUERQIGFuZCBhDQpQRVAgZm9yIGFwcGx5aW5nIHBvbGljaWVz Lg0KDQpbTGluZGFdIGluIEkyTlNGLCB0aGVyZSBjb3VsZCBiZSBhIGxvdCBvZiBjb25mbGljdHMs IGZvciBleGFtcGxlLCB0aGVyZSBjb3VsZCBiZSB0d28gcnVsZXMgZW50ZXJlZCBhdCBkaWZmZXJl bnQgdGltZToNCg0KMS4gICAgICAgVmlydHVhbCBOZXR3b3JrIFggY2Fu4oCZdCBhY2Nlc3Mg4oCc WW91VHViZeKAnSwNCg0KMi4gICAgICAxMC4xLjEuMSBjYW4gYWNjZXNzIOKAnFlvdVR1YmXigJ0g KHdoZXJlIDEwLjEuMS4xIGlzIGEgaG9zdCB3aXRoaW4gdGhlIFZpcnR1YWwgTmV0d29yayBYKS4N Cg0KRG8geW91IGNhbGwgdGhlIDIgcnVsZXMgYWJvdmUgY29uZmxpY3Q/DQoNCg0KDQo0LiBSZWNv bW1lbmRhdGlvbnMNCg0KR2l2ZW4gdGhlIGxhcmdlIGFtb3VudCBvZiBwcm9ibGVtcywgSSByZWNv bW1lbmQgdGhhdCB3ZSBub3QgY29uc2lkZXIgUENJTSBmdXJ0aGVyLg0KW0xpbmRhXSBzaG91bGQg STJOU0YgcmVmZXJlbmNlIFBDSU0/DQoNClRoYW5rIHlvdSB2ZXJ5IG11Y2guIExpbmRhDQoNCjUu IE9yaWdpbiBvZiBQQ0lNL1BDSU1lDQoNClRoaXMgaXMgYSAqKnRoZW9yeSoqIHNlY3Rpb247IHBs ZWFzZSBza2lwIHVubGVzcyB5b3Ugd2FudCB0byB1bmRlcnN0YW5kIHRoZSBtb2RlbCBpbiBtb3Jl IGRldGFpbC4NCg0KVGhlIFBDSU0gaXMgYmFzZWQgb24gdGhlIERNVEYgQ0lNLCB3aGljaCBpcyBh Y3R1YWxseSBhICoqZGF0YSBtb2RlbCoqIChkZXNwaXRlIGl0cyBuYW1lKSBiZWNhdXNlIGl0IHVz ZXMgcmVsYXRpb25hbCB0ZWNobm9sb2dpZXMgKGUuZy4sIGtleXMgYW5kIHdlYWsgcmVmZXJlbmNl cykgdG8gY3JlYXRlIGl0cyBtb2RlbC4gUENJTSBpcyBiYXNlZCBvbiBhbiBlYXJseSB2ZXJzaW9u IG9mIHRoZSBDSU0gKDIuNCk7IHRoZSBjdXJyZW50IHZlcnNpb24gb2YgdGhlIENJTSBpcyAyLjQ0 LjEgYXMgb2YgdGhpcyB3cml0aW5nLiBTaW5jZSB0aGlzIGlzIHRpZWQgdG8gdGhlIENJTSwgdGhp cyBtZWFucyB0aGF0Og0KDQogICAxKSBQb2xpY3kgaXMgc3ViY2xhc3NlZCBmcm9tIGEgbW9yZSBn ZW5lcmljIGNsYXNzIChNYW5hZ2VkRWxlbWVudCkNCiAgIDIpIEFMTCByZWxhdGlvbnNoaXBzIChh c3NvY2lhdGlvbnMsIGFnZ3JlZ2F0aW9ucywgYW5kIGNvbXBvc2l0aW9ucykNCiAgICAgICBhcmUg cmVhbGl6ZWQgYXMgKipjbGFzc2VzKioNCiAgIDMpIEFzIGEgcmVzdWx0IG9mIDIpLCByZWxhdGlv bnNoaXBzIGFyZSBzdWJjbGFzc2VkDQogICA0KSBCb3RoIGF0dHJpYnV0ZXMgYW5kIGFzc29jaWF0 aW9ucyBhcmUgKippbmhlcml0ZWQqKg0KICAgNSkgVGhlIHNhbWUgZGVzaWduIGFwcHJvYWNoIChh cyBtdWNoIGFzIHBvc3NpYmxlKSB3YXMgdXNlZCBpbg0KICAgICAgICBQQ0lNL1BDSU1lIGFzIHdh cyBpbiBDSU0uIFNwZWNpZmljYWxseSwgaXQgd2FzIHRob3VnaHQgYmV0dGVyDQogICAgICAgIHRv IGRlZmluZSBhIGdlbmVyaWMsIGJ1dCBvcHRpb25hbCwgcmVsYXRpb25zaGlwIGluc3RlYWQgb2Yg bm90DQogICAgICAgIGRlZmluaW5nIHRoZSByZWxhdGlvbnNoaXAuDQogICA2KSBUaGUgQ0lNIGRv ZXMgTk9UIGhhdmUgYSBzaW5nbGUgcm9vdGVkIGhpZXJhcmNoeTsgdGhpcyBtYWtlcw0KICAgICAg ICBjb2RlIGdlbmVyYXRpb24gbW9yZSBjb21wbGV4DQogICA3KSBUaGUgQ0lNIHVzZXMgYSBwcm9w cmlldGFyeSBsYW5ndWFnZSBhbmQgaXMgbm90IHN0cmljdGx5IFVNTA0KICAgICAgICBjb21wbGlh bnQsIGV2ZW4gdGhvdWdoIGl0IGxvb2tzIGxpa2UgVU1MICh1bmZvcnR1bmF0ZWx5LCB0aGlzDQog ICAgICAgIGxhbmd1YWdlIGlzIGFsc28gY2FsbGVkIE1PRikNCg0KRGVwZW5kaW5nIG9uIHRoZSBj b21wbGV4aXR5IG9mIHRoZSBpbXBsZW1lbnRhdGlvbiwgdGhlIGFib3ZlIGhhdmUgYmVlbiBzaG93 biB0byBwcm9kdWNlIHByb2JsZW1zIGluIGxhcmdlIGVudmlyb25tZW50cy4gRm9yIGV4YW1wbGUs IHRoZSBzcGlyaXQgb2YgImxldCdzIGRlZmluZSBhbiBhdHRyaWJ1dGUgb3IgYXNzb2NpYXRpb24g aW4gY2FzZSBpdCBpcyB1c2VmdWwsIGFuZCBtYWtlIGl0IG9wdGlvbmFsIHNvIHlvdSBkb24ndCBo YXZlIHRvIHdvcnJ5IGFib3V0IGl0IiBub3Qgb25seSB2aW9sYXRlcyBzb21lIHdlbGwta25vd24g c29mdHdhcmUgYXJjaGl0ZWN0dXJhbCBndWlkZWxpbmVzIChlLmcuLCBTaW5nbGUgUmVzcG9uc2li aWxpdHkgUHJpbmNpcGxlIGFuZCB0aGUgTGlza292IFN1YnN0aXR1dGlvbiBQcmluY2lwbGUpLCBi dXQgaXQgbWFrZXMgdGhpbmdzIGRpZmZpY3VsdCB0byBpbnRlcm9wZXJhdGUgd2l0aCAoc2luY2Ug eW91IG5ldmVyIHJlYWxseSBrbm93IGlmIGFuIGF0dHJpYnV0ZSBvciByZWxhdGlvbnNoaXAgc2hv dWxkIGJlIGluc3RhbnRpYXRlZCBvciBub3QpLg0KDQoNCnJlZ2FyZHMsDQpKb2huDQo= --_000_4A95BA014132FF49AE685FAB4B9F17F657DAE627dfweml701chm_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseTpTaW1TdW47DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpA Zm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1 IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBh bm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 VGFob21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7 Zm9udC1mYW1pbHk6IlxAU2ltU3VuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30N Ci8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYu TXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQt c2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1z b0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJw bGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxp Lk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlv cml0eTozNDsNCgltYXJnaW4tdG9wOjBpbjsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1i b3R0b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0K CWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlm Ijt9DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0K Lk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7fQ0KQHBhZ2UgV29y ZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBp biAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExp c3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjIwMjI1Mjc2MzsNCglt c28tbGlzdC10ZW1wbGF0ZS1pZHM6LTM2MDU3NDY1ODt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1m YW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjIzNjY2ODYzMTsNCgltc28t bGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTc2MzgzMzAxMiA2NzY5 ODcwMyA2NzY5ODcxMyA2NzY5ODcxNSA2NzY5ODcwMyA2NzY5ODcxMyA2NzY5ODcxNSA2NzY5ODcw MyA2NzY5ODcxMyA2NzY5ODcxNTt9DQpAbGlzdCBsMTpsZXZlbDENCgl7bXNvLWxldmVsLXRhYi1z dG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjt9DQpAbGlzdCBsMg0KCXttc28tbGlzdC1pZDoxMTY1NDMzNjE4Ow0KCW1zby1saXN0 LXRlbXBsYXRlLWlkczotMjAxMzIwNjkxNjt9DQpAbGlzdCBsMjpsZXZlbDENCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6 U3ltYm9sO30NCkBsaXN0IGwzDQoJe21zby1saXN0LWlkOjE3NDMyMTg4MDE7DQoJbXNvLWxpc3Qt dGVtcGxhdGUtaWRzOi0xOTc3NjQ5NjY7fQ0KQGxpc3QgbDM6bGV2ZWwxDQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBp bjt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0 cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1b aWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRt YXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5k aWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1 cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkpvaG4sDQo8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPlRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHRoZSBpbi1kZXB0aCBhbmFseXNpcyBvZiBQQ0lN IGFuZCBpdHMgc3VpdGFiaWxpdHkgYXMgc29tZXRoaW5nIHRoYXQgSTJOU0Ygc2hvdWxkIGJlIGJh c2VkIG9uLiBXaGF0IHlvdSB3cml0ZSBpcyB2ZXJ5IHZhbHVhYmxlLiBJIHRoaW5rDQogdGhlIGFu YWx5c2lzIHNob3VsZCBiZSBhZGRlZCB0byB0aGUgSTJOU0YgZ2FwIGFuYWx5c2lzLCAob3IgYmUg YSBzdGFuZGFsb25lIFBvbGljeSBBbmFseXNpcyBJRCkuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkkgaGF2ZSBzb21l IHF1ZXN0aW9ucyBpbnNlcnRlZCBiZWxvdzoNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJv bTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gSTJuc2YgW21haWx0bzpp Mm5zZi1ib3VuY2VzQGlldGYub3JnXQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5Kb2huIFN0cmFzc25l cjxicj4NCjxiPlNlbnQ6PC9iPiBTdW5kYXksIERlY2VtYmVyIDA2LCAyMDE1IDc6MDEgUE08YnI+ DQo8Yj5Ubzo8L2I+IGkybnNmQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFtJMm5zZl0g U2VydmljZSBMYXllciBQb2xpY2llcyAtIFBvc3QgMTogQmFja2dyb3VuZCBJbmZvcm1hdGlvbiBv biBQQ0lNPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbHQ7U25pcHBlZCZndDsgPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjIuJm5ic3A7IEJyaWVmIGRlc2NyaXB0aW9uIG9mIFBD SU08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPlRoZSBQQ0lNIENsYXNzIEhpZXJhcmNoeSBpcyB2ZXJ5IHNpbXBsZSwgYXMgdGhpcyBp cyBhIENBIChjb25kaXRpb24tYWN0aW9uKSBtb2RlbC4gRXZlbnRzIGFyZSBOT1QgcmVwcmVzZW50 ZWQuIFBDSU0gZGVmaW5lcyBhIFBvbGljeVJ1bGUsIGEgUG9saWN5R3JvdXAgKGdyb3VwIG9mIFBv bGljeVJ1bGVzKSwgUG9saWN5Q29uZGl0aW9uLCBhbmQgUG9saWN5QWN0aW9uLiBUaGVzZSBhcmUg YWxsIHNpYmxpbmdzOyB0aGVpcg0KIGNvbW1vbiBzdXBlcmNsYXNzIGlzIGNhbGxlZCBQb2xpY3ks IGFzIHNob3duIGJlbG93OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPk1hbmFnZWRFbGVtZW50IChhYnN0cmFjdCk8YnI+DQombmJzcDsgfDxicj4NCiZuYnNw OyAmIzQzOy0tLVBvbGljeSAoYWJzdHJhY3QpPGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgfDxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0t UG9saWN5R3JvdXA8YnI+DQombmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8 YnI+DQombmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tUG9saWN5 UnVsZTxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8YnI+DQombmJzcDsg fCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLVBvbGljeUNvbmRpdGlvbiAoYWJzdHJh Y3QpPGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyB8PGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tUG9saWN5VGltZVBl cmlvZENvbmRpdGlvbjxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 fCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 JiM0MzstLS1WZW5kb3JQb2xpY3lDb25kaXRpb248YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwO3w8YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAm IzQzOy0tLVBvbGljeUFjdGlvbiAoYWJzdHJhY3QpPGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDxi cj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tVmVuZG9yUG9saWN5QWN0aW9uPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5Ob3RlOiBQQ0lNIGRvZXMgaGF2ZSBhIHNpbXBsZSBub3Rpb24gb2YgUm9sZXMs IGJ1dCBpbXBsZW1lbnRzIHRoZW0gYXMgYXR0cmlidXRlcywgaW5zdGVhZCBvZiBvYmplY3RzLiBU aGlzIGlzIG5vdCBzY2FsYWJsZSwgYW5kIGRvZXMgbm90IGZ1bGx5IHJlYWxpemUgdGhlIHBvd2Vy IG9mIHVzaW5nIHJvbGVzLiBUaGlzIHdpbGwgYmUgZGlzY3Vzc2VkIG1vcmUgaW4gUG9zdCAzLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5Ob3RlOiBJdCBpcyBwb3NzaWJsZSB0byBkZWZpbmUgbGltaXRlZCBjb25zdHJh aW50cyBpbiBQQ0lNIGFzIGNvbmRpdGlvbnMuIEZvciBleGFtcGxlLCB0aGUgVmVuZG9yUG9saWN5 Q29uZGl0aW9uIGNsYXNzIGhhcyB0d28gYXR0cmlidXRlcywgQ29uc3RyYWludCBhbmQgQ29uc3Ry YWludEVuY29kaW5nLCB0aGF0IGRvIHRoaXMuIFRoaXMgd2lsbCBiZSBkaXNjdXNzZWQgbW9yZSBp biBQb3N0IDQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPk5vdGU6IENvbnRleHQgaXMgTk9UIGRlZmluZWQgaW4gdGhl IFBDSU0uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPltMaW5kYV0gJm5ic3A7RG8geW91IGFncmVlIHRoYXQg4oCcQ29uZGl0aW9uIG9m IHRoZSBQQ0lN4oCdID09IOKAnEkyTlNGIHN1YmplY3TigJ0gJmFtcDsg4oCcdGhlIENvbnRleHR1 YWwgc3RhdGVzIChvciB0aGUgSTJOU0Ygb2JqZWN0KeKAnT8NCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4zLiZuYnNwOyBTdW1t YXJ5OiBtYWluIGRyYXdiYWNrcyBvZiB1c2luZyBQQ0lNPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Tm90 ZSB0aGF0IHRoZSBjdXJyZW50IENJTSBQb2xpY3kgTW9kZWwgKDIuNDQuMSkgaXMgc2lnbmlmaWNh bnRseSBkaWZmZXJlbnQgdGhhbiBlaXRoZXIgUENJTSBvciBQQ0lNZS4mbmJzcDtQQ0lNIGlzIGJh c2VkIG9uIENJTSAyLjQ7IFBDSU1lIGlzIGJhc2VkIG9uIENJTSAyLjUuIFBDSU1lIGlzIE5PVCBi YWNrd2FyZHMgY29tcGF0aWJsZSB3aXRoIFBDSU0gaW4gYWxsIGFyZWFzLjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Dcml0aWNhbCBQcm9ibGVt czo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0bzttc28tbGlzdDpsMyBsZXZlbDEgbGZvMSI+DQpUaGVyZSBpcyBubyB1bmlxdWUg SUQgdGhhdCBjYW4gYmUgdXNlZCB0byBkaXN0aW5ndWlzaCBkaWZmZXJlbnQ8YnI+DQppbnN0YW5j ZXMgb2YgdGhlIHNhbWUgUG9saWN5UnVsZSwgUG9saWN5R3JvdXAsIFBvbGljeUNvbmRpdGlvbiw8 YnI+DQpvciBQb2xpY3lBY3Rpb24uPG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5bTGlu ZGFdIENhbiB3ZSBzaW1wbHkgY3JlYXRlIGFuIElEIChzdHJpbmcgb3IgbnVtZXJpYykgZm9yIGlu c3RhbmNlcyBvZiB0aGUgc2FtZSBQb2xpY3lSdWxlPyBPciBpdA0KIGlzIG1vcmUgY29tcGxpY2F0 ZWQ/IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG87bXNvLWxpc3Q6bDMgbGV2ZWwxIGxmbzEiPg0KUmVsYXRpb25zaGlwcyBhcmUg aW1wbGVtZW50ZWQgYnkgZGVmaW5pbmcgYW4gYWJzdHJhY3QgY2xhc3M8YnI+DQp3aXRoIGtleXMs IGFuZCB0aGVuIG92ZXJyaWRpbmcgdGhlIGtleXMgaW4gdGhlIHN1YmNsYXNzZXMgb2YgdGhlPGJy Pg0KcmVsYXRpb25zaGlwLiBUaGlzIGlzIGJyb2tlbi4gV291bGQgeW91IG92ZXJyaWRlIGtleXMg aW4gYW4gUkRCTVM/PG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5bTGluZGFdIElzIHRo ZSDigJxLZXnigJ0gdG8gZGlmZmVyZW50aWF0aW5nIGRpZmZlcmVudCDigJxQb2xpY3lSdWxl4oCd PyZuYnNwOyAmbmJzcDtDYW4geW91IGdpdmUgYW4gZXhhbXBsZSBvZiDigJxzdWJjbGFzc2VzDQog b2YgdGhlIHJlbGF0aW9uc2hpcOKAnT8gPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ V2hhdCBldmVudHMgY2FuIGNhdXNlIOKAnG92ZXJyaWRpbmcgdGhlIGtleXMgaW4gdGhlIHN1YmNs YXNzZXMgb2YgdGhlIHJlbGF0aW9uc2hpcOKAnT88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8dWwg dHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0OmwzIGxldmVsMSBs Zm8xIj4NCk1vc3Qgb2YgdGhlIGNsYXNzZXMgdGhhdCBhcmUgdXNlZCB0byBpbXBsZW1lbnQgdGhl IHJlbGF0aW9uc2hpcHM8YnI+DQpkbyBOT1QgaGF2ZSBhdHRyaWJ1dGVzLCBzbyBpdCBpcyBpbXBv c3NpYmxlIHRvIHJlc3RyaWN0IHdoaWNoPGJyPg0KY2xhc3NlcyBhcmUgcmVsYXRlZCB0byB3aGlj aCBvdGhlciBjbGFzc2VzIChlLmcuLCBieSBjb250ZXh0KS48YnI+DQpQdXQgYW5vdGhlciB3YXks IHRoZSBzYW1lIHJlbGF0aW9uc2hpcCBtdXN0IGFsd2F5cyBiZSB1c2VkPGJyPg0KYmV0d2VlbiB0 d28gdHlwZXMsIGV2ZW4gaWYgdGhlIHNlbWFudGljcyB2YXJpZXMuIChUaGUgdHdvPGJyPg0KZXhj ZXB0aW9ucyBhcmUgUG9saWN5Q29uZGl0aW9uSW5Qb2xpY3lSdWxlIGFuZDxicj4NClBvbGljeUFj dGlvbkluUG9saWN5UnVsZSkuPG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5bTGluZGFd IERvZXMg4oCcY2xhc3Nlc+KAnSA9PSDigJxQb2xpY3lSdWxl4oCdPw0KPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlz dDpsMyBsZXZlbDEgbGZvMSI+DQpUaGUgJnF1b3Q7aWdub3JlIHRoaXMgdW5sZXNzIHlvdSBuZWVk IHRoaXMmcXVvdDsgcGhpbG9zb3BoeSBkb2VzIG5vdDxicj4NCndvcmsuIEhvdyBkbyB5b3Uga25v dyBpZiBvdGhlciBpbXBsZW1lbnRhdGlvbnMgdGhhdCB5b3UgYXJlPGJyPg0Kc3VwcG9zZWQgdG8g aW50ZXJvcGVyYXRlIHdpdGggYXJlIHVzaW5nIHRoZW0/PG86cD48L286cD48L2xpPjwvdWw+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj5bTGluZGFdIElzIOKAnElnbm9yZSB0aGlzIHVubGVzcyB5b3UgbmVlZCB0aGlz4oCd IGFuIG5ldyB0eXBlIG9mIOKAnFBvbGljeVJ1bGXigJ0/DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0OmwzIGxl dmVsMSBsZm8xIj4NClRoZXJlIGlzIG5vIGNvbmNlcHQgb2YgZXJyb3Igb3IgZXhjZXB0aW9uIGhh bmRsaW5nPG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDMg bGV2ZWwxIGxmbzEiPg0KVGhlcmUgaXMgbm8gY29uY2VwdCBvZiB0aGUgc3ViamVjdCBvciB0aGUg dGFyZ2V0IG9mIGEgcG9saWN5PG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5bTGluZGFd IERvZXMgeW91ciDigJxzdWJqZWN04oCdIGhhdmUgdGhlIHNhbWUgbWVhbmluZyBhcyB0aGUg4oCc STJOU0Ygc3ViamVjdOKAnSB3aGljaCBtZWFucyBiaXRzJmFtcDtieXRlcyBleHRyYWN0ZWQNCiBm cm9tIHBhY2tldHM/IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCB0eXBlPSJkaXNjIj4NCjxs aSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDMgbGV2ZWwxIGxmbzEiPg0KQWRkaW5nIGEg bmV3IHR5cGUgb2YgcG9saWN5IChlLmcuLCBkZWNsYXJhdGl2ZSBvciBmdW5jdGlvbmFsKTxicj4N CndpbGwgY2F1c2UgYSBtYWpvciByZXdyaXRlIG9mIHRoZSBlbnRpcmUgbW9kZWw8bzpwPjwvbzpw PjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPltMaW5kYV0gQ2FuIHdlIHNheSB0aGF0ICZuYnNwO0kyTlNGIHBvbGljaWVzIGhhdmUgb25l IHR5cGUg4oCcU3ViamVjdC1Db250ZXh0dWFsU3RhdGVzLSBhY3Rpb24tIGZ1bmN0aW9uPw0KIFNv IGluIEkyTlNGIGVudmlyb25tZW50LCB0aGVyZSBpcyBvbmx5IHRoZSBub3Rpb24gb2YgYWRkaW5n IGEgbmV3IOKAnFBvbGljeVJ1bGXigJ0sIGJ1dCBubyBhZGRpbmcgYSBuZXcgcG9saWN5IHR5cGUu IElzIHRoaXMgY29ycmVjdCBzdGF0ZW1lbnQ/ICZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N Cjx1bCB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDMgbGV2 ZWwxIGxmbzEiPg0KVGhlcmUgaXMgbm8gYXBwcm9hY2ggdG8gZGV0ZWN0aW5nIGFuZCBzb2x2aW5n IHBvbGljeSBjb25mbGljdHM7PGJyPg0KdGhpcyBpcyBkdWUgdG8gdGhlIHNpbXBsaXN0aWMgbm90 aW9uIG9mIGp1c3QgdXNpbmcgYSBQRFAgYW5kIGE8YnI+DQpQRVAgZm9yIGFwcGx5aW5nIHBvbGlj aWVzLjxvOnA+PC9vOnA+PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBpbiBJMk5TRiwgdGhlcmUgY291bGQgYmUgYSBsb3Qg b2YgY29uZmxpY3RzLCBmb3IgZXhhbXBsZSwgdGhlcmUgY291bGQgYmUgdHdvIHJ1bGVzIGVudGVy ZWQNCiBhdCBkaWZmZXJlbnQgdGltZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMSBsZXZlbDEg bGZvNCI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+MS48c3BhbiBzdHls ZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDtWaXJ0dWFsIE5ldHdvcmsg WCBjYW7igJl0IGFjY2VzcyDigJxZb3VUdWJl4oCdLA0KPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6 bDEgbGV2ZWwxIGxmbzQiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPjIu PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlm XT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+MTAuMS4xLjEgY2Fu IGFjY2VzcyDigJxZb3VUdWJl4oCdICh3aGVyZSAxMC4xLjEuMSBpcyBhIGhvc3Qgd2l0aGluIHRo ZSBWaXJ0dWFsIE5ldHdvcmsgWCkuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj5EbyB5b3UgY2FsbCB0aGUgMiBydWxlcyBhYm92ZSBjb25mbGljdD8NCjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPg0KPHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjQuIFJl Y29tbWVuZGF0aW9uczxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+R2l2ZW4gdGhlIGxhcmdlIGFtb3VudCBv ZiBwcm9ibGVtcywgSSByZWNvbW1lbmQgdGhhdCB3ZSBub3QgY29uc2lkZXIgUENJTSBmdXJ0aGVy LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0xpbmRhXSBzaG91bGQgSTJOU0YgcmVm ZXJlbmNlIFBDSU0/DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlRoYW5rIHlvdSB2ZXJ5IG11Y2guIExpbmRhDQo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4m bmJzcDsgPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij41LiBPcmlnaW4gb2YgUENJTS9QQ0lNZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGlzIGlzIGEgKip0aGVvcnkq KiBzZWN0aW9uOyBwbGVhc2Ugc2tpcCB1bmxlc3MgeW91IHdhbnQgdG8gdW5kZXJzdGFuZCB0aGUg bW9kZWwgaW4gbW9yZSBkZXRhaWwuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBQQ0lNIGlzIGJhc2VkIG9uIHRo ZSBETVRGIENJTSwgd2hpY2ggaXMgYWN0dWFsbHkgYSAqKmRhdGEgbW9kZWwqKiAoZGVzcGl0ZSBp dHMgbmFtZSkgYmVjYXVzZSBpdCB1c2VzIHJlbGF0aW9uYWwgdGVjaG5vbG9naWVzIChlLmcuLCBr ZXlzIGFuZCB3ZWFrIHJlZmVyZW5jZXMpIHRvIGNyZWF0ZSBpdHMgbW9kZWwuIFBDSU0gaXMgYmFz ZWQgb24gYW4gZWFybHkgdmVyc2lvbiBvZiB0aGUgQ0lNICgyLjQpOyB0aGUNCiBjdXJyZW50IHZl cnNpb24gb2YgdGhlIENJTSBpcyAyLjQ0LjEgYXMgb2YgdGhpcyB3cml0aW5nLiBTaW5jZSB0aGlz IGlzIHRpZWQgdG8gdGhlIENJTSwgdGhpcyBtZWFucyB0aGF0OjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsm bmJzcDsgMSkgUG9saWN5IGlzIHN1YmNsYXNzZWQgZnJvbSBhIG1vcmUgZ2VuZXJpYyBjbGFzcyAo TWFuYWdlZEVsZW1lbnQpPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsgMikgQUxMIHJlbGF0aW9uc2hpcHMgKGFzc29jaWF0aW9u cywgYWdncmVnYXRpb25zLCBhbmQgY29tcG9zaXRpb25zKTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IGFyZSByZWFsaXplZCBhcyAqKmNsYXNzZXMqKjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IDMpIEFzIGEgcmVz dWx0IG9mIDIpLCByZWxhdGlvbnNoaXBzIGFyZSBzdWJjbGFzc2VkPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsgNCkgQm90aCBh dHRyaWJ1dGVzIGFuZCBhc3NvY2lhdGlvbnMgYXJlICoqaW5oZXJpdGVkKio8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyZuYnNwOyA1KSBU aGUgc2FtZSBkZXNpZ24gYXBwcm9hY2ggKGFzIG11Y2ggYXMgcG9zc2libGUpIHdhcyB1c2VkIGlu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgUENJTS9QQ0lNZSBhcyB3YXMg aW4gQ0lNLiBTcGVjaWZpY2FsbHksIGl0IHdhcyB0aG91Z2h0IGJldHRlcjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHRvIGRlZmluZSBhIGdlbmVyaWMsIGJ1dCBvcHRpb25h bCwgcmVsYXRpb25zaGlwIGluc3RlYWQgb2Ygbm90PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgZGVmaW5pbmcgdGhlIHJlbGF0aW9uc2hpcC48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyZuYnNwOyA2KSBUaGUgQ0lN IGRvZXMgTk9UIGhhdmUgYSBzaW5nbGUgcm9vdGVkIGhpZXJhcmNoeTsgdGhpcyBtYWtlczxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGNvZGUgZ2VuZXJhdGlvbiBtb3JlIGNv bXBsZXg8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOyZuYnNwOyA3KSBUaGUgQ0lNIHVzZXMgYSBwcm9wcmlldGFyeSBsYW5ndWFnZSBhbmQg aXMgbm90IHN0cmljdGx5IFVNTDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IGNvbXBsaWFudCwgZXZlbiB0aG91Z2ggaXQgbG9va3MgbGlrZSBVTUwgKHVuZm9ydHVuYXRlbHks IHRoaXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBsYW5ndWFnZSBpcyBh bHNvIGNhbGxlZCBNT0YpJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5EZXBlbmRpbmcgb24gdGhlIGNvbXBsZXhpdHkgb2YgdGhlIGltcGxlbWVu dGF0aW9uLCB0aGUgYWJvdmUgaGF2ZSBiZWVuIHNob3duIHRvIHByb2R1Y2UgcHJvYmxlbXMgaW4g bGFyZ2UgZW52aXJvbm1lbnRzLiBGb3IgZXhhbXBsZSwgdGhlIHNwaXJpdCBvZiAmcXVvdDtsZXQn cyBkZWZpbmUgYW4gYXR0cmlidXRlIG9yIGFzc29jaWF0aW9uIGluIGNhc2UgaXQgaXMgdXNlZnVs LCBhbmQgbWFrZSBpdCBvcHRpb25hbCBzbyB5b3UNCiBkb24ndCBoYXZlIHRvIHdvcnJ5IGFib3V0 IGl0JnF1b3Q7IG5vdCBvbmx5IHZpb2xhdGVzIHNvbWUgd2VsbC1rbm93biBzb2Z0d2FyZSBhcmNo aXRlY3R1cmFsIGd1aWRlbGluZXMgKGUuZy4sIFNpbmdsZSBSZXNwb25zaWJpbGl0eSBQcmluY2lw bGUgYW5kIHRoZSBMaXNrb3YgU3Vic3RpdHV0aW9uIFByaW5jaXBsZSksIGJ1dCBpdCBtYWtlcyB0 aGluZ3MgZGlmZmljdWx0IHRvIGludGVyb3BlcmF0ZSB3aXRoIChzaW5jZSB5b3UgbmV2ZXIgcmVh bGx5IGtub3cNCiBpZiBhbiBhdHRyaWJ1dGUgb3IgcmVsYXRpb25zaGlwIHNob3VsZCBiZSBpbnN0 YW50aWF0ZWQgb3Igbm90KS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+cmVnYXJkcyw8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkpvaG48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_4A95BA014132FF49AE685FAB4B9F17F657DAE627dfweml701chm_-- From nobody Wed Dec 9 03:43:26 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DCA9D1A87D0 for ; Wed, 9 Dec 2015 03:43:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.331 X-Spam-Level: X-Spam-Status: No, score=-0.331 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245, J_CHICKENPOX_24=0.6, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1PLpvf1z1QrC for ; Wed, 9 Dec 2015 03:43:22 -0800 (PST) Received: from antispam.polito.it (fm1nodo1.polito.it [130.192.180.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 32F861A87B8 for ; Wed, 9 Dec 2015 03:43:21 -0800 (PST) Received: from polito.it (frontmail1.polito.it [130.192.180.41]) by antispam.polito.it with ESMTP id tB9BhBtc007195-tB9BhBte007195 (version=TLSv1.0 cipher=AES128-SHA bits=128 verify=CAFAIL); Wed, 9 Dec 2015 12:43:11 +0100 X-AttachExt: p7s X-ExtScanner: Niversoft's FindAttachments (free) Received: from [151.33.131.205] (account d011649@polito.it HELO [192.168.1.4]) by polito.it (CommuniGate Pro SMTP 6.1.5) with ESMTPSA id 99777919; Wed, 09 Dec 2015 12:43:10 +0100 To: DIEGO LOPEZ GARCIA , Linda Dunbar References: <4A95BA014132FF49AE685FAB4B9F17F657DADCA6@dfweml701-chm> From: Aldo Basile Message-ID: <566813CC.3090709@polito.it> Date: Wed, 9 Dec 2015 12:43:08 +0100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms010702060409030300020306" X-FEAS-SYSTEM-WL: 130.192.180.41 Archived-At: Cc: "i2nsf@ietf.org" , John Strassner Subject: Re: [I2nsf] Service Layer Policies - Post 0: note structure X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Dec 2015 11:43:25 -0000 This is a cryptographically signed message in MIME format. --------------ms010702060409030300020306 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable Dear all, I agree it is not worth considering the whole PCIM or PCIMe models and=20 suggested implementations. They are too complex to implement and=20 maintain and far from being perfect (John Strassner's Posts 0/1 are much = more precise references to PCIM issues). However, I think PCIM/PCIMe are excellent starting points for the design = of the an information model, thus they can be used for I2NSF as well. In my experience, all the policy-related concepts that one may need=20 during such a design phase can be described by referring to=20 PCIM/PCIMe-defined concepts (regardless of the way they are represented, = classes, associations, association classes), concepts that PCIM/PCIMe=20 miss, and concepts that are not correctly/optimally represented in=20 PCIM/PCIMe. In the SECURED project (and before in the PoSecCo project), PCIM/PCIMe=20 have been considered as starting point to design the information and=20 data models (which are now similar but not equal), while the actual=20 implementation of the repositories and management tasks have been=20 completely detached from PCIM/PCIMe (we had indeed a bad experience in=20 fully agreeing with PCIM during a previous POSITIF project). Therefore, it is probably worth considering the 'refinement' of the=20 I2NSF requirements (which, to the best of my knowledge are presented=20 here https://datatracker.ietf.org/wg/i2nsf/charter/, please correct me=20 if I'm wrong) to a set of more formal/precisely defined requirements and = probably also inputs from use cases. Only at that point it would be possible to precisely understand what we=20 can reuse from existing (de facto) standards or models. Regards, Cataldo On 08/12/2015 10:37, DIEGO LOPEZ GARCIA wrote: > Hi, > > I support this. I think it is good to be aligned with common usage of > terms, unless there are very good reasons to do otherwise. > > Just for the record, we are collecting some of the (already mature) > results of the SECURED project policy efforts into a document we will > contribute anytime soon. I hope we will be well aligned with John=92s i= deas. > > Be goode, > >> On 7 Dec 2015, at 22:25 , Linda Dunbar > > wrote: >> >> John, >> Thank you very much for structuring the discussion. This is very helpf= ul. >> Maybe I am jumping ahead. For Post 5, the =93object=94 currently used= in >> I2NSF framework is same as the =93Condition=94 in PCIM to describe th= e >> constraints. If no one disagree, I propose to align with PCIM, i.e. >> call it =93Subject-Condition-Action-Function=94. >> Regards, >> Linda >> *From:*I2nsf [mailto:i2nsf-bounces@ietf.org]*On Behalf Of*John Strassn= er >> *Sent:*Sunday, December 06, 2015 7:00 PM >> *To:*i2nsf@ietf.org >> *Subject:*[I2nsf] Service Layer Policies - Post 0: note structure >> The I2NSF framework draft mentions PCIM (RFC3060) and PCIMe (RFC3460) >> as possible candidates for guiding the policy structure that can be >> mapped to the Capability Layer's "Subject-Object-Action-Function" >> paradigm. >> During IETF94, I expressed discomfort with the above paradigm. >> However, this is a complex subject, and is more easily understood by >> breaking this up into smaller discussions. Here is the order of notes >> that I will post: >> Post 0: this post >> Post 1: problems in using PCIM >> Post 2: problems in using PCIMe >> Post 3: differentiating between groups and roles >> Post 4: differentiating between context, constraints, and conditio= ns >> Post 5: specific worries about the >> "Subject-Object-Action-Function" paradigm >> Post 6: proposed replacement policy structure >> Posts 1 and 2 clarify the problems in using PCIM and PCIMe, >> respectively, which I volunteered to do. >> Posts 3 and 4 are fundamental to posts 5 and 6, as they represent >> software building blocks that are critical for designing and >> implementing Service Policies in a scalable and robust manner. These >> also expand on points in posts 1 and 2. >> Post 5 is the heart of the manner, but can't really be tackled until >> the preceding posts were done. Post 6 builds on the previous posts. >> regards, >> John >> -- >> regards, >> John >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf > > -- > "Esta vez no fallaremos, Doctor Infierno" > > Dr Diego R. Lopez > Telefonica I+D > http://people.tid.es/diego.lopez/ > > e-mail: diego.r.lopez@telefonica.com > Tel: +34 913 129 041 > Mobile: +34 682 051 091 > ---------------------------------- > > > -----------------------------------------------------------------------= - > > Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario= , > puede contener informaci=F3n privilegiada o confidencial y es para uso > exclusivo de la persona o entidad de destino. Si no es usted. el > destinatario indicado, queda notificado de que la lectura, utilizaci=F3= n, > divulgaci=F3n y/o copia sin autorizaci=F3n puede estar prohibida en vir= tud > de la legislaci=F3n vigente. Si ha recibido este mensaje por error, le > rogamos que nos lo comunique inmediatamente por esta misma v=EDa y proc= eda > a su destrucci=F3n. > > The information contained in this transmission is privileged and > confidential information intended only for the use of the individual or= > entity named above. If the reader of this message is not the intended > recipient, you are hereby notified that any dissemination, distribution= > or copying of this communication is strictly prohibited. If you have > received this transmission in error, do not read it. Please immediately= > reply to the sender that you have received this communication in error > and then delete it. > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > destinat=E1rio, pode conter informa=E7=E3o privilegiada ou confidencial= e =E9 > para uso exclusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa= > senhoria o destinat=E1rio indicado, fica notificado de que a leitura, > utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pode es= tar proibida em > virtude da legisla=E7=E3o vigente. Se recebeu esta mensagem por erro, > rogamos-lhe que nos o comunique imediatamente por esta mesma via e > proceda a sua destrui=E7=E3o > > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > --------------ms010702060409030300020306 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC DtkwggR4MIIDYKADAgECAgECMA0GCSqGSIb3DQEBBQUAMEMxEDAOBgNVBAoTB0V1cm9QS0kx FTATBgNVBAsTDEV1cm9QS0kgcm9vdDEYMBYGA1UEAxMPRXVyb1BLSSByb290IENBMB4XDTEw MTIxODEzNDY0N1oXDTIwMTIzMTIzNTk1OVowVDELMAkGA1UEBhMCSVQxEDAOBgNVBAoTB0V1 cm9QS0kxFjAUBgNVBAsTDUV1cm9QS0kgSXRhbHkxGzAZBgNVBAMTEkV1cm9QS0kgSXRhbGlh biBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJfEyV1trtaj8Z9P5ciATbx9 UuSwTN0pCxaDRz0sfE2Ymfn+5yl3pzdodOyoSEEZsnEJ9xUKlVM5vH7lesyvCXttCb6f4rC/ 3z3D0G7uRtfomh+7lP/RbquzABS/j3fkriRkhFdEZu4xDSN+uPap2S2b18sOE6NpKkAZQlCS 8Un8ou+KyKqhA1+Xopgn/givJlPYLczmWQgodMoRVNyB0doIsqWrIp0g7LOTzvi21S4eFejT FOaGcdrceRSmnmCSIVEahS8UVTJX9hBm3uCzrgJWr9RmbfLnWaIh/2/g/Y+4W3epzR7po0vJ wt4Ze2Mm8RYMDJ6UT3N0AyjBo+Mn+iECAwEAAaOCAWQwggFgMA8GA1UdEwEB/wQFMAMBAf8w DgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBTQdeU/68q6a5ZRfCClmL3zZ9O0SjAfBgNVHSME GDAWgBTwcRwoM1i3xca1w79RdahQ9JzSNDBJBgNVHSAEQjBAMD4GCisGAQQBqQcBAQIwMDAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5ldXJvcGtpLm9yZy9jYS9jcHMvMS4yLzBxBggrBgEF BQcBAQRlMGMwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmV1cm9wa2kub3JnMDwGCCsGAQUF BzAChjBodHRwOi8vd3d3LmV1cm9wa2kub3JnL2NhL2NlcnRzL2V1cm9wa2lfcm9vdC5jZXIw PwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL3d3dy5ldXJvcGtpLm9yZy9jYS9jcmwvZXVyb3Br aV9yb290LmNybDANBgkqhkiG9w0BAQUFAAOCAQEAhDLeMx/dP2whwGb7ITa6sI6JUQZ3H9DQ ApdTGfz6iLIOiZeeoUt/XE9kYgcFp23IC1+wQzsfY6wRWKStF4lscqDSlNnw4yyaVYkogY3B k8pE7QxNXIlgsFk4IMnbDCamCon/pxMGPV8ruBwVxFjp4PctlbububbB10CixAgbzcDFNvLE YUCJCV8V/iCAIs/w3MYk1NsAz/TfoCMXBrfn7ik69ImKdVOrdxwtyHs7vOx9A3xxCd5XCAc5 24mMC5Cenj+KQbh+dczXRIQAkEFbBEVrc8ytQv+NRT4FbqhS0FL1E2zkPTNtGdK4yyrWd/K8 Pa1s3h2GtamUiD8Mdj0MMzCCBPMwggPboAMCAQICAQEwDQYJKoZIhvcNAQEFBQAwVDELMAkG A1UEBhMCSVQxEDAOBgNVBAoTB0V1cm9QS0kxFjAUBgNVBAsTDUV1cm9QS0kgSXRhbHkxGzAZ BgNVBAMTEkV1cm9QS0kgSXRhbGlhbiBDQTAeFw0xMDEyMTgxMzU4MjJaFw0yMDEyMzEyMzU5 NTlaMGUxCzAJBgNVBAYTAklUMR4wHAYDVQQKExVQb2xpdGVjbmljbyBkaSBUb3Jpbm8xNjA0 BgNVBAMTLVBvbGl0ZWNuaWNvIGRpIFRvcmlubyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMhpj5X8VQEnxMEjxZAwHADWcxXc/Tuf CqQhBypLMJx+aowv9Qfr96jrXwpD/OKl6cz3Bmv0s/4oP5+ode2bWFXsVEKWR3J8vCusF1Nv tPI16g8t5numZ+JGZqC3ZpvUTNsODUxb+M5L4T2zNtO4GqZlgDhB9QOKq+71LeKp+R3q5cIX tSBPWYiH6EPbzQJQdxcbh3d9d+rxmtW1W4LmGqjBL2YGTezsbagbsHmSMX4Djw7TyuFR9qkB NhLLiHizz0AdNqW95XY+/5GzTZak7k5FGxwwzR/sN6Q/Sj1xHcWNw+ROo1aUtf5k5jVQaScH DjixGbqLQFf/2fItHfCRMMcCAwEAAaOCAb0wggG5MA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMB0GA1UdDgQWBBTNm1tbnup2IcQQaOjSLTfbHy/I5DAfBgNVHSMEGDAWgBTQ deU/68q6a5ZRfCClmL3zZ9O0SjCBkQYDVR0gBIGJMIGGMD4GCisGAQQBqQcBAQIwMDAuBggr BgEFBQcCARYiaHR0cDovL3d3dy5ldXJvcGtpLm9yZy9jYS9jcHMvMS4yLzBEBgorBgEEAakH AgECMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuaXRhbHkuZXVyb3BraS5vcmcvY2EvY3Bz LzEuMi8wfgYIKwYBBQUHAQEEcjBwMCkGCCsGAQUFBzABhh1odHRwOi8vb2NzcC5pdGFseS5l dXJvcGtpLm9yZzBDBggrBgEFBQcwAoY3aHR0cDovL3d3dy5pdGFseS5ldXJvcGtpLm9yZy9j YS9jZXJ0cy9ldXJvcGtpX2l0YWx5LmNlcjBCBgNVHR8EOzA5MDegNaAzhjFodHRwOi8vd3d3 Lml0YWx5LmV1cm9wa2kub3JnL2NhL2NybC9pdGFseV9jcmwuY3JsMA0GCSqGSIb3DQEBBQUA A4IBAQBTVJWIUBlbjxFQTkjRLgvNPt03m2NIhgCt+SIIFuC4rhB10VqHisAW68hXxHEfFZ06 LxeMLn3oGnPriWQdpPkC7MAt87iSyIG6Ofd1vN0oUhuWgiYqDKEOV/WX3fo9QXyFf8wEcoaK xL4Au3aBnwVcRt6gJkBGG6J6LYc+FCVpXdxnd85sKaqTTCxtiTtwSVjqwLp/Ulj1USzhP/dj 6v40zAei5LHtCjSUwWzRz1M8nTsz1LTwOybzA582+i/fIVVaiqMZicNwtrFfzTpf7bk30unZ 2cqWbLUWjldCUloD+DwKnD7XtDeNIfKuA/0XYOT+xHFJJYGai+e3MlAgkK6PMIIFYjCCBEqg AwIBAgICAsUwDQYJKoZIhvcNAQEFBQAwZTELMAkGA1UEBhMCSVQxHjAcBgNVBAoTFVBvbGl0 ZWNuaWNvIGRpIFRvcmlubzE2MDQGA1UEAxMtUG9saXRlY25pY28gZGkgVG9yaW5vIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MB4XDTEwMTIyMTE0NDgzM1oXDTE1MTIzMTIzNTk1OVowYDEL MAkGA1UEBhMCSVQxHjAcBgNVBAoTFVBvbGl0ZWNuaWNvIGRpIFRvcmlubzEYMBYGA1UEAxMP Q2F0YWxkbyAgQmFzaWxlMRcwFQYKCZImiZPyLGQBARMHZDAxMTY0OTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKtDe6utdQqaz2Cx3T1e6kmwNFj7uqF+4H+f5/vMLcMyK1sZ whhEgUgGbwX5zYwRk+c6E2WIbY1Sm1U0CUr/Epe0qwA5BtobqftIFryKwuxh7aF8gftNvaqo AqAMhO8BgqKjWFu4gypu6nB/JHMTSaetA3Zz0U4EI1kqIXmHZq430in17glcHbPKw9TKz8Lb l/huh1hKKcgPFIA65HEKzqnXKFIADatuu20OLQOaNIIcXZSIxwSgJQIcg9XFy/SoVnfgNcmm D3cJk9NRW3GnOBCV5xqdpN7hjrsUZ9rOnbBysefco+v3dGMwbJlibkgpsVEDHAGVhjW2LePy qSC2el0CAwEAAaOCAh8wggIbMA4GA1UdDwEB/wQEAwID+DAnBgNVHSUEIDAeBggrBgEFBQcD AgYIKwYBBQUHAwMGCCsGAQUFBwMEMCMGA1UdEQQcMBqBGGNhdGFsZG8uYmFzaWxlQHBvbGl0 by5pdDAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQx26UQpK+ZJUAFyKM3DLiN9yVSqjAfBgNV HSMEGDAWgBTNm1tbnup2IcQQaOjSLTfbHy/I5DCBywYDVR0gBIHDMIHAMD4GCisGAQQBqQcB AQIwMDAuBggrBgEFBQcCARYiaHR0cDovL3d3dy5ldXJvcGtpLm9yZy9jYS9jcHMvMS4yLzBE BgorBgEEAakHAgECMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cuaXRhbHkuZXVyb3BraS5v cmcvY2EvY3BzLzEuMi8wOAYKKwYBBAGVYgECAjAqMCgGCCsGAQUFBwIBFhxodHRwOi8vY2Eu cG9saXRvLml0L2Nwcy8yLjIvMGYGCCsGAQUFBwEBBFowWDAhBggrBgEFBQcwAYYVaHR0cDov L29jc3AucG9saXRvLml0MDMGCCsGAQUFBzAChidodHRwOi8vY2EucG9saXRvLml0L2NlcnRz L3BvbGl0b19jYS5jZXIwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NhLnBvbGl0by5pdC9j cmwvcG9saXRvX2NybC5jcmwwDQYJKoZIhvcNAQEFBQADggEBAAkZAW4SXyW/USqZffb1YdPd JFDlROWulMYv51+oO7r8uAN4iR/9J4/a4/I84xknlZY/0uu8gGInW6VdXqQHnmWyx2YjK8ar 7UJAJiZjGrPUztW0mOqfnb6BmBIJs0pf+JROi0L2pV85NTw3K74q4DDrlque3C1p7+zvflDw JDQ5M/NGB0AjQZthG16x1+r/SjFd4vyWg7v8rWsS1TCe4dDzhn4GGdpJG1skPT2AflBCouJP mSnge6f2QFNmS4w406wYRgFql8bv9n6k4rQF5v/KBmRWjOo8xNkLkjAtv0jMGAOydo6+yy8f Y+2flcI5oqfCLaI6KJVywWb4CXxd68ExggNrMIIDZwIBATBrMGUxCzAJBgNVBAYTAklUMR4w HAYDVQQKExVQb2xpdGVjbmljbyBkaSBUb3Jpbm8xNjA0BgNVBAMTLVBvbGl0ZWNuaWNvIGRp IFRvcmlubyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQICAsUwDQYJYIZIAWUDBAIBBQCgggHR MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE1MTIwOTExNDMw OFowLwYJKoZIhvcNAQkEMSIEIDBcNimcCVqDK2cXKJWFuiyGmwxL8zt86rnzkdyf391kMGwG CSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAO BggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgw egYJKwYBBAGCNxAEMW0wazBlMQswCQYDVQQGEwJJVDEeMBwGA1UEChMVUG9saXRlY25pY28g ZGkgVG9yaW5vMTYwNAYDVQQDEy1Qb2xpdGVjbmljbyBkaSBUb3Jpbm8gQ2VydGlmaWNhdGlv biBBdXRob3JpdHkCAgLFMHwGCyqGSIb3DQEJEAILMW2gazBlMQswCQYDVQQGEwJJVDEeMBwG A1UEChMVUG9saXRlY25pY28gZGkgVG9yaW5vMTYwNAYDVQQDEy1Qb2xpdGVjbmljbyBkaSBU b3Jpbm8gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCAgLFMA0GCSqGSIb3DQEBAQUABIIBAEyQ 5YDiF1fSNgEeYtQ+t0Zk0jHeoQNhh0kqsqPpQdMQC6LNgjHdVvIpQZL50/5jZ4AAD3v/8s99 muHDxaPnLmUHw/fcKzHV6kMsBuMHvlz6cE2V3O4IZ27amf6xvexRkfxTo1dwMQpgAzjUzLve /kavyiNb8WZl+DCiy2Tkuglx7aLGpeCIv1OG9QboDYTfbOKkLOd/peDbfQ9hmnWES6ACbz6X 3wDjRFFOvUW0o2fBM8frjd/kG307Um58K9JbGoon9hjJxHFyM8YVkPLhilmgMNJQZN7RABz6 9K4Z8TbbBSBNXw1Kf7YA6Guxvi/pmpUJ01rC5pEAOErG9yVshQMAAAAAAAA= --------------ms010702060409030300020306-- From nobody Wed Dec 9 15:54:56 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 106171A1B43 for ; Wed, 9 Dec 2015 15:54:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.611 X-Spam-Level: X-Spam-Status: No, score=-3.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_24=0.6, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EH4ME9veWv33 for ; Wed, 9 Dec 2015 15:54:52 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 982F31A1B25 for ; Wed, 9 Dec 2015 15:54:51 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CFF80183; Wed, 09 Dec 2015 23:54:48 +0000 (GMT) Received: from DFWEML703-CHM.china.huawei.com (10.193.5.130) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.235.1; Wed, 9 Dec 2015 23:54:47 +0000 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml703-chm ([10.193.5.130]) with mapi id 14.03.0235.001; Wed, 9 Dec 2015 15:54:44 -0800 From: Linda Dunbar To: Aldo Basile , DIEGO LOPEZ GARCIA Thread-Topic: [I2nsf] Service Layer Policies - Post 0: note structure Thread-Index: AQHRMIqyvnKSbbDaGE++ac31TX2i157ACZyggAFTqoCAAbVMAIAARXSA Date: Wed, 9 Dec 2015 23:54:43 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657DAEE81@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657DADCA6@dfweml701-chm> <566813CC.3090709@polito.it> In-Reply-To: <566813CC.3090709@polito.it> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.76] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020206.5668BF48.017B, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=0.0.0.0, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: b2c9dfb86f3d59d2c6d5c327bc6378c2 Archived-At: Cc: "i2nsf@ietf.org" , John Strassner Subject: Re: [I2nsf] Service Layer Policies - Post 0: note structure X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Dec 2015 23:54:55 -0000 Aldo,=20 Thank you for the suggestion.=20 Just want to add a note: I2NSF only deals with rule-set/policy for treating= packets/flows traversing through NSF. Therefore, the I2NSF polices would b= e much simpler, which doesn't need to deal with network wide policies or us= er policies.=20 Linda -----Original Message----- From: Aldo Basile [mailto:cataldo.basile@polito.it]=20 Sent: Wednesday, December 09, 2015 5:43 AM To: DIEGO LOPEZ GARCIA; Linda Dunbar Cc: i2nsf@ietf.org; John Strassner Subject: Re: [I2nsf] Service Layer Policies - Post 0: note structure Dear all, I agree it is not worth considering the whole PCIM or PCIMe models and=20 suggested implementations. They are too complex to implement and=20 maintain and far from being perfect (John Strassner's Posts 0/1 are much=20 more precise references to PCIM issues). However, I think PCIM/PCIMe are excellent starting points for the design=20 of the an information model, thus they can be used for I2NSF as well. In my experience, all the policy-related concepts that one may need=20 during such a design phase can be described by referring to=20 PCIM/PCIMe-defined concepts (regardless of the way they are represented,=20 classes, associations, association classes), concepts that PCIM/PCIMe=20 miss, and concepts that are not correctly/optimally represented in=20 PCIM/PCIMe. In the SECURED project (and before in the PoSecCo project), PCIM/PCIMe=20 have been considered as starting point to design the information and=20 data models (which are now similar but not equal), while the actual=20 implementation of the repositories and management tasks have been=20 completely detached from PCIM/PCIMe (we had indeed a bad experience in=20 fully agreeing with PCIM during a previous POSITIF project). Therefore, it is probably worth considering the 'refinement' of the=20 I2NSF requirements (which, to the best of my knowledge are presented=20 here https://datatracker.ietf.org/wg/i2nsf/charter/, please correct me=20 if I'm wrong) to a set of more formal/precisely defined requirements and=20 probably also inputs from use cases. Only at that point it would be possible to precisely understand what we=20 can reuse from existing (de facto) standards or models. Regards, Cataldo On 08/12/2015 10:37, DIEGO LOPEZ GARCIA wrote: > Hi, > > I support this. I think it is good to be aligned with common usage of > terms, unless there are very good reasons to do otherwise. > > Just for the record, we are collecting some of the (already mature) > results of the SECURED project policy efforts into a document we will > contribute anytime soon. I hope we will be well aligned with John's ideas= . > > Be goode, > >> On 7 Dec 2015, at 22:25 , Linda Dunbar > > wrote: >> >> John, >> Thank you very much for structuring the discussion. This is very helpful= . >> Maybe I am jumping ahead. For Post 5, the "object" currently used in >> I2NSF framework is same as the "Condition" in PCIM to describe the >> constraints. If no one disagree, I propose to align with PCIM, i.e. >> call it "Subject-Condition-Action-Function". >> Regards, >> Linda >> *From:*I2nsf [mailto:i2nsf-bounces@ietf.org]*On Behalf Of*John Strassner >> *Sent:*Sunday, December 06, 2015 7:00 PM >> *To:*i2nsf@ietf.org >> *Subject:*[I2nsf] Service Layer Policies - Post 0: note structure >> The I2NSF framework draft mentions PCIM (RFC3060) and PCIMe (RFC3460) >> as possible candidates for guiding the policy structure that can be >> mapped to the Capability Layer's "Subject-Object-Action-Function" >> paradigm. >> During IETF94, I expressed discomfort with the above paradigm. >> However, this is a complex subject, and is more easily understood by >> breaking this up into smaller discussions. Here is the order of notes >> that I will post: >> Post 0: this post >> Post 1: problems in using PCIM >> Post 2: problems in using PCIMe >> Post 3: differentiating between groups and roles >> Post 4: differentiating between context, constraints, and conditions >> Post 5: specific worries about the >> "Subject-Object-Action-Function" paradigm >> Post 6: proposed replacement policy structure >> Posts 1 and 2 clarify the problems in using PCIM and PCIMe, >> respectively, which I volunteered to do. >> Posts 3 and 4 are fundamental to posts 5 and 6, as they represent >> software building blocks that are critical for designing and >> implementing Service Policies in a scalable and robust manner. These >> also expand on points in posts 1 and 2. >> Post 5 is the heart of the manner, but can't really be tackled until >> the preceding posts were done. Post 6 builds on the previous posts. >> regards, >> John >> -- >> regards, >> John >> _______________________________________________ >> I2nsf mailing list >> I2nsf@ietf.org >> https://www.ietf.org/mailman/listinfo/i2nsf > > -- > "Esta vez no fallaremos, Doctor Infierno" > > Dr Diego R. Lopez > Telefonica I+D > http://people.tid.es/diego.lopez/ > > e-mail: diego.r.lopez@telefonica.com > Tel: +34 913 129 041 > Mobile: +34 682 051 091 > ---------------------------------- > > > ------------------------------------------------------------------------ > > Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, > puede contener informaci=F3n privilegiada o confidencial y es para uso > exclusivo de la persona o entidad de destino. Si no es usted. el > destinatario indicado, queda notificado de que la lectura, utilizaci=F3n, > divulgaci=F3n y/o copia sin autorizaci=F3n puede estar prohibida en virtu= d > de la legislaci=F3n vigente. Si ha recibido este mensaje por error, le > rogamos que nos lo comunique inmediatamente por esta misma v=EDa y proced= a > a su destrucci=F3n. > > The information contained in this transmission is privileged and > confidential information intended only for the use of the individual or > entity named above. If the reader of this message is not the intended > recipient, you are hereby notified that any dissemination, distribution > or copying of this communication is strictly prohibited. If you have > received this transmission in error, do not read it. Please immediately > reply to the sender that you have received this communication in error > and then delete it. > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > destinat=E1rio, pode conter informa=E7=E3o privilegiada ou confidencial e= =E9 > para uso exclusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa > senhoria o destinat=E1rio indicado, fica notificado de que a leitura, > utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pode esta= r proibida em > virtude da legisla=E7=E3o vigente. Se recebeu esta mensagem por erro, > rogamos-lhe que nos o comunique imediatamente por esta mesma via e > proceda a sua destrui=E7=E3o > > > _______________________________________________ > I2nsf mailing list > I2nsf@ietf.org > https://www.ietf.org/mailman/listinfo/i2nsf > From nobody Wed Dec 9 22:46:49 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4BDE1B31C4 for ; Wed, 9 Dec 2015 22:46:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.609 X-Spam-Level: X-Spam-Status: No, score=-3.609 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_45=0.6, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hyxg23_kOjfI for ; Wed, 9 Dec 2015 22:46:43 -0800 (PST) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 70E421B31C1 for ; Wed, 9 Dec 2015 22:46:43 -0800 (PST) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id D7E468BC273; Thu, 10 Dec 2015 01:46:42 -0500 (EST) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id C072D8BC247; Thu, 10 Dec 2015 01:46:42 -0500 (EST) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Thu, 10 Dec 2015 01:46:42 -0500 Received: from na01-by2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Thu, 10 Dec 2015 01:46:42 -0500 Received: from CY1PR09MB0922.namprd09.prod.outlook.com (10.163.89.140) by CY1PR09MB0922.namprd09.prod.outlook.com (10.163.89.140) with Microsoft SMTP Server (TLS) id 15.1.355.16; Thu, 10 Dec 2015 06:46:39 +0000 Received: from CY1PR09MB0922.namprd09.prod.outlook.com ([10.163.89.140]) by CY1PR09MB0922.namprd09.prod.outlook.com ([10.163.89.140]) with mapi id 15.01.0355.012; Thu, 10 Dec 2015 06:46:39 +0000 From: "Natale, Bob" To: Linda Dunbar , John Strassner Thread-Topic: [I2nsf] Service Layer Policies - Post 1: Background Information on PCIM Thread-Index: AQHRMIrKBYzJl2Jm6ESvjI+7lRPzLp7BmMeAgAIvzOA= Date: Thu, 10 Dec 2015 06:46:39 +0000 Message-ID: References: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=RNATALE@mitre.org; x-originating-ip: [192.80.55.86] x-microsoft-exchange-diagnostics: 1; CY1PR09MB0922; 5:2FEFx26k/qEFPHBpGne2iR81YHsKUfJlDDwYp5bBWlMKRAi5khHEi7+B1cGoPNBPWM2ovGE5lzQ2x/uYafO583D/31G1bX6wEpTqutUrMnedvyfm7Wb4NXYjvyDzbW2DP8n6+8ITlxbFbutkcOXRtw==; 24:kxEdwC/lWpFkVxfIq9R3yFgb+EEAJF0hMUDPGU1Hq74sItlR8lE5YENkYxrNrmHWtKkkqUxQ7qM3UadVRNg8iwPMeZvjOxeGvmtuHUpUOZU= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR09MB0922; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(520078)(8121501046)(5005006)(10201501046)(3002001); SRVR:CY1PR09MB0922; BCL:0; PCL:0; RULEID:; SRVR:CY1PR09MB0922; x-forefront-prvs: 078693968A x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(199003)(377454003)(45984002)(189002)(19300405004)(5002640100001)(5008740100001)(77096005)(74316001)(19609705001)(81156007)(97736004)(5001770100001)(86362001)(2950100001)(19580395003)(92566002)(2900100001)(19580405001)(15975445007)(33656002)(19625215002)(1220700001)(16236675004)(5003600100002)(122556002)(40100003)(101416001)(66066001)(790700001)(3846002)(87936001)(102836003)(586003)(6116002)(106116001)(1096002)(10400500002)(54356999)(105586002)(76576001)(5001960100002)(11100500001)(76176999)(189998001)(99286002)(106356001)(50986999)(5004730100002); DIR:OUT; SFP:1101; SCL:1; SRVR:CY1PR09MB0922; H:CY1PR09MB0922.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_CY1PR09MB0922848FC13661E5FE2ED9BFA8E90CY1PR09MB0922namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Dec 2015 06:46:39.0427 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR09MB0922 X-OriginatorOrg: mitre.org Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Service Layer Policies - Post 1: Background Information on PCIM X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Dec 2015 06:46:47 -0000 --_000_CY1PR09MB0922848FC13661E5FE2ED9BFA8E90CY1PR09MB0922namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTGluZGEsDQoNCklucHV0IGhlcmUgZnJvbSBhIGx1cmtlciDigKYgY2FsaWJyYXRlIGFjY29y ZGluZ2x5IQ0KDQpZb3UgYXNrZWQ6DQrigJxbTGluZGFdIGluIEkyTlNGLCB0aGVyZSBjb3VsZCBi ZSBhIGxvdCBvZiBjb25mbGljdHMsIGZvciBleGFtcGxlLCB0aGVyZSBjb3VsZCBiZSB0d28gcnVs ZXMgZW50ZXJlZCBhdCBkaWZmZXJlbnQgdGltZToNCg0KMS4gICAgICAgIFZpcnR1YWwgTmV0d29y ayBYIGNhbuKAmXQgYWNjZXNzIOKAnFlvdVR1YmXigJ0sDQoNCjIuICAgICAgIDEwLjEuMS4xIGNh biBhY2Nlc3Mg4oCcWW91VHViZeKAnSAod2hlcmUgMTAuMS4xLjEgaXMgYSBob3N0IHdpdGhpbiB0 aGUgVmlydHVhbCBOZXR3b3JrIFgpLg0KDQpEbyB5b3UgY2FsbCB0aGUgMiBydWxlcyBhYm92ZSBj b25mbGljdD/igJ0NCg0KVGhlIGFuc3dlciBpcyDigJxpdCBkZXBlbmRz4oCdIOKApiBkZXBlbmRz IG9uIGEgYnJvYWRlciBwb2xpY3kgZXhlY3V0aW9uIGNvbnRleHQg4oCmIGEgY29uY2VwdCB0aGF0 IFBDSU0gaXRzZWxmIGRvZXMgbm90IGRpcmVjdGx5IHN1cHBvcnQuIEZvciBleGFtcGxlLCB0aGF0 IGJyb2FkZXIgY29udGV4dCBjb3VsZCBzdGlwdWxhdGUgKHZpYSBwb2xpY3kpIHRoYXQgIzEgaXMg dGhlIGRlZmF1bHQgYnV0IGV4cGxpY2l0IGV4Y2VwdGlvbiBzcGVjaWZpY2F0aW9ucyBsaWtlICMy IGNhbiBvdmVycmlkZSB0aGUgZGVmYXVsdCDigKYgYWx0ZXJuYXRpdmVseSwgdGhhdCBicm9hZGVy IGNvbnRleHQgY291bGQgc3RpcHVsYXRlIHRoYXQgIzEgaXMgYWJzb2x1dGUgYW5kIGFueSBhdHRl bXB0IHRvIHNwZWNpZnkgKHByZWZlcmFibHkpIG9yIGV4ZWN1dGUgIzIgd291bGQgYmUgZGVuaWVk IOKApiB0aG9zZSBhcmUgb25seSB0d28gZXhhbXBsZXMsIHRoZXJlIGFyZSBtdWx0aXBsZSBwb3Rl bnRpYWxseSB2YWxpZCB2YXJpYXRpb25zLiBIb3cgbXVjaCBvZiB0aGF0IGNvbnRleHQgYSBncm91 cCB3YW50cyB0byBzdGFuZGFyZGl6ZSBpcyBhbiBpbXBvcnRhbnQgZGVjaXNpb24gZm9yIHRoZSBn cm91cCB0byB1bmRlcnN0YW5kIGFuZCBtYWtlIOKApiBQQ0lNIGl0c2VsZiB3aWxsIG5vdCB0YWtl IHlvdSB2ZXJ5IGZhciwgaG93ZXZlci4NCkF2YW50aSwNCkJvYk4NCg0KRnJvbTogSTJuc2YgW21h aWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgTGluZGEgRHVuYmFyDQpT ZW50OiBUdWVzZGF5LCBEZWNlbWJlciAwOCwgMjAxNSA0OjExIFBNDQpUbzogSm9obiBTdHJhc3Nu ZXIgPHN0cmF6cGRqQGdtYWlsLmNvbT47IGkybnNmQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0ky bnNmXSBTZXJ2aWNlIExheWVyIFBvbGljaWVzIC0gUG9zdCAxOiBCYWNrZ3JvdW5kIEluZm9ybWF0 aW9uIG9uIFBDSU0NCg0KSm9obiwNCg0KVGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhlIGluLWRl cHRoIGFuYWx5c2lzIG9mIFBDSU0gYW5kIGl0cyBzdWl0YWJpbGl0eSBhcyBzb21ldGhpbmcgdGhh dCBJMk5TRiBzaG91bGQgYmUgYmFzZWQgb24uIFdoYXQgeW91IHdyaXRlIGlzIHZlcnkgdmFsdWFi bGUuIEkgdGhpbmsgdGhlIGFuYWx5c2lzIHNob3VsZCBiZSBhZGRlZCB0byB0aGUgSTJOU0YgZ2Fw IGFuYWx5c2lzLCAob3IgYmUgYSBzdGFuZGFsb25lIFBvbGljeSBBbmFseXNpcyBJRCkuDQoNCkkg aGF2ZSBzb21lIHF1ZXN0aW9ucyBpbnNlcnRlZCBiZWxvdzoNCg0KRnJvbTogSTJuc2YgW21haWx0 bzppMm5zZi1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSm9obiBTdHJhc3NuZXINClNl bnQ6IFN1bmRheSwgRGVjZW1iZXIgMDYsIDIwMTUgNzowMSBQTQ0KVG86IGkybnNmQGlldGYub3Jn PG1haWx0bzppMm5zZkBpZXRmLm9yZz4NClN1YmplY3Q6IFtJMm5zZl0gU2VydmljZSBMYXllciBQ b2xpY2llcyAtIFBvc3QgMTogQmFja2dyb3VuZCBJbmZvcm1hdGlvbiBvbiBQQ0lNDQoNCjxTbmlw cGVkPg0KDQoyLiAgQnJpZWYgZGVzY3JpcHRpb24gb2YgUENJTQ0KDQpUaGUgUENJTSBDbGFzcyBI aWVyYXJjaHkgaXMgdmVyeSBzaW1wbGUsIGFzIHRoaXMgaXMgYSBDQSAoY29uZGl0aW9uLWFjdGlv bikgbW9kZWwuIEV2ZW50cyBhcmUgTk9UIHJlcHJlc2VudGVkLiBQQ0lNIGRlZmluZXMgYSBQb2xp Y3lSdWxlLCBhIFBvbGljeUdyb3VwIChncm91cCBvZiBQb2xpY3lSdWxlcyksIFBvbGljeUNvbmRp dGlvbiwgYW5kIFBvbGljeUFjdGlvbi4gVGhlc2UgYXJlIGFsbCBzaWJsaW5nczsgdGhlaXIgY29t bW9uIHN1cGVyY2xhc3MgaXMgY2FsbGVkIFBvbGljeSwgYXMgc2hvd24gYmVsb3c6DQoNCk1hbmFn ZWRFbGVtZW50IChhYnN0cmFjdCkNCiAgfA0KICArLS0tUG9saWN5IChhYnN0cmFjdCkNCiAgfCAg ICAgfA0KICB8ICAgICArLS0tUG9saWN5R3JvdXANCiAgfCAgICAgfA0KICB8ICAgICArLS0tUG9s aWN5UnVsZQ0KICB8ICAgICB8DQogIHwgICAgICstLS1Qb2xpY3lDb25kaXRpb24gKGFic3RyYWN0 KQ0KICB8ICAgICB8ICAgICAgfA0KICB8ICAgICB8ICAgICAgKy0tLVBvbGljeVRpbWVQZXJpb2RD b25kaXRpb24NCiAgfCAgICAgfCAgICAgIHwNCiAgfCAgICAgfCAgICAgICstLS1WZW5kb3JQb2xp Y3lDb25kaXRpb24NCiAgfCAgICAgfA0KICB8ICAgICArLS0tUG9saWN5QWN0aW9uIChhYnN0cmFj dCkNCiAgfCAgICAgICAgICAgIHwNCiAgfCAgICAgICAgICAgICstLS1WZW5kb3JQb2xpY3lBY3Rp b24NCg0KTm90ZTogUENJTSBkb2VzIGhhdmUgYSBzaW1wbGUgbm90aW9uIG9mIFJvbGVzLCBidXQg aW1wbGVtZW50cyB0aGVtIGFzIGF0dHJpYnV0ZXMsIGluc3RlYWQgb2Ygb2JqZWN0cy4gVGhpcyBp cyBub3Qgc2NhbGFibGUsIGFuZCBkb2VzIG5vdCBmdWxseSByZWFsaXplIHRoZSBwb3dlciBvZiB1 c2luZyByb2xlcy4gVGhpcyB3aWxsIGJlIGRpc2N1c3NlZCBtb3JlIGluIFBvc3QgMy4NCg0KTm90 ZTogSXQgaXMgcG9zc2libGUgdG8gZGVmaW5lIGxpbWl0ZWQgY29uc3RyYWludHMgaW4gUENJTSBh cyBjb25kaXRpb25zLiBGb3IgZXhhbXBsZSwgdGhlIFZlbmRvclBvbGljeUNvbmRpdGlvbiBjbGFz cyBoYXMgdHdvIGF0dHJpYnV0ZXMsIENvbnN0cmFpbnQgYW5kIENvbnN0cmFpbnRFbmNvZGluZywg dGhhdCBkbyB0aGlzLiBUaGlzIHdpbGwgYmUgZGlzY3Vzc2VkIG1vcmUgaW4gUG9zdCA0Lg0KDQpO b3RlOiBDb250ZXh0IGlzIE5PVCBkZWZpbmVkIGluIHRoZSBQQ0lNLg0KDQpbTGluZGFdICBEbyB5 b3UgYWdyZWUgdGhhdCDigJxDb25kaXRpb24gb2YgdGhlIFBDSU3igJ0gPT0g4oCcSTJOU0Ygc3Vi amVjdOKAnSAmIOKAnHRoZSBDb250ZXh0dWFsIHN0YXRlcyAob3IgdGhlIEkyTlNGIG9iamVjdCni gJ0/DQoNCg0KMy4gIFN1bW1hcnk6IG1haW4gZHJhd2JhY2tzIG9mIHVzaW5nIFBDSU0NCg0KTm90 ZSB0aGF0IHRoZSBjdXJyZW50IENJTSBQb2xpY3kgTW9kZWwgKDIuNDQuMSkgaXMgc2lnbmlmaWNh bnRseSBkaWZmZXJlbnQgdGhhbiBlaXRoZXIgUENJTSBvciBQQ0lNZS4gUENJTSBpcyBiYXNlZCBv biBDSU0gMi40OyBQQ0lNZSBpcyBiYXNlZCBvbiBDSU0gMi41LiBQQ0lNZSBpcyBOT1QgYmFja3dh cmRzIGNvbXBhdGlibGUgd2l0aCBQQ0lNIGluIGFsbCBhcmVhcy4NCg0KQ3JpdGljYWwgUHJvYmxl bXM6DQoNCiAgKiAgIFRoZXJlIGlzIG5vIHVuaXF1ZSBJRCB0aGF0IGNhbiBiZSB1c2VkIHRvIGRp c3Rpbmd1aXNoIGRpZmZlcmVudA0KaW5zdGFuY2VzIG9mIHRoZSBzYW1lIFBvbGljeVJ1bGUsIFBv bGljeUdyb3VwLCBQb2xpY3lDb25kaXRpb24sDQpvciBQb2xpY3lBY3Rpb24uDQpbTGluZGFdIENh biB3ZSBzaW1wbHkgY3JlYXRlIGFuIElEIChzdHJpbmcgb3IgbnVtZXJpYykgZm9yIGluc3RhbmNl cyBvZiB0aGUgc2FtZSBQb2xpY3lSdWxlPyBPciBpdCBpcyBtb3JlIGNvbXBsaWNhdGVkPw0KDQog ICogICBSZWxhdGlvbnNoaXBzIGFyZSBpbXBsZW1lbnRlZCBieSBkZWZpbmluZyBhbiBhYnN0cmFj dCBjbGFzcw0Kd2l0aCBrZXlzLCBhbmQgdGhlbiBvdmVycmlkaW5nIHRoZSBrZXlzIGluIHRoZSBz dWJjbGFzc2VzIG9mIHRoZQ0KcmVsYXRpb25zaGlwLiBUaGlzIGlzIGJyb2tlbi4gV291bGQgeW91 IG92ZXJyaWRlIGtleXMgaW4gYW4gUkRCTVM/DQpbTGluZGFdIElzIHRoZSDigJxLZXnigJ0gdG8g ZGlmZmVyZW50aWF0aW5nIGRpZmZlcmVudCDigJxQb2xpY3lSdWxl4oCdPyAgIENhbiB5b3UgZ2l2 ZSBhbiBleGFtcGxlIG9mIOKAnHN1YmNsYXNzZXMgb2YgdGhlIHJlbGF0aW9uc2hpcOKAnT8NCldo YXQgZXZlbnRzIGNhbiBjYXVzZSDigJxvdmVycmlkaW5nIHRoZSBrZXlzIGluIHRoZSBzdWJjbGFz c2VzIG9mIHRoZSByZWxhdGlvbnNoaXDigJ0/DQoNCiAgKiAgIE1vc3Qgb2YgdGhlIGNsYXNzZXMg dGhhdCBhcmUgdXNlZCB0byBpbXBsZW1lbnQgdGhlIHJlbGF0aW9uc2hpcHMNCmRvIE5PVCBoYXZl IGF0dHJpYnV0ZXMsIHNvIGl0IGlzIGltcG9zc2libGUgdG8gcmVzdHJpY3Qgd2hpY2gNCmNsYXNz ZXMgYXJlIHJlbGF0ZWQgdG8gd2hpY2ggb3RoZXIgY2xhc3NlcyAoZS5nLiwgYnkgY29udGV4dCku DQpQdXQgYW5vdGhlciB3YXksIHRoZSBzYW1lIHJlbGF0aW9uc2hpcCBtdXN0IGFsd2F5cyBiZSB1 c2VkDQpiZXR3ZWVuIHR3byB0eXBlcywgZXZlbiBpZiB0aGUgc2VtYW50aWNzIHZhcmllcy4gKFRo ZSB0d28NCmV4Y2VwdGlvbnMgYXJlIFBvbGljeUNvbmRpdGlvbkluUG9saWN5UnVsZSBhbmQNClBv bGljeUFjdGlvbkluUG9saWN5UnVsZSkuDQpbTGluZGFdIERvZXMg4oCcY2xhc3Nlc+KAnSA9PSDi gJxQb2xpY3lSdWxl4oCdPw0KDQogICogICBUaGUgImlnbm9yZSB0aGlzIHVubGVzcyB5b3UgbmVl ZCB0aGlzIiBwaGlsb3NvcGh5IGRvZXMgbm90DQp3b3JrLiBIb3cgZG8geW91IGtub3cgaWYgb3Ro ZXIgaW1wbGVtZW50YXRpb25zIHRoYXQgeW91IGFyZQ0Kc3VwcG9zZWQgdG8gaW50ZXJvcGVyYXRl IHdpdGggYXJlIHVzaW5nIHRoZW0/DQpbTGluZGFdIElzIOKAnElnbm9yZSB0aGlzIHVubGVzcyB5 b3UgbmVlZCB0aGlz4oCdIGFuIG5ldyB0eXBlIG9mIOKAnFBvbGljeVJ1bGXigJ0/DQoNCiAgKiAg IFRoZXJlIGlzIG5vIGNvbmNlcHQgb2YgZXJyb3Igb3IgZXhjZXB0aW9uIGhhbmRsaW5nDQogICog ICBUaGVyZSBpcyBubyBjb25jZXB0IG9mIHRoZSBzdWJqZWN0IG9yIHRoZSB0YXJnZXQgb2YgYSBw b2xpY3kNCltMaW5kYV0gRG9lcyB5b3VyIOKAnHN1YmplY3TigJ0gaGF2ZSB0aGUgc2FtZSBtZWFu aW5nIGFzIHRoZSDigJxJMk5TRiBzdWJqZWN04oCdIHdoaWNoIG1lYW5zIGJpdHMmYnl0ZXMgZXh0 cmFjdGVkIGZyb20gcGFja2V0cz8NCg0KICAqICAgQWRkaW5nIGEgbmV3IHR5cGUgb2YgcG9saWN5 IChlLmcuLCBkZWNsYXJhdGl2ZSBvciBmdW5jdGlvbmFsKQ0Kd2lsbCBjYXVzZSBhIG1ham9yIHJl d3JpdGUgb2YgdGhlIGVudGlyZSBtb2RlbA0KDQpbTGluZGFdIENhbiB3ZSBzYXkgdGhhdCAgSTJO U0YgcG9saWNpZXMgaGF2ZSBvbmUgdHlwZSDigJxTdWJqZWN0LUNvbnRleHR1YWxTdGF0ZXMtIGFj dGlvbi0gZnVuY3Rpb24/IFNvIGluIEkyTlNGIGVudmlyb25tZW50LCB0aGVyZSBpcyBvbmx5IHRo ZSBub3Rpb24gb2YgYWRkaW5nIGEgbmV3IOKAnFBvbGljeVJ1bGXigJ0sIGJ1dCBubyBhZGRpbmcg YSBuZXcgcG9saWN5IHR5cGUuIElzIHRoaXMgY29ycmVjdCBzdGF0ZW1lbnQ/DQoNCiAgKiAgIFRo ZXJlIGlzIG5vIGFwcHJvYWNoIHRvIGRldGVjdGluZyBhbmQgc29sdmluZyBwb2xpY3kgY29uZmxp Y3RzOw0KdGhpcyBpcyBkdWUgdG8gdGhlIHNpbXBsaXN0aWMgbm90aW9uIG9mIGp1c3QgdXNpbmcg YSBQRFAgYW5kIGENClBFUCBmb3IgYXBwbHlpbmcgcG9saWNpZXMuDQoNCltMaW5kYV0gaW4gSTJO U0YsIHRoZXJlIGNvdWxkIGJlIGEgbG90IG9mIGNvbmZsaWN0cywgZm9yIGV4YW1wbGUsIHRoZXJl IGNvdWxkIGJlIHR3byBydWxlcyBlbnRlcmVkIGF0IGRpZmZlcmVudCB0aW1lOg0KDQoxLiAgICAg ICAgVmlydHVhbCBOZXR3b3JrIFggY2Fu4oCZdCBhY2Nlc3Mg4oCcWW91VHViZeKAnSwNCg0KMi4g ICAgICAgMTAuMS4xLjEgY2FuIGFjY2VzcyDigJxZb3VUdWJl4oCdICh3aGVyZSAxMC4xLjEuMSBp cyBhIGhvc3Qgd2l0aGluIHRoZSBWaXJ0dWFsIE5ldHdvcmsgWCkuDQoNCkRvIHlvdSBjYWxsIHRo ZSAyIHJ1bGVzIGFib3ZlIGNvbmZsaWN0Pw0KDQoNCg0KNC4gUmVjb21tZW5kYXRpb25zDQoNCkdp dmVuIHRoZSBsYXJnZSBhbW91bnQgb2YgcHJvYmxlbXMsIEkgcmVjb21tZW5kIHRoYXQgd2Ugbm90 IGNvbnNpZGVyIFBDSU0gZnVydGhlci4NCltMaW5kYV0gc2hvdWxkIEkyTlNGIHJlZmVyZW5jZSBQ Q0lNPw0KDQpUaGFuayB5b3UgdmVyeSBtdWNoLiBMaW5kYQ0KDQo1LiBPcmlnaW4gb2YgUENJTS9Q Q0lNZQ0KDQpUaGlzIGlzIGEgKip0aGVvcnkqKiBzZWN0aW9uOyBwbGVhc2Ugc2tpcCB1bmxlc3Mg eW91IHdhbnQgdG8gdW5kZXJzdGFuZCB0aGUgbW9kZWwgaW4gbW9yZSBkZXRhaWwuDQoNClRoZSBQ Q0lNIGlzIGJhc2VkIG9uIHRoZSBETVRGIENJTSwgd2hpY2ggaXMgYWN0dWFsbHkgYSAqKmRhdGEg bW9kZWwqKiAoZGVzcGl0ZSBpdHMgbmFtZSkgYmVjYXVzZSBpdCB1c2VzIHJlbGF0aW9uYWwgdGVj aG5vbG9naWVzIChlLmcuLCBrZXlzIGFuZCB3ZWFrIHJlZmVyZW5jZXMpIHRvIGNyZWF0ZSBpdHMg bW9kZWwuIFBDSU0gaXMgYmFzZWQgb24gYW4gZWFybHkgdmVyc2lvbiBvZiB0aGUgQ0lNICgyLjQp OyB0aGUgY3VycmVudCB2ZXJzaW9uIG9mIHRoZSBDSU0gaXMgMi40NC4xIGFzIG9mIHRoaXMgd3Jp dGluZy4gU2luY2UgdGhpcyBpcyB0aWVkIHRvIHRoZSBDSU0sIHRoaXMgbWVhbnMgdGhhdDoNCg0K ICAgMSkgUG9saWN5IGlzIHN1YmNsYXNzZWQgZnJvbSBhIG1vcmUgZ2VuZXJpYyBjbGFzcyAoTWFu YWdlZEVsZW1lbnQpDQogICAyKSBBTEwgcmVsYXRpb25zaGlwcyAoYXNzb2NpYXRpb25zLCBhZ2dy ZWdhdGlvbnMsIGFuZCBjb21wb3NpdGlvbnMpDQogICAgICAgYXJlIHJlYWxpemVkIGFzICoqY2xh c3NlcyoqDQogICAzKSBBcyBhIHJlc3VsdCBvZiAyKSwgcmVsYXRpb25zaGlwcyBhcmUgc3ViY2xh c3NlZA0KICAgNCkgQm90aCBhdHRyaWJ1dGVzIGFuZCBhc3NvY2lhdGlvbnMgYXJlICoqaW5oZXJp dGVkKioNCiAgIDUpIFRoZSBzYW1lIGRlc2lnbiBhcHByb2FjaCAoYXMgbXVjaCBhcyBwb3NzaWJs ZSkgd2FzIHVzZWQgaW4NCiAgICAgICAgUENJTS9QQ0lNZSBhcyB3YXMgaW4gQ0lNLiBTcGVjaWZp Y2FsbHksIGl0IHdhcyB0aG91Z2h0IGJldHRlcg0KICAgICAgICB0byBkZWZpbmUgYSBnZW5lcmlj LCBidXQgb3B0aW9uYWwsIHJlbGF0aW9uc2hpcCBpbnN0ZWFkIG9mIG5vdA0KICAgICAgICBkZWZp bmluZyB0aGUgcmVsYXRpb25zaGlwLg0KICAgNikgVGhlIENJTSBkb2VzIE5PVCBoYXZlIGEgc2lu Z2xlIHJvb3RlZCBoaWVyYXJjaHk7IHRoaXMgbWFrZXMNCiAgICAgICAgY29kZSBnZW5lcmF0aW9u IG1vcmUgY29tcGxleA0KICAgNykgVGhlIENJTSB1c2VzIGEgcHJvcHJpZXRhcnkgbGFuZ3VhZ2Ug YW5kIGlzIG5vdCBzdHJpY3RseSBVTUwNCiAgICAgICAgY29tcGxpYW50LCBldmVuIHRob3VnaCBp dCBsb29rcyBsaWtlIFVNTCAodW5mb3J0dW5hdGVseSwgdGhpcw0KICAgICAgICBsYW5ndWFnZSBp cyBhbHNvIGNhbGxlZCBNT0YpDQoNCkRlcGVuZGluZyBvbiB0aGUgY29tcGxleGl0eSBvZiB0aGUg aW1wbGVtZW50YXRpb24sIHRoZSBhYm92ZSBoYXZlIGJlZW4gc2hvd24gdG8gcHJvZHVjZSBwcm9i bGVtcyBpbiBsYXJnZSBlbnZpcm9ubWVudHMuIEZvciBleGFtcGxlLCB0aGUgc3Bpcml0IG9mICJs ZXQncyBkZWZpbmUgYW4gYXR0cmlidXRlIG9yIGFzc29jaWF0aW9uIGluIGNhc2UgaXQgaXMgdXNl ZnVsLCBhbmQgbWFrZSBpdCBvcHRpb25hbCBzbyB5b3UgZG9uJ3QgaGF2ZSB0byB3b3JyeSBhYm91 dCBpdCIgbm90IG9ubHkgdmlvbGF0ZXMgc29tZSB3ZWxsLWtub3duIHNvZnR3YXJlIGFyY2hpdGVj dHVyYWwgZ3VpZGVsaW5lcyAoZS5nLiwgU2luZ2xlIFJlc3BvbnNpYmlsaXR5IFByaW5jaXBsZSBh bmQgdGhlIExpc2tvdiBTdWJzdGl0dXRpb24gUHJpbmNpcGxlKSwgYnV0IGl0IG1ha2VzIHRoaW5n cyBkaWZmaWN1bHQgdG8gaW50ZXJvcGVyYXRlIHdpdGggKHNpbmNlIHlvdSBuZXZlciByZWFsbHkg a25vdyBpZiBhbiBhdHRyaWJ1dGUgb3IgcmVsYXRpb25zaGlwIHNob3VsZCBiZSBpbnN0YW50aWF0 ZWQgb3Igbm90KS4NCg0KDQpyZWdhcmRzLA0KSm9obg0K --_000_CY1PR09MB0922848FC13661E5FE2ED9BFA8E90CY1PR09MB0922namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2 IDQgMyA1IDQgNCAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBs aS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9t Oi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJv bWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlv cml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2 aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb0xp c3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJ e21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBpbjsNCgltYXJnaW4tcmlnaHQ6 MGluOw0KCW1hcmdpbi1ib3R0b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41aW47DQoJbWFyZ2luLWJv dHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5l dyBSb21hbiIsc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVy c29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3 RDt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojOTkzMzAwOw0KCWZv bnQtd2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDt9DQouTXNvQ2hwRGVmYXVsdA0K CXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdl IFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4g MS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQov KiBMaXN0IERlZmluaXRpb25zICovDQpAbGlzdCBsMA0KCXttc28tbGlzdC1pZDoyMzY2Njg2MzE7 DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi03NjM4MzMw MTIgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTUg Njc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTU7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZl bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC10YWItc3RvcDox LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluO30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz dCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw1 DQoJe21zby1sZXZlbC10YWItc3RvcDoyLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsNg0KCXttc28tbGV2 ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLXRhYi1zdG9w OjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC10YWItc3RvcDo0LjBpbjsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBs aXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMQ0KCXtt c28tbGlzdC1pZDoxMjM1MjQzODMwOw0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0 LXRlbXBsYXRlLWlkczotNzYzODMzMDEyIDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4 NzAzIDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1O30NCkBsaXN0 IGwxOmxldmVsMQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsMg0K CXttc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDMNCgl7bXNvLWxldmVs LXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDoy LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluO30NCkBsaXN0IGwxOmxldmVsNQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz dCBsMTpsZXZlbDYNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw3 DQoJe21zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsOA0KCXttc28tbGV2 ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDkNCgl7bXNvLWxldmVsLXRhYi1zdG9w OjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47fQ0KQGxpc3QgbDINCgl7bXNvLWxpc3QtaWQ6MTc0MzIxODgwMTsNCgltc28tbGlzdC10 ZW1wbGF0ZS1pZHM6LTE5Nzc2NDk2Njt9DQpAbGlzdCBsMjpsZXZlbDENCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3lt Ym9sO30NCkBsaXN0IGwyOmxldmVsMg0KCXttc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz dCBsMjpsZXZlbDMNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDI6bGV2ZWw0 DQoJe21zby1sZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwyOmxldmVsNQ0KCXttc28tbGV2 ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjpsZXZlbDYNCgl7bXNvLWxldmVsLXRhYi1zdG9w OjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47fQ0KQGxpc3QgbDI6bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBs aXN0IGwyOmxldmVsOA0KCXttc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjpsZXZl bDkNCgl7bXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47 fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28g OV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+ DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5 b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9v OnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4t VVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24x Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Izk5MzMwMCI+SGkgTGluZGEsPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOTkzMzAwIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5OTMzMDAi PklucHV0IGhlcmUgZnJvbSBhIGx1cmtlciDigKYgY2FsaWJyYXRlIGFjY29yZGluZ2x5ITxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Izk5MzMwMCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOTkz MzAwIj5Zb3UgYXNrZWQ6PGJyPg0K4oCcPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 OTdEIj5bTGluZGFdIGluIEkyTlNGLCB0aGVyZSBjb3VsZCBiZSBhIGxvdCBvZiBjb25mbGljdHMs IGZvciBleGFtcGxlLCB0aGVyZSBjb3VsZCBiZSB0d28gcnVsZXMgZW50ZXJlZCBhdCBkaWZmZXJl bnQgdGltZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFw aCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMiI+DQo8IVtpZiAh c3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PHNwYW4gc3R5bGU9 Im1zby1saXN0Oklnbm9yZSI+MS48c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9z cGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij4mbmJzcDtWaXJ0dWFsIE5ldHdvcmsgWCBjYW7igJl0IGFjY2VzcyDigJxZb3VUdWJl4oCdLA0K PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzt0ZXh0 LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzIiPg0KPCFbaWYgIXN1cHBvcnRM aXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxzcGFuIHN0eWxlPSJtc28tbGlz dDpJZ25vcmUiPjIuPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFu JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3Nw YW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+MTAuMS4x LjEgY2FuIGFjY2VzcyDigJxZb3VUdWJl4oCdICh3aGVyZSAxMC4xLjEuMSBpcyBhIGhvc3Qgd2l0 aGluIHRoZSBWaXJ0dWFsIE5ldHdvcmsgWCkuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij5EbyB5b3UgY2FsbCB0aGUgMiBydWxlcyBhYm92ZSBjb25mbGljdD88L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojOTkz MzAwIj7igJ08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFw aCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvO21hcmdpbi1sZWZ0OjBpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5OTMzMDAiPlRoZSBhbnN3ZXIgaXMg4oCcaXQg ZGVwZW5kc+KAnSDigKYgZGVwZW5kcyBvbiBhIGJyb2FkZXIgcG9saWN5IGV4ZWN1dGlvbiBjb250 ZXh0IOKApiBhIGNvbmNlcHQgdGhhdCBQQ0lNIGl0c2VsZiBkb2VzIG5vdCBkaXJlY3RseSBzdXBw b3J0LiBGb3IgZXhhbXBsZSwgdGhhdCBicm9hZGVyIGNvbnRleHQgY291bGQgc3RpcHVsYXRlICh2 aWEgcG9saWN5KSB0aGF0DQogIzEgaXMgdGhlIGRlZmF1bHQgYnV0IGV4cGxpY2l0IGV4Y2VwdGlv biBzcGVjaWZpY2F0aW9ucyBsaWtlICMyIGNhbiBvdmVycmlkZSB0aGUgZGVmYXVsdCDigKYgYWx0 ZXJuYXRpdmVseSwgdGhhdCBicm9hZGVyIGNvbnRleHQgY291bGQgc3RpcHVsYXRlIHRoYXQgIzEg aXMgYWJzb2x1dGUgYW5kIGFueSBhdHRlbXB0IHRvIHNwZWNpZnkgKHByZWZlcmFibHkpIG9yIGV4 ZWN1dGUgIzIgd291bGQgYmUgZGVuaWVkIOKApiB0aG9zZSBhcmUgb25seSB0d28gZXhhbXBsZXMs DQogdGhlcmUgYXJlIG11bHRpcGxlIHBvdGVudGlhbGx5IHZhbGlkIHZhcmlhdGlvbnMuIEhvdyBt dWNoIG9mIHRoYXQgY29udGV4dCBhIGdyb3VwIHdhbnRzIHRvIHN0YW5kYXJkaXplIGlzIGFuIGlt cG9ydGFudCBkZWNpc2lvbiBmb3IgdGhlIGdyb3VwIHRvIHVuZGVyc3RhbmQgYW5kIG1ha2Ug4oCm IFBDSU0gaXRzZWxmIHdpbGwgbm90IHRha2UgeW91IHZlcnkgZmFyLCBob3dldmVyLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5OTMzMDAi PkF2YW50aSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiM5OTMzMDAiPkJvYk48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6Izk5MzMwMCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRp dj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBw dDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IEkybnNmIFtt YWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBPZiA8L2I+TGluZGEg RHVuYmFyPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIERlY2VtYmVyIDA4LCAyMDE1IDQ6MTEg UE08YnI+DQo8Yj5Ubzo8L2I+IEpvaG4gU3RyYXNzbmVyICZsdDtzdHJhenBkakBnbWFpbC5jb20m Z3Q7OyBpMm5zZkBpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0kybnNmXSBTZXJ2 aWNlIExheWVyIFBvbGljaWVzIC0gUG9zdCAxOiBCYWNrZ3JvdW5kIEluZm9ybWF0aW9uIG9uIFBD SU08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Sm9obiwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzFGNDk3RCI+VGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhlIGluLWRlcHRoIGFu YWx5c2lzIG9mIFBDSU0gYW5kIGl0cyBzdWl0YWJpbGl0eSBhcyBzb21ldGhpbmcgdGhhdCBJMk5T RiBzaG91bGQgYmUgYmFzZWQgb24uIFdoYXQgeW91IHdyaXRlIGlzIHZlcnkgdmFsdWFibGUuIEkg dGhpbmsNCiB0aGUgYW5hbHlzaXMgc2hvdWxkIGJlIGFkZGVkIHRvIHRoZSBJMk5TRiBnYXAgYW5h bHlzaXMsIChvciBiZSBhIHN0YW5kYWxvbmUgUG9saWN5IEFuYWx5c2lzIElEKS4NCjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SSBoYXZlIHNvbWUgcXVlc3Rpb25z IGluc2VydGVkIGJlbG93Og0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRE RiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9t YSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWYiPiBJMm5z ZiBbPGEgaHJlZj0ibWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmciPm1haWx0bzppMm5zZi1i b3VuY2VzQGlldGYub3JnPC9hPl0NCjxiPk9uIEJlaGFsZiBPZiA8L2I+Sm9obiBTdHJhc3NuZXI8 YnI+DQo8Yj5TZW50OjwvYj4gU3VuZGF5LCBEZWNlbWJlciAwNiwgMjAxNSA3OjAxIFBNPGJyPg0K PGI+VG86PC9iPiA8YSBocmVmPSJtYWlsdG86aTJuc2ZAaWV0Zi5vcmciPmkybnNmQGlldGYub3Jn PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBbSTJuc2ZdIFNlcnZpY2UgTGF5ZXIgUG9saWNpZXMg LSBQb3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRpb24gb24gUENJTTxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjoj MUY0OTdEIj4mbHQ7U25pcHBlZCZndDsgPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjIuJm5i c3A7IEJyaWVmIGRlc2NyaXB0aW9uIG9mIFBDSU08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBQQ0lNIENsYXNzIEhpZXJhcmNo eSBpcyB2ZXJ5IHNpbXBsZSwgYXMgdGhpcyBpcyBhIENBIChjb25kaXRpb24tYWN0aW9uKSBtb2Rl bC4gRXZlbnRzIGFyZSBOT1QgcmVwcmVzZW50ZWQuIFBDSU0gZGVmaW5lcyBhIFBvbGljeVJ1bGUs IGEgUG9saWN5R3JvdXAgKGdyb3VwIG9mIFBvbGljeVJ1bGVzKSwgUG9saWN5Q29uZGl0aW9uLCBh bmQgUG9saWN5QWN0aW9uLiBUaGVzZSBhcmUgYWxsIHNpYmxpbmdzOyB0aGVpcg0KIGNvbW1vbiBz dXBlcmNsYXNzIGlzIGNhbGxlZCBQb2xpY3ksIGFzIHNob3duIGJlbG93OjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPk1hbmFnZWRFbGVtZW50IChhYnN0cmFj dCk8YnI+DQombmJzcDsgfDxicj4NCiZuYnNwOyAmIzQzOy0tLVBvbGljeSAoYWJzdHJhY3QpPGJy Pg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDxicj4NCiZuYnNwOyB8Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tUG9saWN5R3JvdXA8YnI+DQombmJzcDsmbmJzcDt8 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8YnI+DQombmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tUG9saWN5UnVsZTxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IHw8YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQz Oy0tLVBvbGljeUNvbmRpdGlvbiAoYWJzdHJhY3QpPGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PGJyPg0KJm5ic3A7 IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7ICYjNDM7LS0tUG9saWN5VGltZVBlcmlvZENvbmRpdGlvbjxicj4NCiZuYnNwOyB8Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7fCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB8PGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt8Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JiM0MzstLS1WZW5kb3JQb2xpY3lDb25kaXRpb248 YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3w8YnI+DQombmJzcDsg fCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLVBvbGljeUFjdGlvbiAoYWJzdHJhY3Qp PGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0t VmVuZG9yUG9saWN5QWN0aW9uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ob3RlOiBQQ0lNIGRvZXMgaGF2 ZSBhIHNpbXBsZSBub3Rpb24gb2YgUm9sZXMsIGJ1dCBpbXBsZW1lbnRzIHRoZW0gYXMgYXR0cmli dXRlcywgaW5zdGVhZCBvZiBvYmplY3RzLiBUaGlzIGlzIG5vdCBzY2FsYWJsZSwgYW5kIGRvZXMg bm90IGZ1bGx5IHJlYWxpemUgdGhlIHBvd2VyIG9mIHVzaW5nIHJvbGVzLiBUaGlzIHdpbGwgYmUg ZGlzY3Vzc2VkIG1vcmUgaW4gUG9zdCAzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ob3RlOiBJdCBpcyBwb3NzaWJs ZSB0byBkZWZpbmUgbGltaXRlZCBjb25zdHJhaW50cyBpbiBQQ0lNIGFzIGNvbmRpdGlvbnMuIEZv ciBleGFtcGxlLCB0aGUgVmVuZG9yUG9saWN5Q29uZGl0aW9uIGNsYXNzIGhhcyB0d28gYXR0cmli dXRlcywgQ29uc3RyYWludCBhbmQgQ29uc3RyYWludEVuY29kaW5nLCB0aGF0IGRvIHRoaXMuIFRo aXMgd2lsbCBiZSBkaXNjdXNzZWQgbW9yZSBpbiBQb3N0IDQuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk5vdGU6IENv bnRleHQgaXMgTk9UIGRlZmluZWQgaW4gdGhlIFBDSU0uPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiMxRjQ5N0QiPltMaW5kYV0gJm5ic3A7RG8geW91IGFncmVlIHRoYXQg4oCcQ29uZGl0aW9u IG9mIHRoZSBQQ0lN4oCdID09IOKAnEkyTlNGIHN1YmplY3TigJ0gJmFtcDsg4oCcdGhlIENvbnRl eHR1YWwgc3RhdGVzIChvciB0aGUgSTJOU0Ygb2JqZWN0KeKAnT8NCjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4zLiZuYnNwOyBT dW1tYXJ5OiBtYWluIGRyYXdiYWNrcyBvZiB1c2luZyBQQ0lNPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Tm90ZSB0aGF0IHRoZSBjdXJyZW50IENJTSBQb2xpY3kgTW9kZWwgKDIuNDQuMSkgaXMgc2lnbmlm aWNhbnRseSBkaWZmZXJlbnQgdGhhbiBlaXRoZXIgUENJTSBvciBQQ0lNZS4mbmJzcDtQQ0lNIGlz IGJhc2VkIG9uIENJTSAyLjQ7IFBDSU1lIGlzIGJhc2VkIG9uIENJTSAyLjUuIFBDSU1lIGlzIE5P VCBiYWNrd2FyZHMgY29tcGF0aWJsZSB3aXRoIFBDSU0gaW4gYWxsIGFyZWFzLjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Dcml0aWNhbCBQcm9i bGVtczo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsMiBsZXZlbDEgbGZvMSI+DQpUaGVyZSBpcyBubyB1bmlx dWUgSUQgdGhhdCBjYW4gYmUgdXNlZCB0byBkaXN0aW5ndWlzaCBkaWZmZXJlbnQ8YnI+DQppbnN0 YW5jZXMgb2YgdGhlIHNhbWUgUG9saWN5UnVsZSwgUG9saWN5R3JvdXAsIFBvbGljeUNvbmRpdGlv biw8YnI+DQpvciBQb2xpY3lBY3Rpb24uPG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5bTGluZGFdIENhbiB3 ZSBzaW1wbHkgY3JlYXRlIGFuIElEIChzdHJpbmcgb3IgbnVtZXJpYykgZm9yIGluc3RhbmNlcyBv ZiB0aGUgc2FtZSBQb2xpY3lSdWxlPyBPciBpdA0KIGlzIG1vcmUgY29tcGxpY2F0ZWQ/IDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87bXNvLWxpc3Q6bDIgbGV2ZWwxIGxmbzEiPg0KUmVsYXRpb25zaGlwcyBhcmUgaW1wbGVtZW50 ZWQgYnkgZGVmaW5pbmcgYW4gYWJzdHJhY3QgY2xhc3M8YnI+DQp3aXRoIGtleXMsIGFuZCB0aGVu IG92ZXJyaWRpbmcgdGhlIGtleXMgaW4gdGhlIHN1YmNsYXNzZXMgb2YgdGhlPGJyPg0KcmVsYXRp b25zaGlwLiBUaGlzIGlzIGJyb2tlbi4gV291bGQgeW91IG92ZXJyaWRlIGtleXMgaW4gYW4gUkRC TVM/PG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj5bTGluZGFdIElzIHRoZSDigJxLZXnigJ0gdG8gZGlmZmVy ZW50aWF0aW5nIGRpZmZlcmVudCDigJxQb2xpY3lSdWxl4oCdPyZuYnNwOyAmbmJzcDtDYW4geW91 IGdpdmUgYW4gZXhhbXBsZSBvZiDigJxzdWJjbGFzc2VzDQogb2YgdGhlIHJlbGF0aW9uc2hpcOKA nT8gPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+V2hhdCBldmVudHMgY2FuIGNhdXNlIOKAnG92ZXJyaWRp bmcgdGhlIGtleXMgaW4gdGhlIHN1YmNsYXNzZXMgb2YgdGhlIHJlbGF0aW9uc2hpcOKAnT88bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvO21zby1saXN0OmwyIGxldmVsMSBsZm8xIj4NCk1vc3Qgb2YgdGhlIGNsYXNzZXMgdGhhdCBh cmUgdXNlZCB0byBpbXBsZW1lbnQgdGhlIHJlbGF0aW9uc2hpcHM8YnI+DQpkbyBOT1QgaGF2ZSBh dHRyaWJ1dGVzLCBzbyBpdCBpcyBpbXBvc3NpYmxlIHRvIHJlc3RyaWN0IHdoaWNoPGJyPg0KY2xh c3NlcyBhcmUgcmVsYXRlZCB0byB3aGljaCBvdGhlciBjbGFzc2VzIChlLmcuLCBieSBjb250ZXh0 KS48YnI+DQpQdXQgYW5vdGhlciB3YXksIHRoZSBzYW1lIHJlbGF0aW9uc2hpcCBtdXN0IGFsd2F5 cyBiZSB1c2VkPGJyPg0KYmV0d2VlbiB0d28gdHlwZXMsIGV2ZW4gaWYgdGhlIHNlbWFudGljcyB2 YXJpZXMuIChUaGUgdHdvPGJyPg0KZXhjZXB0aW9ucyBhcmUgUG9saWN5Q29uZGl0aW9uSW5Qb2xp Y3lSdWxlIGFuZDxicj4NClBvbGljeUFjdGlvbkluUG9saWN5UnVsZSkuPG86cD48L286cD48L2xp PjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 OTdEIj5bTGluZGFdIERvZXMg4oCcY2xhc3Nlc+KAnSA9PSDigJxQb2xpY3lSdWxl4oCdPw0KPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0bzttc28tbGlzdDpsMiBsZXZlbDEgbGZvMSI+DQpUaGUgJnF1b3Q7aWdub3JlIHRoaXMgdW5s ZXNzIHlvdSBuZWVkIHRoaXMmcXVvdDsgcGhpbG9zb3BoeSBkb2VzIG5vdDxicj4NCndvcmsuIEhv dyBkbyB5b3Uga25vdyBpZiBvdGhlciBpbXBsZW1lbnRhdGlvbnMgdGhhdCB5b3UgYXJlPGJyPg0K c3VwcG9zZWQgdG8gaW50ZXJvcGVyYXRlIHdpdGggYXJlIHVzaW5nIHRoZW0/PG86cD48L286cD48 L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj MUY0OTdEIj5bTGluZGFdIElzIOKAnElnbm9yZSB0aGlzIHVubGVzcyB5b3UgbmVlZCB0aGlz4oCd IGFuIG5ldyB0eXBlIG9mIOKAnFBvbGljeVJ1bGXigJ0/DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0OmwyIGxl dmVsMSBsZm8xIj4NClRoZXJlIGlzIG5vIGNvbmNlcHQgb2YgZXJyb3Igb3IgZXhjZXB0aW9uIGhh bmRsaW5nPG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDIg bGV2ZWwxIGxmbzEiPg0KVGhlcmUgaXMgbm8gY29uY2VwdCBvZiB0aGUgc3ViamVjdCBvciB0aGUg dGFyZ2V0IG9mIGEgcG9saWN5PG86cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5bTGluZGFdIERvZXMgeW91ciDi gJxzdWJqZWN04oCdIGhhdmUgdGhlIHNhbWUgbWVhbmluZyBhcyB0aGUg4oCcSTJOU0Ygc3ViamVj dOKAnSB3aGljaCBtZWFucyBiaXRzJmFtcDtieXRlcyBleHRyYWN0ZWQNCiBmcm9tIHBhY2tldHM/ IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG87bXNvLWxpc3Q6bDIgbGV2ZWwxIGxmbzEiPg0KQWRkaW5nIGEgbmV3IHR5cGUgb2Yg cG9saWN5IChlLmcuLCBkZWNsYXJhdGl2ZSBvciBmdW5jdGlvbmFsKTxicj4NCndpbGwgY2F1c2Ug YSBtYWpvciByZXdyaXRlIG9mIHRoZSBlbnRpcmUgbW9kZWw8bzpwPjwvbzpwPjwvbGk+PC91bD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPltMaW5kYV0gQ2FuIHdlIHNheSB0aGF0ICZuYnNwO0ky TlNGIHBvbGljaWVzIGhhdmUgb25lIHR5cGUg4oCcU3ViamVjdC1Db250ZXh0dWFsU3RhdGVzLSBh Y3Rpb24tIGZ1bmN0aW9uPw0KIFNvIGluIEkyTlNGIGVudmlyb25tZW50LCB0aGVyZSBpcyBvbmx5 IHRoZSBub3Rpb24gb2YgYWRkaW5nIGEgbmV3IOKAnFBvbGljeVJ1bGXigJ0sIGJ1dCBubyBhZGRp bmcgYSBuZXcgcG9saWN5IHR5cGUuIElzIHRoaXMgY29ycmVjdCBzdGF0ZW1lbnQ/ICZuYnNwOzxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG87bXNvLWxpc3Q6bDIgbGV2ZWwxIGxmbzEiPg0KVGhlcmUgaXMgbm8gYXBwcm9hY2ggdG8g ZGV0ZWN0aW5nIGFuZCBzb2x2aW5nIHBvbGljeSBjb25mbGljdHM7PGJyPg0KdGhpcyBpcyBkdWUg dG8gdGhlIHNpbXBsaXN0aWMgbm90aW9uIG9mIGp1c3QgdXNpbmcgYSBQRFAgYW5kIGE8YnI+DQpQ RVAgZm9yIGFwcGx5aW5nIHBvbGljaWVzLjxvOnA+PC9vOnA+PC9saT48L3VsPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7 Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBpbiBJMk5TRiwgdGhlcmUgY291bGQgYmUgYSBsb3Qgb2Yg Y29uZmxpY3RzLCBmb3IgZXhhbXBsZSwgdGhlcmUgY291bGQgYmUgdHdvIHJ1bGVzIGVudGVyZWQN CiBhdCBkaWZmZXJlbnQgdGltZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv TGlzdFBhcmFncmFwaCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMSBsZXZlbDEgbGZv NCI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+ PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+MS48c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAm cXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj4mbmJzcDtWaXJ0dWFsIE5ldHdvcmsgWCBjYW7igJl0IGFjY2VzcyDigJxZ b3VUdWJl4oCdLA0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJh Z3JhcGgiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0bzt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzQiPg0KPCFb aWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxzcGFuIHN0 eWxlPSJtc28tbGlzdDpJZ25vcmUiPjIuPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsN Cjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFG NDk3RCI+MTAuMS4xLjEgY2FuIGFjY2VzcyDigJxZb3VUdWJl4oCdICh3aGVyZSAxMC4xLjEuMSBp cyBhIGhvc3Qgd2l0aGluIHRoZSBWaXJ0dWFsIE5ldHdvcmsgWCkuDQo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4NCjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj5EbyB5b3UgY2FsbCB0aGUgMiBydWxlcyBhYm92ZSBjb25mbGljdD8NCjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPg0KPHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjQuIFJlY29tbWVu ZGF0aW9uczxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+R2l2ZW4gdGhlIGxhcmdlIGFtb3VudCBvZiBwcm9i bGVtcywgSSByZWNvbW1lbmQgdGhhdCB3ZSBub3QgY29uc2lkZXIgUENJTSBmdXJ0aGVyLjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0xpbmRhXSBzaG91bGQgSTJOU0YgcmVmZXJlbmNl IFBDSU0/DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlRoYW5r IHlvdSB2ZXJ5IG11Y2guIExpbmRhDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj41LiBPcmlnaW4gb2YgUENJTS9QQ0lNZTxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5UaGlzIGlzIGEgKip0aGVvcnkqKiBzZWN0aW9uOyBwbGVhc2Ugc2tpcCB1bmxlc3Mg eW91IHdhbnQgdG8gdW5kZXJzdGFuZCB0aGUgbW9kZWwgaW4gbW9yZSBkZXRhaWwuPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPlRoZSBQQ0lNIGlzIGJhc2VkIG9uIHRoZSBETVRGIENJTSwgd2hpY2ggaXMgYWN0dWFsbHkg YSAqKmRhdGEgbW9kZWwqKiAoZGVzcGl0ZSBpdHMgbmFtZSkgYmVjYXVzZSBpdCB1c2VzIHJlbGF0 aW9uYWwgdGVjaG5vbG9naWVzIChlLmcuLCBrZXlzIGFuZCB3ZWFrIHJlZmVyZW5jZXMpIHRvIGNy ZWF0ZSBpdHMgbW9kZWwuIFBDSU0gaXMgYmFzZWQgb24gYW4gZWFybHkgdmVyc2lvbiBvZiB0aGUg Q0lNICgyLjQpOyB0aGUNCiBjdXJyZW50IHZlcnNpb24gb2YgdGhlIENJTSBpcyAyLjQ0LjEgYXMg b2YgdGhpcyB3cml0aW5nLiBTaW5jZSB0aGlzIGlzIHRpZWQgdG8gdGhlIENJTSwgdGhpcyBtZWFu cyB0aGF0OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsgMSkgUG9saWN5IGlzIHN1YmNsYXNzZWQg ZnJvbSBhIG1vcmUgZ2VuZXJpYyBjbGFzcyAoTWFuYWdlZEVsZW1lbnQpPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsgMikgQUxM IHJlbGF0aW9uc2hpcHMgKGFzc29jaWF0aW9ucywgYWdncmVnYXRpb25zLCBhbmQgY29tcG9zaXRp b25zKTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGFyZSByZWFsaXplZCBhcyAqKmNs YXNzZXMqKjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7Jm5ic3A7IDMpIEFzIGEgcmVzdWx0IG9mIDIpLCByZWxhdGlvbnNoaXBzIGFyZSBz dWJjbGFzc2VkPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj4mbmJzcDsmbmJzcDsgNCkgQm90aCBhdHRyaWJ1dGVzIGFuZCBhc3NvY2lhdGlvbnMgYXJl ICoqaW5oZXJpdGVkKio8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOyZuYnNwOyA1KSBUaGUgc2FtZSBkZXNpZ24gYXBwcm9hY2ggKGFzIG11 Y2ggYXMgcG9zc2libGUpIHdhcyB1c2VkIGluPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgUENJTS9QQ0lNZSBhcyB3YXMgaW4gQ0lNLiBTcGVjaWZpY2FsbHksIGl0IHdhcyB0 aG91Z2h0IGJldHRlcjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHRvIGRl ZmluZSBhIGdlbmVyaWMsIGJ1dCBvcHRpb25hbCwgcmVsYXRpb25zaGlwIGluc3RlYWQgb2Ygbm90 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZGVmaW5pbmcgdGhlIHJlbGF0 aW9uc2hpcC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOyZuYnNwOyA2KSBUaGUgQ0lNIGRvZXMgTk9UIGhhdmUgYSBzaW5nbGUgcm9vdGVk IGhpZXJhcmNoeTsgdGhpcyBtYWtlczxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IGNvZGUgZ2VuZXJhdGlvbiBtb3JlIGNvbXBsZXg8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyZuYnNwOyA3KSBUaGUgQ0lNIHVzZXMg YSBwcm9wcmlldGFyeSBsYW5ndWFnZSBhbmQgaXMgbm90IHN0cmljdGx5IFVNTDxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGNvbXBsaWFudCwgZXZlbiB0aG91Z2ggaXQgbG9v a3MgbGlrZSBVTUwgKHVuZm9ydHVuYXRlbHksIHRoaXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBsYW5ndWFnZSBpcyBhbHNvIGNhbGxlZCBNT0YpJm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5EZXBlbmRpbmcgb24gdGhl IGNvbXBsZXhpdHkgb2YgdGhlIGltcGxlbWVudGF0aW9uLCB0aGUgYWJvdmUgaGF2ZSBiZWVuIHNo b3duIHRvIHByb2R1Y2UgcHJvYmxlbXMgaW4gbGFyZ2UgZW52aXJvbm1lbnRzLiBGb3IgZXhhbXBs ZSwgdGhlIHNwaXJpdCBvZiAmcXVvdDtsZXQncyBkZWZpbmUgYW4gYXR0cmlidXRlIG9yIGFzc29j aWF0aW9uIGluIGNhc2UgaXQgaXMgdXNlZnVsLCBhbmQgbWFrZSBpdCBvcHRpb25hbCBzbyB5b3UN CiBkb24ndCBoYXZlIHRvIHdvcnJ5IGFib3V0IGl0JnF1b3Q7IG5vdCBvbmx5IHZpb2xhdGVzIHNv bWUgd2VsbC1rbm93biBzb2Z0d2FyZSBhcmNoaXRlY3R1cmFsIGd1aWRlbGluZXMgKGUuZy4sIFNp bmdsZSBSZXNwb25zaWJpbGl0eSBQcmluY2lwbGUgYW5kIHRoZSBMaXNrb3YgU3Vic3RpdHV0aW9u IFByaW5jaXBsZSksIGJ1dCBpdCBtYWtlcyB0aGluZ3MgZGlmZmljdWx0IHRvIGludGVyb3BlcmF0 ZSB3aXRoIChzaW5jZSB5b3UgbmV2ZXIgcmVhbGx5IGtub3cNCiBpZiBhbiBhdHRyaWJ1dGUgb3Ig cmVsYXRpb25zaGlwIHNob3VsZCBiZSBpbnN0YW50aWF0ZWQgb3Igbm90KS48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5yZWdhcmRzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5K b2huPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_CY1PR09MB0922848FC13661E5FE2ED9BFA8E90CY1PR09MB0922namp_-- From nobody Thu Dec 10 09:33:05 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1E131A905A for ; Thu, 10 Dec 2015 09:33:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.61 X-Spam-Level: X-Spam-Status: No, score=-3.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_45=0.6, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nj3LnVE0PxR6 for ; Thu, 10 Dec 2015 09:33:00 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C4601A9054 for ; Thu, 10 Dec 2015 09:32:37 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml401-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CBL06699; Thu, 10 Dec 2015 17:32:34 +0000 (GMT) Received: from lhreml704-cah.china.huawei.com (10.201.5.130) by lhreml401-hub.china.huawei.com (10.201.5.240) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 10 Dec 2015 17:32:26 +0000 Received: from DFWEML703-CHM.china.huawei.com (10.193.5.130) by lhreml704-cah.china.huawei.com (10.201.5.130) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 10 Dec 2015 17:32:26 +0000 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml703-chm ([10.193.5.130]) with mapi id 14.03.0235.001; Thu, 10 Dec 2015 09:32:20 -0800 From: Linda Dunbar To: "Natale, Bob" , John Strassner Thread-Topic: [I2nsf] Service Layer Policies - Post 1: Background Information on PCIM Thread-Index: AQHRMIrJ6daShQrvbEyJJCyiaN8JqJ7BjHvggALFloCAACyEkA== Date: Thu, 10 Dec 2015 17:32:19 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657DAF428@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.76] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657DAF428dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020202.5669B733.0335, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=0.0.0.0, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 27e9dcfa1853646ce29215334a81a134 Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Service Layer Policies - Post 1: Background Information on PCIM X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Dec 2015 17:33:04 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657DAF428dfweml701chm_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Qm9iLA0KDQpUaGFuayB5b3UgdmVyeSBtdWNoIGZvciBsaXN0aW5nIGRvd24gbXVsdGlwbGUgc2Nl bmFyaW9zIGJlbG93Lg0KV2l0aCB3aGF0IHlvdSBkZXNjcmliZWQsIHRoZSBJMk5TRiBydWxlLXNl dCBtYXkgbmVlZCBhIHByaW9yaXR5IHNvIHRoYXQgdGhlIE5TRiBjYW4gZW5mb3JjZSB0aGVtIGFj Y29yZGluZ2x5Lg0KSW4gb3VyIGN1cnJlbnQgcHJvZHVjdCBpbXBsZW1lbnRhdGlvbiwgdGhlIHJv dXRlcuKAmXMgbG9uZ2VzdCBtYXRjaCBwcmluY2lwbGUgaGFzIGJlZW4gdXNlZCwgaS5lLiBydWxl cyBmb3IgaW5kaXZpZHVhbCBob3N0cyBvdmVycmlkZSB0aGUgcnVsZXMgZm9yIHRoZSBzdWJuZXQg dG8gd2hpY2ggdGhhdCBob3N0cyBiZWxvbmcuDQpCdXQgdGhlcmUgY291bGQgYmUgbW9yZSBjb21w bGljYXRlZCBjb25mbGljdCB0aGF0IHdoYXQgaXMgbGlzdGVkIGJlbG93LiBIYXZpbmcgYSBwcmlv cml0eSBjYW4gYmUgbW9yZSBwcmVjaXNlLg0KDQoNCkxpbmRhDQoNCkZyb206IE5hdGFsZSwgQm9i IFttYWlsdG86Uk5BVEFMRUBtaXRyZS5vcmddDQpTZW50OiBUaHVyc2RheSwgRGVjZW1iZXIgMTAs IDIwMTUgMTI6NDcgQU0NClRvOiBMaW5kYSBEdW5iYXI7IEpvaG4gU3RyYXNzbmVyDQpDYzogaTJu c2ZAaWV0Zi5vcmcNClN1YmplY3Q6IFJFOiBbSTJuc2ZdIFNlcnZpY2UgTGF5ZXIgUG9saWNpZXMg LSBQb3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRpb24gb24gUENJTQ0KDQpIaSBMaW5kYSwNCg0K SW5wdXQgaGVyZSBmcm9tIGEgbHVya2VyIOKApiBjYWxpYnJhdGUgYWNjb3JkaW5nbHkhDQoNCllv dSBhc2tlZDoNCuKAnFtMaW5kYV0gaW4gSTJOU0YsIHRoZXJlIGNvdWxkIGJlIGEgbG90IG9mIGNv bmZsaWN0cywgZm9yIGV4YW1wbGUsIHRoZXJlIGNvdWxkIGJlIHR3byBydWxlcyBlbnRlcmVkIGF0 IGRpZmZlcmVudCB0aW1lOg0KDQoxLiAgICAgICAgVmlydHVhbCBOZXR3b3JrIFggY2Fu4oCZdCBh Y2Nlc3Mg4oCcWW91VHViZeKAnSwNCg0KMi4gICAgICAgMTAuMS4xLjEgY2FuIGFjY2VzcyDigJxZ b3VUdWJl4oCdICh3aGVyZSAxMC4xLjEuMSBpcyBhIGhvc3Qgd2l0aGluIHRoZSBWaXJ0dWFsIE5l dHdvcmsgWCkuDQoNCkRvIHlvdSBjYWxsIHRoZSAyIHJ1bGVzIGFib3ZlIGNvbmZsaWN0P+KAnQ0K DQpUaGUgYW5zd2VyIGlzIOKAnGl0IGRlcGVuZHPigJ0g4oCmIGRlcGVuZHMgb24gYSBicm9hZGVy IHBvbGljeSBleGVjdXRpb24gY29udGV4dCDigKYgYSBjb25jZXB0IHRoYXQgUENJTSBpdHNlbGYg ZG9lcyBub3QgZGlyZWN0bHkgc3VwcG9ydC4gRm9yIGV4YW1wbGUsIHRoYXQgYnJvYWRlciBjb250 ZXh0IGNvdWxkIHN0aXB1bGF0ZSAodmlhIHBvbGljeSkgdGhhdCAjMSBpcyB0aGUgZGVmYXVsdCBi dXQgZXhwbGljaXQgZXhjZXB0aW9uIHNwZWNpZmljYXRpb25zIGxpa2UgIzIgY2FuIG92ZXJyaWRl IHRoZSBkZWZhdWx0IOKApiBhbHRlcm5hdGl2ZWx5LCB0aGF0IGJyb2FkZXIgY29udGV4dCBjb3Vs ZCBzdGlwdWxhdGUgdGhhdCAjMSBpcyBhYnNvbHV0ZSBhbmQgYW55IGF0dGVtcHQgdG8gc3BlY2lm eSAocHJlZmVyYWJseSkgb3IgZXhlY3V0ZSAjMiB3b3VsZCBiZSBkZW5pZWQg4oCmIHRob3NlIGFy ZSBvbmx5IHR3byBleGFtcGxlcywgdGhlcmUgYXJlIG11bHRpcGxlIHBvdGVudGlhbGx5IHZhbGlk IHZhcmlhdGlvbnMuIEhvdyBtdWNoIG9mIHRoYXQgY29udGV4dCBhIGdyb3VwIHdhbnRzIHRvIHN0 YW5kYXJkaXplIGlzIGFuIGltcG9ydGFudCBkZWNpc2lvbiBmb3IgdGhlIGdyb3VwIHRvIHVuZGVy c3RhbmQgYW5kIG1ha2Ug4oCmIFBDSU0gaXRzZWxmIHdpbGwgbm90IHRha2UgeW91IHZlcnkgZmFy LCBob3dldmVyLg0KQXZhbnRpLA0KQm9iTg0KDQpGcm9tOiBJMm5zZiBbbWFpbHRvOmkybnNmLWJv dW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBMaW5kYSBEdW5iYXINClNlbnQ6IFR1ZXNkYXks IERlY2VtYmVyIDA4LCAyMDE1IDQ6MTEgUE0NClRvOiBKb2huIFN0cmFzc25lciA8c3RyYXpwZGpA Z21haWwuY29tPG1haWx0bzpzdHJhenBkakBnbWFpbC5jb20+PjsgaTJuc2ZAaWV0Zi5vcmc8bWFp bHRvOmkybnNmQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtJMm5zZl0gU2VydmljZSBMYXllciBQ b2xpY2llcyAtIFBvc3QgMTogQmFja2dyb3VuZCBJbmZvcm1hdGlvbiBvbiBQQ0lNDQoNCkpvaG4s DQoNClRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHRoZSBpbi1kZXB0aCBhbmFseXNpcyBvZiBQQ0lN IGFuZCBpdHMgc3VpdGFiaWxpdHkgYXMgc29tZXRoaW5nIHRoYXQgSTJOU0Ygc2hvdWxkIGJlIGJh c2VkIG9uLiBXaGF0IHlvdSB3cml0ZSBpcyB2ZXJ5IHZhbHVhYmxlLiBJIHRoaW5rIHRoZSBhbmFs eXNpcyBzaG91bGQgYmUgYWRkZWQgdG8gdGhlIEkyTlNGIGdhcCBhbmFseXNpcywgKG9yIGJlIGEg c3RhbmRhbG9uZSBQb2xpY3kgQW5hbHlzaXMgSUQpLg0KDQpJIGhhdmUgc29tZSBxdWVzdGlvbnMg aW5zZXJ0ZWQgYmVsb3c6DQoNCkZyb206IEkybnNmIFttYWlsdG86aTJuc2YtYm91bmNlc0BpZXRm Lm9yZ10gT24gQmVoYWxmIE9mIEpvaG4gU3RyYXNzbmVyDQpTZW50OiBTdW5kYXksIERlY2VtYmVy IDA2LCAyMDE1IDc6MDEgUE0NClRvOiBpMm5zZkBpZXRmLm9yZzxtYWlsdG86aTJuc2ZAaWV0Zi5v cmc+DQpTdWJqZWN0OiBbSTJuc2ZdIFNlcnZpY2UgTGF5ZXIgUG9saWNpZXMgLSBQb3N0IDE6IEJh Y2tncm91bmQgSW5mb3JtYXRpb24gb24gUENJTQ0KDQo8U25pcHBlZD4NCg0KMi4gIEJyaWVmIGRl c2NyaXB0aW9uIG9mIFBDSU0NCg0KVGhlIFBDSU0gQ2xhc3MgSGllcmFyY2h5IGlzIHZlcnkgc2lt cGxlLCBhcyB0aGlzIGlzIGEgQ0EgKGNvbmRpdGlvbi1hY3Rpb24pIG1vZGVsLiBFdmVudHMgYXJl IE5PVCByZXByZXNlbnRlZC4gUENJTSBkZWZpbmVzIGEgUG9saWN5UnVsZSwgYSBQb2xpY3lHcm91 cCAoZ3JvdXAgb2YgUG9saWN5UnVsZXMpLCBQb2xpY3lDb25kaXRpb24sIGFuZCBQb2xpY3lBY3Rp b24uIFRoZXNlIGFyZSBhbGwgc2libGluZ3M7IHRoZWlyIGNvbW1vbiBzdXBlcmNsYXNzIGlzIGNh bGxlZCBQb2xpY3ksIGFzIHNob3duIGJlbG93Og0KDQpNYW5hZ2VkRWxlbWVudCAoYWJzdHJhY3Qp DQogIHwNCiAgKy0tLVBvbGljeSAoYWJzdHJhY3QpDQogIHwgICAgIHwNCiAgfCAgICAgKy0tLVBv bGljeUdyb3VwDQogIHwgICAgIHwNCiAgfCAgICAgKy0tLVBvbGljeVJ1bGUNCiAgfCAgICAgfA0K ICB8ICAgICArLS0tUG9saWN5Q29uZGl0aW9uIChhYnN0cmFjdCkNCiAgfCAgICAgfCAgICAgIHwN CiAgfCAgICAgfCAgICAgICstLS1Qb2xpY3lUaW1lUGVyaW9kQ29uZGl0aW9uDQogIHwgICAgIHwg ICAgICB8DQogIHwgICAgIHwgICAgICArLS0tVmVuZG9yUG9saWN5Q29uZGl0aW9uDQogIHwgICAg IHwNCiAgfCAgICAgKy0tLVBvbGljeUFjdGlvbiAoYWJzdHJhY3QpDQogIHwgICAgICAgICAgICB8 DQogIHwgICAgICAgICAgICArLS0tVmVuZG9yUG9saWN5QWN0aW9uDQoNCk5vdGU6IFBDSU0gZG9l cyBoYXZlIGEgc2ltcGxlIG5vdGlvbiBvZiBSb2xlcywgYnV0IGltcGxlbWVudHMgdGhlbSBhcyBh dHRyaWJ1dGVzLCBpbnN0ZWFkIG9mIG9iamVjdHMuIFRoaXMgaXMgbm90IHNjYWxhYmxlLCBhbmQg ZG9lcyBub3QgZnVsbHkgcmVhbGl6ZSB0aGUgcG93ZXIgb2YgdXNpbmcgcm9sZXMuIFRoaXMgd2ls bCBiZSBkaXNjdXNzZWQgbW9yZSBpbiBQb3N0IDMuDQoNCk5vdGU6IEl0IGlzIHBvc3NpYmxlIHRv IGRlZmluZSBsaW1pdGVkIGNvbnN0cmFpbnRzIGluIFBDSU0gYXMgY29uZGl0aW9ucy4gRm9yIGV4 YW1wbGUsIHRoZSBWZW5kb3JQb2xpY3lDb25kaXRpb24gY2xhc3MgaGFzIHR3byBhdHRyaWJ1dGVz LCBDb25zdHJhaW50IGFuZCBDb25zdHJhaW50RW5jb2RpbmcsIHRoYXQgZG8gdGhpcy4gVGhpcyB3 aWxsIGJlIGRpc2N1c3NlZCBtb3JlIGluIFBvc3QgNC4NCg0KTm90ZTogQ29udGV4dCBpcyBOT1Qg ZGVmaW5lZCBpbiB0aGUgUENJTS4NCg0KW0xpbmRhXSAgRG8geW91IGFncmVlIHRoYXQg4oCcQ29u ZGl0aW9uIG9mIHRoZSBQQ0lN4oCdID09IOKAnEkyTlNGIHN1YmplY3TigJ0gJiDigJx0aGUgQ29u dGV4dHVhbCBzdGF0ZXMgKG9yIHRoZSBJMk5TRiBvYmplY3Qp4oCdPw0KDQoNCjMuICBTdW1tYXJ5 OiBtYWluIGRyYXdiYWNrcyBvZiB1c2luZyBQQ0lNDQoNCk5vdGUgdGhhdCB0aGUgY3VycmVudCBD SU0gUG9saWN5IE1vZGVsICgyLjQ0LjEpIGlzIHNpZ25pZmljYW50bHkgZGlmZmVyZW50IHRoYW4g ZWl0aGVyIFBDSU0gb3IgUENJTWUuIFBDSU0gaXMgYmFzZWQgb24gQ0lNIDIuNDsgUENJTWUgaXMg YmFzZWQgb24gQ0lNIDIuNS4gUENJTWUgaXMgTk9UIGJhY2t3YXJkcyBjb21wYXRpYmxlIHdpdGgg UENJTSBpbiBhbGwgYXJlYXMuDQoNCkNyaXRpY2FsIFByb2JsZW1zOg0KDQogICogICBUaGVyZSBp cyBubyB1bmlxdWUgSUQgdGhhdCBjYW4gYmUgdXNlZCB0byBkaXN0aW5ndWlzaCBkaWZmZXJlbnQN Cmluc3RhbmNlcyBvZiB0aGUgc2FtZSBQb2xpY3lSdWxlLCBQb2xpY3lHcm91cCwgUG9saWN5Q29u ZGl0aW9uLA0Kb3IgUG9saWN5QWN0aW9uLg0KW0xpbmRhXSBDYW4gd2Ugc2ltcGx5IGNyZWF0ZSBh biBJRCAoc3RyaW5nIG9yIG51bWVyaWMpIGZvciBpbnN0YW5jZXMgb2YgdGhlIHNhbWUgUG9saWN5 UnVsZT8gT3IgaXQgaXMgbW9yZSBjb21wbGljYXRlZD8NCg0KICAqICAgUmVsYXRpb25zaGlwcyBh cmUgaW1wbGVtZW50ZWQgYnkgZGVmaW5pbmcgYW4gYWJzdHJhY3QgY2xhc3MNCndpdGgga2V5cywg YW5kIHRoZW4gb3ZlcnJpZGluZyB0aGUga2V5cyBpbiB0aGUgc3ViY2xhc3NlcyBvZiB0aGUNCnJl bGF0aW9uc2hpcC4gVGhpcyBpcyBicm9rZW4uIFdvdWxkIHlvdSBvdmVycmlkZSBrZXlzIGluIGFu IFJEQk1TPw0KW0xpbmRhXSBJcyB0aGUg4oCcS2V54oCdIHRvIGRpZmZlcmVudGlhdGluZyBkaWZm ZXJlbnQg4oCcUG9saWN5UnVsZeKAnT8gICBDYW4geW91IGdpdmUgYW4gZXhhbXBsZSBvZiDigJxz dWJjbGFzc2VzIG9mIHRoZSByZWxhdGlvbnNoaXDigJ0/DQpXaGF0IGV2ZW50cyBjYW4gY2F1c2Ug 4oCcb3ZlcnJpZGluZyB0aGUga2V5cyBpbiB0aGUgc3ViY2xhc3NlcyBvZiB0aGUgcmVsYXRpb25z aGlw4oCdPw0KDQogICogICBNb3N0IG9mIHRoZSBjbGFzc2VzIHRoYXQgYXJlIHVzZWQgdG8gaW1w bGVtZW50IHRoZSByZWxhdGlvbnNoaXBzDQpkbyBOT1QgaGF2ZSBhdHRyaWJ1dGVzLCBzbyBpdCBp cyBpbXBvc3NpYmxlIHRvIHJlc3RyaWN0IHdoaWNoDQpjbGFzc2VzIGFyZSByZWxhdGVkIHRvIHdo aWNoIG90aGVyIGNsYXNzZXMgKGUuZy4sIGJ5IGNvbnRleHQpLg0KUHV0IGFub3RoZXIgd2F5LCB0 aGUgc2FtZSByZWxhdGlvbnNoaXAgbXVzdCBhbHdheXMgYmUgdXNlZA0KYmV0d2VlbiB0d28gdHlw ZXMsIGV2ZW4gaWYgdGhlIHNlbWFudGljcyB2YXJpZXMuIChUaGUgdHdvDQpleGNlcHRpb25zIGFy ZSBQb2xpY3lDb25kaXRpb25JblBvbGljeVJ1bGUgYW5kDQpQb2xpY3lBY3Rpb25JblBvbGljeVJ1 bGUpLg0KW0xpbmRhXSBEb2VzIOKAnGNsYXNzZXPigJ0gPT0g4oCcUG9saWN5UnVsZeKAnT8NCg0K ICAqICAgVGhlICJpZ25vcmUgdGhpcyB1bmxlc3MgeW91IG5lZWQgdGhpcyIgcGhpbG9zb3BoeSBk b2VzIG5vdA0Kd29yay4gSG93IGRvIHlvdSBrbm93IGlmIG90aGVyIGltcGxlbWVudGF0aW9ucyB0 aGF0IHlvdSBhcmUNCnN1cHBvc2VkIHRvIGludGVyb3BlcmF0ZSB3aXRoIGFyZSB1c2luZyB0aGVt Pw0KW0xpbmRhXSBJcyDigJxJZ25vcmUgdGhpcyB1bmxlc3MgeW91IG5lZWQgdGhpc+KAnSBhbiBu ZXcgdHlwZSBvZiDigJxQb2xpY3lSdWxl4oCdPw0KDQogICogICBUaGVyZSBpcyBubyBjb25jZXB0 IG9mIGVycm9yIG9yIGV4Y2VwdGlvbiBoYW5kbGluZw0KICAqICAgVGhlcmUgaXMgbm8gY29uY2Vw dCBvZiB0aGUgc3ViamVjdCBvciB0aGUgdGFyZ2V0IG9mIGEgcG9saWN5DQpbTGluZGFdIERvZXMg eW91ciDigJxzdWJqZWN04oCdIGhhdmUgdGhlIHNhbWUgbWVhbmluZyBhcyB0aGUg4oCcSTJOU0Yg c3ViamVjdOKAnSB3aGljaCBtZWFucyBiaXRzJmJ5dGVzIGV4dHJhY3RlZCBmcm9tIHBhY2tldHM/ DQoNCiAgKiAgIEFkZGluZyBhIG5ldyB0eXBlIG9mIHBvbGljeSAoZS5nLiwgZGVjbGFyYXRpdmUg b3IgZnVuY3Rpb25hbCkNCndpbGwgY2F1c2UgYSBtYWpvciByZXdyaXRlIG9mIHRoZSBlbnRpcmUg bW9kZWwNCg0KW0xpbmRhXSBDYW4gd2Ugc2F5IHRoYXQgIEkyTlNGIHBvbGljaWVzIGhhdmUgb25l IHR5cGUg4oCcU3ViamVjdC1Db250ZXh0dWFsU3RhdGVzLSBhY3Rpb24tIGZ1bmN0aW9uPyBTbyBp biBJMk5TRiBlbnZpcm9ubWVudCwgdGhlcmUgaXMgb25seSB0aGUgbm90aW9uIG9mIGFkZGluZyBh IG5ldyDigJxQb2xpY3lSdWxl4oCdLCBidXQgbm8gYWRkaW5nIGEgbmV3IHBvbGljeSB0eXBlLiBJ cyB0aGlzIGNvcnJlY3Qgc3RhdGVtZW50Pw0KDQogICogICBUaGVyZSBpcyBubyBhcHByb2FjaCB0 byBkZXRlY3RpbmcgYW5kIHNvbHZpbmcgcG9saWN5IGNvbmZsaWN0czsNCnRoaXMgaXMgZHVlIHRv IHRoZSBzaW1wbGlzdGljIG5vdGlvbiBvZiBqdXN0IHVzaW5nIGEgUERQIGFuZCBhDQpQRVAgZm9y IGFwcGx5aW5nIHBvbGljaWVzLg0KDQpbTGluZGFdIGluIEkyTlNGLCB0aGVyZSBjb3VsZCBiZSBh IGxvdCBvZiBjb25mbGljdHMsIGZvciBleGFtcGxlLCB0aGVyZSBjb3VsZCBiZSB0d28gcnVsZXMg ZW50ZXJlZCBhdCBkaWZmZXJlbnQgdGltZToNCg0KMS4gICAgICAgIFZpcnR1YWwgTmV0d29yayBY IGNhbuKAmXQgYWNjZXNzIOKAnFlvdVR1YmXigJ0sDQoNCjIuICAgICAgIDEwLjEuMS4xIGNhbiBh Y2Nlc3Mg4oCcWW91VHViZeKAnSAod2hlcmUgMTAuMS4xLjEgaXMgYSBob3N0IHdpdGhpbiB0aGUg VmlydHVhbCBOZXR3b3JrIFgpLg0KDQpEbyB5b3UgY2FsbCB0aGUgMiBydWxlcyBhYm92ZSBjb25m bGljdD8NCg0KDQoNCjQuIFJlY29tbWVuZGF0aW9ucw0KDQpHaXZlbiB0aGUgbGFyZ2UgYW1vdW50 IG9mIHByb2JsZW1zLCBJIHJlY29tbWVuZCB0aGF0IHdlIG5vdCBjb25zaWRlciBQQ0lNIGZ1cnRo ZXIuDQpbTGluZGFdIHNob3VsZCBJMk5TRiByZWZlcmVuY2UgUENJTT8NCg0KVGhhbmsgeW91IHZl cnkgbXVjaC4gTGluZGENCg0KNS4gT3JpZ2luIG9mIFBDSU0vUENJTWUNCg0KVGhpcyBpcyBhICoq dGhlb3J5Kiogc2VjdGlvbjsgcGxlYXNlIHNraXAgdW5sZXNzIHlvdSB3YW50IHRvIHVuZGVyc3Rh bmQgdGhlIG1vZGVsIGluIG1vcmUgZGV0YWlsLg0KDQpUaGUgUENJTSBpcyBiYXNlZCBvbiB0aGUg RE1URiBDSU0sIHdoaWNoIGlzIGFjdHVhbGx5IGEgKipkYXRhIG1vZGVsKiogKGRlc3BpdGUgaXRz IG5hbWUpIGJlY2F1c2UgaXQgdXNlcyByZWxhdGlvbmFsIHRlY2hub2xvZ2llcyAoZS5nLiwga2V5 cyBhbmQgd2VhayByZWZlcmVuY2VzKSB0byBjcmVhdGUgaXRzIG1vZGVsLiBQQ0lNIGlzIGJhc2Vk IG9uIGFuIGVhcmx5IHZlcnNpb24gb2YgdGhlIENJTSAoMi40KTsgdGhlIGN1cnJlbnQgdmVyc2lv biBvZiB0aGUgQ0lNIGlzIDIuNDQuMSBhcyBvZiB0aGlzIHdyaXRpbmcuIFNpbmNlIHRoaXMgaXMg dGllZCB0byB0aGUgQ0lNLCB0aGlzIG1lYW5zIHRoYXQ6DQoNCiAgIDEpIFBvbGljeSBpcyBzdWJj bGFzc2VkIGZyb20gYSBtb3JlIGdlbmVyaWMgY2xhc3MgKE1hbmFnZWRFbGVtZW50KQ0KICAgMikg QUxMIHJlbGF0aW9uc2hpcHMgKGFzc29jaWF0aW9ucywgYWdncmVnYXRpb25zLCBhbmQgY29tcG9z aXRpb25zKQ0KICAgICAgIGFyZSByZWFsaXplZCBhcyAqKmNsYXNzZXMqKg0KICAgMykgQXMgYSBy ZXN1bHQgb2YgMiksIHJlbGF0aW9uc2hpcHMgYXJlIHN1YmNsYXNzZWQNCiAgIDQpIEJvdGggYXR0 cmlidXRlcyBhbmQgYXNzb2NpYXRpb25zIGFyZSAqKmluaGVyaXRlZCoqDQogICA1KSBUaGUgc2Ft ZSBkZXNpZ24gYXBwcm9hY2ggKGFzIG11Y2ggYXMgcG9zc2libGUpIHdhcyB1c2VkIGluDQogICAg ICAgIFBDSU0vUENJTWUgYXMgd2FzIGluIENJTS4gU3BlY2lmaWNhbGx5LCBpdCB3YXMgdGhvdWdo dCBiZXR0ZXINCiAgICAgICAgdG8gZGVmaW5lIGEgZ2VuZXJpYywgYnV0IG9wdGlvbmFsLCByZWxh dGlvbnNoaXAgaW5zdGVhZCBvZiBub3QNCiAgICAgICAgZGVmaW5pbmcgdGhlIHJlbGF0aW9uc2hp cC4NCiAgIDYpIFRoZSBDSU0gZG9lcyBOT1QgaGF2ZSBhIHNpbmdsZSByb290ZWQgaGllcmFyY2h5 OyB0aGlzIG1ha2VzDQogICAgICAgIGNvZGUgZ2VuZXJhdGlvbiBtb3JlIGNvbXBsZXgNCiAgIDcp IFRoZSBDSU0gdXNlcyBhIHByb3ByaWV0YXJ5IGxhbmd1YWdlIGFuZCBpcyBub3Qgc3RyaWN0bHkg VU1MDQogICAgICAgIGNvbXBsaWFudCwgZXZlbiB0aG91Z2ggaXQgbG9va3MgbGlrZSBVTUwgKHVu Zm9ydHVuYXRlbHksIHRoaXMNCiAgICAgICAgbGFuZ3VhZ2UgaXMgYWxzbyBjYWxsZWQgTU9GKQ0K DQpEZXBlbmRpbmcgb24gdGhlIGNvbXBsZXhpdHkgb2YgdGhlIGltcGxlbWVudGF0aW9uLCB0aGUg YWJvdmUgaGF2ZSBiZWVuIHNob3duIHRvIHByb2R1Y2UgcHJvYmxlbXMgaW4gbGFyZ2UgZW52aXJv bm1lbnRzLiBGb3IgZXhhbXBsZSwgdGhlIHNwaXJpdCBvZiAibGV0J3MgZGVmaW5lIGFuIGF0dHJp YnV0ZSBvciBhc3NvY2lhdGlvbiBpbiBjYXNlIGl0IGlzIHVzZWZ1bCwgYW5kIG1ha2UgaXQgb3B0 aW9uYWwgc28geW91IGRvbid0IGhhdmUgdG8gd29ycnkgYWJvdXQgaXQiIG5vdCBvbmx5IHZpb2xh dGVzIHNvbWUgd2VsbC1rbm93biBzb2Z0d2FyZSBhcmNoaXRlY3R1cmFsIGd1aWRlbGluZXMgKGUu Zy4sIFNpbmdsZSBSZXNwb25zaWJpbGl0eSBQcmluY2lwbGUgYW5kIHRoZSBMaXNrb3YgU3Vic3Rp dHV0aW9uIFByaW5jaXBsZSksIGJ1dCBpdCBtYWtlcyB0aGluZ3MgZGlmZmljdWx0IHRvIGludGVy b3BlcmF0ZSB3aXRoIChzaW5jZSB5b3UgbmV2ZXIgcmVhbGx5IGtub3cgaWYgYW4gYXR0cmlidXRl IG9yIHJlbGF0aW9uc2hpcCBzaG91bGQgYmUgaW5zdGFudGlhdGVkIG9yIG5vdCkuDQoNCg0KcmVn YXJkcywNCkpvaG4NCg== --_000_4A95BA014132FF49AE685FAB4B9F17F657DAF428dfweml701chm_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 U2ltU3VuOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5v c2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJc QFNpbVN1biI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQovKiBTdHlsZSBEZWZp bml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXtt YXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTpsaW5rLCBzcGFuLk1z b0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0 LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xs b3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVj b3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0YXRlLCBkaXYuTXNv QWNldGF0ZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJhbGxv b24gVGV4dCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglm b250LXNpemU6OC4wcHQ7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiO30NCnAu TXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3Jh cGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1y aWdodDowaW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJn aW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGlt ZXMgTmV3IFJvbWFuIiwic2VyaWYiO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10 eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29s b3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25h bDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiM5OTMzMDA7 DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5bGU6bm9ybWFsO30NCnNwYW4uQmFsbG9v blRleHRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJCYWxsb29uIFRleHQgQ2hhciI7DQoJbXNvLXN0 eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJCYWxsb29uIFRleHQiOw0KCWZvbnQt ZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjt9DQpzcGFuLkVtYWlsU3R5bGUyMg0KCXttc28t c3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMt c2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5 cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjEN Cgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30N CmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0 aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6Mjc5MzM3NTcxOw0KCW1zby1saXN0LXRl bXBsYXRlLWlkczotMTU4ODgyMDg5Mjt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3lt Ym9sO30NCkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjI5ODk5NzcxNjsNCgltc28tbGlzdC10ZW1w bGF0ZS1pZHM6MTE4Mzg3MTg0Mjt9DQpAbGlzdCBsMTpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9s O30NCkBsaXN0IGwyDQoJe21zby1saXN0LWlkOjM5Mzg5NjM3MzsNCgltc28tbGlzdC10ZW1wbGF0 ZS1pZHM6MTcyMjE3MzI5MDt9DQpAbGlzdCBsMjpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30N CkBsaXN0IGwzDQoJe21zby1saXN0LWlkOjgwMTUzNDAzNjsNCgltc28tbGlzdC10ZW1wbGF0ZS1p ZHM6MTE4Nzc5NTM0ODt9DQpAbGlzdCBsMzpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6LjVp bjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBs aXN0IGw0DQoJe21zby1saXN0LWlkOjEwOTAyNzAxODI7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRz Oi0yMDk0MjIzNjU0O30NCkBsaXN0IGw0OmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDouNWlu Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxp c3QgbDUNCgl7bXNvLWxpc3QtaWQ6MTg3NjMxMzA5MTsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6 LTI3MzYyNjEyNDt9DQpAbGlzdCBsNTpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0K CW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0 IGw2DQoJe21zby1saXN0LWlkOjIwMjU0NzAwOTE7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi00 NjY3MTUyMjg7fQ0KQGxpc3QgbDY6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOi41aW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglt c28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpvbA0KCXtt YXJnaW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxl PjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIg c3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48 eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQi IGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+ DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNs YXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkJvYiwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhhbmsgeW91IHZl cnkgbXVjaCBmb3IgbGlzdGluZyBkb3duIG11bHRpcGxlIHNjZW5hcmlvcyBiZWxvdy4NCjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5XaXRoIHdoYXQgeW91IGRlc2NyaWJlZCwgdGhlIEky TlNGIHJ1bGUtc2V0IG1heSBuZWVkIGEgcHJpb3JpdHkgc28gdGhhdCB0aGUgTlNGIGNhbiBlbmZv cmNlIHRoZW0gYWNjb3JkaW5nbHkuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+SW4g b3VyIGN1cnJlbnQgcHJvZHVjdCBpbXBsZW1lbnRhdGlvbiwgdGhlIHJvdXRlcuKAmXMgbG9uZ2Vz dCBtYXRjaCBwcmluY2lwbGUgaGFzIGJlZW4gdXNlZCwgaS5lLiBydWxlcyBmb3IgaW5kaXZpZHVh bCBob3N0cyBvdmVycmlkZSB0aGUgcnVsZXMgZm9yIHRoZSBzdWJuZXQNCiB0byB3aGljaCB0aGF0 IGhvc3RzIGJlbG9uZy4gPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkJ1dCB0aGVyZSBj b3VsZCBiZSBtb3JlIGNvbXBsaWNhdGVkIGNvbmZsaWN0IHRoYXQgd2hhdCBpcyBsaXN0ZWQgYmVs b3cuIEhhdmluZyBhIHByaW9yaXR5IGNhbiBiZSBtb3JlIHByZWNpc2UuDQo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5MaW5kYQ0KPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGlu ZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij4gTmF0YWxlLCBCb2IgW21haWx0bzpSTkFUQUxFQG1pdHJlLm9yZ10NCjxicj4NCjxiPlNl bnQ6PC9iPiBUaHVyc2RheSwgRGVjZW1iZXIgMTAsIDIwMTUgMTI6NDcgQU08YnI+DQo8Yj5Ubzo8 L2I+IExpbmRhIER1bmJhcjsgSm9obiBTdHJhc3NuZXI8YnI+DQo8Yj5DYzo8L2I+IGkybnNmQGll dGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJFOiBbSTJuc2ZdIFNlcnZpY2UgTGF5ZXIgUG9s aWNpZXMgLSBQb3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRpb24gb24gUENJTTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6Izk5 MzMwMCI+SGkgTGluZGEsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojOTkzMzAwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiM5OTMzMDAiPklucHV0IGhl cmUgZnJvbSBhIGx1cmtlciDigKYgY2FsaWJyYXRlIGFjY29yZGluZ2x5ITxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6Izk5MzMwMCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojOTkzMzAwIj5Zb3UgYXNrZWQ6PGJyPg0K4oCcPC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5bTGluZGFdIGluIEkyTlNGLCB0aGVyZSBj b3VsZCBiZSBhIGxvdCBvZiBjb25mbGljdHMsIGZvciBleGFtcGxlLCB0aGVyZSBjb3VsZCBiZSB0 d28gcnVsZXMgZW50ZXJlZCBhdCBkaWZmZXJlbnQgdGltZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO3RleHQtaW5kZW50Oi0uMjVpbiI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+MS48L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo3LjBwdDtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+Jm5ic3A7VmlydHVhbCBOZXR3b3JrIFggY2Fu4oCZdCBhY2Nlc3Mg4oCcWW91VHVi ZeKAnSwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBo IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87dGV4dC1pbmRlbnQ6LS4yNWluIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj4yLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2NvbG9yOiMx RjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4xMC4xLjEuMSBjYW4gYWNjZXNz IOKAnFlvdVR1YmXigJ0gKHdoZXJlIDEwLjEuMS4xIGlzIGEgaG9zdCB3aXRoaW4gdGhlIFZpcnR1 YWwgTmV0d29yayBYKS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0 UGFyYWdyYXBoIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PkRvIHlvdSBjYWxsIHRoZSAyIHJ1bGVzIGFib3ZlIGNvbmZsaWN0Pzwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiM5OTMzMDAiPuKAnTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29M aXN0UGFyYWdyYXBoIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MGluIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6Izk5MzMw MCI+VGhlIGFuc3dlciBpcyDigJxpdCBkZXBlbmRz4oCdIOKApiBkZXBlbmRzIG9uIGEgYnJvYWRl ciBwb2xpY3kgZXhlY3V0aW9uIGNvbnRleHQg4oCmIGEgY29uY2VwdCB0aGF0IFBDSU0gaXRzZWxm IGRvZXMgbm90IGRpcmVjdGx5IHN1cHBvcnQuIEZvciBleGFtcGxlLCB0aGF0IGJyb2FkZXIgY29u dGV4dCBjb3VsZCBzdGlwdWxhdGUgKHZpYSBwb2xpY3kpDQogdGhhdCAjMSBpcyB0aGUgZGVmYXVs dCBidXQgZXhwbGljaXQgZXhjZXB0aW9uIHNwZWNpZmljYXRpb25zIGxpa2UgIzIgY2FuIG92ZXJy aWRlIHRoZSBkZWZhdWx0IOKApiBhbHRlcm5hdGl2ZWx5LCB0aGF0IGJyb2FkZXIgY29udGV4dCBj b3VsZCBzdGlwdWxhdGUgdGhhdCAjMSBpcyBhYnNvbHV0ZSBhbmQgYW55IGF0dGVtcHQgdG8gc3Bl Y2lmeSAocHJlZmVyYWJseSkgb3IgZXhlY3V0ZSAjMiB3b3VsZCBiZSBkZW5pZWQg4oCmIHRob3Nl IGFyZSBvbmx5IHR3bw0KIGV4YW1wbGVzLCB0aGVyZSBhcmUgbXVsdGlwbGUgcG90ZW50aWFsbHkg dmFsaWQgdmFyaWF0aW9ucy4gSG93IG11Y2ggb2YgdGhhdCBjb250ZXh0IGEgZ3JvdXAgd2FudHMg dG8gc3RhbmRhcmRpemUgaXMgYW4gaW1wb3J0YW50IGRlY2lzaW9uIGZvciB0aGUgZ3JvdXAgdG8g dW5kZXJzdGFuZCBhbmQgbWFrZSDigKYgUENJTSBpdHNlbGYgd2lsbCBub3QgdGFrZSB5b3UgdmVy eSBmYXIsIGhvd2V2ZXIuPG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6Izk5MzMwMCI+QXZhbnRpLDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6Izk5MzMwMCI+ Qm9iTjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojOTkzMzAwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEu MHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7Ij4gSTJuc2YgWzxhIGhyZWY9Im1haWx0bzppMm5zZi1ib3VuY2VzQGll dGYub3JnIj5tYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZzwvYT5dDQo8Yj5PbiBCZWhhbGYg T2YgPC9iPkxpbmRhIER1bmJhcjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBEZWNlbWJlciAw OCwgMjAxNSA0OjExIFBNPGJyPg0KPGI+VG86PC9iPiBKb2huIFN0cmFzc25lciAmbHQ7PGEgaHJl Zj0ibWFpbHRvOnN0cmF6cGRqQGdtYWlsLmNvbSI+c3RyYXpwZGpAZ21haWwuY29tPC9hPiZndDs7 DQo8YSBocmVmPSJtYWlsdG86aTJuc2ZAaWV0Zi5vcmciPmkybnNmQGlldGYub3JnPC9hPjxicj4N CjxiPlN1YmplY3Q6PC9iPiBSZTogW0kybnNmXSBTZXJ2aWNlIExheWVyIFBvbGljaWVzIC0gUG9z dCAxOiBCYWNrZ3JvdW5kIEluZm9ybWF0aW9uIG9uIFBDSU08bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+Sm9obiwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhl IGluLWRlcHRoIGFuYWx5c2lzIG9mIFBDSU0gYW5kIGl0cyBzdWl0YWJpbGl0eSBhcyBzb21ldGhp bmcgdGhhdCBJMk5TRiBzaG91bGQgYmUgYmFzZWQgb24uIFdoYXQgeW91IHdyaXRlIGlzIHZlcnkg dmFsdWFibGUuIEkgdGhpbmsNCiB0aGUgYW5hbHlzaXMgc2hvdWxkIGJlIGFkZGVkIHRvIHRoZSBJ Mk5TRiBnYXAgYW5hbHlzaXMsIChvciBiZSBhIHN0YW5kYWxvbmUgUG9saWN5IEFuYWx5c2lzIElE KS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+SSBoYXZlIHNvbWUgcXVlc3Rpb25zIGluc2VydGVkIGJlbG93Og0KPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtw YWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDsiPiBJMm5zZiBbPGEgaHJlZj0ibWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmci Pm1haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnPC9hPl0NCjxiPk9uIEJlaGFsZiBPZiA8L2I+ Sm9obiBTdHJhc3NuZXI8YnI+DQo8Yj5TZW50OjwvYj4gU3VuZGF5LCBEZWNlbWJlciAwNiwgMjAx NSA3OjAxIFBNPGJyPg0KPGI+VG86PC9iPiA8YSBocmVmPSJtYWlsdG86aTJuc2ZAaWV0Zi5vcmci PmkybnNmQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBbSTJuc2ZdIFNlcnZpY2Ug TGF5ZXIgUG9saWNpZXMgLSBQb3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRpb24gb24gUENJTTxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbHQ7U25pcHBlZCZndDsgPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjIuJm5ic3A7IEJyaWVmIGRlc2NyaXB0aW9uIG9mIFBDSU08bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBQQ0lN IENsYXNzIEhpZXJhcmNoeSBpcyB2ZXJ5IHNpbXBsZSwgYXMgdGhpcyBpcyBhIENBIChjb25kaXRp b24tYWN0aW9uKSBtb2RlbC4gRXZlbnRzIGFyZSBOT1QgcmVwcmVzZW50ZWQuIFBDSU0gZGVmaW5l cyBhIFBvbGljeVJ1bGUsIGEgUG9saWN5R3JvdXAgKGdyb3VwIG9mIFBvbGljeVJ1bGVzKSwgUG9s aWN5Q29uZGl0aW9uLCBhbmQgUG9saWN5QWN0aW9uLiBUaGVzZSBhcmUgYWxsIHNpYmxpbmdzOyB0 aGVpcg0KIGNvbW1vbiBzdXBlcmNsYXNzIGlzIGNhbGxlZCBQb2xpY3ksIGFzIHNob3duIGJlbG93 OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDssJnF1b3Q7c2Vy aWYmcXVvdDsiPk1hbmFnZWRFbGVtZW50IChhYnN0cmFjdCk8YnI+DQombmJzcDsgfDxicj4NCiZu YnNwOyAmIzQzOy0tLVBvbGljeSAoYWJzdHJhY3QpPGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgfDxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7 LS0tUG9saWN5R3JvdXA8YnI+DQombmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IHw8YnI+DQombmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tUG9s aWN5UnVsZTxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8YnI+DQombmJz cDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLVBvbGljeUNvbmRpdGlvbiAoYWJz dHJhY3QpPGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyB8PGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tUG9saWN5VGlt ZVBlcmlvZENvbmRpdGlvbjxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7fCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PGJyPg0KJm5ic3A7IHwmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7JiM0MzstLS1WZW5kb3JQb2xpY3lDb25kaXRpb248YnI+DQombmJzcDsgfCZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwO3w8YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyAmIzQzOy0tLVBvbGljeUFjdGlvbiAoYWJzdHJhY3QpPGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg fDxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tVmVuZG9yUG9saWN5QWN0aW9uPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OywmcXVv dDtzZXJpZiZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ob3RlOiBQQ0lNIGRvZXMgaGF2ZSBhIHNp bXBsZSBub3Rpb24gb2YgUm9sZXMsIGJ1dCBpbXBsZW1lbnRzIHRoZW0gYXMgYXR0cmlidXRlcywg aW5zdGVhZCBvZiBvYmplY3RzLiBUaGlzIGlzIG5vdCBzY2FsYWJsZSwgYW5kIGRvZXMgbm90IGZ1 bGx5IHJlYWxpemUgdGhlIHBvd2VyIG9mIHVzaW5nIHJvbGVzLiBUaGlzIHdpbGwgYmUgZGlzY3Vz c2VkIG1vcmUgaW4gUG9zdCAzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ob3RlOiBJdCBpcyBwb3NzaWJsZSB0byBk ZWZpbmUgbGltaXRlZCBjb25zdHJhaW50cyBpbiBQQ0lNIGFzIGNvbmRpdGlvbnMuIEZvciBleGFt cGxlLCB0aGUgVmVuZG9yUG9saWN5Q29uZGl0aW9uIGNsYXNzIGhhcyB0d28gYXR0cmlidXRlcywg Q29uc3RyYWludCBhbmQgQ29uc3RyYWludEVuY29kaW5nLCB0aGF0IGRvIHRoaXMuIFRoaXMgd2ls bCBiZSBkaXNjdXNzZWQgbW9yZSBpbiBQb3N0IDQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk5vdGU6IENvbnRleHQg aXMgTk9UIGRlZmluZWQgaW4gdGhlIFBDSU0uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltMaW5kYV0gJm5ic3A7RG8geW91IGFncmVl IHRoYXQg4oCcQ29uZGl0aW9uIG9mIHRoZSBQQ0lN4oCdID09IOKAnEkyTlNGIHN1YmplY3TigJ0g JmFtcDsg4oCcdGhlIENvbnRleHR1YWwgc3RhdGVzIChvciB0aGUgSTJOU0Ygb2JqZWN0KeKAnT8N CjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4zLiZuYnNwOyBTdW1tYXJ5OiBtYWluIGRyYXdiYWNrcyBvZiB1c2luZyBQQ0lNPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Tm90ZSB0aGF0IHRoZSBjdXJyZW50IENJTSBQb2xpY3kgTW9kZWwg KDIuNDQuMSkgaXMgc2lnbmlmaWNhbnRseSBkaWZmZXJlbnQgdGhhbiBlaXRoZXIgUENJTSBvciBQ Q0lNZS4mbmJzcDtQQ0lNIGlzIGJhc2VkIG9uIENJTSAyLjQ7IFBDSU1lIGlzIGJhc2VkIG9uIENJ TSAyLjUuIFBDSU1lIGlzIE5PVCBiYWNrd2FyZHMgY29tcGF0aWJsZSB3aXRoIFBDSU0gaW4gYWxs IGFyZWFzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5Dcml0aWNhbCBQcm9ibGVtczo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHVsIHR5cGU9 ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsMiBsZXZlbDEgbGZvMSI+ DQpUaGVyZSBpcyBubyB1bmlxdWUgSUQgdGhhdCBjYW4gYmUgdXNlZCB0byBkaXN0aW5ndWlzaCBk aWZmZXJlbnQ8YnI+DQppbnN0YW5jZXMgb2YgdGhlIHNhbWUgUG9saWN5UnVsZSwgUG9saWN5R3Jv dXAsIFBvbGljeUNvbmRpdGlvbiw8YnI+DQpvciBQb2xpY3lBY3Rpb24uPG86cD48L286cD48L2xp PjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj5bTGluZGFdIENhbiB3ZSBzaW1wbHkgY3JlYXRlIGFuIElEIChzdHJp bmcgb3IgbnVtZXJpYykgZm9yIGluc3RhbmNlcyBvZiB0aGUgc2FtZSBQb2xpY3lSdWxlPyBPciBp dA0KIGlzIG1vcmUgY29tcGxpY2F0ZWQ/IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCB0eXBl PSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzIi Pg0KUmVsYXRpb25zaGlwcyBhcmUgaW1wbGVtZW50ZWQgYnkgZGVmaW5pbmcgYW4gYWJzdHJhY3Qg Y2xhc3M8YnI+DQp3aXRoIGtleXMsIGFuZCB0aGVuIG92ZXJyaWRpbmcgdGhlIGtleXMgaW4gdGhl IHN1YmNsYXNzZXMgb2YgdGhlPGJyPg0KcmVsYXRpb25zaGlwLiBUaGlzIGlzIGJyb2tlbi4gV291 bGQgeW91IG92ZXJyaWRlIGtleXMgaW4gYW4gUkRCTVM/PG86cD48L286cD48L2xpPjwvdWw+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj5bTGluZGFdIElzIHRoZSDigJxLZXnigJ0gdG8gZGlmZmVyZW50aWF0aW5nIGRpZmZl cmVudCDigJxQb2xpY3lSdWxl4oCdPyZuYnNwOyAmbmJzcDtDYW4geW91IGdpdmUgYW4gZXhhbXBs ZSBvZiDigJxzdWJjbGFzc2VzDQogb2YgdGhlIHJlbGF0aW9uc2hpcOKAnT8gPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+V2hhdCBldmVudHMgY2FuIGNhdXNlIOKAnG92ZXJyaWRpbmcg dGhlIGtleXMgaW4gdGhlIHN1YmNsYXNzZXMgb2YgdGhlIHJlbGF0aW9uc2hpcOKAnT88bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv O21zby1saXN0Omw1IGxldmVsMSBsZm8zIj4NCk1vc3Qgb2YgdGhlIGNsYXNzZXMgdGhhdCBhcmUg dXNlZCB0byBpbXBsZW1lbnQgdGhlIHJlbGF0aW9uc2hpcHM8YnI+DQpkbyBOT1QgaGF2ZSBhdHRy aWJ1dGVzLCBzbyBpdCBpcyBpbXBvc3NpYmxlIHRvIHJlc3RyaWN0IHdoaWNoPGJyPg0KY2xhc3Nl cyBhcmUgcmVsYXRlZCB0byB3aGljaCBvdGhlciBjbGFzc2VzIChlLmcuLCBieSBjb250ZXh0KS48 YnI+DQpQdXQgYW5vdGhlciB3YXksIHRoZSBzYW1lIHJlbGF0aW9uc2hpcCBtdXN0IGFsd2F5cyBi ZSB1c2VkPGJyPg0KYmV0d2VlbiB0d28gdHlwZXMsIGV2ZW4gaWYgdGhlIHNlbWFudGljcyB2YXJp ZXMuIChUaGUgdHdvPGJyPg0KZXhjZXB0aW9ucyBhcmUgUG9saWN5Q29uZGl0aW9uSW5Qb2xpY3lS dWxlIGFuZDxicj4NClBvbGljeUFjdGlvbkluUG9saWN5UnVsZSkuPG86cD48L286cD48L2xpPjwv dWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj5bTGluZGFdIERvZXMg4oCcY2xhc3Nlc+KAnSA9PSDigJxQb2xpY3lSdWxl 4oCdPw0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsNiBsZXZlbDEgbGZvNCI+DQpUaGUgJnF1b3Q7aWdub3Jl IHRoaXMgdW5sZXNzIHlvdSBuZWVkIHRoaXMmcXVvdDsgcGhpbG9zb3BoeSBkb2VzIG5vdDxicj4N CndvcmsuIEhvdyBkbyB5b3Uga25vdyBpZiBvdGhlciBpbXBsZW1lbnRhdGlvbnMgdGhhdCB5b3Ug YXJlPGJyPg0Kc3VwcG9zZWQgdG8gaW50ZXJvcGVyYXRlIHdpdGggYXJlIHVzaW5nIHRoZW0/PG86 cD48L286cD48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5bTGluZGFdIElzIOKAnElnbm9yZSB0aGlzIHVu bGVzcyB5b3UgbmVlZCB0aGlz4oCdIGFuIG5ldyB0eXBlIG9mIOKAnFBvbGljeVJ1bGXigJ0/DQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvO21zby1saXN0OmwzIGxldmVsMSBsZm81Ij4NClRoZXJlIGlzIG5vIGNvbmNlcHQgb2Yg ZXJyb3Igb3IgZXhjZXB0aW9uIGhhbmRsaW5nPG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG87bXNvLWxpc3Q6bDMgbGV2ZWwxIGxmbzUiPg0KVGhlcmUgaXMgbm8gY29uY2VwdCBv ZiB0aGUgc3ViamVjdCBvciB0aGUgdGFyZ2V0IG9mIGEgcG9saWN5PG86cD48L286cD48L2xpPjwv dWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj5bTGluZGFdIERvZXMgeW91ciDigJxzdWJqZWN04oCdIGhhdmUgdGhlIHNh bWUgbWVhbmluZyBhcyB0aGUg4oCcSTJOU0Ygc3ViamVjdOKAnSB3aGljaCBtZWFucyBiaXRzJmFt cDtieXRlcyBleHRyYWN0ZWQNCiBmcm9tIHBhY2tldHM/IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N Cjx1bCB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDAgbGV2 ZWwxIGxmbzYiPg0KQWRkaW5nIGEgbmV3IHR5cGUgb2YgcG9saWN5IChlLmcuLCBkZWNsYXJhdGl2 ZSBvciBmdW5jdGlvbmFsKTxicj4NCndpbGwgY2F1c2UgYSBtYWpvciByZXdyaXRlIG9mIHRoZSBl bnRpcmUgbW9kZWw8bzpwPjwvbzpwPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltMaW5kYV0gQ2FuIHdlIHNheSB0aGF0ICZuYnNwO0ky TlNGIHBvbGljaWVzIGhhdmUgb25lIHR5cGUg4oCcU3ViamVjdC1Db250ZXh0dWFsU3RhdGVzLSBh Y3Rpb24tIGZ1bmN0aW9uPw0KIFNvIGluIEkyTlNGIGVudmlyb25tZW50LCB0aGVyZSBpcyBvbmx5 IHRoZSBub3Rpb24gb2YgYWRkaW5nIGEgbmV3IOKAnFBvbGljeVJ1bGXigJ0sIGJ1dCBubyBhZGRp bmcgYSBuZXcgcG9saWN5IHR5cGUuIElzIHRoaXMgY29ycmVjdCBzdGF0ZW1lbnQ/ICZuYnNwOzxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG87bXNvLWxpc3Q6bDQgbGV2ZWwxIGxmbzciPg0KVGhlcmUgaXMgbm8gYXBwcm9hY2ggdG8g ZGV0ZWN0aW5nIGFuZCBzb2x2aW5nIHBvbGljeSBjb25mbGljdHM7PGJyPg0KdGhpcyBpcyBkdWUg dG8gdGhlIHNpbXBsaXN0aWMgbm90aW9uIG9mIGp1c3QgdXNpbmcgYSBQRFAgYW5kIGE8YnI+DQpQ RVAgZm9yIGFwcGx5aW5nIHBvbGljaWVzLjxvOnA+PC9vOnA+PC9saT48L3VsPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBpbiBJMk5TRiwg dGhlcmUgY291bGQgYmUgYSBsb3Qgb2YgY29uZmxpY3RzLCBmb3IgZXhhbXBsZSwgdGhlcmUgY291 bGQgYmUgdHdvIHJ1bGVzIGVudGVyZWQNCiBhdCBkaWZmZXJlbnQgdGltZTo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO3RleHQtaW5kZW50Oi0uMjVp biI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+MS48L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7VmlydHVhbCBOZXR3b3JrIFggY2Fu4oCZdCBhY2Nlc3Mg 4oCcWW91VHViZeKAnSwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0 UGFyYWdyYXBoIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG87dGV4dC1pbmRlbnQ6LS4yNWluIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj4yLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0 O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4xMC4xLjEuMSBj YW4gYWNjZXNzIOKAnFlvdVR1YmXigJ0gKHdoZXJlIDEwLjEuMS4xIGlzIGEgaG9zdCB3aXRoaW4g dGhlIFZpcnR1YWwgTmV0d29yayBYKS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPkRvIHlvdSBjYWxsIHRoZSAyIHJ1bGVzIGFib3ZlIGNvbmZsaWN0Pw0KPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+DQo8c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+NC4g UmVjb21tZW5kYXRpb25zPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5HaXZlbiB0aGUgbGFyZ2UgYW1vdW50 IG9mIHByb2JsZW1zLCBJIHJlY29tbWVuZCB0aGF0IHdlIG5vdCBjb25zaWRlciBQQ0lNIGZ1cnRo ZXIuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5bTGluZGFdIHNob3VsZCBJMk5TRiBy ZWZlcmVuY2UgUENJTT8NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhhbmsgeW91IHZlcnkgbXVjaC4gTGluZGENCjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOyA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjUuIE9yaWdpbiBvZiBQQ0lNL1BDSU1lPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMgaXMgYSAqKnRoZW9y eSoqIHNlY3Rpb247IHBsZWFzZSBza2lwIHVubGVzcyB5b3Ugd2FudCB0byB1bmRlcnN0YW5kIHRo ZSBtb2RlbCBpbiBtb3JlIGRldGFpbC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIFBDSU0gaXMgYmFzZWQgb24g dGhlIERNVEYgQ0lNLCB3aGljaCBpcyBhY3R1YWxseSBhICoqZGF0YSBtb2RlbCoqIChkZXNwaXRl IGl0cyBuYW1lKSBiZWNhdXNlIGl0IHVzZXMgcmVsYXRpb25hbCB0ZWNobm9sb2dpZXMgKGUuZy4s IGtleXMgYW5kIHdlYWsgcmVmZXJlbmNlcykgdG8gY3JlYXRlIGl0cyBtb2RlbC4gUENJTSBpcyBi YXNlZCBvbiBhbiBlYXJseSB2ZXJzaW9uIG9mIHRoZSBDSU0gKDIuNCk7IHRoZQ0KIGN1cnJlbnQg dmVyc2lvbiBvZiB0aGUgQ0lNIGlzIDIuNDQuMSBhcyBvZiB0aGlzIHdyaXRpbmcuIFNpbmNlIHRo aXMgaXMgdGllZCB0byB0aGUgQ0lNLCB0aGlzIG1lYW5zIHRoYXQ6PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OyZuYnNwOyAxKSBQb2xpY3kgaXMgc3ViY2xhc3NlZCBmcm9tIGEgbW9yZSBnZW5lcmljIGNsYXNz IChNYW5hZ2VkRWxlbWVudCk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPiZuYnNwOyZuYnNwOyAyKSBBTEwgcmVsYXRpb25zaGlwcyAoYXNzb2NpYXRp b25zLCBhZ2dyZWdhdGlvbnMsIGFuZCBjb21wb3NpdGlvbnMpPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgYXJlIHJlYWxpemVkIGFzICoqY2xhc3NlcyoqPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsgMykgQXMgYSBy ZXN1bHQgb2YgMiksIHJlbGF0aW9uc2hpcHMgYXJlIHN1YmNsYXNzZWQ8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyZuYnNwOyA0KSBCb3Ro IGF0dHJpYnV0ZXMgYW5kIGFzc29jaWF0aW9ucyBhcmUgKippbmhlcml0ZWQqKjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IDUp IFRoZSBzYW1lIGRlc2lnbiBhcHByb2FjaCAoYXMgbXVjaCBhcyBwb3NzaWJsZSkgd2FzIHVzZWQg aW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBQQ0lNL1BDSU1lIGFzIHdh cyBpbiBDSU0uIFNwZWNpZmljYWxseSwgaXQgd2FzIHRob3VnaHQgYmV0dGVyPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgdG8gZGVmaW5lIGEgZ2VuZXJpYywgYnV0IG9wdGlv bmFsLCByZWxhdGlvbnNoaXAgaW5zdGVhZCBvZiBub3Q8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBkZWZpbmluZyB0aGUgcmVsYXRpb25zaGlwLjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7Jm5ic3A7IDYpIFRoZSBD SU0gZG9lcyBOT1QgaGF2ZSBhIHNpbmdsZSByb290ZWQgaGllcmFyY2h5OyB0aGlzIG1ha2VzPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgY29kZSBnZW5lcmF0aW9uIG1vcmUg Y29tcGxleDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7Jm5ic3A7IDcpIFRoZSBDSU0gdXNlcyBhIHByb3ByaWV0YXJ5IGxhbmd1YWdlIGFu ZCBpcyBub3Qgc3RyaWN0bHkgVU1MPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgY29tcGxpYW50LCBldmVuIHRob3VnaCBpdCBsb29rcyBsaWtlIFVNTCAodW5mb3J0dW5hdGVs eSwgdGhpczxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGxhbmd1YWdlIGlz IGFsc28gY2FsbGVkIE1PRikmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPkRlcGVuZGluZyBvbiB0aGUgY29tcGxleGl0eSBvZiB0aGUgaW1wbGVt ZW50YXRpb24sIHRoZSBhYm92ZSBoYXZlIGJlZW4gc2hvd24gdG8gcHJvZHVjZSBwcm9ibGVtcyBp biBsYXJnZSBlbnZpcm9ubWVudHMuIEZvciBleGFtcGxlLCB0aGUgc3Bpcml0IG9mICZxdW90O2xl dCdzIGRlZmluZSBhbiBhdHRyaWJ1dGUgb3IgYXNzb2NpYXRpb24gaW4gY2FzZSBpdCBpcyB1c2Vm dWwsIGFuZCBtYWtlIGl0IG9wdGlvbmFsIHNvIHlvdQ0KIGRvbid0IGhhdmUgdG8gd29ycnkgYWJv dXQgaXQmcXVvdDsgbm90IG9ubHkgdmlvbGF0ZXMgc29tZSB3ZWxsLWtub3duIHNvZnR3YXJlIGFy Y2hpdGVjdHVyYWwgZ3VpZGVsaW5lcyAoZS5nLiwgU2luZ2xlIFJlc3BvbnNpYmlsaXR5IFByaW5j aXBsZSBhbmQgdGhlIExpc2tvdiBTdWJzdGl0dXRpb24gUHJpbmNpcGxlKSwgYnV0IGl0IG1ha2Vz IHRoaW5ncyBkaWZmaWN1bHQgdG8gaW50ZXJvcGVyYXRlIHdpdGggKHNpbmNlIHlvdSBuZXZlciBy ZWFsbHkga25vdw0KIGlmIGFuIGF0dHJpYnV0ZSBvciByZWxhdGlvbnNoaXAgc2hvdWxkIGJlIGlu c3RhbnRpYXRlZCBvciBub3QpLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPnJlZ2FyZHMsPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkpvaG48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_4A95BA014132FF49AE685FAB4B9F17F657DAF428dfweml701chm_-- From nobody Thu Dec 10 11:15:28 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C15891ACE74 for ; Thu, 10 Dec 2015 11:15:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.399 X-Spam-Level: X-Spam-Status: No, score=-1.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_24=0.6, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mlYwumtnlhFj for ; Thu, 10 Dec 2015 11:15:23 -0800 (PST) Received: from mail-vk0-x233.google.com (mail-vk0-x233.google.com [IPv6:2607:f8b0:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E79D51ACD9A for ; Thu, 10 Dec 2015 11:15:22 -0800 (PST) Received: by vkha189 with SMTP id a189so97180988vkh.2 for ; Thu, 10 Dec 2015 11:15:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=T60iFl8g3g/9qIVbYS4y+ozz7tVjf0LGLKc1AROvk+Q=; b=S3UWIrGUsyFiHNugGehaFVMZK1ujD/atz3C50ju5gO1k6V1xr5mW86QtrrbLRMHGSh Yx37RxhFLw9YEM38+usiI6QwqD/OhBM0EsUU4kA3ZrfzM/f4F6KVBE3YcZIkg6kAsPKn 049XKfV0pAg3alWsobTpPHCtmZ/Oa1PtpSunW2pgPk/dLt5CNMIppGJ+gcBXIXw8uwqm mGkCaaCzJ4I8D05GEhAq/refyIl3jSUCjfsU+Qz//UX4sCnw1kmpl3uJ7Vncl8j3BCbO /06coc8H3JroPkl3fBIEN7UDXKhOsdpO+rIJx6UglJd/+LmCoGgZbSoe+HTAMuIXNIg4 8UaQ== MIME-Version: 1.0 X-Received: by 10.31.54.78 with SMTP id d75mr11589467vka.122.1449774922058; Thu, 10 Dec 2015 11:15:22 -0800 (PST) Received: by 10.103.40.131 with HTTP; Thu, 10 Dec 2015 11:15:21 -0800 (PST) In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657DAEE81@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657DADCA6@dfweml701-chm> <566813CC.3090709@polito.it> <4A95BA014132FF49AE685FAB4B9F17F657DAEE81@dfweml701-chm> Date: Thu, 10 Dec 2015 11:15:21 -0800 Message-ID: From: John Strassner To: Linda Dunbar Content-Type: multipart/alternative; boundary=001a1143e41c3bd7d705269007b2 Archived-At: Cc: "i2nsf@ietf.org" , DIEGO LOPEZ GARCIA , Aldo Basile Subject: Re: [I2nsf] Service Layer Policies - Post 0: note structure X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Dec 2015 19:15:26 -0000 --001a1143e41c3bd7d705269007b2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi all, Aldo wrote: In my experience, all the policy-related concepts that one may need during such a design phase can be described by referring to PCIM/PCIMe-defined concepts (regardless of the way they are represented, classes, associations, association classes), ... I disagree that PCIM/PCIMe has "all" of the policy-related concepts that I2NSF needs. First, its structure cannot be extended without significant rework. So, if I2NSF ever does want to examine other types of policies (e.g., utility functions, intent-based (declarative), or functional policies), then it is very likely that this would cause the resulting data models to be completely redone. Second, PCIM/PCIMe have no notion of events. This means that many OAM functions cannot trigger an associated security function. In addition, from a practical point-of-view, events are useful for deterministic analysis of how security functions work. If you look at a standard ECA (event-condition-action) policy, then the purpose of the event clause is to trigger the evaluation of the condition clause; this makes it much easier to audit, log, and debug complex security scenarios. Third, PCIM/PCIMe have no concept of either a Policy Subject or a Policy Target. The former is vital for deontic and alethic logic (which I would assume are vital for not just I2NSF, but other security groups (e.g., SACM)). The later is critical for identifying, in a scalable manner, which entities are being changed by which security functions. I could go on, but I think that these are sufficient. Aldo wrote: ...concepts that PCIM/PCIMe miss, and concepts that are not correctly/optimally represented in PCIM/PCIMe. Sorry, but my parser seg faulted. :-) IFF you are saying that everything we need is covered by what PCIM/PCIMe have and what PCIM/PCIMe don't have, then this is a logical tautology. If this isn't what you mean, I'm lost; please explain. regards, John On Wed, Dec 9, 2015 at 3:54 PM, Linda Dunbar wrote: > Aldo, > > Thank you for the suggestion. > > Just want to add a note: I2NSF only deals with rule-set/policy for > treating packets/flows traversing through NSF. Therefore, the I2NSF polic= es > would be much simpler, which doesn't need to deal with network wide > policies or user policies. > > Linda > > > -----Original Message----- > From: Aldo Basile [mailto:cataldo.basile@polito.it] > Sent: Wednesday, December 09, 2015 5:43 AM > To: DIEGO LOPEZ GARCIA; Linda Dunbar > Cc: i2nsf@ietf.org; John Strassner > Subject: Re: [I2nsf] Service Layer Policies - Post 0: note structure > > Dear all, > > I agree it is not worth considering the whole PCIM or PCIMe models and > suggested implementations. They are too complex to implement and > maintain and far from being perfect (John Strassner's Posts 0/1 are much > more precise references to PCIM issues). > > However, I think PCIM/PCIMe are excellent starting points for the design > of the an information model, thus they can be used for I2NSF as well. > > In my experience, all the policy-related concepts that one may need > during such a design phase can be described by referring to > PCIM/PCIMe-defined concepts (regardless of the way they are represented, > classes, associations, association classes), concepts that PCIM/PCIMe > miss, and concepts that are not correctly/optimally represented in > PCIM/PCIMe. > > In the SECURED project (and before in the PoSecCo project), PCIM/PCIMe > have been considered as starting point to design the information and > data models (which are now similar but not equal), while the actual > implementation of the repositories and management tasks have been > completely detached from PCIM/PCIMe (we had indeed a bad experience in > fully agreeing with PCIM during a previous POSITIF project). > > Therefore, it is probably worth considering the 'refinement' of the > I2NSF requirements (which, to the best of my knowledge are presented > here https://datatracker.ietf.org/wg/i2nsf/charter/, please correct me > if I'm wrong) to a set of more formal/precisely defined requirements and > probably also inputs from use cases. > > Only at that point it would be possible to precisely understand what we > can reuse from existing (de facto) standards or models. > > > Regards, > Cataldo > > > > On 08/12/2015 10:37, DIEGO LOPEZ GARCIA wrote: > > Hi, > > > > I support this. I think it is good to be aligned with common usage of > > terms, unless there are very good reasons to do otherwise. > > > > Just for the record, we are collecting some of the (already mature) > > results of the SECURED project policy efforts into a document we will > > contribute anytime soon. I hope we will be well aligned with John's > ideas. > > > > Be goode, > > > >> On 7 Dec 2015, at 22:25 , Linda Dunbar >> > wrote: > >> > >> John, > >> Thank you very much for structuring the discussion. This is very > helpful. > >> Maybe I am jumping ahead. For Post 5, the "object" currently used in > >> I2NSF framework is same as the "Condition" in PCIM to describe the > >> constraints. If no one disagree, I propose to align with PCIM, i.e. > >> call it "Subject-Condition-Action-Function". > >> Regards, > >> Linda > >> *From:*I2nsf [mailto:i2nsf-bounces@ietf.org]*On Behalf Of*John > Strassner > >> *Sent:*Sunday, December 06, 2015 7:00 PM > >> *To:*i2nsf@ietf.org > >> *Subject:*[I2nsf] Service Layer Policies - Post 0: note structure > >> The I2NSF framework draft mentions PCIM (RFC3060) and PCIMe (RFC3460) > >> as possible candidates for guiding the policy structure that can be > >> mapped to the Capability Layer's "Subject-Object-Action-Function" > >> paradigm. > >> During IETF94, I expressed discomfort with the above paradigm. > >> However, this is a complex subject, and is more easily understood by > >> breaking this up into smaller discussions. Here is the order of notes > >> that I will post: > >> Post 0: this post > >> Post 1: problems in using PCIM > >> Post 2: problems in using PCIMe > >> Post 3: differentiating between groups and roles > >> Post 4: differentiating between context, constraints, and conditio= ns > >> Post 5: specific worries about the > >> "Subject-Object-Action-Function" paradigm > >> Post 6: proposed replacement policy structure > >> Posts 1 and 2 clarify the problems in using PCIM and PCIMe, > >> respectively, which I volunteered to do. > >> Posts 3 and 4 are fundamental to posts 5 and 6, as they represent > >> software building blocks that are critical for designing and > >> implementing Service Policies in a scalable and robust manner. These > >> also expand on points in posts 1 and 2. > >> Post 5 is the heart of the manner, but can't really be tackled until > >> the preceding posts were done. Post 6 builds on the previous posts. > >> regards, > >> John > >> -- > >> regards, > >> John > >> _______________________________________________ > >> I2nsf mailing list > >> I2nsf@ietf.org > >> https://www.ietf.org/mailman/listinfo/i2nsf > > > > -- > > "Esta vez no fallaremos, Doctor Infierno" > > > > Dr Diego R. Lopez > > Telefonica I+D > > http://people.tid.es/diego.lopez/ > > > > e-mail: diego.r.lopez@telefonica.com diego.r.lopez@telefonica.com> > > Tel: +34 913 129 041 > > Mobile: +34 682 051 091 > > ---------------------------------- > > > > > > -----------------------------------------------------------------------= - > > > > Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario= , > > puede contener informaci=C3=B3n privilegiada o confidencial y es para u= so > > exclusivo de la persona o entidad de destino. Si no es usted. el > > destinatario indicado, queda notificado de que la lectura, utilizaci=C3= =B3n, > > divulgaci=C3=B3n y/o copia sin autorizaci=C3=B3n puede estar prohibida = en virtud > > de la legislaci=C3=B3n vigente. Si ha recibido este mensaje por error, = le > > rogamos que nos lo comunique inmediatamente por esta misma v=C3=ADa y p= roceda > > a su destrucci=C3=B3n. > > > > The information contained in this transmission is privileged and > > confidential information intended only for the use of the individual or > > entity named above. If the reader of this message is not the intended > > recipient, you are hereby notified that any dissemination, distribution > > or copying of this communication is strictly prohibited. If you have > > received this transmission in error, do not read it. Please immediately > > reply to the sender that you have received this communication in error > > and then delete it. > > > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu > > destinat=C3=A1rio, pode conter informa=C3=A7=C3=A3o privilegiada ou con= fidencial e =C3=A9 > > para uso exclusivo da pessoa ou entidade de destino. Se n=C3=A3o =C3=A9= vossa > > senhoria o destinat=C3=A1rio indicado, fica notificado de que a leitura= , > > utiliza=C3=A7=C3=A3o, divulga=C3=A7=C3=A3o e/ou c=C3=B3pia sem autoriza= =C3=A7=C3=A3o pode estar proibida em > > virtude da legisla=C3=A7=C3=A3o vigente. Se recebeu esta mensagem por e= rro, > > rogamos-lhe que nos o comunique imediatamente por esta mesma via e > > proceda a sua destrui=C3=A7=C3=A3o > > > > > > _______________________________________________ > > I2nsf mailing list > > I2nsf@ietf.org > > https://www.ietf.org/mailman/listinfo/i2nsf > > > > > --=20 regards, John --001a1143e41c3bd7d705269007b2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi all,
Aldo wrote:
In my experie= nce, all the policy-related concepts that one may need
during such a de= sign phase can be described by referring to
PCIM/PCIMe-defined concepts= (regardless of the way they are represented,
classes, associations, as= sociation classes), ...

<jcs>
I di= sagree that PCIM/PCIMe has "all" of the policy-related concepts
that I2NSF needs. First, its structure cannot be extended without<= /div>
significant rework. So, if I2NSF ever does want to examine other<= /div>
types of policies (e.g., utility functions, intent-based (declara= tive), or
functional policies), then it is very likely that this = would cause the
resulting data models to be completely redone.

Second, PCIM/PCIMe have no notion of events. This me= ans that
many OAM functions cannot trigger an associated security= function.
In addition, from a practical point-of-view, events ar= e useful for
deterministic analysis of how security functions wor= k. If you look
at a standard ECA (event-condition-action) policy,= then the
purpose of the event clause is to trigger the evaluatio= n of the
condition clause; this makes it much easier to audit, lo= g, and
debug complex security scenarios.

Third, PCIM/PCIMe have no concept of either a Policy Subject
or = a Policy Target. The former is vital for deontic and alethic logic
(which I would assume are vital for not just I2NSF, but other
s= ecurity groups (e.g., SACM)). The later is critical for identifying,
<= div>in a scalable manner, which entities are being changed by which
security functions.

I could go on, but I think = that these are sufficient.
</jcs>

= Aldo wrote:
...concepts that PCIM/PCIMe
miss, and concepts th= at are not correctly/optimally represented in
PCIM/PCIMe.
<jcs>
Sorry, but my parser seg faulted. :-)
IFF you are saying that everything we need is covered by
w= hat PCIM/PCIMe have and what PCIM/PCIMe don't have,
then this= is a logical tautology. If this isn't what you mean,
I'm= lost; please explain.
</jcs>

rega= rds,
John

On Wed, Dec 9, 2015 at 3:54 PM, Linda Dunbar <linda.du= nbar@huawei.com> wrote:
Ald= o,

Thank you for the suggestion.

Just want to add a note: I2NSF only deals with rule-set/policy for treating= packets/flows traversing through NSF. Therefore, the I2NSF polices would b= e much simpler, which doesn't need to deal with network wide policies o= r user policies.

Linda


-----Original Message-----
From: Aldo Basile [mailto:catal= do.basile@polito.it]
Sent: Wednesday, December 09, 2015 5:43 AM
To: DIEGO LOPEZ GARCIA; Linda Dunbar
Cc: i2nsf@ietf.org; John Strassner Subject: Re: [I2nsf] Service Layer Policies - Post 0: note structure

Dear all,

I agree it is not worth considering the whole PCIM or PCIMe models and
suggested implementations. They are too complex to implement and
maintain and far from being perfect (John Strassner's Posts 0/1 are muc= h
more precise references to PCIM issues).

However, I think PCIM/PCIMe are excellent starting points for the design of the an information model, thus they can be used for I2NSF as well.

In my experience, all the policy-related concepts that one may need
during such a design phase can be described by referring to
PCIM/PCIMe-defined concepts (regardless of the way they are represented, classes, associations, association classes), concepts that PCIM/PCIMe
miss, and concepts that are not correctly/optimally represented in
PCIM/PCIMe.

In the SECURED project (and before in the PoSecCo project), PCIM/PCIMe
have been considered as starting point to design the information and
data models (which are now similar but not equal), while the actual
implementation of the repositories and management tasks have been
completely detached from PCIM/PCIMe (we had indeed a bad experience in
fully agreeing with PCIM during a previous POSITIF project).

Therefore, it is probably worth considering the 'refinement' of the=
I2NSF requirements (which, to the best of my knowledge are presented
here https://datatracker.ietf.org/wg/i2nsf/charter/, please correct me
if I'm wrong) to a set of more formal/precisely defined requirements an= d
probably also inputs from use cases.

Only at that point it would be possible to precisely understand what we
can reuse from existing (de facto) standards or models.


Regards,
Cataldo



On 08/12/2015 10:37, DIEGO LOPEZ GARCIA wrote:
> Hi,
>
> I support this. I think it is good to be aligned with common usage of<= br> > terms, unless there are very good reasons to do otherwise.
>
> Just for the record, we are collecting some of the (already mature) > results of the SECURED project policy efforts into a document we will<= br> > contribute anytime soon. I hope we will be well aligned with John'= s ideas.
>
> Be goode,
>
>> On 7 Dec 2015, at 22:25 , Linda Dunbar <linda.dunbar@huawei.com
>> <mailto:linda.dunbar= @huawei.com>> wrote:
>>
>> John,
>> Thank you very much for structuring the discussion. This is very h= elpful.
>> Maybe I am jumping ahead. For Post 5,=C2=A0 the "object"= currently used in
>> I2NSF framework is same as the=C2=A0 "Condition" in PCIM= to describe the
>> constraints. If no one disagree, I propose to align with PCIM, i.e= .
>> call it "Subject-Condition-Action-Function".
>> Regards,
>> Linda
>> *From:*I2nsf [mailto:i2n= sf-bounces@ietf.org]*On Behalf Of*John Strassner
>> *Sent:*Sunday, December 06, 2015 7:00 PM
>> *To:*i2nsf@ietf.org <mail= to:i2nsf@ietf.org>
>> *Subject:*[I2nsf] Service Layer Policies - Post 0: note structure<= br> >> The I2NSF framework draft mentions PCIM (RFC3060) and PCIMe (RFC34= 60)
>> as possible candidates for guiding the policy structure that can b= e
>> mapped to the Capability Layer's "Subject-Object-Action-F= unction"
>> paradigm.
>> During IETF94, I expressed discomfort with the above paradigm.
>> However, this is a complex subject, and is more easily understood = by
>> breaking this up into smaller discussions. Here is the order of no= tes
>> that I will post:
>>=C2=A0 =C2=A0 Post 0:=C2=A0 this post
>>=C2=A0 =C2=A0 Post 1:=C2=A0 problems in using PCIM
>>=C2=A0 =C2=A0 Post 2:=C2=A0 problems in using PCIMe
>>=C2=A0 =C2=A0 Post 3:=C2=A0 differentiating between groups and role= s
>>=C2=A0 =C2=A0 Post 4:=C2=A0 differentiating between context, constr= aints, and conditions
>>=C2=A0 =C2=A0 Post 5:=C2=A0 specific worries about the
>> "Subject-Object-Action-Function" paradigm
>>=C2=A0 =C2=A0 Post 6:=C2=A0 proposed replacement policy structure >> Posts 1 and 2 clarify the problems in using PCIM and PCIMe,
>> respectively, which I volunteered to do.
>> Posts 3 and 4 are fundamental to posts 5 and 6, as they represent<= br> >> software building blocks that are critical for designing and
>> implementing Service Policies in a scalable and robust manner. The= se
>> also expand on points in posts 1 and 2.
>> Post 5 is the heart of the manner, but can't really be tackled= until
>> the preceding posts were done. Post 6 builds on the previous posts= .
>> regards,
>> John
>> --
>> regards,
>> John
>> _______________________________________________
>> I2nsf mailing list
>> I2nsf@ietf.org <mailto:I2nsf@ietf.org>
>> https://www.ietf.org/mailman/listinfo/i2nsf<= br> >
> --
> "Esta vez no fallaremos, Doctor Infierno"
>
> Dr Diego R. Lopez
> Telefonica I+D
> http://people.tid.es/diego.lopez/
>
> e-mail: diego.r.lopez@= telefonica.com <mailto:diego.r.lopez@telefonica.com>
> Tel:=C2=A0 =C2=A0 +34 913 129 041
> Mobile: +34 682 051 091
> ----------------------------------
>
>
> ----------------------------------------------------------------------= --
>
> Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatari= o,
> puede contener informaci=C3=B3n privilegiada o confidencial y es para = uso
> exclusivo de la persona o entidad de destino. Si no es usted. el
> destinatario indicado, queda notificado de que la lectura, utilizaci= =C3=B3n,
> divulgaci=C3=B3n y/o copia sin autorizaci=C3=B3n puede estar prohibida= en virtud
> de la legislaci=C3=B3n vigente. Si ha recibido este mensaje por error,= le
> rogamos que nos lo comunique inmediatamente por esta misma v=C3=ADa y = proceda
> a su destrucci=C3=B3n.
>
> The information contained in this transmission is privileged and
> confidential information intended only for the use of the individual o= r
> entity named above. If the reader of this message is not the intended<= br> > recipient, you are hereby notified that any dissemination, distributio= n
> or copying of this communication is strictly prohibited. If you have > received this transmission in error, do not read it. Please immediatel= y
> reply to the sender that you have received this communication in error=
> and then delete it.
>
> Esta mensagem e seus anexos se dirigem exclusivamente ao seu
> destinat=C3=A1rio, pode conter informa=C3=A7=C3=A3o privilegiada ou co= nfidencial e =C3=A9
> para uso exclusivo da pessoa ou entidade de destino. Se n=C3=A3o =C3= =A9 vossa
> senhoria o destinat=C3=A1rio indicado, fica notificado de que a leitur= a,
> utiliza=C3=A7=C3=A3o, divulga=C3=A7=C3=A3o e/ou c=C3=B3pia sem autoriz= a=C3=A7=C3=A3o pode estar proibida em
> virtude da legisla=C3=A7=C3=A3o vigente. Se recebeu esta mensagem por = erro,
> rogamos-lhe que nos o comunique imediatamente por esta mesma via e
> proceda a sua destrui=C3=A7=C3=A3o
>
>
> _______________________________________________
> I2nsf mailing list
> I2nsf@ietf.org
> https://www.ietf.org/mailman/listinfo/i2nsf
>





--
regards,
John
--001a1143e41c3bd7d705269007b2-- From nobody Thu Dec 10 12:15:00 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79F7A1B2A53 for ; Thu, 10 Dec 2015 12:14:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.399 X-Spam-Level: X-Spam-Status: No, score=-1.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_45=0.6, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZvtKgm6aH6la for ; Thu, 10 Dec 2015 12:14:47 -0800 (PST) Received: from mail-vk0-x22e.google.com (mail-vk0-x22e.google.com [IPv6:2607:f8b0:400c:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F2F3F1A065C for ; Thu, 10 Dec 2015 12:14:46 -0800 (PST) Received: by vkca188 with SMTP id a188so100294143vkc.0 for ; Thu, 10 Dec 2015 12:14:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=U/jbKa6k8UojE8kkn3q3LpSbyBwU8TzuGJ8utM7WK50=; b=Sace3NFg5Z0py+RTD//SbyO3ilcIKx985NC7bYEeBPLWAsCWVPhEp20tKu6PSfBc6B p1Wh2a9qHf8lXfyI7WGCMpCtmX9uziOLE7+CBaGk/9SXUsXQJCKRvaPr8eleRhnBzIgr LDTgHNre7lzq4k/Cn0nNBBwOPjeVLNuew+E1n0jd5CvBKocqEC/L+jLN/M29fAmfUCSf ygmXz/SMWnPjoK29yJg9Xi9Ld8juTOPq4rWvmhVmeuGoGonL9r3aMgzqaKtlsV/ecYE0 4DQgeWONRDzxbPg4f3uWgEuz4wXk8NV4Vo7Qd9Tb51Ddke4u3ZSEzbMfc0loF98QGmSt SQKA== MIME-Version: 1.0 X-Received: by 10.31.162.16 with SMTP id l16mr12414405vke.69.1449778486092; Thu, 10 Dec 2015 12:14:46 -0800 (PST) Received: by 10.103.40.131 with HTTP; Thu, 10 Dec 2015 12:14:46 -0800 (PST) In-Reply-To: References: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> Date: Thu, 10 Dec 2015 12:14:46 -0800 Message-ID: From: John Strassner To: "Natale, Bob" Content-Type: multipart/alternative; boundary=001a114402deaaaa67052690db60 Archived-At: Cc: "i2nsf@ietf.org" , Linda Dunbar Subject: Re: [I2nsf] Service Layer Policies - Post 1: Background Information on PCIM X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Dec 2015 20:14:50 -0000 --001a114402deaaaa67052690db60 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Good point, Bob! Note that PCIM does not even have a scalable priority mechanism to disambiguate this conflict. PCIMe is better, but still flawed (sorry, I'm trying to finish post 2). best regards, John On Wed, Dec 9, 2015 at 10:46 PM, Natale, Bob wrote: > Hi Linda, > > > > Input here from a lurker =E2=80=A6 calibrate accordingly! > > > > You asked: > =E2=80=9C[Linda] in I2NSF, there could be a lot of conflicts, for example= , there > could be two rules entered at different time: > > 1. Virtual Network X can=E2=80=99t access =E2=80=9CYouTube=E2=80= =9D, > > 2. 10.1.1.1 can access =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is= a host within > the Virtual Network X). > > Do you call the 2 rules above conflict?=E2=80=9D > > The answer is =E2=80=9Cit depends=E2=80=9D =E2=80=A6 depends on a broader= policy execution context > =E2=80=A6 a concept that PCIM itself does not directly support. For examp= le, that > broader context could stipulate (via policy) that #1 is the default but > explicit exception specifications like #2 can override the default =E2=80= =A6 > alternatively, that broader context could stipulate that #1 is absolute a= nd > any attempt to specify (preferably) or execute #2 would be denied =E2=80= =A6 those > are only two examples, there are multiple potentially valid variations. H= ow > much of that context a group wants to standardize is an important decisio= n > for the group to understand and make =E2=80=A6 PCIM itself will not take = you very > far, however. > > Avanti, > > BobN > > > > *From:* I2nsf [mailto:i2nsf-bounces@ietf.org] *On Behalf Of *Linda Dunbar > *Sent:* Tuesday, December 08, 2015 4:11 PM > *To:* John Strassner ; i2nsf@ietf.org > *Subject:* Re: [I2nsf] Service Layer Policies - Post 1: Background > Information on PCIM > > > > John, > > > > Thank you very much for the in-depth analysis of PCIM and its suitability > as something that I2NSF should be based on. What you write is very > valuable. I think the analysis should be added to the I2NSF gap analysis, > (or be a standalone Policy Analysis ID). > > > > I have some questions inserted below: > > > > *From:* I2nsf [mailto:i2nsf-bounces@ietf.org ] *O= n > Behalf Of *John Strassner > *Sent:* Sunday, December 06, 2015 7:01 PM > *To:* i2nsf@ietf.org > *Subject:* [I2nsf] Service Layer Policies - Post 1: Background > Information on PCIM > > > > > > > > 2. Brief description of PCIM > > > > The PCIM Class Hierarchy is very simple, as this is a CA > (condition-action) model. Events are NOT represented. PCIM defines a > PolicyRule, a PolicyGroup (group of PolicyRules), PolicyCondition, and > PolicyAction. These are all siblings; their common superclass is called > Policy, as shown below: > > > > ManagedElement (abstract) > | > +---Policy (abstract) > | | > | +---PolicyGroup > | | > | +---PolicyRule > | | > | +---PolicyCondition (abstract) > | | | > | | +---PolicyTimePeriodCondition > | | | > | | +---VendorPolicyCondition > | | > | +---PolicyAction (abstract) > | | > | +---VendorPolicyAction > > > > Note: PCIM does have a simple notion of Roles, but implements them as > attributes, instead of objects. This is not scalable, and does not fully > realize the power of using roles. This will be discussed more in Post 3. > > > > Note: It is possible to define limited constraints in PCIM as conditions. > For example, the VendorPolicyCondition class has two attributes, Constrai= nt > and ConstraintEncoding, that do this. This will be discussed more in Post= 4. > > > > Note: Context is NOT defined in the PCIM. > > > > [Linda] Do you agree that =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D= =E2=80=9CI2NSF subject=E2=80=9D & > =E2=80=9Cthe Contextual states (or the I2NSF object)=E2=80=9D? > > > > > > 3. Summary: main drawbacks of using PCIM > > > > Note that the current CIM Policy Model (2.44.1) is significantly differen= t > than either PCIM or PCIMe. PCIM is based on CIM 2.4; PCIMe is based on CI= M > 2.5. PCIMe is NOT backwards compatible with PCIM in all areas. > > > > Critical Problems: > > - There is no unique ID that can be used to distinguish different > instances of the same PolicyRule, PolicyGroup, PolicyCondition, > or PolicyAction. > > [Linda] Can we simply create an ID (string or numeric) for instances of > the same PolicyRule? Or it is more complicated? > > - Relationships are implemented by defining an abstract class > with keys, and then overriding the keys in the subclasses of the > relationship. This is broken. Would you override keys in an RDBMS? > > [Linda] Is the =E2=80=9CKey=E2=80=9D to differentiating different =E2=80= =9CPolicyRule=E2=80=9D? Can you > give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D? > > What events can cause =E2=80=9Coverriding the keys in the subclasses of t= he > relationship=E2=80=9D? > > - Most of the classes that are used to implement the relationships > do NOT have attributes, so it is impossible to restrict which > classes are related to which other classes (e.g., by context). > Put another way, the same relationship must always be used > between two types, even if the semantics varies. (The two > exceptions are PolicyConditionInPolicyRule and > PolicyActionInPolicyRule). > > [Linda] Does =E2=80=9Cclasses=E2=80=9D =3D=3D =E2=80=9CPolicyRule=E2=80= =9D? > > - The "ignore this unless you need this" philosophy does not > work. How do you know if other implementations that you are > supposed to interoperate with are using them? > > [Linda] Is =E2=80=9CIgnore this unless you need this=E2=80=9D an new type= of =E2=80=9CPolicyRule=E2=80=9D? > > - There is no concept of error or exception handling > - There is no concept of the subject or the target of a policy > > [Linda] Does your =E2=80=9Csubject=E2=80=9D have the same meaning as the = =E2=80=9CI2NSF subject=E2=80=9D > which means bits&bytes extracted from packets? > > - Adding a new type of policy (e.g., declarative or functional) > will cause a major rewrite of the entire model > > > > [Linda] Can we say that I2NSF policies have one type > =E2=80=9CSubject-ContextualStates- action- function? So in I2NSF environm= ent, there > is only the notion of adding a new =E2=80=9CPolicyRule=E2=80=9D, but no a= dding a new policy > type. Is this correct statement? > > - There is no approach to detecting and solving policy conflicts; > this is due to the simplistic notion of just using a PDP and a > PEP for applying policies. > > > > [Linda] in I2NSF, there could be a lot of conflicts, for example, there > could be two rules entered at different time: > > 1. Virtual Network X can=E2=80=99t access =E2=80=9CYouTube=E2=80= =9D, > > 2. 10.1.1.1 can access =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is= a host within > the Virtual Network X). > > Do you call the 2 rules above conflict? > > > > > > 4. Recommendations > > > > Given the large amount of problems, I recommend that we not consider PCIM > further. > > [Linda] should I2NSF reference PCIM? > > > > Thank you very much. Linda > > > > 5. Origin of PCIM/PCIMe > > > > This is a **theory** section; please skip unless you want to understand > the model in more detail. > > > > The PCIM is based on the DMTF CIM, which is actually a **data model** > (despite its name) because it uses relational technologies (e.g., keys an= d > weak references) to create its model. PCIM is based on an early version o= f > the CIM (2.4); the current version of the CIM is 2.44.1 as of this writin= g. > Since this is tied to the CIM, this means that: > > > > 1) Policy is subclassed from a more generic class (ManagedElement) > > 2) ALL relationships (associations, aggregations, and compositions) > > are realized as **classes** > > 3) As a result of 2), relationships are subclassed > > 4) Both attributes and associations are **inherited** > > 5) The same design approach (as much as possible) was used in > > PCIM/PCIMe as was in CIM. Specifically, it was thought better > > to define a generic, but optional, relationship instead of not > > defining the relationship. > > 6) The CIM does NOT have a single rooted hierarchy; this makes > > code generation more complex > > 7) The CIM uses a proprietary language and is not strictly UML > > compliant, even though it looks like UML (unfortunately, this > > language is also called MOF) > > > > Depending on the complexity of the implementation, the above have been > shown to produce problems in large environments. For example, the spirit = of > "let's define an attribute or association in case it is useful, and make = it > optional so you don't have to worry about it" not only violates some > well-known software architectural guidelines (e.g., Single Responsibility > Principle and the Liskov Substitution Principle), but it makes things > difficult to interoperate with (since you never really know if an attribu= te > or relationship should be instantiated or not). > > > > > > regards, > > John > --=20 regards, John --001a114402deaaaa67052690db60 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Good point, Bob!

Note that P= CIM does not even have a scalable priority mechanism to disambiguate this c= onflict. PCIMe is better, but still flawed (sorry, I'm trying to finish= post 2).

best regards,
John
=

On Wed, Dec 9, 20= 15 at 10:46 PM, Natale, Bob <RNATALE@mitre.org> wrote:

Hi Linda,

=C2=A0

Input here from a lurker =E2=80=A6 calibrate acc= ordingly!

=C2=A0

You asked:
=E2=80=9C[Linda] in I2NSF, there could be a lot = of conflicts, for example, there could be two rules entered at different ti= me:

1.=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0Virtual Network X can= =E2=80=99t access =E2=80=9CYouTube=E2=80=9D,

2.=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 10.1.1.1 can access =E2=80= =9CYouTube=E2=80=9D (where 10.1.1.1 is a host within the Virtual Network X)= .

Do you call the 2 rules above conflict?=E2= =80=9D

The answer is =E2=80=9Cit depends=E2=80=9D =E2=80=A6 depends on a broad= er policy execution context =E2=80=A6 a concept that PCIM itself does not d= irectly support. For example, that broader context could stipulate (via pol= icy) that #1 is the default but explicit exception specifications like #2 can overri= de the default =E2=80=A6 alternatively, that broader context could stipulat= e that #1 is absolute and any attempt to specify (preferably) or execute #2= would be denied =E2=80=A6 those are only two examples, there are multiple potentially valid variations. How much of that context = a group wants to standardize is an important decision for the group to unde= rstand and make =E2=80=A6 PCIM itself will not take you very far, however.<= u>

Avanti,

BobN

=C2=A0

From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Linda Dunbar
Sent: Tuesday, December 08, 2015 4:11 PM
To: John Strassner <strazpdj@gmail.com>; i2nsf@ietf.org
Subject: Re: [I2nsf] Service Layer Policies - Post 1: Background Inf= ormation on PCIM

=C2=A0

John,

=C2=A0

Thank you very much for the in-d= epth analysis of PCIM and its suitability as something that I2NSF should be= based on. What you write is very valuable. I think the analysis should be added to the I2NSF gap analysis, (or be a standalon= e Policy Analysis ID).

=C2=A0

I have some questions inserted b= elow:

=C2=A0

From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of John Strassner
Sent: Sunday, December 06, 2015 7:01 PM
To: i2nsf@ietf.o= rg
Subject: [I2nsf] Service Layer Policies - Post 1: Background Informa= tion on PCIM

=C2=A0

<Snipped>=

=C2=A0

2.=C2=A0 Brief description of PCIM

=C2=A0

The PCIM Class Hierarchy is very simple, as this is = a CA (condition-action) model. Events are NOT represented. PCIM defines a P= olicyRule, a PolicyGroup (group of PolicyRules), PolicyCondition, and Polic= yAction. These are all siblings; their common superclass is called Policy, as shown below:

=C2=A0

= ManagedElement (abstract)
=C2=A0 |
=C2=A0 +---Policy (abstract)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyGroup
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyRule
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyCondition (abstract)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 +---P= olicyTimePeriodCondition
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= +---VendorPolicyCondition
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyAction (abstract)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = +---VendorPolicyAction

= =C2=A0

Note: PCIM does have a simple notion of Roles, but i= mplements them as attributes, instead of objects. This is not scalable, and= does not fully realize the power of using roles. This will be discussed mo= re in Post 3.

=C2=A0

Note: It is possible to define limited constraints i= n PCIM as conditions. For example, the VendorPolicyCondition class has two = attributes, Constraint and ConstraintEncoding, that do this. This will be d= iscussed more in Post 4.

=C2=A0

Note: Context is NOT defined in the PCIM.<= /u>

=C2=A0

[Linda] =C2=A0Do you agree that = =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D =E2=80=9CI2NSF subject=E2=80= =9D & =E2=80=9Cthe Contextual states (or the I2NSF object)=E2=80=9D?

=C2=A0

=C2=A0

3.=C2=A0 Summary: main drawbacks of using PCIM

=C2=A0

Note that the current CIM Policy Model (2.44.1) is s= ignificantly different than either PCIM or PCIMe.=C2=A0PCIM is based on CIM= 2.4; PCIMe is based on CIM 2.5. PCIMe is NOT backwards compatible with PCI= M in all areas.

=C2=A0

Critical Problems:

  • There is no unique ID that can be used to distinguish different
    instances of the same PolicyRule, PolicyGroup, PolicyCondition,
    or PolicyAction.

[Linda] Can we simply create an = ID (string or numeric) for instances of the same PolicyRule? Or it is more complicated?

  • Relationships are implemented by defining an abstract class
    with keys, and then overriding the keys in the subclasses of the
    relationship. This is broken. Would you override keys in an RDBMS?

[Linda] Is the =E2=80=9CKey=E2= =80=9D to differentiating different =E2=80=9CPolicyRule=E2=80=9D?=C2=A0 =C2= =A0Can you give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D?

What events can cause =E2=80=9Co= verriding the keys in the subclasses of the relationship=E2=80=9D?

  • Most of the classes that are used to implement the relationships
    do NOT have attributes, so it is impossible to restrict which
    classes are related to which other classes (e.g., by context).
    Put another way, the same relationship must always be used
    between two types, even if the semantics varies. (The two
    exceptions are PolicyConditionInPolicyRule and
    PolicyActionInPolicyRule).

[Linda] Does =E2=80=9Cclasses=E2= =80=9D =3D=3D =E2=80=9CPolicyRule=E2=80=9D?

  • The "ignore this unless you need this" philosophy does not
    work. How do you know if other implementations that you are
    supposed to interoperate with are using them?

[Linda] Is =E2=80=9CIgnore this = unless you need this=E2=80=9D an new type of =E2=80=9CPolicyRule=E2=80=9D?

  • There is no concept of error or exception handling
  • There is no concept of the subject or the target of a policy<= /li>

[Linda] Does your =E2=80=9Csubje= ct=E2=80=9D have the same meaning as the =E2=80=9CI2NSF subject=E2=80=9D wh= ich means bits&bytes extracted from packets?

  • Adding a new type of policy (e.g., declarative or functional)
    will cause a major rewrite of the entire model

=C2=A0

[Linda] Can we say that =C2=A0I2= NSF policies have one type =E2=80=9CSubject-ContextualStates- action- funct= ion? So in I2NSF environment, there is only the notion of adding a new =E2=80= =9CPolicyRule=E2=80=9D, but no adding a new policy type. Is this correct st= atement? =C2=A0

  • There is no approach to detecting and solving policy conflicts;
    this is due to the simplistic notion of just using a PDP and a
    PEP for applying policies.

=C2=A0

[Linda] in I2NSF, there could be= a lot of conflicts, for example, there could be two rules entered at different time:

1.=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0Virtual Network X can= =E2=80=99t access =E2=80=9CYouTube=E2=80=9D,

2.=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 10.1.1.1 can access =E2=80= =9CYouTube=E2=80=9D (where 10.1.1.1 is a host within the Virtual Network X)= .

Do you call the 2 rules above conflict?

=C2=A0

=C2=A0

4. Recommendations

=C2=A0

Given the large amount of problems, I recommend that= we not consider PCIM further.

[Linda] should = I2NSF reference PCIM?

=C2=A0

Thank you very much. Linda

=C2=A0

5. Origin of PCIM/PCIMe

=C2=A0

This is a **theory** section; please skip unless you= want to understand the model in more detail.

=C2=A0

The PCIM is based on the DMTF CIM, which is actually= a **data model** (despite its name) because it uses relational technologie= s (e.g., keys and weak references) to create its model. PCIM is based on an= early version of the CIM (2.4); the current version of the CIM is 2.44.1 as of this writing. Since this is tie= d to the CIM, this means that:

=C2=A0

=C2=A0=C2=A0 1) Policy is subclassed from a more gen= eric class (ManagedElement)

=C2=A0=C2=A0 2) ALL relationships (associations, agg= regations, and compositions)

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 are realized as= **classes**

=C2=A0=C2=A0 3) As a result of 2), relationships are= subclassed

=C2=A0=C2=A0 4) Both attributes and associations are= **inherited**

=C2=A0=C2=A0 5) The same design approach (as much as= possible) was used in

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 PCIM/PCIM= e as was in CIM. Specifically, it was thought better

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 to define= a generic, but optional, relationship instead of not

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 defining = the relationship.

=C2=A0=C2=A0 6) The CIM does NOT have a single roote= d hierarchy; this makes

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 code gene= ration more complex

=C2=A0=C2=A0 7) The CIM uses a proprietary language = and is not strictly UML

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 compliant= , even though it looks like UML (unfortunately, this

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 language = is also called MOF)=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0

=C2=A0

Depending on the complexity of the implementation, t= he above have been shown to produce problems in large environments. For exa= mple, the spirit of "let's define an attribute or association in c= ase it is useful, and make it optional so you don't have to worry about it" not only violates some well-known s= oftware architectural guidelines (e.g., Single Responsibility Principle and= the Liskov Substitution Principle), but it makes things difficult to inter= operate with (since you never really know if an attribute or relationship should be instantiated or not).<= /u>

=C2=A0

=C2=A0

regards,

John




--
regards,
John
--001a114402deaaaa67052690db60-- From nobody Thu Dec 10 12:43:31 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C30A21B2ACC for ; Thu, 10 Dec 2015 12:43:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.399 X-Spam-Level: X-Spam-Status: No, score=-1.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_45=0.6, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yLAEfk17RNBq for ; Thu, 10 Dec 2015 12:43:27 -0800 (PST) Received: from mail-vk0-x235.google.com (mail-vk0-x235.google.com [IPv6:2607:f8b0:400c:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77C9B1B2AAC for ; Thu, 10 Dec 2015 12:43:26 -0800 (PST) Received: by vkay187 with SMTP id y187so100719432vka.3 for ; Thu, 10 Dec 2015 12:43:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=mdGHgpIzJyhWIe4cJLIQA0iBvQ6HV3fw/fPdTrwvu20=; b=eAdZZDiaaoUJue7YR5r5PShvEWHgOdoocv5TC1dJj9+sAyQY71rkNeWXQaskOHYrOb YE3EBWzhEP5RSN95lDvfxl/digJDw/1nq8RvnOcyf+VQVPVnKb50Huhwe7Gfo26+Ohrt PcphHEaEsg2lFFnZlCz+kD1DRwdCbgIYVqkxcBqnskpZ9Z58FAoDALYUxcNtpfVT+vjl 2FKML5f97FnMAplq5ow4R2rha0Rw3D/o9Jve3vETqi+6RL5bA7uxIHX0PfBTrwovyayh R3w5g9GkLzPpjbBhd5R/5CGlAmq9uFdByLheOgP1DcCgV1y3KA/LqU2RuKZTV0TWUsNa KNsQ== MIME-Version: 1.0 X-Received: by 10.31.5.15 with SMTP id 15mr11870509vkf.108.1449780205652; Thu, 10 Dec 2015 12:43:25 -0800 (PST) Received: by 10.103.40.131 with HTTP; Thu, 10 Dec 2015 12:43:25 -0800 (PST) In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657DAF428@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> <4A95BA014132FF49AE685FAB4B9F17F657DAF428@dfweml701-chm> Date: Thu, 10 Dec 2015 12:43:25 -0800 Message-ID: From: John Strassner To: Linda Dunbar , John Strassner Content-Type: multipart/alternative; boundary=001a1143df7429115a05269142e2 Archived-At: Cc: "i2nsf@ietf.org" , "Natale, Bob" Subject: Re: [I2nsf] Service Layer Policies - Post 1: Background Information on PCIM X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Dec 2015 20:43:31 -0000 --001a1143df7429115a05269142e2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Linda, IMHO, a priority attribute should not be overly used. PCIM's implementation fails (see Post 1), and PCIMe's has other problems (defined in Post 2, hopefully out tonight). For example, how do you ensure that the priorities of all instances of all rules are always updated? There is no mechanism in either PCIM or PCIMe that guarantees that priorities are deterministically determined. Remember, you can have priorities on policy rules, and priorities on policy groups. So, if you had: Group1 (priority 5) Rule A (priority 10) Rule B (priority 1) Rule C (priority 50) Rule 2 (priority 10) Group 3 (priority 3) Rule x, priority y Rule 2 will execute first, even though Group1.RuleC.priority =3D=3D 50 Likewise, it doesn't matter how many rules are in Group 3, or what their priorities are, they will all execute after Rule2, followed by the Rules in Group1 (C, A, B). This gets harder as you start nesting groups within groups and rules within rules. PCIMe has a policyDecisionStrategy attribute, which is used to define whether the container (PolicyGroup or PolicyRule) of the PolicyRules uses first-match or all-match. This obfuscates the value of the priority attribute. As Bob rightly pointed out, execution context is everything. In FOCALE, I defined context-aware policy rules. Context was used to select a working set of policies; this working set collectively constituted the intelligence that the manager implemented. Tie that into feedback from what was being managed, and as the overall context changes, the working set of policies change. Kinda cool. But NOT maintainable using just priority. regards, John On Thu, Dec 10, 2015 at 9:32 AM, Linda Dunbar wrote: > Bob, > > > > Thank you very much for listing down multiple scenarios below. > > With what you described, the I2NSF rule-set may need a priority so that > the NSF can enforce them accordingly. > > In our current product implementation, the router=E2=80=99s longest match > principle has been used, i.e. rules for individual hosts override the rul= es > for the subnet to which that hosts belong. > > But there could be more complicated conflict that what is listed below. > Having a priority can be more precise. > > > > > > Linda > > > > *From:* Natale, Bob [mailto:RNATALE@mitre.org] > *Sent:* Thursday, December 10, 2015 12:47 AM > *To:* Linda Dunbar; John Strassner > *Cc:* i2nsf@ietf.org > *Subject:* RE: [I2nsf] Service Layer Policies - Post 1: Background > Information on PCIM > > > > Hi Linda, > > > > Input here from a lurker =E2=80=A6 calibrate accordingly! > > > > You asked: > =E2=80=9C[Linda] in I2NSF, there could be a lot of conflicts, for example= , there > could be two rules entered at different time: > > 1. Virtual Network X can=E2=80=99t access =E2=80=9CYouTube=E2=80= =9D, > > 2. 10.1.1.1 can access =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is= a host within > the Virtual Network X). > > Do you call the 2 rules above conflict?=E2=80=9D > > The answer is =E2=80=9Cit depends=E2=80=9D =E2=80=A6 depends on a broader= policy execution context > =E2=80=A6 a concept that PCIM itself does not directly support. For examp= le, that > broader context could stipulate (via policy) that #1 is the default but > explicit exception specifications like #2 can override the default =E2=80= =A6 > alternatively, that broader context could stipulate that #1 is absolute a= nd > any attempt to specify (preferably) or execute #2 would be denied =E2=80= =A6 those > are only two examples, there are multiple potentially valid variations. H= ow > much of that context a group wants to standardize is an important decisio= n > for the group to understand and make =E2=80=A6 PCIM itself will not take = you very > far, however. > > Avanti, > > BobN > > > > *From:* I2nsf [mailto:i2nsf-bounces@ietf.org ] *O= n > Behalf Of *Linda Dunbar > *Sent:* Tuesday, December 08, 2015 4:11 PM > *To:* John Strassner ; i2nsf@ietf.org > *Subject:* Re: [I2nsf] Service Layer Policies - Post 1: Background > Information on PCIM > > > > John, > > > > Thank you very much for the in-depth analysis of PCIM and its suitability > as something that I2NSF should be based on. What you write is very > valuable. I think the analysis should be added to the I2NSF gap analysis, > (or be a standalone Policy Analysis ID). > > > > I have some questions inserted below: > > > > *From:* I2nsf [mailto:i2nsf-bounces@ietf.org ] *O= n > Behalf Of *John Strassner > *Sent:* Sunday, December 06, 2015 7:01 PM > *To:* i2nsf@ietf.org > *Subject:* [I2nsf] Service Layer Policies - Post 1: Background > Information on PCIM > > > > > > > > 2. Brief description of PCIM > > > > The PCIM Class Hierarchy is very simple, as this is a CA > (condition-action) model. Events are NOT represented. PCIM defines a > PolicyRule, a PolicyGroup (group of PolicyRules), PolicyCondition, and > PolicyAction. These are all siblings; their common superclass is called > Policy, as shown below: > > > > ManagedElement (abstract) > | > +---Policy (abstract) > | | > | +---PolicyGroup > | | > | +---PolicyRule > | | > | +---PolicyCondition (abstract) > | | | > | | +---PolicyTimePeriodCondition > | | | > | | +---VendorPolicyCondition > | | > | +---PolicyAction (abstract) > | | > | +---VendorPolicyAction > > > > Note: PCIM does have a simple notion of Roles, but implements them as > attributes, instead of objects. This is not scalable, and does not fully > realize the power of using roles. This will be discussed more in Post 3. > > > > Note: It is possible to define limited constraints in PCIM as conditions. > For example, the VendorPolicyCondition class has two attributes, Constrai= nt > and ConstraintEncoding, that do this. This will be discussed more in Post= 4. > > > > Note: Context is NOT defined in the PCIM. > > > > [Linda] Do you agree that =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D= =E2=80=9CI2NSF subject=E2=80=9D & > =E2=80=9Cthe Contextual states (or the I2NSF object)=E2=80=9D? > > > > > > 3. Summary: main drawbacks of using PCIM > > > > Note that the current CIM Policy Model (2.44.1) is significantly differen= t > than either PCIM or PCIMe. PCIM is based on CIM 2.4; PCIMe is based on CI= M > 2.5. PCIMe is NOT backwards compatible with PCIM in all areas. > > > > Critical Problems: > > - There is no unique ID that can be used to distinguish different > instances of the same PolicyRule, PolicyGroup, PolicyCondition, > or PolicyAction. > > [Linda] Can we simply create an ID (string or numeric) for instances of > the same PolicyRule? Or it is more complicated? > > - Relationships are implemented by defining an abstract class > with keys, and then overriding the keys in the subclasses of the > relationship. This is broken. Would you override keys in an RDBMS? > > [Linda] Is the =E2=80=9CKey=E2=80=9D to differentiating different =E2=80= =9CPolicyRule=E2=80=9D? Can you > give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D? > > What events can cause =E2=80=9Coverriding the keys in the subclasses of t= he > relationship=E2=80=9D? > > - Most of the classes that are used to implement the relationships > do NOT have attributes, so it is impossible to restrict which > classes are related to which other classes (e.g., by context). > Put another way, the same relationship must always be used > between two types, even if the semantics varies. (The two > exceptions are PolicyConditionInPolicyRule and > PolicyActionInPolicyRule). > > [Linda] Does =E2=80=9Cclasses=E2=80=9D =3D=3D =E2=80=9CPolicyRule=E2=80= =9D? > > - The "ignore this unless you need this" philosophy does not > work. How do you know if other implementations that you are > supposed to interoperate with are using them? > > [Linda] Is =E2=80=9CIgnore this unless you need this=E2=80=9D an new type= of =E2=80=9CPolicyRule=E2=80=9D? > > - There is no concept of error or exception handling > - There is no concept of the subject or the target of a policy > > [Linda] Does your =E2=80=9Csubject=E2=80=9D have the same meaning as the = =E2=80=9CI2NSF subject=E2=80=9D > which means bits&bytes extracted from packets? > > - Adding a new type of policy (e.g., declarative or functional) > will cause a major rewrite of the entire model > > > > [Linda] Can we say that I2NSF policies have one type > =E2=80=9CSubject-ContextualStates- action- function? So in I2NSF environm= ent, there > is only the notion of adding a new =E2=80=9CPolicyRule=E2=80=9D, but no a= dding a new policy > type. Is this correct statement? > > - There is no approach to detecting and solving policy conflicts; > this is due to the simplistic notion of just using a PDP and a > PEP for applying policies. > > > > [Linda] in I2NSF, there could be a lot of conflicts, for example, there > could be two rules entered at different time: > > 1. Virtual Network X can=E2=80=99t access =E2=80=9CYouTube=E2=80= =9D, > > 2. 10.1.1.1 can access =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is= a host within > the Virtual Network X). > > Do you call the 2 rules above conflict? > > > > > > 4. Recommendations > > > > Given the large amount of problems, I recommend that we not consider PCIM > further. > > [Linda] should I2NSF reference PCIM? > > > > Thank you very much. Linda > > > > 5. Origin of PCIM/PCIMe > > > > This is a **theory** section; please skip unless you want to understand > the model in more detail. > > > > The PCIM is based on the DMTF CIM, which is actually a **data model** > (despite its name) because it uses relational technologies (e.g., keys an= d > weak references) to create its model. PCIM is based on an early version o= f > the CIM (2.4); the current version of the CIM is 2.44.1 as of this writin= g. > Since this is tied to the CIM, this means that: > > > > 1) Policy is subclassed from a more generic class (ManagedElement) > > 2) ALL relationships (associations, aggregations, and compositions) > > are realized as **classes** > > 3) As a result of 2), relationships are subclassed > > 4) Both attributes and associations are **inherited** > > 5) The same design approach (as much as possible) was used in > > PCIM/PCIMe as was in CIM. Specifically, it was thought better > > to define a generic, but optional, relationship instead of not > > defining the relationship. > > 6) The CIM does NOT have a single rooted hierarchy; this makes > > code generation more complex > > 7) The CIM uses a proprietary language and is not strictly UML > > compliant, even though it looks like UML (unfortunately, this > > language is also called MOF) > > > > Depending on the complexity of the implementation, the above have been > shown to produce problems in large environments. For example, the spirit = of > "let's define an attribute or association in case it is useful, and make = it > optional so you don't have to worry about it" not only violates some > well-known software architectural guidelines (e.g., Single Responsibility > Principle and the Liskov Substitution Principle), but it makes things > difficult to interoperate with (since you never really know if an attribu= te > or relationship should be instantiated or not). > > > > > > regards, > > John > --=20 regards, John --001a1143df7429115a05269142e2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Linda,

IMHO, a priority a= ttribute should not be overly used. PCIM's implementation fails (see Po= st 1), and PCIMe's has other problems (defined in Post 2, hopefully out= tonight). For example, how do you ensure that the priorities of all instan= ces of all rules are always updated? There is no mechanism in either PCIM o= r PCIMe that guarantees that priorities are deterministically determined. R= emember, you can have priorities on policy rules, and priorities on policy = groups. So, if you had:

=C2=A0=C2=A0 Group1 (prior= ity 5)
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Rule A (priority 10)
=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 Rule B (priority 1)
=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 Rule C (priority 50)
=C2=A0=C2=A0 Rule 2 (priorit= y 10)
=C2=A0=C2=A0 Group 3 (priority 3)
=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 Rule x, priority y

Rule 2 will exe= cute first, even though Group1.RuleC.priority =3D=3D 50
Likewise,= it doesn't matter how many rules are in Group 3, or what their priorit= ies are, they will all execute after Rule2, followed by the Rules in Group1= (C, A, B).
This gets harder as you start nesting groups within g= roups and rules within rules.

PCIMe has a policyDe= cisionStrategy attribute, which is used to define whether the container (Po= licyGroup or PolicyRule) of the PolicyRules uses first-match or all-match. = This obfuscates the value of the priority attribute.

As Bob rightly pointed out, execution context is everything. In FOCALE, = I defined context-aware policy rules. Context was used to select a working = set of policies; this working set collectively constituted the intelligence= that the manager implemented. Tie that into feedback from what was being m= anaged, and as the overall context changes, the working set of policies cha= nge. Kinda cool. But NOT maintainable using just priority.


regards,
John

On Thu, Dec 10, 2015 at 9:32 AM, = Linda Dunbar <linda.dunbar@huawei.com> wrote:

Bob,

=C2=A0=

Thank you very much = for listing down multiple scenarios below.

With what you descri= bed, the I2NSF rule-set may need a priority so that the NSF can enforce the= m accordingly.

In our current produ= ct implementation, the router=E2=80=99s longest match principle has been us= ed, i.e. rules for individual hosts override the rules for the subnet to which that hosts belong.

But there could be m= ore complicated conflict that what is listed below. Having a priority can b= e more precise.

=C2=A0=

=C2=A0=

Linda

=C2=A0=

From: Natale, Bob = [mailto:RNATALE@mitr= e.org]
Sent: Thursday, December 10, 2015 12:47 AM
To: Linda Dunbar; John Strassner
Cc: i2nsf@ietf.o= rg
Subject: RE: [I2nsf] Service Layer Policies - Post 1: Background Inf= ormation on PCIM

=C2=A0

Hi Linda,

=C2=A0

Input here from a lurker =E2=80=A6 c= alibrate accordingly!

=C2=A0

You asked:
=E2=80=9C[Linda] in I2NSF, there cou= ld be a lot of conflicts, for example, there could be two rules entered at = different time:

1.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0Virtual Network X can=E2=80=99= t access =E2=80=9CYouTube=E2=80=9D,

2.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 10.1.1.1 can access =E2=80=9CYouTube= =E2=80=9D (where 10.1.1.1 is a host within the Virtual Network X).

Do you call the 2 rules above conflict?=E2=80=9D

The answer is =E2=80=9Cit depends=E2=80=9D =E2=80=A6 depend= s on a broader policy execution context =E2=80=A6 a concept that PCIM itsel= f does not directly support. For example, that broader context could stipul= ate (via policy) that #1 is the default but explicit exception specifications like #2 can o= verride the default =E2=80=A6 alternatively, that broader context could sti= pulate that #1 is absolute and any attempt to specify (preferably) or execu= te #2 would be denied =E2=80=A6 those are only two examples, there are multiple potentially valid variations. How much of tha= t context a group wants to standardize is an important decision for the gro= up to understand and make =E2=80=A6 PCIM itself will not take you very far,= however.

Avanti,

BobN

=C2=A0

From: I2nsf [mailto:i2nsf-bounc= es@ietf.org] On Behalf Of Linda Dunbar
Sent: Tuesday, December 08, 2015 4:11 PM
To: John Strassner <strazpdj@gmail.com>; i2nsf@ietf.org
Subject: Re: [I2nsf] Service Layer Policies - Post 1: Background Inf= ormation on PCIM

=C2=A0

John,

=C2=A0=

Thank you very much = for the in-depth analysis of PCIM and its suitability as something that I2N= SF should be based on. What you write is very valuable. I think the analysis should be added to the I2NSF gap analysis, (or be a standalon= e Policy Analysis ID).

=C2=A0=

I have some question= s inserted below:

=C2=A0=

From: I2nsf [mailto:i2nsf-bounces= @ietf.org] On Behalf Of John Strassner
Sent: Sunday, December 06, 2015 7:01 PM
To: i2nsf@ietf.o= rg
Subject: [I2nsf] Service Layer Policies - Post 1: Background Informa= tion on PCIM

=C2=A0

<Snipped>=

=C2=A0

2.=C2=A0 Brief description of PCIM

=C2=A0

The PCIM Class Hierarchy is very simple, as this is = a CA (condition-action) model. Events are NOT represented. PCIM defines a P= olicyRule, a PolicyGroup (group of PolicyRules), PolicyCondition, and Polic= yAction. These are all siblings; their common superclass is called Policy, as shown below:

=C2=A0

ManagedElement (abstract)
=C2=A0 |
=C2=A0 +---Policy (abstract)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyGroup
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyRule
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyCondition (abstract)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 +---P= olicyTimePeriodCondition
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= +---VendorPolicyCondition
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyAction (abstract)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = +---VendorPolicyAction

=C2=A0

Note: PCIM does have a simple notion of Roles, but i= mplements them as attributes, instead of objects. This is not scalable, and= does not fully realize the power of using roles. This will be discussed mo= re in Post 3.

=C2=A0

Note: It is possible to define limited constraints i= n PCIM as conditions. For example, the VendorPolicyCondition class has two = attributes, Constraint and ConstraintEncoding, that do this. This will be d= iscussed more in Post 4.

=C2=A0

Note: Context is NOT defined in the PCIM.<= /u>

=C2=A0=

[Linda] =C2=A0Do you= agree that =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D =E2=80=9CI2NSF s= ubject=E2=80=9D & =E2=80=9Cthe Contextual states (or the I2NSF object)= =E2=80=9D?

=C2=A0

=C2=A0

3.=C2=A0 Summary: main drawbacks of using PCIM

=C2=A0

Note that the current CIM Policy Model (2.44.1) is s= ignificantly different than either PCIM or PCIMe.=C2=A0PCIM is based on CIM= 2.4; PCIMe is based on CIM 2.5. PCIMe is NOT backwards compatible with PCI= M in all areas.

=C2=A0

Critical Problems:

  • There is no unique ID that can be used to distinguish different
    instances of the same PolicyRule, PolicyGroup, PolicyCondition,
    or PolicyAction.

[Linda] Can we simpl= y create an ID (string or numeric) for instances of the same PolicyRule? Or= it is more complicated?

  • Relationships are implemented by defining an abstract class
    with keys, and then overriding the keys in the subclasses of the
    relationship. This is broken. Would you override keys in an RDBMS?

[Linda] Is the =E2= =80=9CKey=E2=80=9D to differentiating different =E2=80=9CPolicyRule=E2=80= =9D?=C2=A0 =C2=A0Can you give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D?

What events can caus= e =E2=80=9Coverriding the keys in the subclasses of the relationship=E2=80= =9D?

  • Most of the classes that are used to implement the relationships
    do NOT have attributes, so it is impossible to restrict which
    classes are related to which other classes (e.g., by context).
    Put another way, the same relationship must always be used
    between two types, even if the semantics varies. (The two
    exceptions are PolicyConditionInPolicyRule and
    PolicyActionInPolicyRule).

[Linda] Does =E2=80= =9Cclasses=E2=80=9D =3D=3D =E2=80=9CPolicyRule=E2=80=9D?

  • The "ignore this unless you need this" philosophy does not
    work. How do you know if other implementations that you are
    supposed to interoperate with are using them?

[Linda] Is =E2=80=9C= Ignore this unless you need this=E2=80=9D an new type of =E2=80=9CPolicyRul= e=E2=80=9D?

  • There is no concept of error or exception handling
  • There is no concept of the subject or the target of a policy<= /li>

[Linda] Does your = =E2=80=9Csubject=E2=80=9D have the same meaning as the =E2=80=9CI2NSF subje= ct=E2=80=9D which means bits&bytes extracted from packets?

  • Adding a new type of policy (e.g., declarative or functional)
    will cause a major rewrite of the entire model

=C2=A0=

[Linda] Can we say t= hat =C2=A0I2NSF policies have one type =E2=80=9CSubject-ContextualStates- a= ction- function? So in I2NSF environment, there is only the notion of adding a new =E2=80= =9CPolicyRule=E2=80=9D, but no adding a new policy type. Is this correct st= atement? =C2=A0

  • There is no approach to detecting and solving policy conflicts;
    this is due to the simplistic notion of just using a PDP and a
    PEP for applying policies.

=C2=A0=

[Linda] in I2NSF, th= ere could be a lot of conflicts, for example, there could be two rules ente= red at different time:

1.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0Virtual Network X can=E2=80=99= t access =E2=80=9CYouTube=E2=80=9D,

2.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 10.1.1.1 can access =E2=80=9CYouTube= =E2=80=9D (where 10.1.1.1 is a host within the Virtual Network X).

Do you call the 2 rules above conflict?

=C2=A0

=C2=A0

4. Recommendations

=C2=A0

Given the large amount of problems, I recommend that= we not consider PCIM further.

[Linda] should = I2NSF reference PCIM?

=C2=A0=

Thank you very much.= Linda

=C2=A0

5. Origin of PCIM/PCIMe

=C2=A0

This is a **theory** section; please skip unless you= want to understand the model in more detail.

=C2=A0

The PCIM is based on the DMTF CIM, which is actually= a **data model** (despite its name) because it uses relational technologie= s (e.g., keys and weak references) to create its model. PCIM is based on an= early version of the CIM (2.4); the current version of the CIM is 2.44.1 as of this writing. Since this is tie= d to the CIM, this means that:

=C2=A0

=C2=A0=C2=A0 1) Policy is subclassed from a more gen= eric class (ManagedElement)

=C2=A0=C2=A0 2) ALL relationships (associations, agg= regations, and compositions)

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 are realized as= **classes**

=C2=A0=C2=A0 3) As a result of 2), relationships are= subclassed

=C2=A0=C2=A0 4) Both attributes and associations are= **inherited**

=C2=A0=C2=A0 5) The same design approach (as much as= possible) was used in

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 PCIM/PCIM= e as was in CIM. Specifically, it was thought better

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 to define= a generic, but optional, relationship instead of not

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 defining = the relationship.

=C2=A0=C2=A0 6) The CIM does NOT have a single roote= d hierarchy; this makes

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 code gene= ration more complex

=C2=A0=C2=A0 7) The CIM uses a proprietary language = and is not strictly UML

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 compliant= , even though it looks like UML (unfortunately, this

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 language = is also called MOF)=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0

=C2=A0

Depending on the complexity of the implementation, t= he above have been shown to produce problems in large environments. For exa= mple, the spirit of "let's define an attribute or association in c= ase it is useful, and make it optional so you don't have to worry about it" not only violates some well-known s= oftware architectural guidelines (e.g., Single Responsibility Principle and= the Liskov Substitution Principle), but it makes things difficult to inter= operate with (since you never really know if an attribute or relationship should be instantiated or not).<= /u>

=C2=A0

=C2=A0

regards,

John




--
regards,
John
--001a1143df7429115a05269142e2-- From nobody Thu Dec 10 22:53:07 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 487CB1AC3BB for ; Thu, 10 Dec 2015 22:53:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.31 X-Spam-Level: X-Spam-Status: No, score=-3.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_45=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FNfNbykPbiSh for ; Thu, 10 Dec 2015 22:52:59 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F57C1AC3BA for ; Thu, 10 Dec 2015 22:52:58 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CFH34483; Fri, 11 Dec 2015 06:52:54 +0000 (GMT) Received: from lhreml703-cah.china.huawei.com (10.201.5.104) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.235.1; Fri, 11 Dec 2015 06:52:53 +0000 Received: from SZXEMA413-HUB.china.huawei.com (10.82.72.72) by lhreml703-cah.china.huawei.com (10.201.5.104) with Microsoft SMTP Server (TLS) id 14.3.235.1; Fri, 11 Dec 2015 06:52:50 +0000 Received: from SZXEMA502-MBS.china.huawei.com ([169.254.4.87]) by SZXEMA413-HUB.china.huawei.com ([10.82.72.72]) with mapi id 14.03.0235.001; Fri, 11 Dec 2015 14:52:42 +0800 From: "Xialiang (Frank)" To: John Strassner , Linda Dunbar Thread-Topic: [I2nsf] Service Layer Policies - Post 1: Background Information on PCIM Thread-Index: AQHRM4t3GNqmcuz2REO8dZSdd+PFf57FUN7g Date: Fri, 11 Dec 2015 06:52:42 +0000 Message-ID: References: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> <4A95BA014132FF49AE685FAB4B9F17F657DAF428@dfweml701-chm> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.135.43.91] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F12AEBE039SZXEMA502MBSchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020202.566A72C8.001A, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.4.87, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: e0ee0c352a844e659896d61615372bec Archived-At: Cc: "i2nsf@ietf.org" , "Natale, Bob" Subject: [I2nsf] =?utf-8?b?562U5aSNOiAgU2VydmljZSBMYXllciBQb2xpY2llcyAt?= =?utf-8?q?_Post_1=3A_Background_Information_on_PCIM?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Dec 2015 06:53:05 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F12AEBE039SZXEMA502MBSchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSm9obiwNCkZpcnN0bHksIHRoYW5rcyBmb3IgcmFpc2luZyB0aGlzIHZhbHVhYmxlIGRpc2N1 c3Npb24gYWJvdXQgSTJOU0YgcG9saWN5IG1vZGVsLiBJdOKAmXMgcmVhbGx5IHVzZWZ1bCB0byBv dXIgaW50ZXJmYWNlIGluZm9ybWF0aW9uIG1vZGVsIGRyYWZ0cy4NClBsZWFzZSBzZWUgbXkgY29t bWVudHMgaW5saW5lOg0KDQpCLlIuDQpGcmFuaw0K5Y+R5Lu25Lq6OiBJMm5zZiBbbWFpbHRvOmky bnNmLWJvdW5jZXNAaWV0Zi5vcmddIOS7o+ihqCBKb2huIFN0cmFzc25lcg0K5Y+R6YCB5pe26Ze0 OiAyMDE15bm0MTLmnIgxMeaXpSA0OjQzDQrmlLbku7bkuro6IExpbmRhIER1bmJhcjsgSm9obiBT dHJhc3NuZXINCuaKhOmAgTogaTJuc2ZAaWV0Zi5vcmc7IE5hdGFsZSwgQm9iDQrkuLvpopg6IFJl OiBbSTJuc2ZdIFNlcnZpY2UgTGF5ZXIgUG9saWNpZXMgLSBQb3N0IDE6IEJhY2tncm91bmQgSW5m b3JtYXRpb24gb24gUENJTQ0KDQpIaSBMaW5kYSwNCg0KSU1ITywgYSBwcmlvcml0eSBhdHRyaWJ1 dGUgc2hvdWxkIG5vdCBiZSBvdmVybHkgdXNlZC4gUENJTSdzIGltcGxlbWVudGF0aW9uIGZhaWxz IChzZWUgUG9zdCAxKSwgYW5kIFBDSU1lJ3MgaGFzIG90aGVyIHByb2JsZW1zIChkZWZpbmVkIGlu IFBvc3QgMiwgaG9wZWZ1bGx5IG91dCB0b25pZ2h0KS4gRm9yIGV4YW1wbGUsIGhvdyBkbyB5b3Ug ZW5zdXJlIHRoYXQgdGhlIHByaW9yaXRpZXMgb2YgYWxsIGluc3RhbmNlcyBvZiBhbGwgcnVsZXMg YXJlIGFsd2F5cyB1cGRhdGVkPyBUaGVyZSBpcyBubyBtZWNoYW5pc20gaW4gZWl0aGVyIFBDSU0g b3IgUENJTWUgdGhhdCBndWFyYW50ZWVzIHRoYXQgcHJpb3JpdGllcyBhcmUgZGV0ZXJtaW5pc3Rp Y2FsbHkgZGV0ZXJtaW5lZC4gUmVtZW1iZXIsIHlvdSBjYW4gaGF2ZSBwcmlvcml0aWVzIG9uIHBv bGljeSBydWxlcywgYW5kIHByaW9yaXRpZXMgb24gcG9saWN5IGdyb3Vwcy4gU28sIGlmIHlvdSBo YWQ6DQoNCiAgIEdyb3VwMSAocHJpb3JpdHkgNSkNCiAgICAgIFJ1bGUgQSAocHJpb3JpdHkgMTAp DQogICAgICBSdWxlIEIgKHByaW9yaXR5IDEpDQogICAgICBSdWxlIEMgKHByaW9yaXR5IDUwKQ0K ICAgUnVsZSAyIChwcmlvcml0eSAxMCkNCiAgIEdyb3VwIDMgKHByaW9yaXR5IDMpDQogICAgICBS dWxlIHgsIHByaW9yaXR5IHkNCg0KUnVsZSAyIHdpbGwgZXhlY3V0ZSBmaXJzdCwgZXZlbiB0aG91 Z2ggR3JvdXAxLlJ1bGVDLnByaW9yaXR5ID09IDUwDQpMaWtld2lzZSwgaXQgZG9lc24ndCBtYXR0 ZXIgaG93IG1hbnkgcnVsZXMgYXJlIGluIEdyb3VwIDMsIG9yIHdoYXQgdGhlaXIgcHJpb3JpdGll cyBhcmUsIHRoZXkgd2lsbCBhbGwgZXhlY3V0ZSBhZnRlciBSdWxlMiwgZm9sbG93ZWQgYnkgdGhl IFJ1bGVzIGluIEdyb3VwMSAoQywgQSwgQikuDQpUaGlzIGdldHMgaGFyZGVyIGFzIHlvdSBzdGFy dCBuZXN0aW5nIGdyb3VwcyB3aXRoaW4gZ3JvdXBzIGFuZCBydWxlcyB3aXRoaW4gcnVsZXMuDQpb RnJhbmtdOiAgVGFrZSB0aGlzIGV4YW1wbGUsIEkgYW0gYSBsaXR0bGUgd29ycmllZCBhYm91dCB0 aGUgY29tcGxleGl0eSBicm91Z2h0IGJ5IHRoZSBuZXN0aW5nIGFuZCByZWN1cnNpb24gb3BlcmF0 aW9uLiBUaGV5IGFyZSBwb3dlcmZ1bCBidXQgYWxzbyBjb21wbGljYXRlZC4gSSB0aGluayB3ZSBz aG91bGQgYmUgY2FyZWZ1bCBpbiBkZXNpZ25pbmcgdGhlIGluZm9ybWF0aW9uIG1vZGVsIHRvIHBy ZXZlbnQgaXQgdG8gYmUgdG9vIGNvbXBsZXguDQoNClBDSU1lIGhhcyBhIHBvbGljeURlY2lzaW9u U3RyYXRlZ3kgYXR0cmlidXRlLCB3aGljaCBpcyB1c2VkIHRvIGRlZmluZSB3aGV0aGVyIHRoZSBj b250YWluZXIgKFBvbGljeUdyb3VwIG9yIFBvbGljeVJ1bGUpIG9mIHRoZSBQb2xpY3lSdWxlcyB1 c2VzIGZpcnN0LW1hdGNoIG9yIGFsbC1tYXRjaC4gVGhpcyBvYmZ1c2NhdGVzIHRoZSB2YWx1ZSBv ZiB0aGUgcHJpb3JpdHkgYXR0cmlidXRlLg0KDQpBcyBCb2IgcmlnaHRseSBwb2ludGVkIG91dCwg ZXhlY3V0aW9uIGNvbnRleHQgaXMgZXZlcnl0aGluZy4gSW4gRk9DQUxFLCBJIGRlZmluZWQgY29u dGV4dC1hd2FyZSBwb2xpY3kgcnVsZXMuIENvbnRleHQgd2FzIHVzZWQgdG8gc2VsZWN0IGEgd29y a2luZyBzZXQgb2YgcG9saWNpZXM7IHRoaXMgd29ya2luZyBzZXQgY29sbGVjdGl2ZWx5IGNvbnN0 aXR1dGVkIHRoZSBpbnRlbGxpZ2VuY2UgdGhhdCB0aGUgbWFuYWdlciBpbXBsZW1lbnRlZC4gVGll IHRoYXQgaW50byBmZWVkYmFjayBmcm9tIHdoYXQgd2FzIGJlaW5nIG1hbmFnZWQsIGFuZCBhcyB0 aGUgb3ZlcmFsbCBjb250ZXh0IGNoYW5nZXMsIHRoZSB3b3JraW5nIHNldCBvZiBwb2xpY2llcyBj aGFuZ2UuIEtpbmRhIGNvb2wuIEJ1dCBOT1QgbWFpbnRhaW5hYmxlIHVzaW5nIGp1c3QgcHJpb3Jp dHkuDQpbRnJhbmtdOiBUaGlzIGNvbnRleHQtYXdhcmUgcG9saWN5IHJ1bGVzIG1ha2Ugc2Vuc2Ug Zm9yIEkyTlNGIGluIG15IG9waW5pb24uIEFyZSB5b3UgZ29pbmcgdG8gaW50cm9kdWNlIGl0IGlu dG8gSTJOU0Y/DQoNCnJlZ2FyZHMsDQpKb2huDQoNCk9uIFRodSwgRGVjIDEwLCAyMDE1IGF0IDk6 MzIgQU0sIExpbmRhIER1bmJhciA8bGluZGEuZHVuYmFyQGh1YXdlaS5jb208bWFpbHRvOmxpbmRh LmR1bmJhckBodWF3ZWkuY29tPj4gd3JvdGU6DQpCb2IsDQoNClRoYW5rIHlvdSB2ZXJ5IG11Y2gg Zm9yIGxpc3RpbmcgZG93biBtdWx0aXBsZSBzY2VuYXJpb3MgYmVsb3cuDQpXaXRoIHdoYXQgeW91 IGRlc2NyaWJlZCwgdGhlIEkyTlNGIHJ1bGUtc2V0IG1heSBuZWVkIGEgcHJpb3JpdHkgc28gdGhh dCB0aGUgTlNGIGNhbiBlbmZvcmNlIHRoZW0gYWNjb3JkaW5nbHkuDQpJbiBvdXIgY3VycmVudCBw cm9kdWN0IGltcGxlbWVudGF0aW9uLCB0aGUgcm91dGVy4oCZcyBsb25nZXN0IG1hdGNoIHByaW5j aXBsZSBoYXMgYmVlbiB1c2VkLCBpLmUuIHJ1bGVzIGZvciBpbmRpdmlkdWFsIGhvc3RzIG92ZXJy aWRlIHRoZSBydWxlcyBmb3IgdGhlIHN1Ym5ldCB0byB3aGljaCB0aGF0IGhvc3RzIGJlbG9uZy4N CkJ1dCB0aGVyZSBjb3VsZCBiZSBtb3JlIGNvbXBsaWNhdGVkIGNvbmZsaWN0IHRoYXQgd2hhdCBp cyBsaXN0ZWQgYmVsb3cuIEhhdmluZyBhIHByaW9yaXR5IGNhbiBiZSBtb3JlIHByZWNpc2UuDQoN Cg0KTGluZGENCg0KRnJvbTogTmF0YWxlLCBCb2IgW21haWx0bzpSTkFUQUxFQG1pdHJlLm9yZzxt YWlsdG86Uk5BVEFMRUBtaXRyZS5vcmc+XQ0KU2VudDogVGh1cnNkYXksIERlY2VtYmVyIDEwLCAy MDE1IDEyOjQ3IEFNDQpUbzogTGluZGEgRHVuYmFyOyBKb2huIFN0cmFzc25lcg0KQ2M6IGkybnNm QGlldGYub3JnPG1haWx0bzppMm5zZkBpZXRmLm9yZz4NClN1YmplY3Q6IFJFOiBbSTJuc2ZdIFNl cnZpY2UgTGF5ZXIgUG9saWNpZXMgLSBQb3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRpb24gb24g UENJTQ0KDQpIaSBMaW5kYSwNCg0KSW5wdXQgaGVyZSBmcm9tIGEgbHVya2VyIOKApiBjYWxpYnJh dGUgYWNjb3JkaW5nbHkhDQoNCllvdSBhc2tlZDoNCuKAnFtMaW5kYV0gaW4gSTJOU0YsIHRoZXJl IGNvdWxkIGJlIGEgbG90IG9mIGNvbmZsaWN0cywgZm9yIGV4YW1wbGUsIHRoZXJlIGNvdWxkIGJl IHR3byBydWxlcyBlbnRlcmVkIGF0IGRpZmZlcmVudCB0aW1lOg0KDQoxLiAgICAgICAgVmlydHVh bCBOZXR3b3JrIFggY2Fu4oCZdCBhY2Nlc3Mg4oCcWW91VHViZeKAnSwNCg0KMi4gICAgICAgMTAu MS4xLjEgY2FuIGFjY2VzcyDigJxZb3VUdWJl4oCdICh3aGVyZSAxMC4xLjEuMSBpcyBhIGhvc3Qg d2l0aGluIHRoZSBWaXJ0dWFsIE5ldHdvcmsgWCkuDQoNCkRvIHlvdSBjYWxsIHRoZSAyIHJ1bGVz IGFib3ZlIGNvbmZsaWN0P+KAnQ0KDQpUaGUgYW5zd2VyIGlzIOKAnGl0IGRlcGVuZHPigJ0g4oCm IGRlcGVuZHMgb24gYSBicm9hZGVyIHBvbGljeSBleGVjdXRpb24gY29udGV4dCDigKYgYSBjb25j ZXB0IHRoYXQgUENJTSBpdHNlbGYgZG9lcyBub3QgZGlyZWN0bHkgc3VwcG9ydC4gRm9yIGV4YW1w bGUsIHRoYXQgYnJvYWRlciBjb250ZXh0IGNvdWxkIHN0aXB1bGF0ZSAodmlhIHBvbGljeSkgdGhh dCAjMSBpcyB0aGUgZGVmYXVsdCBidXQgZXhwbGljaXQgZXhjZXB0aW9uIHNwZWNpZmljYXRpb25z IGxpa2UgIzIgY2FuIG92ZXJyaWRlIHRoZSBkZWZhdWx0IOKApiBhbHRlcm5hdGl2ZWx5LCB0aGF0 IGJyb2FkZXIgY29udGV4dCBjb3VsZCBzdGlwdWxhdGUgdGhhdCAjMSBpcyBhYnNvbHV0ZSBhbmQg YW55IGF0dGVtcHQgdG8gc3BlY2lmeSAocHJlZmVyYWJseSkgb3IgZXhlY3V0ZSAjMiB3b3VsZCBi ZSBkZW5pZWQg4oCmIHRob3NlIGFyZSBvbmx5IHR3byBleGFtcGxlcywgdGhlcmUgYXJlIG11bHRp cGxlIHBvdGVudGlhbGx5IHZhbGlkIHZhcmlhdGlvbnMuIEhvdyBtdWNoIG9mIHRoYXQgY29udGV4 dCBhIGdyb3VwIHdhbnRzIHRvIHN0YW5kYXJkaXplIGlzIGFuIGltcG9ydGFudCBkZWNpc2lvbiBm b3IgdGhlIGdyb3VwIHRvIHVuZGVyc3RhbmQgYW5kIG1ha2Ug4oCmIFBDSU0gaXRzZWxmIHdpbGwg bm90IHRha2UgeW91IHZlcnkgZmFyLCBob3dldmVyLg0KQXZhbnRpLA0KQm9iTg0KDQpGcm9tOiBJ Mm5zZiBbbWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBMaW5kYSBE dW5iYXINClNlbnQ6IFR1ZXNkYXksIERlY2VtYmVyIDA4LCAyMDE1IDQ6MTEgUE0NClRvOiBKb2hu IFN0cmFzc25lciA8c3RyYXpwZGpAZ21haWwuY29tPG1haWx0bzpzdHJhenBkakBnbWFpbC5jb20+ PjsgaTJuc2ZAaWV0Zi5vcmc8bWFpbHRvOmkybnNmQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtJ Mm5zZl0gU2VydmljZSBMYXllciBQb2xpY2llcyAtIFBvc3QgMTogQmFja2dyb3VuZCBJbmZvcm1h dGlvbiBvbiBQQ0lNDQoNCkpvaG4sDQoNClRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHRoZSBpbi1k ZXB0aCBhbmFseXNpcyBvZiBQQ0lNIGFuZCBpdHMgc3VpdGFiaWxpdHkgYXMgc29tZXRoaW5nIHRo YXQgSTJOU0Ygc2hvdWxkIGJlIGJhc2VkIG9uLiBXaGF0IHlvdSB3cml0ZSBpcyB2ZXJ5IHZhbHVh YmxlLiBJIHRoaW5rIHRoZSBhbmFseXNpcyBzaG91bGQgYmUgYWRkZWQgdG8gdGhlIEkyTlNGIGdh cCBhbmFseXNpcywgKG9yIGJlIGEgc3RhbmRhbG9uZSBQb2xpY3kgQW5hbHlzaXMgSUQpLg0KDQpJ IGhhdmUgc29tZSBxdWVzdGlvbnMgaW5zZXJ0ZWQgYmVsb3c6DQoNCkZyb206IEkybnNmIFttYWls dG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEpvaG4gU3RyYXNzbmVyDQpT ZW50OiBTdW5kYXksIERlY2VtYmVyIDA2LCAyMDE1IDc6MDEgUE0NClRvOiBpMm5zZkBpZXRmLm9y ZzxtYWlsdG86aTJuc2ZAaWV0Zi5vcmc+DQpTdWJqZWN0OiBbSTJuc2ZdIFNlcnZpY2UgTGF5ZXIg UG9saWNpZXMgLSBQb3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRpb24gb24gUENJTQ0KDQo8U25p cHBlZD4NCg0KMi4gIEJyaWVmIGRlc2NyaXB0aW9uIG9mIFBDSU0NCg0KVGhlIFBDSU0gQ2xhc3Mg SGllcmFyY2h5IGlzIHZlcnkgc2ltcGxlLCBhcyB0aGlzIGlzIGEgQ0EgKGNvbmRpdGlvbi1hY3Rp b24pIG1vZGVsLiBFdmVudHMgYXJlIE5PVCByZXByZXNlbnRlZC4gUENJTSBkZWZpbmVzIGEgUG9s aWN5UnVsZSwgYSBQb2xpY3lHcm91cCAoZ3JvdXAgb2YgUG9saWN5UnVsZXMpLCBQb2xpY3lDb25k aXRpb24sIGFuZCBQb2xpY3lBY3Rpb24uIFRoZXNlIGFyZSBhbGwgc2libGluZ3M7IHRoZWlyIGNv bW1vbiBzdXBlcmNsYXNzIGlzIGNhbGxlZCBQb2xpY3ksIGFzIHNob3duIGJlbG93Og0KDQpNYW5h Z2VkRWxlbWVudCAoYWJzdHJhY3QpDQogIHwNCiAgKy0tLVBvbGljeSAoYWJzdHJhY3QpDQogIHwg ICAgIHwNCiAgfCAgICAgKy0tLVBvbGljeUdyb3VwDQogIHwgICAgIHwNCiAgfCAgICAgKy0tLVBv bGljeVJ1bGUNCiAgfCAgICAgfA0KICB8ICAgICArLS0tUG9saWN5Q29uZGl0aW9uIChhYnN0cmFj dCkNCiAgfCAgICAgfCAgICAgIHwNCiAgfCAgICAgfCAgICAgICstLS1Qb2xpY3lUaW1lUGVyaW9k Q29uZGl0aW9uDQogIHwgICAgIHwgICAgICB8DQogIHwgICAgIHwgICAgICArLS0tVmVuZG9yUG9s aWN5Q29uZGl0aW9uDQogIHwgICAgIHwNCiAgfCAgICAgKy0tLVBvbGljeUFjdGlvbiAoYWJzdHJh Y3QpDQogIHwgICAgICAgICAgICB8DQogIHwgICAgICAgICAgICArLS0tVmVuZG9yUG9saWN5QWN0 aW9uDQoNCk5vdGU6IFBDSU0gZG9lcyBoYXZlIGEgc2ltcGxlIG5vdGlvbiBvZiBSb2xlcywgYnV0 IGltcGxlbWVudHMgdGhlbSBhcyBhdHRyaWJ1dGVzLCBpbnN0ZWFkIG9mIG9iamVjdHMuIFRoaXMg aXMgbm90IHNjYWxhYmxlLCBhbmQgZG9lcyBub3QgZnVsbHkgcmVhbGl6ZSB0aGUgcG93ZXIgb2Yg dXNpbmcgcm9sZXMuIFRoaXMgd2lsbCBiZSBkaXNjdXNzZWQgbW9yZSBpbiBQb3N0IDMuDQoNCk5v dGU6IEl0IGlzIHBvc3NpYmxlIHRvIGRlZmluZSBsaW1pdGVkIGNvbnN0cmFpbnRzIGluIFBDSU0g YXMgY29uZGl0aW9ucy4gRm9yIGV4YW1wbGUsIHRoZSBWZW5kb3JQb2xpY3lDb25kaXRpb24gY2xh c3MgaGFzIHR3byBhdHRyaWJ1dGVzLCBDb25zdHJhaW50IGFuZCBDb25zdHJhaW50RW5jb2Rpbmcs IHRoYXQgZG8gdGhpcy4gVGhpcyB3aWxsIGJlIGRpc2N1c3NlZCBtb3JlIGluIFBvc3QgNC4NCg0K Tm90ZTogQ29udGV4dCBpcyBOT1QgZGVmaW5lZCBpbiB0aGUgUENJTS4NCg0KW0xpbmRhXSAgRG8g eW91IGFncmVlIHRoYXQg4oCcQ29uZGl0aW9uIG9mIHRoZSBQQ0lN4oCdID09IOKAnEkyTlNGIHN1 YmplY3TigJ0gJiDigJx0aGUgQ29udGV4dHVhbCBzdGF0ZXMgKG9yIHRoZSBJMk5TRiBvYmplY3Qp 4oCdPw0KDQoNCjMuICBTdW1tYXJ5OiBtYWluIGRyYXdiYWNrcyBvZiB1c2luZyBQQ0lNDQoNCk5v dGUgdGhhdCB0aGUgY3VycmVudCBDSU0gUG9saWN5IE1vZGVsICgyLjQ0LjEpIGlzIHNpZ25pZmlj YW50bHkgZGlmZmVyZW50IHRoYW4gZWl0aGVyIFBDSU0gb3IgUENJTWUuIFBDSU0gaXMgYmFzZWQg b24gQ0lNIDIuNDsgUENJTWUgaXMgYmFzZWQgb24gQ0lNIDIuNS4gUENJTWUgaXMgTk9UIGJhY2t3 YXJkcyBjb21wYXRpYmxlIHdpdGggUENJTSBpbiBhbGwgYXJlYXMuDQoNCkNyaXRpY2FsIFByb2Js ZW1zOg0KDQogICogICBUaGVyZSBpcyBubyB1bmlxdWUgSUQgdGhhdCBjYW4gYmUgdXNlZCB0byBk aXN0aW5ndWlzaCBkaWZmZXJlbnQNCmluc3RhbmNlcyBvZiB0aGUgc2FtZSBQb2xpY3lSdWxlLCBQ b2xpY3lHcm91cCwgUG9saWN5Q29uZGl0aW9uLA0Kb3IgUG9saWN5QWN0aW9uLg0KW0xpbmRhXSBD YW4gd2Ugc2ltcGx5IGNyZWF0ZSBhbiBJRCAoc3RyaW5nIG9yIG51bWVyaWMpIGZvciBpbnN0YW5j ZXMgb2YgdGhlIHNhbWUgUG9saWN5UnVsZT8gT3IgaXQgaXMgbW9yZSBjb21wbGljYXRlZD8NCg0K ICAqICAgUmVsYXRpb25zaGlwcyBhcmUgaW1wbGVtZW50ZWQgYnkgZGVmaW5pbmcgYW4gYWJzdHJh Y3QgY2xhc3MNCndpdGgga2V5cywgYW5kIHRoZW4gb3ZlcnJpZGluZyB0aGUga2V5cyBpbiB0aGUg c3ViY2xhc3NlcyBvZiB0aGUNCnJlbGF0aW9uc2hpcC4gVGhpcyBpcyBicm9rZW4uIFdvdWxkIHlv dSBvdmVycmlkZSBrZXlzIGluIGFuIFJEQk1TPw0KW0xpbmRhXSBJcyB0aGUg4oCcS2V54oCdIHRv IGRpZmZlcmVudGlhdGluZyBkaWZmZXJlbnQg4oCcUG9saWN5UnVsZeKAnT8gICBDYW4geW91IGdp dmUgYW4gZXhhbXBsZSBvZiDigJxzdWJjbGFzc2VzIG9mIHRoZSByZWxhdGlvbnNoaXDigJ0/DQpX aGF0IGV2ZW50cyBjYW4gY2F1c2Ug4oCcb3ZlcnJpZGluZyB0aGUga2V5cyBpbiB0aGUgc3ViY2xh c3NlcyBvZiB0aGUgcmVsYXRpb25zaGlw4oCdPw0KDQogICogICBNb3N0IG9mIHRoZSBjbGFzc2Vz IHRoYXQgYXJlIHVzZWQgdG8gaW1wbGVtZW50IHRoZSByZWxhdGlvbnNoaXBzDQpkbyBOT1QgaGF2 ZSBhdHRyaWJ1dGVzLCBzbyBpdCBpcyBpbXBvc3NpYmxlIHRvIHJlc3RyaWN0IHdoaWNoDQpjbGFz c2VzIGFyZSByZWxhdGVkIHRvIHdoaWNoIG90aGVyIGNsYXNzZXMgKGUuZy4sIGJ5IGNvbnRleHQp Lg0KUHV0IGFub3RoZXIgd2F5LCB0aGUgc2FtZSByZWxhdGlvbnNoaXAgbXVzdCBhbHdheXMgYmUg dXNlZA0KYmV0d2VlbiB0d28gdHlwZXMsIGV2ZW4gaWYgdGhlIHNlbWFudGljcyB2YXJpZXMuIChU aGUgdHdvDQpleGNlcHRpb25zIGFyZSBQb2xpY3lDb25kaXRpb25JblBvbGljeVJ1bGUgYW5kDQpQ b2xpY3lBY3Rpb25JblBvbGljeVJ1bGUpLg0KW0xpbmRhXSBEb2VzIOKAnGNsYXNzZXPigJ0gPT0g 4oCcUG9saWN5UnVsZeKAnT8NCg0KICAqICAgVGhlICJpZ25vcmUgdGhpcyB1bmxlc3MgeW91IG5l ZWQgdGhpcyIgcGhpbG9zb3BoeSBkb2VzIG5vdA0Kd29yay4gSG93IGRvIHlvdSBrbm93IGlmIG90 aGVyIGltcGxlbWVudGF0aW9ucyB0aGF0IHlvdSBhcmUNCnN1cHBvc2VkIHRvIGludGVyb3BlcmF0 ZSB3aXRoIGFyZSB1c2luZyB0aGVtPw0KW0xpbmRhXSBJcyDigJxJZ25vcmUgdGhpcyB1bmxlc3Mg eW91IG5lZWQgdGhpc+KAnSBhbiBuZXcgdHlwZSBvZiDigJxQb2xpY3lSdWxl4oCdPw0KDQogICog ICBUaGVyZSBpcyBubyBjb25jZXB0IG9mIGVycm9yIG9yIGV4Y2VwdGlvbiBoYW5kbGluZw0KICAq ICAgVGhlcmUgaXMgbm8gY29uY2VwdCBvZiB0aGUgc3ViamVjdCBvciB0aGUgdGFyZ2V0IG9mIGEg cG9saWN5DQpbTGluZGFdIERvZXMgeW91ciDigJxzdWJqZWN04oCdIGhhdmUgdGhlIHNhbWUgbWVh bmluZyBhcyB0aGUg4oCcSTJOU0Ygc3ViamVjdOKAnSB3aGljaCBtZWFucyBiaXRzJmJ5dGVzIGV4 dHJhY3RlZCBmcm9tIHBhY2tldHM/DQoNCiAgKiAgIEFkZGluZyBhIG5ldyB0eXBlIG9mIHBvbGlj eSAoZS5nLiwgZGVjbGFyYXRpdmUgb3IgZnVuY3Rpb25hbCkNCndpbGwgY2F1c2UgYSBtYWpvciBy ZXdyaXRlIG9mIHRoZSBlbnRpcmUgbW9kZWwNCg0KW0xpbmRhXSBDYW4gd2Ugc2F5IHRoYXQgIEky TlNGIHBvbGljaWVzIGhhdmUgb25lIHR5cGUg4oCcU3ViamVjdC1Db250ZXh0dWFsU3RhdGVzLSBh Y3Rpb24tIGZ1bmN0aW9uPyBTbyBpbiBJMk5TRiBlbnZpcm9ubWVudCwgdGhlcmUgaXMgb25seSB0 aGUgbm90aW9uIG9mIGFkZGluZyBhIG5ldyDigJxQb2xpY3lSdWxl4oCdLCBidXQgbm8gYWRkaW5n IGEgbmV3IHBvbGljeSB0eXBlLiBJcyB0aGlzIGNvcnJlY3Qgc3RhdGVtZW50Pw0KDQogICogICBU aGVyZSBpcyBubyBhcHByb2FjaCB0byBkZXRlY3RpbmcgYW5kIHNvbHZpbmcgcG9saWN5IGNvbmZs aWN0czsNCnRoaXMgaXMgZHVlIHRvIHRoZSBzaW1wbGlzdGljIG5vdGlvbiBvZiBqdXN0IHVzaW5n IGEgUERQIGFuZCBhDQpQRVAgZm9yIGFwcGx5aW5nIHBvbGljaWVzLg0KDQpbTGluZGFdIGluIEky TlNGLCB0aGVyZSBjb3VsZCBiZSBhIGxvdCBvZiBjb25mbGljdHMsIGZvciBleGFtcGxlLCB0aGVy ZSBjb3VsZCBiZSB0d28gcnVsZXMgZW50ZXJlZCBhdCBkaWZmZXJlbnQgdGltZToNCg0KMS4gICAg ICAgIFZpcnR1YWwgTmV0d29yayBYIGNhbuKAmXQgYWNjZXNzIOKAnFlvdVR1YmXigJ0sDQoNCjIu ICAgICAgIDEwLjEuMS4xIGNhbiBhY2Nlc3Mg4oCcWW91VHViZeKAnSAod2hlcmUgMTAuMS4xLjEg aXMgYSBob3N0IHdpdGhpbiB0aGUgVmlydHVhbCBOZXR3b3JrIFgpLg0KDQpEbyB5b3UgY2FsbCB0 aGUgMiBydWxlcyBhYm92ZSBjb25mbGljdD8NCg0KDQoNCjQuIFJlY29tbWVuZGF0aW9ucw0KDQpH aXZlbiB0aGUgbGFyZ2UgYW1vdW50IG9mIHByb2JsZW1zLCBJIHJlY29tbWVuZCB0aGF0IHdlIG5v dCBjb25zaWRlciBQQ0lNIGZ1cnRoZXIuDQpbTGluZGFdIHNob3VsZCBJMk5TRiByZWZlcmVuY2Ug UENJTT8NCg0KVGhhbmsgeW91IHZlcnkgbXVjaC4gTGluZGENCg0KNS4gT3JpZ2luIG9mIFBDSU0v UENJTWUNCg0KVGhpcyBpcyBhICoqdGhlb3J5Kiogc2VjdGlvbjsgcGxlYXNlIHNraXAgdW5sZXNz IHlvdSB3YW50IHRvIHVuZGVyc3RhbmQgdGhlIG1vZGVsIGluIG1vcmUgZGV0YWlsLg0KDQpUaGUg UENJTSBpcyBiYXNlZCBvbiB0aGUgRE1URiBDSU0sIHdoaWNoIGlzIGFjdHVhbGx5IGEgKipkYXRh IG1vZGVsKiogKGRlc3BpdGUgaXRzIG5hbWUpIGJlY2F1c2UgaXQgdXNlcyByZWxhdGlvbmFsIHRl Y2hub2xvZ2llcyAoZS5nLiwga2V5cyBhbmQgd2VhayByZWZlcmVuY2VzKSB0byBjcmVhdGUgaXRz IG1vZGVsLiBQQ0lNIGlzIGJhc2VkIG9uIGFuIGVhcmx5IHZlcnNpb24gb2YgdGhlIENJTSAoMi40 KTsgdGhlIGN1cnJlbnQgdmVyc2lvbiBvZiB0aGUgQ0lNIGlzIDIuNDQuMSBhcyBvZiB0aGlzIHdy aXRpbmcuIFNpbmNlIHRoaXMgaXMgdGllZCB0byB0aGUgQ0lNLCB0aGlzIG1lYW5zIHRoYXQ6DQoN CiAgIDEpIFBvbGljeSBpcyBzdWJjbGFzc2VkIGZyb20gYSBtb3JlIGdlbmVyaWMgY2xhc3MgKE1h bmFnZWRFbGVtZW50KQ0KICAgMikgQUxMIHJlbGF0aW9uc2hpcHMgKGFzc29jaWF0aW9ucywgYWdn cmVnYXRpb25zLCBhbmQgY29tcG9zaXRpb25zKQ0KICAgICAgIGFyZSByZWFsaXplZCBhcyAqKmNs YXNzZXMqKg0KICAgMykgQXMgYSByZXN1bHQgb2YgMiksIHJlbGF0aW9uc2hpcHMgYXJlIHN1YmNs YXNzZWQNCiAgIDQpIEJvdGggYXR0cmlidXRlcyBhbmQgYXNzb2NpYXRpb25zIGFyZSAqKmluaGVy aXRlZCoqDQogICA1KSBUaGUgc2FtZSBkZXNpZ24gYXBwcm9hY2ggKGFzIG11Y2ggYXMgcG9zc2li bGUpIHdhcyB1c2VkIGluDQogICAgICAgIFBDSU0vUENJTWUgYXMgd2FzIGluIENJTS4gU3BlY2lm aWNhbGx5LCBpdCB3YXMgdGhvdWdodCBiZXR0ZXINCiAgICAgICAgdG8gZGVmaW5lIGEgZ2VuZXJp YywgYnV0IG9wdGlvbmFsLCByZWxhdGlvbnNoaXAgaW5zdGVhZCBvZiBub3QNCiAgICAgICAgZGVm aW5pbmcgdGhlIHJlbGF0aW9uc2hpcC4NCiAgIDYpIFRoZSBDSU0gZG9lcyBOT1QgaGF2ZSBhIHNp bmdsZSByb290ZWQgaGllcmFyY2h5OyB0aGlzIG1ha2VzDQogICAgICAgIGNvZGUgZ2VuZXJhdGlv biBtb3JlIGNvbXBsZXgNCiAgIDcpIFRoZSBDSU0gdXNlcyBhIHByb3ByaWV0YXJ5IGxhbmd1YWdl IGFuZCBpcyBub3Qgc3RyaWN0bHkgVU1MDQogICAgICAgIGNvbXBsaWFudCwgZXZlbiB0aG91Z2gg aXQgbG9va3MgbGlrZSBVTUwgKHVuZm9ydHVuYXRlbHksIHRoaXMNCiAgICAgICAgbGFuZ3VhZ2Ug aXMgYWxzbyBjYWxsZWQgTU9GKQ0KDQpEZXBlbmRpbmcgb24gdGhlIGNvbXBsZXhpdHkgb2YgdGhl IGltcGxlbWVudGF0aW9uLCB0aGUgYWJvdmUgaGF2ZSBiZWVuIHNob3duIHRvIHByb2R1Y2UgcHJv YmxlbXMgaW4gbGFyZ2UgZW52aXJvbm1lbnRzLiBGb3IgZXhhbXBsZSwgdGhlIHNwaXJpdCBvZiAi bGV0J3MgZGVmaW5lIGFuIGF0dHJpYnV0ZSBvciBhc3NvY2lhdGlvbiBpbiBjYXNlIGl0IGlzIHVz ZWZ1bCwgYW5kIG1ha2UgaXQgb3B0aW9uYWwgc28geW91IGRvbid0IGhhdmUgdG8gd29ycnkgYWJv dXQgaXQiIG5vdCBvbmx5IHZpb2xhdGVzIHNvbWUgd2VsbC1rbm93biBzb2Z0d2FyZSBhcmNoaXRl Y3R1cmFsIGd1aWRlbGluZXMgKGUuZy4sIFNpbmdsZSBSZXNwb25zaWJpbGl0eSBQcmluY2lwbGUg YW5kIHRoZSBMaXNrb3YgU3Vic3RpdHV0aW9uIFByaW5jaXBsZSksIGJ1dCBpdCBtYWtlcyB0aGlu Z3MgZGlmZmljdWx0IHRvIGludGVyb3BlcmF0ZSB3aXRoIChzaW5jZSB5b3UgbmV2ZXIgcmVhbGx5 IGtub3cgaWYgYW4gYXR0cmlidXRlIG9yIHJlbGF0aW9uc2hpcCBzaG91bGQgYmUgaW5zdGFudGlh dGVkIG9yIG5vdCkuDQoNCg0KcmVnYXJkcywNCkpvaG4NCg0KDQoNCi0tDQpyZWdhcmRzLA0KSm9o bg0K --_000_C02846B1344F344EB4FAA6FA7AF481F12AEBE039SZXEMA502MBSchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5v c2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJc QOWui+S9kyI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQovKiBTdHlsZSBEZWZp bml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXtt YXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OuWui+S9kzt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQpwDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsN CgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdp bi1sZWZ0OjBjbTsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OuWui+S9kzt9DQpw Lk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUsIGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoi5om55rOo5qGG5paH5pysIENoYXIiOw0KCW1h cmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo5LjBwdDsNCglm b250LWZhbWlseTrlrovkvZM7fQ0Kc3Bhbi5DaGFyDQoJe21zby1zdHlsZS1uYW1lOiLmibnms6jm oYbmlofmnKwgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5r OuaJueazqOahhuaWh+acrDsNCglmb250LWZhbWlseTrlrovkvZM7fQ0Kc3Bhbi5FbWFpbFN0eWxl MjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGli cmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21z by1zdHlsZS10eXBlOmV4cG9ydC1vbmx5O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYx Mi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDkwLjBwdCA3Mi4wcHQgOTAuMHB0O30NCmRp di5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9u cyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MTAzNTU7DQoJbXNvLWxpc3QtdGVtcGxhdGUt aWRzOjM4NDIxMjAyO30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDozNi4w cHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4w cHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0K QGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6NTI1Njc4NjM1Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlk czotMzE1MDg1MTUwO30NCkBsaXN0IGwxOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDozNi4w cHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4w cHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0K QGxpc3QgbDINCgl7bXNvLWxpc3QtaWQ6MTA3MDU0MzU0MzsNCgltc28tbGlzdC10ZW1wbGF0ZS1p ZHM6LTIwOTA5ODA0NzY7fQ0KQGxpc3QgbDI6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjM2 LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4 LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9 DQpAbGlzdCBsMw0KCXttc28tbGlzdC1pZDoxMTE2NzUyODI0Ow0KCW1zby1saXN0LXRlbXBsYXRl LWlkczoxMzUxNzczOTU2O30NCkBsaXN0IGwzOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoz Ni4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0x OC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7 fQ0KQGxpc3QgbDQNCgl7bXNvLWxpc3QtaWQ6MTQzMzAxNTg5ODsNCgltc28tbGlzdC10ZW1wbGF0 ZS1pZHM6LTIwNzYwMzQwMjI7fQ0KQGxpc3QgbDQ6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJv bDt9DQpAbGlzdCBsNQ0KCXttc28tbGlzdC1pZDoxNzAzMjgzMDQ0Ow0KCW1zby1saXN0LXRlbXBs YXRlLWlkczoxNzMxNjYxODI7fQ0KQGxpc3QgbDU6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJv bDt9DQpAbGlzdCBsNg0KCXttc28tbGlzdC1pZDoxNzk3ODY5MjE0Ow0KCW1zby1saXN0LXRlbXBs YXRlLWlkczotMTQ0MjY2NzU5MDt9DQpAbGlzdCBsNjpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6MzYuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3lt Ym9sO30NCm9sDQoJe21hcmdpbi1ib3R0b206MGNtO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGNt O30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRz IHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1h cCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRp Zl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IlpILUNOIiBsaW5rPSJibHVlIiB2bGluaz0icHVy cGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkhp IEpvaG4sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5GaXJzdGx5 LCB0aGFua3MgZm9yIHJhaXNpbmcgdGhpcyB2YWx1YWJsZSBkaXNjdXNzaW9uIGFib3V0IEkyTlNG IHBvbGljeSBtb2RlbC4gSXTigJlzIHJlYWxseSB1c2VmdWwgdG8gb3VyIGludGVyZmFjZSBpbmZv cm1hdGlvbiBtb2RlbCBkcmFmdHMuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPlBsZWFzZSBzZWUgbXkgY29tbWVudHMgaW5saW5lOjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj5CLlIuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj5GcmFuazxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAw Y20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0Ij7lj5Hku7bkuro8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L3NwYW4+PC9iPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+IEkybnNmIFttYWlsdG86 aTJuc2YtYm91bmNlc0BpZXRmLm9yZ10NCjwvc3Bhbj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdCI+5Luj6KGoIDwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij5Kb2huIFN0cmFzc25lcjxicj4NCjwvc3Bhbj48Yj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdCI+5Y+R6YCB5pe26Ze0PHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+ PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiAy MDE1PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij7lubQ8c3BhbiBsYW5nPSJF Ti1VUyI+MTI8L3NwYW4+5pyIPHNwYW4gbGFuZz0iRU4tVVMiPjExPC9zcGFuPuaXpTxzcGFuIGxh bmc9IkVOLVVTIj4gNDo0Mzxicj4NCjwvc3Bhbj48Yj7mlLbku7bkuro8c3BhbiBsYW5nPSJFTi1V UyI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBMaW5kYSBEdW5iYXI7IEpvaG4gU3Ry YXNzbmVyPGJyPg0KPC9zcGFuPjxiPuaKhOmAgTxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwv Yj48c3BhbiBsYW5nPSJFTi1VUyI+IGkybnNmQGlldGYub3JnOyBOYXRhbGUsIEJvYjxicj4NCjwv c3Bhbj48Yj7kuLvpopg8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0i RU4tVVMiPiBSZTogW0kybnNmXSBTZXJ2aWNlIExheWVyIFBvbGljaWVzIC0gUG9zdCAxOiBCYWNr Z3JvdW5kIEluZm9ybWF0aW9uIG9uIFBDSU08bzpwPjwvbzpwPjwvc3Bhbj48L3NwYW4+PC9wPg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyI+SGkgTGluZGEsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIj5JTUhPLCBhIHByaW9yaXR5IGF0dHJpYnV0ZSBzaG91bGQgbm90 IGJlIG92ZXJseSB1c2VkLiBQQ0lNJ3MgaW1wbGVtZW50YXRpb24gZmFpbHMgKHNlZSBQb3N0IDEp LCBhbmQgUENJTWUncyBoYXMgb3RoZXIgcHJvYmxlbXMgKGRlZmluZWQgaW4gUG9zdCAyLCBob3Bl ZnVsbHkgb3V0IHRvbmlnaHQpLiBGb3IgZXhhbXBsZSwgaG93IGRvIHlvdSBlbnN1cmUgdGhhdCB0 aGUgcHJpb3JpdGllcw0KIG9mIGFsbCBpbnN0YW5jZXMgb2YgYWxsIHJ1bGVzIGFyZSBhbHdheXMg dXBkYXRlZD8gVGhlcmUgaXMgbm8gbWVjaGFuaXNtIGluIGVpdGhlciBQQ0lNIG9yIFBDSU1lIHRo YXQgZ3VhcmFudGVlcyB0aGF0IHByaW9yaXRpZXMgYXJlIGRldGVybWluaXN0aWNhbGx5IGRldGVy bWluZWQuIFJlbWVtYmVyLCB5b3UgY2FuIGhhdmUgcHJpb3JpdGllcyBvbiBwb2xpY3kgcnVsZXMs IGFuZCBwcmlvcml0aWVzIG9uIHBvbGljeSBncm91cHMuIFNvLCBpZiB5b3UNCiBoYWQ6PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsg R3JvdXAxIChwcmlvcml0eSA1KTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgUnVsZSBBIChwcmlvcml0eSAxMCk8YnI+DQombmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgUnVsZSBCIChwcmlvcml0eSAxKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgUnVsZSBDIChwcmlvcml0eSA1MCk8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyI+Jm5ic3A7Jm5ic3A7IFJ1bGUgMiAocHJpb3JpdHkgMTApPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNwOyBHcm91cCAzIChwcmlvcml0eSAzKTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgUnVsZSB4LCBwcmlvcml0 eSB5PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5SdWxl IDIgd2lsbCBleGVjdXRlIGZpcnN0LCBldmVuIHRob3VnaCBHcm91cDEuUnVsZUMucHJpb3JpdHkg PT0gNTA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+TGlrZXdpc2UsIGl0IGRvZXNuJ3QgbWF0dGVyIGhv dyBtYW55IHJ1bGVzIGFyZSBpbiBHcm91cCAzLCBvciB3aGF0IHRoZWlyIHByaW9yaXRpZXMgYXJl LCB0aGV5IHdpbGwgYWxsIGV4ZWN1dGUgYWZ0ZXIgUnVsZTIsIGZvbGxvd2VkIGJ5IHRoZSBSdWxl cyBpbiBHcm91cDEgKEMsIEEsIEIpLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGlzIGdldHMgaGFy ZGVyIGFzIHlvdSBzdGFydCBuZXN0aW5nIGdyb3VwcyB3aXRoaW4gZ3JvdXBzIGFuZCBydWxlcyB3 aXRoaW4gcnVsZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5b RnJhbmtdOiZuYnNwOyBUYWtlIHRoaXMgZXhhbXBsZSwgSSBhbSBhIGxpdHRsZSB3b3JyaWVkIGFi b3V0IHRoZSBjb21wbGV4aXR5IGJyb3VnaHQgYnkgdGhlIG5lc3RpbmcgYW5kIHJlY3Vyc2lvbiBv cGVyYXRpb24uIFRoZXkgYXJlIHBvd2VyZnVsIGJ1dCBhbHNvDQogY29tcGxpY2F0ZWQuIEkgdGhp bmsgd2Ugc2hvdWxkIGJlIGNhcmVmdWwgaW4gZGVzaWduaW5nIHRoZSBpbmZvcm1hdGlvbiBtb2Rl bCB0byBwcmV2ZW50IGl0IHRvIGJlIHRvbyBjb21wbGV4LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+UENJTWUgaGFzIGEgcG9saWN5RGVjaXNpb25TdHJh dGVneSBhdHRyaWJ1dGUsIHdoaWNoIGlzIHVzZWQgdG8gZGVmaW5lIHdoZXRoZXIgdGhlIGNvbnRh aW5lciAoUG9saWN5R3JvdXAgb3IgUG9saWN5UnVsZSkgb2YgdGhlIFBvbGljeVJ1bGVzIHVzZXMg Zmlyc3QtbWF0Y2ggb3IgYWxsLW1hdGNoLiBUaGlzIG9iZnVzY2F0ZXMgdGhlIHZhbHVlIG9mIHRo ZSBwcmlvcml0eSBhdHRyaWJ1dGUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIj5BcyBCb2IgcmlnaHRseSBwb2ludGVkIG91dCwgZXhlY3V0aW9uIGNvbnRl eHQgaXMgZXZlcnl0aGluZy4gSW4gRk9DQUxFLCBJIGRlZmluZWQgY29udGV4dC1hd2FyZSBwb2xp Y3kgcnVsZXMuIENvbnRleHQgd2FzIHVzZWQgdG8gc2VsZWN0IGEgd29ya2luZyBzZXQgb2YgcG9s aWNpZXM7IHRoaXMgd29ya2luZyBzZXQgY29sbGVjdGl2ZWx5IGNvbnN0aXR1dGVkIHRoZSBpbnRl bGxpZ2VuY2UNCiB0aGF0IHRoZSBtYW5hZ2VyIGltcGxlbWVudGVkLiBUaWUgdGhhdCBpbnRvIGZl ZWRiYWNrIGZyb20gd2hhdCB3YXMgYmVpbmcgbWFuYWdlZCwgYW5kIGFzIHRoZSBvdmVyYWxsIGNv bnRleHQgY2hhbmdlcywgdGhlIHdvcmtpbmcgc2V0IG9mIHBvbGljaWVzIGNoYW5nZS4gS2luZGEg Y29vbC4gQnV0IE5PVCBtYWludGFpbmFibGUgdXNpbmcganVzdCBwcmlvcml0eS48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5bRnJhbmtdOiBUaGlzIGNvbnRleHQtYXdh cmUgcG9saWN5IHJ1bGVzIG1ha2Ugc2Vuc2UgZm9yIEkyTlNGIGluIG15IG9waW5pb24uIEFyZSB5 b3UgZ29pbmcgdG8gaW50cm9kdWNlIGl0IGludG8gSTJOU0Y/PC9zcGFuPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiPnJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkpvaG48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPk9uIFRodSwgRGVjIDEwLCAyMDE1IGF0IDk6 MzIgQU0sIExpbmRhIER1bmJhciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxpbmRhLmR1bmJhckBodWF3 ZWkuY29tIiB0YXJnZXQ9Il9ibGFuayI+bGluZGEuZHVuYmFyQGh1YXdlaS5jb208L2E+Jmd0OyB3 cm90ZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj5Cb2IsDQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGFuayB5 b3UgdmVyeSBtdWNoIGZvciBsaXN0aW5nIGRvd24gbXVsdGlwbGUgc2NlbmFyaW9zIGJlbG93Lg0K PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+V2l0aCB3aGF0IHlvdSBkZXNjcmliZWQsIHRoZSBJMk5TRiBydWxlLXNl dCBtYXkgbmVlZCBhIHByaW9yaXR5IHNvIHRoYXQgdGhlIE5TRiBjYW4NCiBlbmZvcmNlIHRoZW0g YWNjb3JkaW5nbHkuIDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkluIG91ciBjdXJyZW50IHByb2R1Y3QgaW1wbGVt ZW50YXRpb24sIHRoZSByb3V0ZXLigJlzIGxvbmdlc3QgbWF0Y2ggcHJpbmNpcGxlIGhhcyBiZWVu DQogdXNlZCwgaS5lLiBydWxlcyBmb3IgaW5kaXZpZHVhbCBob3N0cyBvdmVycmlkZSB0aGUgcnVs ZXMgZm9yIHRoZSBzdWJuZXQgdG8gd2hpY2ggdGhhdCBob3N0cyBiZWxvbmcuDQo8L3NwYW4+PHNw YW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj5CdXQgdGhlcmUgY291bGQgYmUgbW9yZSBjb21wbGljYXRlZCBjb25mbGljdCB0aGF0IHdo YXQgaXMgbGlzdGVkIGJlbG93LiBIYXZpbmcgYSBwcmlvcml0eQ0KIGNhbiBiZSBtb3JlIHByZWNp c2UuIDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPkxpbmRhDQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItdG9wOnNvbGlkIHdpbmRvd3RleHQgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBj bTtib3JkZXItY29sb3I6Y3VycmVudENvbG9yIGN1cnJlbnRDb2xvciI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJv bTo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IE5h dGFsZSwNCiBCb2IgW21haWx0bzo8YSBocmVmPSJtYWlsdG86Uk5BVEFMRUBtaXRyZS5vcmciIHRh cmdldD0iX2JsYW5rIj5STkFUQUxFQG1pdHJlLm9yZzwvYT5dDQo8YnI+DQo8Yj5TZW50OjwvYj4g VGh1cnNkYXksIERlY2VtYmVyIDEwLCAyMDE1IDEyOjQ3IEFNPGJyPg0KPGI+VG86PC9iPiBMaW5k YSBEdW5iYXI7IEpvaG4gU3RyYXNzbmVyPGJyPg0KPGI+Q2M6PC9iPiA8YSBocmVmPSJtYWlsdG86 aTJuc2ZAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5pMm5zZkBpZXRmLm9yZzwvYT48YnI+DQo8 Yj5TdWJqZWN0OjwvYj4gUkU6IFtJMm5zZl0gU2VydmljZSBMYXllciBQb2xpY2llcyAtIFBvc3Qg MTogQmFja2dyb3VuZCBJbmZvcm1hdGlvbiBvbiBQQ0lNPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojOTkz MzAwIj5IaSBMaW5kYSw8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6Izk5MzMwMCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiM5OTMzMDAiPklucHV0IGhlcmUgZnJvbSBhIGx1cmtlciDigKYgY2FsaWJyYXRlIGFj Y29yZGluZ2x5ITwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj OTkzMzAwIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6Izk5MzMwMCI+WW91IGFza2VkOjxicj4NCuKAnDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltMaW5kYV0gaW4gSTJOU0YsIHRo ZXJlIGNvdWxkIGJlIGEgbG90IG9mIGNvbmZsaWN0cywgZm9yIGV4YW1wbGUsIHRoZXJlIGNvdWxk IGJlIHR3byBydWxlcyBlbnRlcmVkIGF0IGRpZmZlcmVudCB0aW1lOjwvc3Bhbj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4xLjwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwO1ZpcnR1YWwgTmV0d29yayBYIGNh buKAmXQgYWNjZXNzIOKAnFlvdVR1YmXigJ0sDQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Mi48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6Ny4wcHQ7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj4xMC4xLjEuMSBjYW4gYWNjZXNzIOKAnFlvdVR1YmXigJ0gKHdo ZXJlIDEwLjEuMS4xIGlzIGEgaG9zdCB3aXRoaW4gdGhlIFZpcnR1YWwgTmV0d29yayBYKS4NCjwv c3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHA+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5EbyB5b3Ug Y2FsbCB0aGUgMiBydWxlcyBhYm92ZSBjb25mbGljdD88L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6Izk5MzMwMCI+4oCdPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojOTkzMzAw Ij5UaGUgYW5zd2VyIGlzIOKAnGl0IGRlcGVuZHPigJ0g4oCmIGRlcGVuZHMgb24gYSBicm9hZGVy IHBvbGljeSBleGVjdXRpb24gY29udGV4dCDigKYgYSBjb25jZXB0IHRoYXQgUENJTSBpdHNlbGYg ZG9lcyBub3QgZGlyZWN0bHkgc3VwcG9ydC4gRm9yIGV4YW1wbGUsIHRoYXQgYnJvYWRlciBjb250 ZXh0IGNvdWxkIHN0aXB1bGF0ZQ0KICh2aWEgcG9saWN5KSB0aGF0ICMxIGlzIHRoZSBkZWZhdWx0 IGJ1dCBleHBsaWNpdCBleGNlcHRpb24gc3BlY2lmaWNhdGlvbnMgbGlrZSAjMiBjYW4gb3ZlcnJp ZGUgdGhlIGRlZmF1bHQg4oCmIGFsdGVybmF0aXZlbHksIHRoYXQgYnJvYWRlciBjb250ZXh0IGNv dWxkIHN0aXB1bGF0ZSB0aGF0ICMxIGlzIGFic29sdXRlIGFuZCBhbnkgYXR0ZW1wdCB0byBzcGVj aWZ5IChwcmVmZXJhYmx5KSBvciBleGVjdXRlICMyIHdvdWxkIGJlIGRlbmllZCDigKYgdGhvc2UN CiBhcmUgb25seSB0d28gZXhhbXBsZXMsIHRoZXJlIGFyZSBtdWx0aXBsZSBwb3RlbnRpYWxseSB2 YWxpZCB2YXJpYXRpb25zLiBIb3cgbXVjaCBvZiB0aGF0IGNvbnRleHQgYSBncm91cCB3YW50cyB0 byBzdGFuZGFyZGl6ZSBpcyBhbiBpbXBvcnRhbnQgZGVjaXNpb24gZm9yIHRoZSBncm91cCB0byB1 bmRlcnN0YW5kIGFuZCBtYWtlIOKApiBQQ0lNIGl0c2VsZiB3aWxsIG5vdCB0YWtlIHlvdSB2ZXJ5 IGZhciwgaG93ZXZlci48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiM5OTMzMDAiPkF2YW50aSw8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6Izk5MzMwMCI+Qm9iTjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiM5OTMzMDAiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci10b3A6c29saWQgd2luZG93dGV4dCAxLjBwdDtwYWRkaW5nOjMuMHB0IDBj bSAwY20gMGNtO2JvcmRlci1jb2xvcjpjdXJyZW50Q29sb3IgY3VycmVudENvbG9yIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDsiPg0KIEkybnNmIFs8YSBocmVmPSJtYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZyIg dGFyZ2V0PSJfYmxhbmsiPm1haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnPC9hPl0NCjxiPk9u IEJlaGFsZiBPZiA8L2I+TGluZGEgRHVuYmFyPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIERl Y2VtYmVyIDA4LCAyMDE1IDQ6MTEgUE08YnI+DQo8Yj5Ubzo8L2I+IEpvaG4gU3RyYXNzbmVyICZs dDs8YSBocmVmPSJtYWlsdG86c3RyYXpwZGpAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+c3Ry YXpwZGpAZ21haWwuY29tPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86aTJuc2ZAaWV0Zi5vcmci IHRhcmdldD0iX2JsYW5rIj5pMm5zZkBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4g UmU6IFtJMm5zZl0gU2VydmljZSBMYXllciBQb2xpY2llcyAtIFBvc3QgMTogQmFja2dyb3VuZCBJ bmZvcm1hdGlvbiBvbiBQQ0lNPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPkpvaG4sDQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGFuayB5 b3UgdmVyeSBtdWNoIGZvciB0aGUgaW4tZGVwdGggYW5hbHlzaXMgb2YgUENJTSBhbmQgaXRzIHN1 aXRhYmlsaXR5IGFzIHNvbWV0aGluZw0KIHRoYXQgSTJOU0Ygc2hvdWxkIGJlIGJhc2VkIG9uLiBX aGF0IHlvdSB3cml0ZSBpcyB2ZXJ5IHZhbHVhYmxlLiBJIHRoaW5rIHRoZSBhbmFseXNpcyBzaG91 bGQgYmUgYWRkZWQgdG8gdGhlIEkyTlNGIGdhcCBhbmFseXNpcywgKG9yIGJlIGEgc3RhbmRhbG9u ZSBQb2xpY3kgQW5hbHlzaXMgSUQpLg0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+SSBoYXZlIHNvbWUgcXVlc3Rpb25zIGluc2VydGVkIGJlbG93Og0KPC9zcGFuPjxzcGFuIGxh bmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkIHdpbmRvd3RleHQgMS4wcHQ7 cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbTtib3JkZXItY29sb3I6Y3VycmVudENvbG9yIGN1cnJl bnRDb2xvciI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OyI+IEkybnNmDQogWzxhIGhyZWY9Im1haWx0bzppMm5zZi1ib3Vu Y2VzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+bWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5v cmc8L2E+XQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5Kb2huIFN0cmFzc25lcjxicj4NCjxiPlNlbnQ6 PC9iPiBTdW5kYXksIERlY2VtYmVyIDA2LCAyMDE1IDc6MDEgUE08YnI+DQo8Yj5Ubzo8L2I+IDxh IGhyZWY9Im1haWx0bzppMm5zZkBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmkybnNmQGlldGYu b3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBbSTJuc2ZdIFNlcnZpY2UgTGF5ZXIgUG9saWNp ZXMgLSBQb3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRpb24gb24gUENJTTwvc3Bhbj48c3BhbiBs YW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbHQ7U25pcHBlZCZndDsNCjwvc3Bhbj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4yLiZuYnNwOyBCcmllZiBkZXNjcmlwdGlvbiBv ZiBQQ0lNPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFu Zz0iRU4tVVMiPlRoZSBQQ0lNIENsYXNzIEhpZXJhcmNoeSBpcyB2ZXJ5IHNpbXBsZSwgYXMgdGhp cyBpcyBhIENBIChjb25kaXRpb24tYWN0aW9uKSBtb2RlbC4gRXZlbnRzIGFyZSBOT1QgcmVwcmVz ZW50ZWQuIFBDSU0gZGVmaW5lcyBhIFBvbGljeVJ1bGUsIGEgUG9saWN5R3JvdXAgKGdyb3VwDQog b2YgUG9saWN5UnVsZXMpLCBQb2xpY3lDb25kaXRpb24sIGFuZCBQb2xpY3lBY3Rpb24uIFRoZXNl IGFyZSBhbGwgc2libGluZ3M7IHRoZWlyIGNvbW1vbiBzdXBlcmNsYXNzIGlzIGNhbGxlZCBQb2xp Y3ksIGFzIHNob3duIGJlbG93OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+TWFuYWdlZEVsZW1lbnQgKGFic3RyYWN0KTxicj4NCiZuYnNwOyB8PGJyPg0KJm5ic3A7ICYj NDM7LS0tUG9saWN5IChhYnN0cmFjdCk8YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB8PGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0MzstLS1Qb2xp Y3lHcm91cDxicj4NCiZuYnNwOyZuYnNwO3wmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDxicj4N CiZuYnNwOyZuYnNwO3wmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0MzstLS1Qb2xpY3lSdWxl PGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDxicj4NCiZuYnNwOyB8Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tUG9saWN5Q29uZGl0aW9uIChhYnN0cmFjdCk8 YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IHw8YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw O3wmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0MzstLS1Qb2xpY3lUaW1lUGVyaW9k Q29uZGl0aW9uPGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt8Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwO3wmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmIzQz Oy0tLVZlbmRvclBvbGljeUNvbmRpdGlvbjxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7fDxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7 LS0tUG9saWN5QWN0aW9uIChhYnN0cmFjdCk8YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PGJyPg0K Jm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgJiM0MzstLS1WZW5kb3JQb2xpY3lBY3Rpb248L3NwYW4+PHNwYW4g bGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5Ob3RlOiBQQ0lNIGRvZXMgaGF2 ZSBhIHNpbXBsZSBub3Rpb24gb2YgUm9sZXMsIGJ1dCBpbXBsZW1lbnRzIHRoZW0gYXMgYXR0cmli dXRlcywgaW5zdGVhZCBvZiBvYmplY3RzLiBUaGlzIGlzIG5vdCBzY2FsYWJsZSwgYW5kIGRvZXMg bm90IGZ1bGx5IHJlYWxpemUgdGhlIHBvd2VyDQogb2YgdXNpbmcgcm9sZXMuIFRoaXMgd2lsbCBi ZSBkaXNjdXNzZWQgbW9yZSBpbiBQb3N0IDMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi PiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Tm90ZTogSXQgaXMgcG9zc2li bGUgdG8gZGVmaW5lIGxpbWl0ZWQgY29uc3RyYWludHMgaW4gUENJTSBhcyBjb25kaXRpb25zLiBG b3IgZXhhbXBsZSwgdGhlIFZlbmRvclBvbGljeUNvbmRpdGlvbiBjbGFzcyBoYXMgdHdvIGF0dHJp YnV0ZXMsIENvbnN0cmFpbnQgYW5kIENvbnN0cmFpbnRFbmNvZGluZywNCiB0aGF0IGRvIHRoaXMu IFRoaXMgd2lsbCBiZSBkaXNjdXNzZWQgbW9yZSBpbiBQb3N0IDQuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Tm90ZTog Q29udGV4dCBpcyBOT1QgZGVmaW5lZCBpbiB0aGUgUENJTS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSAmbmJz cDtEbyB5b3UgYWdyZWUgdGhhdCDigJxDb25kaXRpb24gb2YgdGhlIFBDSU3igJ0gPT0g4oCcSTJO U0Ygc3ViamVjdOKAnSAmYW1wOyDigJx0aGUgQ29udGV4dHVhbA0KIHN0YXRlcyAob3IgdGhlIEky TlNGIG9iamVjdCnigJ0/IDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5n PSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyI+My4mbmJzcDsgU3VtbWFyeTogbWFpbiBkcmF3YmFja3Mgb2YgdXNpbmcgUENJ TTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyI+Tm90ZSB0aGF0IHRoZSBjdXJyZW50IENJTSBQb2xpY3kgTW9k ZWwgKDIuNDQuMSkgaXMgc2lnbmlmaWNhbnRseSBkaWZmZXJlbnQgdGhhbiBlaXRoZXIgUENJTSBv ciBQQ0lNZS4mbmJzcDtQQ0lNIGlzIGJhc2VkIG9uIENJTSAyLjQ7IFBDSU1lIGlzIGJhc2VkIG9u IENJTSAyLjUuIFBDSU1lDQogaXMgTk9UIGJhY2t3YXJkcyBjb21wYXRpYmxlIHdpdGggUENJTSBp biBhbGwgYXJlYXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5n PSJFTi1VUyI+Q3JpdGljYWwgUHJvYmxlbXM6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0OmwxIGxl dmVsMSBsZm8xIj4NCjxzcGFuIGxhbmc9IkVOLVVTIj5UaGVyZSBpcyBubyB1bmlxdWUgSUQgdGhh dCBjYW4gYmUgdXNlZCB0byBkaXN0aW5ndWlzaCBkaWZmZXJlbnQ8YnI+DQppbnN0YW5jZXMgb2Yg dGhlIHNhbWUgUG9saWN5UnVsZSwgUG9saWN5R3JvdXAsIFBvbGljeUNvbmRpdGlvbiw8YnI+DQpv ciBQb2xpY3lBY3Rpb24uPG86cD48L286cD48L3NwYW4+PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPltMaW5kYV0gQ2FuIHdlIHNpbXBseSBjcmVhdGUgYW4gSUQgKHN0cmluZyBvciBu dW1lcmljKSBmb3IgaW5zdGFuY2VzIG9mIHRoZSBzYW1lIFBvbGljeVJ1bGU/DQogT3IgaXQgaXMg bW9yZSBjb21wbGljYXRlZD8gPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1s aXN0OmwzIGxldmVsMSBsZm8yIj4NCjxzcGFuIGxhbmc9IkVOLVVTIj5SZWxhdGlvbnNoaXBzIGFy ZSBpbXBsZW1lbnRlZCBieSBkZWZpbmluZyBhbiBhYnN0cmFjdCBjbGFzczxicj4NCndpdGgga2V5 cywgYW5kIHRoZW4gb3ZlcnJpZGluZyB0aGUga2V5cyBpbiB0aGUgc3ViY2xhc3NlcyBvZiB0aGU8 YnI+DQpyZWxhdGlvbnNoaXAuIFRoaXMgaXMgYnJva2VuLiBXb3VsZCB5b3Ugb3ZlcnJpZGUga2V5 cyBpbiBhbiBSREJNUz88bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+W0xpbmRhXSBJcyB0aGUg4oCcS2V54oCdIHRvIGRpZmZlcmVudGlhdGluZyBkaWZm ZXJlbnQg4oCcUG9saWN5UnVsZeKAnT8mbmJzcDsgJm5ic3A7Q2FuIHlvdSBnaXZlIGFuIGV4YW1w bGUNCiBvZiDigJxzdWJjbGFzc2VzIG9mIHRoZSByZWxhdGlvbnNoaXDigJ0/IDwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPldoYXQgZXZlbnRzIGNhbiBjYXVzZSDigJxvdmVycmlkaW5nIHRoZSBrZXlzIGluIHRoZSBz dWJjbGFzc2VzIG9mIHRoZSByZWxhdGlvbnNoaXDigJ0/PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvO21zby1saXN0OmwyIGxldmVsMSBsZm8zIj4NCjxzcGFuIGxhbmc9IkVOLVVTIj5N b3N0IG9mIHRoZSBjbGFzc2VzIHRoYXQgYXJlIHVzZWQgdG8gaW1wbGVtZW50IHRoZSByZWxhdGlv bnNoaXBzPGJyPg0KZG8gTk9UIGhhdmUgYXR0cmlidXRlcywgc28gaXQgaXMgaW1wb3NzaWJsZSB0 byByZXN0cmljdCB3aGljaDxicj4NCmNsYXNzZXMgYXJlIHJlbGF0ZWQgdG8gd2hpY2ggb3RoZXIg Y2xhc3NlcyAoZS5nLiwgYnkgY29udGV4dCkuPGJyPg0KUHV0IGFub3RoZXIgd2F5LCB0aGUgc2Ft ZSByZWxhdGlvbnNoaXAgbXVzdCBhbHdheXMgYmUgdXNlZDxicj4NCmJldHdlZW4gdHdvIHR5cGVz LCBldmVuIGlmIHRoZSBzZW1hbnRpY3MgdmFyaWVzLiAoVGhlIHR3bzxicj4NCmV4Y2VwdGlvbnMg YXJlIFBvbGljeUNvbmRpdGlvbkluUG9saWN5UnVsZSBhbmQ8YnI+DQpQb2xpY3lBY3Rpb25JblBv bGljeVJ1bGUpLjxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj5bTGluZGFdIERvZXMg4oCcY2xhc3Nlc+KAnSA9PSDigJxQb2xpY3lSdWxl4oCdPw0KPC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8dWwgdHlwZT0i ZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0Omw2IGxldmVsMSBsZm80Ij4N CjxzcGFuIGxhbmc9IkVOLVVTIj5UaGUgJnF1b3Q7aWdub3JlIHRoaXMgdW5sZXNzIHlvdSBuZWVk IHRoaXMmcXVvdDsgcGhpbG9zb3BoeSBkb2VzIG5vdDxicj4NCndvcmsuIEhvdyBkbyB5b3Uga25v dyBpZiBvdGhlciBpbXBsZW1lbnRhdGlvbnMgdGhhdCB5b3UgYXJlPGJyPg0Kc3VwcG9zZWQgdG8g aW50ZXJvcGVyYXRlIHdpdGggYXJlIHVzaW5nIHRoZW0/PG86cD48L286cD48L3NwYW4+PC9saT48 L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltMaW5kYV0gSXMg4oCcSWdub3JlIHRoaXMgdW5s ZXNzIHlvdSBuZWVkIHRoaXPigJ0gYW4gbmV3IHR5cGUgb2Yg4oCcUG9saWN5UnVsZeKAnT8NCjwv c3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHVsIHR5cGU9 ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsNCBsZXZlbDEgbGZvNSI+ DQo8c3BhbiBsYW5nPSJFTi1VUyI+VGhlcmUgaXMgbm8gY29uY2VwdCBvZiBlcnJvciBvciBleGNl cHRpb24gaGFuZGxpbmc8bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87bXNvLWxpc3Q6bDQgbGV2ZWwxIGxmbzUiPg0KPHNwYW4gbGFuZz0iRU4tVVMiPlRoZXJlIGlz IG5vIGNvbmNlcHQgb2YgdGhlIHN1YmplY3Qgb3IgdGhlIHRhcmdldCBvZiBhIHBvbGljeTxvOnA+ PC9vOnA+PC9zcGFuPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5bTGluZGFdIERv ZXMgeW91ciDigJxzdWJqZWN04oCdIGhhdmUgdGhlIHNhbWUgbWVhbmluZyBhcyB0aGUg4oCcSTJO U0Ygc3ViamVjdOKAnSB3aGljaCBtZWFucw0KIGJpdHMmYW1wO2J5dGVzIGV4dHJhY3RlZCBmcm9t IHBhY2tldHM/IDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsMCBs ZXZlbDEgbGZvNiI+DQo8c3BhbiBsYW5nPSJFTi1VUyI+QWRkaW5nIGEgbmV3IHR5cGUgb2YgcG9s aWN5IChlLmcuLCBkZWNsYXJhdGl2ZSBvciBmdW5jdGlvbmFsKTxicj4NCndpbGwgY2F1c2UgYSBt YWpvciByZXdyaXRlIG9mIHRoZSBlbnRpcmUgbW9kZWw8bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjwv dWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBD YW4gd2Ugc2F5IHRoYXQgJm5ic3A7STJOU0YgcG9saWNpZXMgaGF2ZSBvbmUgdHlwZSDigJxTdWJq ZWN0LUNvbnRleHR1YWxTdGF0ZXMtIGFjdGlvbi0NCiBmdW5jdGlvbj8gU28gaW4gSTJOU0YgZW52 aXJvbm1lbnQsIHRoZXJlIGlzIG9ubHkgdGhlIG5vdGlvbiBvZiBhZGRpbmcgYSBuZXcg4oCcUG9s aWN5UnVsZeKAnSwgYnV0IG5vIGFkZGluZyBhIG5ldyBwb2xpY3kgdHlwZS4gSXMgdGhpcyBjb3Jy ZWN0IHN0YXRlbWVudD8gJm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21z by1saXN0Omw1IGxldmVsMSBsZm83Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIj5UaGVyZSBpcyBubyBh cHByb2FjaCB0byBkZXRlY3RpbmcgYW5kIHNvbHZpbmcgcG9saWN5IGNvbmZsaWN0czs8YnI+DQp0 aGlzIGlzIGR1ZSB0byB0aGUgc2ltcGxpc3RpYyBub3Rpb24gb2YganVzdCB1c2luZyBhIFBEUCBh bmQgYTxicj4NClBFUCBmb3IgYXBwbHlpbmcgcG9saWNpZXMuPG86cD48L286cD48L3NwYW4+PC9s aT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltMaW5k YV0gaW4gSTJOU0YsIHRoZXJlIGNvdWxkIGJlIGEgbG90IG9mIGNvbmZsaWN0cywgZm9yIGV4YW1w bGUsIHRoZXJlIGNvdWxkIGJlIHR3bw0KIHJ1bGVzIGVudGVyZWQgYXQgZGlmZmVyZW50IHRpbWU6 PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cD48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjEuPC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2NvbG9yOiMxRjQ5 N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Vmly dHVhbCBOZXR3b3JrIFggY2Fu4oCZdCBhY2Nlc3Mg4oCcWW91VHViZeKAnSwNCjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4yLjwvc3Bhbj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtjb2xvcjojMUY0OTdEIj4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjEwLjEuMS4xIGNhbiBhY2Nlc3Mg 4oCcWW91VHViZeKAnSAod2hlcmUgMTAuMS4xLjEgaXMgYSBob3N0IHdpdGhpbiB0aGUgVmlydHVh bCBOZXR3b3JrIFgpLg0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPkRvIHlvdSBjYWxsIHRoZSAyIHJ1bGVzIGFib3ZlIGNvbmZsaWN0Pw0KPC9zcGFu PjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cD48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bh bj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPjQuIFJlY29tbWVuZGF0aW9uczxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVO LVVTIj5HaXZlbiB0aGUgbGFyZ2UgYW1vdW50IG9mIHByb2JsZW1zLCBJIHJlY29tbWVuZCB0aGF0 IHdlIG5vdCBjb25zaWRlciBQQ0lNIGZ1cnRoZXIuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0xpbmRhXSBzaG91bGQgSTJOU0YgcmVmZXJlbmNl IFBDSU0/DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGFuayB5b3UgdmVy eSBtdWNoLiBMaW5kYQ0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIj4mbmJzcDsNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPjUuIE9yaWdpbiBvZiBQQ0lN L1BDSU1lPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBsYW5nPSJFTi1VUyI+VGhpcyBpcyBhICoqdGhlb3J5Kiogc2VjdGlvbjsgcGxlYXNlIHNr aXAgdW5sZXNzIHlvdSB3YW50IHRvIHVuZGVyc3RhbmQgdGhlIG1vZGVsIGluIG1vcmUgZGV0YWls LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPlRoZSBQQ0lNIGlzIGJhc2VkIG9uIHRoZSBETVRGIENJTSwgd2hpY2ggaXMg YWN0dWFsbHkgYSAqKmRhdGEgbW9kZWwqKiAoZGVzcGl0ZSBpdHMgbmFtZSkgYmVjYXVzZSBpdCB1 c2VzIHJlbGF0aW9uYWwgdGVjaG5vbG9naWVzIChlLmcuLCBrZXlzIGFuZCB3ZWFrIHJlZmVyZW5j ZXMpDQogdG8gY3JlYXRlIGl0cyBtb2RlbC4gUENJTSBpcyBiYXNlZCBvbiBhbiBlYXJseSB2ZXJz aW9uIG9mIHRoZSBDSU0gKDIuNCk7IHRoZSBjdXJyZW50IHZlcnNpb24gb2YgdGhlIENJTSBpcyAy LjQ0LjEgYXMgb2YgdGhpcyB3cml0aW5nLiBTaW5jZSB0aGlzIGlzIHRpZWQgdG8gdGhlIENJTSwg dGhpcyBtZWFucyB0aGF0OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNwOyAxKSBQb2xpY3kgaXMgc3Vi Y2xhc3NlZCBmcm9tIGEgbW9yZSBnZW5lcmljIGNsYXNzIChNYW5hZ2VkRWxlbWVudCk8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsgMikgQUxMIHJlbGF0aW9uc2hpcHMgKGFzc29j aWF0aW9ucywgYWdncmVnYXRpb25zLCBhbmQgY29tcG9zaXRpb25zKTxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBhcmUgcmVhbGl6ZWQg YXMgKipjbGFzc2VzKio8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsgMykgQXMg YSByZXN1bHQgb2YgMiksIHJlbGF0aW9uc2hpcHMgYXJlIHN1YmNsYXNzZWQ8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxh bmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsgNCkgQm90aCBhdHRyaWJ1dGVzIGFuZCBhc3NvY2lhdGlv bnMgYXJlICoqaW5oZXJpdGVkKio8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsg NSkgVGhlIHNhbWUgZGVzaWduIGFwcHJvYWNoIChhcyBtdWNoIGFzIHBvc3NpYmxlKSB3YXMgdXNl ZCBpbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBQQ0lNL1BDSU1lIGFzIHdhcyBpbiBDSU0uIFNwZWNpZmljYWxseSwgaXQg d2FzIHRob3VnaHQgYmV0dGVyPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHRvIGRlZmluZSBhIGdlbmVyaWMsIGJ1dCBvcHRp b25hbCwgcmVsYXRpb25zaGlwIGluc3RlYWQgb2Ygbm90PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGRlZmluaW5nIHRoZSBy ZWxhdGlvbnNoaXAuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7Jm5ic3A7IDYpIFRoZSBD SU0gZG9lcyBOT1QgaGF2ZSBhIHNpbmdsZSByb290ZWQgaGllcmFyY2h5OyB0aGlzIG1ha2VzPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IGNvZGUgZ2VuZXJhdGlvbiBtb3JlIGNvbXBsZXg8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT Ij4mbmJzcDsmbmJzcDsgNykgVGhlIENJTSB1c2VzIGEgcHJvcHJpZXRhcnkgbGFuZ3VhZ2UgYW5k IGlzIG5vdCBzdHJpY3RseSBVTUw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgY29tcGxpYW50LCBldmVuIHRob3VnaCBpdCBs b29rcyBsaWtlIFVNTCAodW5mb3J0dW5hdGVseSwgdGhpczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBsYW5ndWFnZSBpcyBh bHNvIGNhbGxlZCBNT0YpJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIj5EZXBlbmRpbmcgb24gdGhlIGNvbXBsZXhpdHkgb2YgdGhlIGltcGxlbWVu dGF0aW9uLCB0aGUgYWJvdmUgaGF2ZSBiZWVuIHNob3duIHRvIHByb2R1Y2UgcHJvYmxlbXMgaW4g bGFyZ2UgZW52aXJvbm1lbnRzLiBGb3IgZXhhbXBsZSwgdGhlIHNwaXJpdCBvZiAmcXVvdDtsZXQn cyBkZWZpbmUNCiBhbiBhdHRyaWJ1dGUgb3IgYXNzb2NpYXRpb24gaW4gY2FzZSBpdCBpcyB1c2Vm dWwsIGFuZCBtYWtlIGl0IG9wdGlvbmFsIHNvIHlvdSBkb24ndCBoYXZlIHRvIHdvcnJ5IGFib3V0 IGl0JnF1b3Q7IG5vdCBvbmx5IHZpb2xhdGVzIHNvbWUgd2VsbC1rbm93biBzb2Z0d2FyZSBhcmNo aXRlY3R1cmFsIGd1aWRlbGluZXMgKGUuZy4sIFNpbmdsZSBSZXNwb25zaWJpbGl0eSBQcmluY2lw bGUgYW5kIHRoZSBMaXNrb3YgU3Vic3RpdHV0aW9uIFByaW5jaXBsZSksIGJ1dA0KIGl0IG1ha2Vz IHRoaW5ncyBkaWZmaWN1bHQgdG8gaW50ZXJvcGVyYXRlIHdpdGggKHNpbmNlIHlvdSBuZXZlciBy ZWFsbHkga25vdyBpZiBhbiBhdHRyaWJ1dGUgb3IgcmVsYXRpb25zaGlwIHNob3VsZCBiZSBpbnN0 YW50aWF0ZWQgb3Igbm90KS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT Ij5yZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Sm9objxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIj48YnI+DQo8YnIgY2xlYXI9ImFsbCI+DQo8YnI+DQotLSA8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT Ij5yZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5Kb2huPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_C02846B1344F344EB4FAA6FA7AF481F12AEBE039SZXEMA502MBSchi_-- From nobody Fri Dec 11 10:04:33 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C39DD1B2DD2 for ; Fri, 11 Dec 2015 10:04:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.511 X-Spam-Level: X-Spam-Status: No, score=-1.511 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ODaTQN-fRJ3b for ; Fri, 11 Dec 2015 10:04:29 -0800 (PST) Received: from z9m9z.htt-consult.com (z9m9z.htt-consult.com [50.253.254.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5543B1B2DDA for ; Fri, 11 Dec 2015 10:04:28 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by z9m9z.htt-consult.com (Postfix) with ESMTP id 5FAB1607CA for ; Fri, 11 Dec 2015 13:04:26 -0500 (EST) X-Virus-Scanned: amavisd-new at htt-consult.com Received: from z9m9z.htt-consult.com ([127.0.0.1]) by localhost (z9m9z.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id ysNtHEBN2KUW for ; Fri, 11 Dec 2015 13:04:22 -0500 (EST) Received: from lx120e.htt-consult.com (148.sub-70-208-146.myvzw.com [70.208.146.148]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by z9m9z.htt-consult.com (Postfix) with ESMTPSA id 77E72607C9 for ; Fri, 11 Dec 2015 13:04:21 -0500 (EST) To: "i2nsf@ietf.org" From: Robert Moskowitz Message-ID: <566B1018.2090904@htt-consult.com> Date: Fri, 11 Dec 2015 13:04:08 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Subject: [I2nsf] Definitions in draft-merged-i2nsf-problem-statement-use-cases-00 X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Dec 2015 18:04:31 -0000 I have been working with Sue and Linda on reviewing and cleaning up this ID. I looked at; Network Security Function (NSF): A function which ensures integrity, confidentiality and availability of network communications; detects unwanted activity, blocks or mitigates the effect of such unwanted activity on the network. And I took exception with at least 'ensures'. This is too strong of a statement. Nothing we do with this technology will 'ensure' CIA. First what is 'CIA': Confidentiality by restricting access to the internal assets. Integrity by, (well gee, what IS Integrity)? Integrity by enabling users to trust using their assets. Availablity by blocking attacks that make assets unusable. So first, do we agree what CIA means and that it is important? If so, we might get something like: A function that detects unwanted activity and blocks/mitigates the effect of such unwanted activity in order to support availability of a network. In addition, the NSF helps support communication stream “integrity and confidentiality”. Even this is too self-assured. An NSF detects unwanted activity? Really? It detects what we have so far have classified as unwanted activity. I know that IPS NSF devices are marketed to 'learn' and adapt, but without sophisticated AI, even here there are limits. Perhaps I am too pedantic, but this document includes 'user expectations', and I don't want an expectation of '6 sigmas of detection'. My sixpence worth. From nobody Fri Dec 11 13:55:19 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8F3C1A1B2D for ; Fri, 11 Dec 2015 13:55:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fTQo9y-LUdfF for ; Fri, 11 Dec 2015 13:55:15 -0800 (PST) Received: from mail-vk0-x22a.google.com (mail-vk0-x22a.google.com [IPv6:2607:f8b0:400c:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA2DF1A00F5 for ; Fri, 11 Dec 2015 13:55:14 -0800 (PST) Received: by vkca188 with SMTP id a188so124773488vkc.0 for ; Fri, 11 Dec 2015 13:55:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=RE0jKkOamC1SY5c02jwGRxeVPzw65rX8BO+1HOvlR6s=; b=fJMUX1L6oK212lQHIVRKHguYScs07AvxzAL3YHwhlt24UH21h6UL2mdzo0+8ruRmWr 7Z8TX22PBRAqoufWDCTJv+QcaHVma/qpt3L4JmVc6ZshkErei2xL9TIMQfU7Zs0hbso0 oyTqrs1uqnTJiTGaKhmZFs7vpJHaKR1uQO4XosWuM2ppicG/Cg3bmdllJSL7Bu4jlKZD 6xibxgD2YURIvrhQ0CA6gr4Okbc49NKh4Y7SRyYaK9Fr/gmJGt42gdp+DKVPiadE5qYm 7ZlWm9NKOAokVDfKMJui6QnyTKdKEbmxmk+fW66Xnf6geyTdwBx7bOTwJMz3WO6FFiu+ 5LlA== MIME-Version: 1.0 X-Received: by 10.31.60.4 with SMTP id j4mr15789492vka.109.1449870913922; Fri, 11 Dec 2015 13:55:13 -0800 (PST) Received: by 10.103.40.131 with HTTP; Fri, 11 Dec 2015 13:55:13 -0800 (PST) Date: Fri, 11 Dec 2015 13:55:13 -0800 Message-ID: From: John Strassner To: i2nsf@ietf.org Content-Type: multipart/alternative; boundary=001a11c00f90cb6d4d0526a660c6 Archived-At: Subject: [I2nsf] Post 2a: Background Information on PCIMe (Overview) X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Dec 2015 21:55:19 -0000 --001a11c00f90cb6d4d0526a660c6 Content-Type: text/plain; charset=UTF-8 The I2NSF framework draft mentions PCIM (RFC3060) and PCIMe (RFC3460) as possible candidates for guiding the policy structure that can be mapped to the Capability Layer's "Subject-Object-Action-Function" paradigm. This note provides a brief analysis of the suitability of PCIMe for this task. Attributes in PCIM and PCIMe do not obey standard coding conventions of nonCapThenCap, they are CapThenCap. Please note that I name attributes in the traditional nonCapThenCap manner in the following discussion. Finally, sorry for the length of this note, but RFC3460 is a 93-page document, and even more complex than PCIM. Therefore, I have tried to keep this as brief as possible by splitting it into two, called Post 2a and Post 2b. This post (2a) gives a high-level overview, and is intended for non-modelers. Post 2b adds detail to post 2a, and is intended for modelers. If you need more explanation on anything, please do not hesitate to ask! 1. Focus of PCIMe PCIMe was built to accomplish two things: 1) EXTEND PCIM into areas that were being worked on at the time (e.g., header filtering), and 2) DEPRECATE parts of PCIM based on early experience 1.1. EXTENSION In general, extensions should not cause a problem, but there are exceptions - the most important is PolicySet (parent of PolicyGroup and PolicyRule). Please read Post 2b, section 1.1, for more detail on this. 1.2. DEPRECATION Deprecation is sometimes unavoidable. In general, such changes are not backwards-compatible. Note that PCIMe does not include in its class definitions annotations as to why a particular element was deprecated. 2. SUMMARY: main drawbacks of using PCIMe Note that the current CIM Policy Model (2.44.1) is significantly different than either PCIM or PCIMe. PCIM is based on CIM 2.4; PCIMe is based on CIM 2.5. PCIMe is NOT backwards compatible with PCIM in all areas. Note also that many of the deprecated items in 2.4 and 2.5 still exist in 2.44.1, though some have been removed. Given the large amount of problems, I recommend that we do not consider PCIMe further for I2NSF work. 2.1. Critical Problems These are in addition to those pointed out in Post 1. 2.1.1. Policy Rule Problems - There is no way to properly aggregate PolicyRules into PolicyGroups. PolicySetComponent is recursive, so it can be used to aggregate homogeneous, but not heterogeneous, objects - Nested policy rules (also called sub-rules) are no different than making a method call to another PolicyAction; this would greatly simplify implementation and understanding (see Post 2b) - There is no mechanism to make use of the executionStrategy attribute, since neither errors nor events are defined - There is no mechanism that can prevent side effects caused by the evaluation of conditions - There is no mechanism that can prevent side effects caused by the execution of actions 2.1.2. Role Problems - Using attributes (i.e., policyRoles) to associate a PolicyRule to a resource is broken. This is what associations, aggregations, and compositions are for - Worse, the mechanism for aggregating roles is **backwards** in PCIMe. Roles describe object responsibilities, and there should be the object that is aggregated by an entity (see Post 2b) - Worse yet, there is no mechanism for ensuring that the resource object and the PolicyRoleCollection objects are scoped by the same System - Finally, there is no mechanism for role inheritance and role engineering to be performed (see Post 2b) 2.1.3. Conditions and Actions - There is no reason to define the SimplePolicyCondition and CompoundPolicyCondition classes - There is no reason to define the SimplePolicyAction and CompoundPolicyAction classes 2.1.4. Variables - There is no reason to have both a PolicyImplicitVariable and a PolicyExplicitVariable class (see Post 2b); they are performing the same semantic function 2.1.5. Additional Problems These are so important that they are repeated from Post 1: - There is no way to uniquely identify instances of the same object - There is no concept of error or exception handling - There is no concept of the subject or the target of a policy - Adding a new type of policy (e.g., declarative or functional) will cause a major rewrite of the entire model - There is no approach to detecting and solving policy conflicts 2.2. Major Problems 2.2.1. Abstraction Problems - The "levels of abstraction" (domain- and device-level policies) have no mechanisms defined in the model to support them - The PolicyComponent aggregation, defined on Policy, means that ANY SUBCLASS can aggregate itself, which is incorrect. - Scoping has no mechanisms to ensure that the PolicyRule and the resource to which it applies are in the same namespace. - First, weak relationships (a relational algebra construct), should not be used in information models. - Second, this requires two relationships (one for PolicyGroup and a different one for PolicyRule) to be used. - Third, the PCIMe implementation uses overriding of keys (!) to implement these aggregations. 2.2.2. PolicyRule Problems - The "first-match" decision strategy can be ambiguous (see Post 2b) - The decisionStrategy attribute can be ambiguous (see Post 2b) - There is no mechanism to ensure that priority attribute values are unique within a PolicySet (or PolicySetInSystem); this leads to non-deterministic behavior - Different classes are required to associate each condition with a PolicyRule - Different classes are required to associate each action with a PolicyRule 2.2.3. Condition and Action Problems - The MATCH operator is overloaded and ambiguous (see Post 2b) - CompoundPolicyConditions are very expensive (see Post 2b) - This also applies to CompoundPolicyActions - Building a Boolean condition clause is complex and requires too many aggregations (see Post 2b) - The above is more complex when PolicyConditions are nested, as well as when CompoundPolicyConditions are used (see Post 2b) - The above two points apply equally to PolicyActions 2.2.4. Miscellaneous Problems - The associations PolicyInSystem, PolicyGroupInSystem, and PolicyRuleInSystem are superfluous (see Post 2b) - Filters are too difficult to construct (see Post 2b) 2.3. Minor Problems - PolicyRule has an attribute named "mandatory" whose semantics are ambiguous depending on the values of other attributes - The class CompoundFilterCondition defines one additional attribute; this is insufficient to standardize how filtering conditions should be structured - Copying the attributes sequencedActions and executionStrategy in both PolicyRule and CompoundPolicyAction does not make sense - All ImplicitPolicyVariable subclasses have no mechanism to enforce their allowed value types (see Post 2b) - The ReusablePolicyContainer class does not define any useful attributes for policy-based management 3. PCIMe Class Hierarchy The PCIMe Class Hierarchy is still a CA (condition-action) model, as shown below (changes are briefly noted in parentheses): ManagedElement (abstract) | +---Policy (abstract) | | | +---PolicySet (abstract, new) | | | | | +---PolicyGroup (MOVED to here) | | | | | +---PolicyRule (MOVED to here) | | | +---PolicyCondition (abstract) | | | | | +---PolicyTimePeriodCondition | | | | | +---VendorPolicyCondition | | | | | +---SimplePolicyCondition (NEW) | | | | | +---CompoundPolicyCondition (NEW) | | | | | +---PolicyFilterCondition (NEW) | | | +---PolicyAction (abstract) | | | | | +---VendorPolicyAction | | | | | +---SimplePolicyAction (NEW) | | | | | +---CompoundPolicyAction (NEW) | | | | +---PolicyVariable (abstract, NEW) | | | | | +---PolicyExplicitVariable (NEW) | | | | | +---PolicyImplicitVariable (abstract, NEW) | | | | | +---(NEW SUBCLASSES) | | | +---PolicyValue (abstract, NEW) | | | | | +---(NEW SUBCLASSES) | | | +---Collection (Abstract, NEW*) | | | | | +---PolicyRoleCollection (NEW) | | | +---ManagedSystemElement (abstract, NEW*) | | | | | +---LogicalElement (abstract, NEW*) | | | | | | | +---System (abstract, NEW*) | | | | | | | | | ... (deprecated PolicyRepository with ReusablePolicyContainer, NEW*) | | | | | | | +---FilterEntryBase (abstract, NEW*) | | | | | | | | | +---IpHeadersFilter (NEW)* | | | | | | | | | +---8021Filter (NEW*) | | | | | | | | +---FilterList (NEW*) Note that RFC3460 says that the classes marked by NEW* are not new, as they are defined in the CIM. However, they ARE new to PCIMe, so I have marked them as NEW*. See additional notes in Post 2b if desired. regards, John --001a11c00f90cb6d4d0526a660c6 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
The I2NSF framewor= k draft mentions PCIM (RFC3060) and PCIMe (RFC3460) as possible candidates = for guiding the policy structure that can be mapped to the Capability Layer= 's "Subject-Object-Action-Function" paradigm. This note provides a brief analysis of the suita= bility of PCIMe for this task.

Attributes= in PCIM and PCIMe do not obey standard coding conventions of nonCapThenCap= , they are CapThenCap. Please note that I name attributes in the traditiona= l nonCapThenCap manner in the following discussion.

Finally, sorry for the length of this note, but RFC3460 is a 93-= page document, and even more complex than PCIM. Therefore, I have tried to = keep this as brief as possible by splitting it into two, called Post 2a and= Post 2b. This post (2a) gives a high-level overview, and is intended for n= on-modelers. Post 2b adds detail to post 2a, and is intended for modelers.<= /font>

<= font face=3D"monospace,monospace">If you need more explanation on anything,= please do not hesitate to ask!
=C2=A0
1.=C2=A0=C2=A0Focus of PCIMe<= /font>

<= font face=3D"monospace,monospace">PCIMe was built to accomplish two things:=

= =C2=A0=C2=A0 1) EXTEND PCIM into areas t= hat were being worked on at the time
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 (e.g., header filtering), and
=C2=A0=C2=A0 2) DEPRECATE parts of PCIM based on early experienc= e

1.1.=C2=A0 EXTENSION
<= font face=3D"monospace,monospace">
In general, extensions should not cause a problem, but ther= e are exceptions - the most important is PolicySet (parent of PolicyGroup a= nd PolicyRule). Please read Post 2b, section 1.1,=C2=A0for more detail on t= his.

<= div>1.2.=C2=A0 DEPRECATION
<= div>
Deprecation is sometimes unavoidable. In general, such= changes are not backwards-compatible. Note that PCIMe does not include in = its class definitions annotations as to why a particular element was deprec= ated.


2.=C2=A0 SUMMARY= : main drawbacks of using PCIMe

Note that the current = CIM Policy Model (2.44.1) is significantly different than either PCIM or PC= IMe. PCIM is based on CIM 2.4; PCIMe is based on CIM 2.5. PCIMe is NOT back= wards compatible with PCIM in all areas. Note also that many of the depreca= ted items in 2.4 and 2.5 still exist in 2.44.1, though some have been remov= ed.

Given the large amount of problems, I recommend that we do not con= sider PCIMe further for I2NSF work.
=C2=A0
2.1.=C2=A0 Critical Problems

Thes= e are in=C2=A0addition to those pointed out in Post 1.
<= /font>
2.1.1.=C2=A0 Policy Rule Problems

=
=C2=A0 - There is no way to properly aggregate PolicyRules into
=C2= =A0=C2=A0=C2=A0 PolicyGroups. PolicySetComponent is recursive, so it can be= used
=C2=A0=C2=A0=C2=A0=C2=A0to aggregate homogeneous, but not heteroge= neous,=C2=A0objects
=C2=A0=C2=A0- Nested policy rules (also calle= d sub-rules) are no different than
=C2=A0=C2=A0=C2=A0 making a method ca= ll to another PolicyAction; this would greatly
=C2=A0=C2=A0=C2=A0 simpli= fy implementation and understanding (see Post 2b)
=C2=A0 - There = is no mechanism to make use of the executionStrategy
=C2=A0=C2=A0=C2=A0 = attribute, since neither errors nor events are defined
=C2=A0 - There is= no mechanism that can prevent side effects caused by
=C2=A0=C2=A0=C2=A0= the evaluation of conditions
=C2=A0 - There is no mechanism that can pr= event side effects caused by
=C2=A0=C2=A0=C2=A0 the execution of actions=

2.1.2.=C2=A0 Role Problems

=C2=A0 - Using attributes (i.e., policyRoles) to associate a PolicyRule<= br>=C2=A0=C2=A0=C2=A0 to a resource is broken. This is what associations,=C2=A0=C2=A0=C2=A0 aggregations, and compositions are for
=C2=A0 - Wor= se, the mechanism for aggregating roles is **backwards** in
=C2=A0=C2=A0= =C2=A0 PCIMe. Roles describe object responsibilities, and there should
= =C2=A0=C2=A0=C2=A0=C2=A0be the object that is aggregated by an entity (see = Post 2b)
=C2=A0=C2=A0- Worse yet, there is no mechanism for ensuring tha= t the resource
=C2=A0=C2=A0=C2=A0 object and the PolicyRoleCollection ob= jects are scoped by the
=C2=A0=C2=A0=C2=A0 same System
=C2=A0 = - Finally, there is no mechanism for role inheritance and role
=C2=A0=C2= =A0=C2=A0 engineering to be performed (see Post 2b)

2.1.3.=C2=A0 Conditions and Actions

=C2=A0 - There is no re= ason to define the SimplePolicyCondition and
=C2=A0=C2=A0=C2=A0 Compound= PolicyCondition classes
=C2=A0 - There is no reason to define= the SimplePolicyAction and
=C2=A0=C2=A0=C2=A0 CompoundPolicyAction clas= ses

2.1.4.=C2=A0 Variables

=C2=A0 - There is no reason to have both a PolicyImplicitVariable and
= =C2=A0=C2=A0=C2=A0 a PolicyExplicitVariable class (see Post 2b); they are=C2=A0=C2=A0=C2=A0 performing the same semantic function
2.1.5.=C2=A0 Additional Problems

Thes= e are so important that they are repeated from Post 1:

=C2=A0= - There is no way to uniquely identify instances of the
=C2=A0=C2=A0=C2= =A0=C2=A0same object
=C2=A0=C2=A0- There is no concept of error o= r exception handling
=C2=A0 - There is no concept of the subject or the = target of a policy
=C2=A0 - Adding a new type of policy (e.g., declarati= ve or functional)
=C2=A0=C2=A0=C2=A0 will cause a major rewrite of the e= ntire model
=C2=A0=C2=A0- There is no approach to detecting and solving = policy conflicts


2.2.=C2=A0 Major P= roblems

2.2.1.=C2=A0 Abstraction Problems

=C2=A0 - The "levels of abstraction" (domain= - and device-level policies)
=C2=A0=C2=A0=C2=A0 have no mechanisms defin= ed in the model to support them
=C2=A0 - The PolicyComponent aggregation= , defined on Policy, means that
=C2=A0=C2=A0=C2=A0 ANY SUBCLASS can aggr= egate itself, which is incorrect.
=C2=A0 -=C2=A0Scoping has no me= chanisms to ensure that the PolicyRule and the
=C2=A0=C2=A0=C2=A0=C2=A0r= esource to which it applies are in the same namespace.
=C2=A0=C2= =A0=C2=A0 - First, weak relationships (a relational algebra construct),
=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0should not be used in information mod= els.
=C2=A0=C2=A0=C2=A0 - Second, this requires two relationships (one f= or PolicyGroup
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 and a different one for Po= licyRule) to be used.
=C2=A0=C2=A0 =C2=A0- Third, the PCIMe imple= mentation uses overriding of keys (!)
=C2=A0=C2=A0=C2=A0=C2=A0 = =C2=A0to implement these aggregations.

=
2.2.2.=C2=A0 PolicyRule Problems

=C2= =A0 - The "first-match" decision strategy can be ambiguous (see P= ost 2b)
=C2=A0 - The decisionStrategy attribute can be ambiguous = (see Post 2b)
=C2=A0 - The= re is no mechanism to ensure that priority attribute values
=C2=A0=C2=A0= =C2=A0 are unique within a PolicySet (or PolicySetInSystem); this
=C2=A0= =C2=A0=C2=A0 leads to non-deterministic behavior
=C2=A0 - Different clas= ses are required to associate each condition with
=C2=A0=C2=A0=C2=A0 a P= olicyRule
=C2=A0 - Different classes are required to associate each acti= on with
=C2=A0=C2=A0=C2=A0 a PolicyRule
<= div>
2.2.3.=C2= =A0 Condition and Action Problems

=C2=A0 - The MATCH= operator is overloaded and ambiguous (see Post 2b)
=C2=A0 - CompoundPolicyConditions are very exp= ensive (see Post 2b)
=C2=A0 - This also applies to CompoundPolicyActions=
=C2=A0 - Building a Boolean condition clause is complex and requires to= o
=C2=A0=C2=A0=C2=A0 many aggregations (see Post 2b)
=C2=A0 - The above is more complex when Po= licyConditions are nested, as
=C2=A0=C2=A0=C2=A0=C2=A0well as when Compo= undPolicyConditions are used (see Post 2b)
=C2=A0 - The above two points= apply equally to PolicyActions

2.2.4. Miscellaneous Problems

=C2=A0 = - The associations PolicyInSystem, PolicyGroupInSystem,
=C2=A0=C2=A0=C2= =A0 and PolicyRuleInSystem are superfluous (see Post 2b)
=C2=A0 -= Filters are too difficult to construct (see Post 2b)

=

2.3.=C2=A0 Minor Problems

=C2=A0 - PolicyRule has an attribute named "mandatory" whose s= emantics are
=C2=A0=C2=A0=C2=A0 ambiguous depending on the values of oth= er attributes
=C2=A0 - The class CompoundFilterCondition defines one add= itional attribute;
=C2=A0=C2=A0=C2=A0 this is insufficient to standardiz= e how filtering conditions
=C2=A0=C2=A0=C2=A0 should be structured
= =C2=A0 - Copying the attributes sequencedActions and executionStrategy in=C2=A0=C2=A0=C2=A0 both PolicyRule and CompoundPolicyAction does not make= sense
=C2=A0 - All ImplicitPolicyVariable subclasses have no mechanism = to
=C2=A0=C2=A0 =C2=A0enforce their allowed value types (see Post 2b)
=C2=A0 - The ReusablePolicyContainer class does not define any usef= ul
=C2=A0=C2=A0=C2=A0 attributes for policy-based management
=

= =C2=A0
3. PCIMe C= lass Hierarchy
=C2=A0
The PCIMe Class Hie= rarchy is=C2=A0still a CA (condition-action) model, as shown below (changes= are briefly noted in parentheses):

Manag= edElement (abstract)
=C2=A0 |
=C2=A0 +---Policy (abstract)
=C2=A0 = |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyS= et (abstract, new)
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0= =C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2= =A0 +---PolicyGroup (MOVED to here)
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2= =A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0= =C2=A0=C2=A0=C2=A0 +---PolicyRule (MOVED to here)
=C2=A0 |=C2=A0=C2=A0= =C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyCondition (abs= tract)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
= =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyT= imePeriodCondition
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0= =C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0+---VendorPolicyCondi= tion
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---SimplePoli= cyCondition (NEW)
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2= =A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 += ---CompoundPolicyCondition (NEW)
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0= =C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = +---PolicyFilterCondition (NEW)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|<= br>=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyAction (abstract)
=C2=A0 |= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 +---VendorPolicyAction=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2= =A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---SimplePolicyAct= ion (NEW)
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2= =A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---Com= poundPolicyAction (NEW)
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2= =A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyVariable (a= bstract, NEW)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0= =C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0= +---PolicyExplicitVariable (NEW)
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 = |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2= =A0=C2=A0=C2=A0 +---PolicyImplicitVariable (abstract, NEW)
=C2=A0=C2=A0|= =C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0= |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 =C2=A0 +---(NEW SUBCLASSES)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyValue (abstract, NEW)
=C2= =A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 +---(NEW SUBCLASSES= )
=C2=A0 |=C2=A0=C2=A0= =C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---Collection (Abstract= , NEW*)
=C2=A0 |=C2=A0= =C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2= =A0=C2=A0 +---PolicyRoleCollection (NEW)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2= =A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---ManagedSystemElement (abstrac= t, NEW*)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2= =A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---LogicalElement (abstract, NEW*)
= =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2= =A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |= =C2=A0=C2=A0=C2=A0=C2=A0 +---System (abstract, NEW*)
=C2=A0 |=C2=A0=C2= =A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0= =C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2= =A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0... (deprecate= d PolicyRepository with ReusablePolicyContainer, NEW*)
=C2=A0 |=C2=A0=C2= =A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
= =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2= =A0=C2=A0 +---FilterEntryBase (abstract, NEW*)
=C2=A0 |=C2=A0=C2=A0=C2= =A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0= =C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2= =A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---IpHeadersFilter= (NEW)*
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2= =A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0= =C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2= =A0=C2=A0=C2=A0 +---8021Filter (NEW*)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |= =C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2= =A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0= =C2=A0=C2=A0=C2=A0 +---FilterList (NEW*)

Note that RFC3460 says that the classes marked by NEW* are not new, a= s they are defined in the CIM. However, they ARE new to PCIMe, so I have ma= rked them as NEW*. See additional notes in Post 2b if desired.
=


regards,
John<= /font>
--001a11c00f90cb6d4d0526a660c6-- From nobody Fri Dec 11 14:08:04 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F3DA11A9085 for ; Fri, 11 Dec 2015 14:08:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.599 X-Spam-Level: X-Spam-Status: No, score=-0.599 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J6XoTIdwJpCM for ; Fri, 11 Dec 2015 14:07:53 -0800 (PST) Received: from mail-vk0-x235.google.com (mail-vk0-x235.google.com [IPv6:2607:f8b0:400c:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53FC41A6F12 for ; Fri, 11 Dec 2015 14:07:53 -0800 (PST) Received: by vkca188 with SMTP id a188so124939773vkc.0 for ; Fri, 11 Dec 2015 14:07:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=pMDklw7bqbZLe5AubpQnq6MgcUEtzbYoX3OpE3gW1LY=; b=UhNILAhCMrVAtvBbFLWAGj89Be7sCxK9jWJnwaIVK9PMfUZmFXxJb3jy483GTaZgDe KjNzcvfD4Nk3DLMJdOHaoZJwB4ZCpm+B2YCwBRNFLNckMVFmC2RSII/tITyFSNrzBHHl G6/s3PL/12ZDYNZ5TNbtj8CzJZpEn9Dr3+OU4Cyn5/ZQoKr3marJU1Nnkx+mH9S5cCAu hs+pf4DaVLINJh/qnmWyaQIwGr9wWnKxFE54T7Ri+VgUIohDhVaziuuOgN9UHtCinwIM uAFslUO2wwWRzdahi3j+lL8C00LOV9OJpN9We7Lrr2shnBXfXCKukbze/byZPLe+CKW+ lA6w== MIME-Version: 1.0 X-Received: by 10.31.4.208 with SMTP id 199mr14565997vke.110.1449871672439; Fri, 11 Dec 2015 14:07:52 -0800 (PST) Received: by 10.103.40.131 with HTTP; Fri, 11 Dec 2015 14:07:52 -0800 (PST) Date: Fri, 11 Dec 2015 14:07:52 -0800 Message-ID: From: John Strassner To: i2nsf@ietf.org Content-Type: multipart/alternative; boundary=001a1142a4d2017a6b0526a68e07 Archived-At: Subject: [I2nsf] Post 2b: Background Information on PCIMe (Modeler Details) X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Dec 2015 22:08:03 -0000 --001a1142a4d2017a6b0526a68e07 Content-Type: text/plain; charset=UTF-8 The I2NSF framework draft mentions PCIM (RFC3060) and PCIMe (RFC3460) as possible candidates for guiding the policy structure that can be mapped to the Capability Layer's "Subject-Object-Action-Function" paradigm. This note provides a brief analysis of the suitability of PCIMe for this task. Attributes in PCIM and PCIMe do not obey standard coding conventions of nonCapThenCap, they are CapThenCap. Please note that I name attributes in the traditional nonCapThenCap manner in the following discussion. Finally, sorry for the length of this note, but RFC3460 is a 93-page document, and even more complex than PCIM. Therefore, I have tried to keep this as brief as possible by splitting it into two, called Post 2a and Post 2b. This post (2a) gives a high-level overview, and is intended for non-modelers. Post 2b adds detail to post 2a, and is intended for modelers. If you need more explanation on anything, please do not hesitate to ask! 1. Focus of PCIMe PCIMe was built to accomplish two things: 1) EXTEND PCIM into areas that were being worked on at the time (e.g., header filtering), and 2) DEPRECATE parts of PCIM based on early experience Note that PCIMe is still tightly tied to the DMTF CIM. For an overview of what this means in modeling terms, please see section 5 of Post 1: Background Information on PCIM. 1.1. EXTENSION In general, extensions should not cause a problem. One important exception is when generalization (introduction of a new superclass) is used, and properties are added to the newly introduced superclass. This means that prior implementations will not have either the new class or its properties. One important example is the PolicySet class, which is the new parent of PolicyRule and PolicyGroup. PolicySet introduces two attributes - one is new (so existing implementations won't have it), and one is MOVED from another class (which will cause different problems). One area that will cause always problems is the unfortunate implementation of relationships. Remember that in PCIM and CIM, ALL associations, aggregations, and compositions are implemented as classes, which means that associations also are subject to inheritance. Furthermore, PCIMe, PCIM, and CIM use the strange practice of overriding keys. Not only should keys NOT be used in an information model (they are technology-specific), but this is poor practice from a relational algebra point-of-view. 1.2. DEPRECATION Deprecation is sometimes unavoidable. In general, such changes are not backwards-compatible. Note that PCIMe does not include in its class definitions annotations as to why a particular element was deprecated. 2. SUMMARY: main drawbacks of using PCIMe Note that the current CIM Policy Model (2.44.1) is significantly different than either PCIM or PCIMe. PCIM is based on CIM 2.4; PCIMe is based on CIM 2.5. PCIMe is NOT backwards compatible with PCIM in all areas. Note also that many of the deprecated items in 2.4 and 2.5 still exist in 2.44.1, though some have been removed. 2.1. Critical Problems These are in addition to those pointed out in Post 1. All items from post 1 are repeated; those bullets with additional information are marked with asterisks (***). 2.1.1. PolicyRule Problems - There is no way to properly aggregate PolicyRules into PolicyGroups (PolicySetComponent is recursive, so it can be used to aggregates homogeneous, but not heterogeneous, objects *** Nested policy rules (also called sub-rules) are no different than making a method call to another PolicyAction; this would greatly simplify implementation and understanding. Specifically: *** since the parent's rules are executed before any of the sub- rules are executed, this has the exact same effect as making a call to another PolicyAction; the PolicyEvent and PolicyCondition clauses of the sub-rule do not exist *** Optimization of sub-rules is implementation-dependent; if any sub-rule has side effects, then interoperability is broken - There is no mechanism to make use of the executionStrategy attribute, since neither errors nor events are defined - There is no mechanism that can prevent side effects caused by the evaluation of conditions - There is no mechanism that can prevent side effects caused by the execution of actions 2.1.2. Role Problems - Using attributes (i.e., policyRoles) to associate a PolicyRule to a resource is broken. This is what associations, aggregations, and compositions are for. *** Worse, the mechanism for aggregating roles is **backwards** in PCIMe. A PolicyRoleCollection aggregates ManagedElement objects. Instead, ManagedElement objects have different responsibilities (i.e., roles), so the aggregation should be reversed. - Worse yet, there is no mechanism for ensuring that the same System, which provides scoping, is used for the ManagedElement object as is for the PolicyRoleCollection object *** Finally, there is no mechanism for role inheritance to be sanitized. Specifically, in PCIMe, both PolicyRules and PolicyGroups are, in effect, containers that can have policyRoles; there is no mechanism to either remove duplications, remove role conflicts, or perform other aspects of role engineering *** Finally, note that the DMTF CIM model has deprecated the policyRole attribute in the PolicySet class. 2.1.3. Conditions and Actions *** There is no reason to define the SimplePolicyCondition and CompoundPolicyCondition classes *** this requires an additional aggregation *** the only difference between these classes is an attribute that specifies whether the clause is in DNF or CNF (note that the additional classes mandate a new aggregation as well) *** There is no reason to define the SimplePolicyAction and CompoundPolicyAction classes *** this requires an additional aggregation *** while SimplePolicyAction has no attributes and CompoundPolicyAction has two, both attributes SHOULD be moved to the Action class, since they are applicable to both classes 2.1.4. Variables *** There is no reason to have both a PolicyImplicitVariable and a PolicyExplicitVariable class, as they are performing the same semantic function 2.1.5. Additional Problems These are so important that they are repeated from Post 1: - There is no way to uniquely identify instances of the same object - There is no concept of error or exception handling - There is no concept of the subject or the target of a policy - Adding a new type of policy (e.g., declarative or functional) will cause a major rewrite of the entire model - There is no approach to detecting and solving policy conflicts 2.2. Major Problems 2.2.1. Abstraction Problems - The "levels of abstraction" (domain- and device-level policies) have no mechanisms defined in the model to support them (see Post 2b) *** The PolicyComponent aggregation, defined on Policy, means that ANY SUBCLASS can aggregate itself. This is clearly broken, even if the aggregation is optional, since implementations will never know in advance if it is being implemented or not. In addition, this aggregation does not make sense for the majority of the classes defined in PCIM (e.g., what does it mean for a PolicyVariable to aggregate itself?). (see Post 2b) *** Scoping has no mechanisms to ensure that the PolicyRule and the resource to which it applies are in the same namespace. *** First, this is represented using weak relationships (a relational algebra construct), which should not be used in information models. *** Second, this requires two relationships (one for PolicyGroup and a different one for PolicyRule) to be used. *** Third, the PCIMe implementation uses overriding of keys (!) to implement these aggregations. 2.2.2. PolicyRule Problems *** The "first-match" decision strategy is powerful, but deceptive: if the PolicySet is a PolicyGroup, then the first-match criterion (for termination) will match if ANY one or more contained PolicyRules OR PolicyGroups match - The notion of "rooted" vs. "unrooted" PolicySets defeats the purpose of having a decisionStrategy attribute *** There is no mechanism to ensure that priority attribute values are unique within a PolicySet (or PolicySetInSystem); this leads to non-deterministic behavior - Different classes are required to associate each condition with a PolicyRule - Different classes are required to associate each action with a PolicyRule 2.2.3. Condition and Action Problems *** Both simple and compound policy conditions use the canonical form {variable MATCH value}; however, there is no object that represents the different semantics for MATCH, and hence, the MATCH operator is overloaded and ambiguous (e.g., is a shallow or deep equality match desired) *** CompoundPolicyConditions are very expensive, as each Boolean condition clause must be aggregated using a unique aggregation - This also applies to CompoundPolicyActions *** Building a Boolean condition clause is complex and requires too many aggregations; e.g., a simple PolicyCondition requires: *** one PolicyConditionInPolicyRule to associate the condition clause with the PolicyRule *** one PolicyVariableInSimplePolicyCondition aggregation to associate the variable used to the condition clause *** n ExpectedPolicyValuesForVariable associations to associate the allowed value range(s) to the variable *** one PolicyValueInSimplePolicyCondition aggregation to associate the value used to the condition clause *** The above is more complex when PolicyConditions are nested, as well as when CompoundPolicyConditions are used; in both cases, the number of associations and aggregations multiply - The above two points apply equally to PolicyActions 2.2.4. Miscellaneous Problems *** The associations PolicyInSystem, PolicyGroupInSystem, and PolicyRuleInSystem are superfluous; modern software techniques like introspection or reflection do the same things in more powerful ways. *** Filters are too difficult to construct (an object is defined for each filter, and each such object requires an aggregation to add it to another object) 2.3. Minor Problems - PolicyRule has an attribute named "mandatory" whose semantics are ambiguous depending on the values of other attributes - The class CompoundFilterCondition defines one additional attribute; this is insufficient to standardize how filtering conditions should be structured - Copying the attributes sequencedActions and executionStrategy in both PolicyRule and CompoundPolicyAction does not make sense *** All ImplicitPolicyVariable subclasses have no mechanism to enforce their allowed value types except an association, and that association has no attributes or OCL constraints to enforce the value types (in other words, the enforcement is by looking at class names or attribute values) - The ReusablePolicyContainer class does not define any useful attributes for policy-based management Finally, note that the DMTF CIM model has deprecated the mandatory attribute in the PolicyRule class. 3. PCIMe Class Hierarchy The PCIMe Class Hierarchy is still a CA (condition-action) model, as shown below (changes are briefly noted in parentheses): ManagedElement (abstract) | +---Policy (abstract) | | | +---PolicySet (abstract, new) | | | | | +---PolicyGroup (MOVED to here) | | | | | +---PolicyRule (MOVED to here) | | | +---PolicyCondition (abstract) | | | | | +---PolicyTimePeriodCondition | | | | | +---VendorPolicyCondition | | | | | +---SimplePolicyCondition (NEW) | | | | | +---CompoundPolicyCondition (NEW) | | | | | +---PolicyFilterCondition (NEW) | | | +---PolicyAction (abstract) | | | | | +---VendorPolicyAction | | | | | +---SimplePolicyAction (NEW) | | | | | +---CompoundPolicyAction (NEW) | | | | +---PolicyVariable (abstract, NEW) | | | | | +---PolicyExplicitVariable (NEW) | | | | | +---PolicyImplicitVariable (abstract, NEW) | | | | | +---(NEW SUBCLASSES) | | | +---PolicyValue (abstract, NEW) | | | | | +---(NEW SUBCLASSES) | | | +---Collection (Abstract, NEW*) | | | | | +---PolicyRoleCollection (NEW) | | | +---ManagedSystemElement (abstract, NEW*) | | | | | +---LogicalElement (abstract, NEW*) | | | | | | | +---System (abstract, NEW*) | | | | | | | | | ... (deprecated PolicyRepository with ReusablePolicyContainer, NEW*) | | | | | | | +---FilterEntryBase (abstract, NEW*) | | | | | | | | | +---IpHeadersFilter (NEW)* | | | | | | | | | +---8021Filter (NEW*) | | | | | | | | +---FilterList (NEW*) Note that RFC3460 says that the classes marked by NEW* are not new, as they are defined in the CIM. However, they ARE new to PCIMe, so I have marked them as NEW*. The rest of this section adds detail to Post 2a. The main STRUCTURAL changes in the class hierarchy are: 1) Introduce a new superclass (PolicySet) to parent PolicyRule and PolicyGroup (NOT backwards-compatible, see 3.1) 2) Change how PolicyRules and PolicyGroups are aggregated (see 3.2) 3) Change PolicyRule prioritization (see 3.3) 4) Change PolicyRule execution (see 3.4) 5) Change PolicyRules (covered in Section 2 above) 6) Extend PolicyCondition with two new concrete classes (SimplePolicyCondition and CompoundPolicyCondition) (covered in Section 2 above) 7) Extend PolicyAction with two new concrete classes (SimplePolicyAction and CompoundPolicyAction) (covered in Section 2 above) 8) Change how policyRoles are Represented and Used (covered in Section 2 above) 9) Introduce PolicyVariable (covered in Section 2 above) 10) Introduce PolicyValue (covered in Section 2 above) 11) More about PolicyRoleCollection (see 3.5) These will be described in the following subsections. 3.1. Introduce a new superclass (PolicySet) This change has several problems; the most important are described below. 3.1.1. PolicySet Structure This change was done to define a common parent for the PolicyRule and PolicyGroup classes. This change is NOT backwards-compatible: a) It moves the policyRoles attribute from PolicyRule to PolicySet, which breaks existing implementations b) The priority attribute is moved from PolicyRule to two different relationships (both of which break existing implementations): 1. The PolicySetInSystem association (which is implemented as an association class) 2. The PolicySetComponent aggregation (which is also implemented as an association class) c) It introduces a new attribute (policyDecisionStrategy) that applies to both PolicyRule and PolicyGroup; existing implementations will not have this attribute and will break 3.1.2. Unique Naming >From a code robustness perspective, software elements (classes, attributes, relationships) should be uniquely named; there is no good reason to duplicate the name "priority" here. Unfortunately, this is a systemic problem in the DMTF CIM. Semantically, it is strange to see the same property applied to an association as well as an aggregation, since these are very different types of relationships. 3.1.3. Evaluation of PolicyRules The justification for adding the new attribute policyDecisionStrategy to PolicySet (Section 3.2.3, page 7 of PCIMe) is incorrect. First, this attribute may not directly affect how priority is used, since its purpose is to define how rules are evaluated (first matching or not). Second, there is no mechanism specified to enable the combination of this attribute and the priority attribute (both in PolicySet) to **deterministically** specify how a rule is evaluated (i.e., while the text "...PolicySetComponent.Priority MUST have a unique value when compared with others defined for the same aggregating PolicySet" is present, no UML mechanism, such as OCL, is defined to enforce this text). 3.1.4. Moving policyRoles from PolicyRule to PolicySet The rationale for this change is to expand the use of this attribute. Since PCIMe is trying to fix grouping (PolicyRules can contain PolicyRules, and PolicyGroups can contain PolicyRules or PolicyGroups), then at first glance, it makes sense to move this attribute to PolicySet, so both PolicyRule and PolicyGroup can benefit from it. Unfortunately, the role-object pattern [1] was invented for this purpose (almost two decades ago). Furthermore, this would solve the problem stated in 3.2.4 (page 8) of "...there is no mechanism in PCIM for assigning roles to resources" in a much more elegant fashion. Note that the DMTF CIM model has deprecated this attribute. 3.2. Change How PolicyRules and PolicyGroups are Aggregated The previous section alluded to the changes in grouping in PCIMe. PCIM had two aggregations (PolicyRuleInPolicyGroup and PolicyGroupInPolicyGroup); the first enabled PolicyRules to be aggregated by a PolicyGroup, while the second enabled PolicyGroups to be aggregated by a PolicyGroup. These have now both been replaced by a single recursive aggregation (PolicySetComponent) on PolicySet. This is broken! PolicySetComponent means that any subclass of PolicySet can recursively aggregate itself (so, you get PolicyRules aggregated by a PolicyRule, and PolicyGroups aggregated by a PolicyGroup). You do NOT get the ability for a PolicyGroup to aggregate a PolicyRule!!! This is mandatory for any policy implementation - otherwise, PolicyGroups cannot contain a PolicyRule! 3.3. Change PolicyRule prioritization PolicySetComponent defines the priority attribute (it was moved from PolicyRule). From 3.2 above, this means that you can NOT prioritize which set of PolicyRules are in which set of PolicyGroups (e.g., Gold vs. Silver might want different flow actions, even though the PolicyRules are the same). 3.4. Change PolicyRule execution A new attribute (policyDecisionStrategy) is defined for PolicySet. It is a uint16, which is used to define 2 values: first-match and all-match. Given that there are only 2 values, this should be a Boolean, not a 16-bit unsigned integer! Second, the firstMatching == TRUE value means that the first PolicyRule whose conditions matched should be executed, and then execution stops (even if other PolicyRules are there waiting to be executed). Clearly, this only works if the priority attribute is also used. Unfortunately, this falls well short of controlling execution context. For example, what happens if a PolicyRule fails to execute properly? 3.5. PolicyRoleCollection The purpose of this class is to define a collection of resources that are associated with a particular role. The process, however, is cumbersome and fragile: a) Define appropriate PolicyRules b) Define appropriate values for each policyRole (inherited) attribute of affected PolicyRules (these are used to represent a resource having that role that the PolicyRule applies to) c) Define appropriate PolicyGroups d) Define appropriate values for each policyRole (inherited) attribute of affected PolicyGroups (these are used to represent a resource having that role that the PolicyGroup applies to) e) Define the PolicyRoleCollection class f) Instantiate its policyRoles attribute, and populate it with the same values as the above g) Tie the PolicyCollection class to the set of PolicyRule classes with the same role using the PolicySetInRoleCollection aggregation (note: one aggregation is required for EACH reference. Aggregations are not easily handled in YANG; more on that later). The obvious problem with the tedious procedure is that the policyRole attribute in PolicyRoleCollection is a **string**. Thus, if someone gives a resource the same name as another resource, this fails to identify which resource is being referred to. If someone forgets to assign a role to that resource, this also fails. If someone gives the same role name to multiple PolicyRules and/or PolicyGroups, this fails. It is also unclear how Boolean combinations of different policyRoles work. Finally, note that the DMTF CIM model has deprecated the policyRole attribute in the PolicySet class. 4. Relationships PCIMe uses the same approach as PCIM with respect to associations and aggregations (no compositions are defined): implement them as a class. The impact to building YANG data models will be discussed in a future post. For now, YANG is hierarchical, which corresponds to composition. Aggregation and association are very different models. This section is not in Post 2a. 4.1. Changes to the PolicyComponent Hierarchy The following relationships are changed in PCIMe: - PolicyRuleInPolicyGroup is DEPRECATED - PolicyGroupInPolicyGroup is DEPRECATED - PolicyConditionStructure is NEW - PolicyConditionInPolicyRule is MOVED to be a subclass of PolicyConditionStructure - PolicyConditionInPolicyCondition is NEW - PolicyActionStructure is NEW - PolicyActionInPolicyRule is MOVED to be a subclass of PolicyActionStructure - PolicyActionInPolicyAction is NEW - PolicyVariableInSimplePolicyCondition is NEW - PolicyValueInSimplePolicyCondition is NEW - PolicyVariableInSimplePolicyAction is NEW - PolicyValueInSimplePolicyAction is NEW - PolicySetInSystem is NEW - PolicyRuleInSystem is MOVED to be a subclass of PolicySetInSystem - PolicyRGroupnSystem is MOVED to be a subclass of PolicySetInSystem - ReusablePolicy is NEW - PolicyConditionInPolicyRepository is DEPRECATED - PolicyActionInPolicyRepository is DEPRECATED - ExpectedPolicyValuesForVariable is NEW - PolicyRoleCollectionInSystem is NEW - ContainedDomain is NEW - PolicyRepositoryInPolicyRepository is DEPRECATED - EntriesInFilterList is NEW - MemberOfCollection is NEW - ElementInPolicyRoleCollection is NEW 5. Comments on the Philosophy of Changing an Information Model, used by CIM/PCIM/PCIMe This is a **theory** section; please skip unless you want to understand the model in more detail. This section is not in Post 2a. If you have made it this far :-) then you will no doubt have looked at RFC3460. Please now refer to section 3.1 "How to Change an Information Model" on page 6. ALL FOUR RECOMMENDATIONS WILL BREAK MODELS IF EXTREME CARE IS NOT TAKEN. 5.1 Background - Software Architecture In software design, there are a set of fundamental principles that should be used to guide implementations. These include, but are not limited to: 1) the Liskov Substitution Principle [2] 2) the Single Responsibility Principle [3] 3) the Open-Closed Principle [4] 4) software contracts [4] 5.1.1. The Liskov Substitution Principle (LSP) This principle states that if A is a subclass of B, then objects instantiated from class B may be replaced with objects instantiated from class A WITHOUT ALTERING ANY OF THE DESIRED SEMANTICS OF THE PROGRAM. This is often called Strong Behavioral Subclassing (or Subtyping). Note that it is **strong** because it defines semantic substitution of types; the use of simple syntactical substitution fails. For the paranoid (i.e., me), one can ensure semantic correctness with things like software contracts [4]. 5.1.2. The Single Responsibility Principle (SRP) This principle states that every class should have responsibility over one, and only one, part of the functionality provided by the program. More specifically, there should only be one function in the specification of the class that causes it to change. This is routinely violated (e.g., Martin's example of a class that compiles and prints a report). Furthermore, the responsibility should be encapsulated within that class, and that services it provides should support that responsibility, and only that responsibility. In particular, this avoids the (systemic and far too prevalent) problem of changing one class, but breaking other parts of the system. It also enables the function of each class to be related back to a specific requirement. 5.1.3. The Open-Closed Principle (OCP) This principle states that software entities should be open for extension, but closed for modification. For example, the software entity can allow its behavior to be extended without modifying its source code. The difference between open and closed is that once a class has one or more clients, it is closed for modification, since changes to it will adversely affect the classes that use it. 5.1.4. Software Contracts A software contract is a mechanism to specify semantics abstractly. For any interaction, one or more of the following three mechanisms are required to specify the semantics of the interaction: - pre-conditions (e.g., the conditions imposed on the rest of the system before a method can execute) - post-conditions (e.g., the conditions guaranteed to the rest of the system after a method has executed) - invariants (e.g., consistency constraints maintained throughout the method execution) 5.2. The guidance "Properties may be added to existing classes" This is a really BAD idea. This violates at least the SRP and the OCP; in some cases, it will also violate the LSP. More importantly, if you have already generated data models from an information model, this causes regeneration of those data models. It can be thought of as changing the schema, which typically causes recompilation and redeployment. There are more robust ways to do this (e.g., the decorator pattern or the adapter pattern, depending on what, exactly, you would like to do). 5.3. The guidance about Deprecation There are many valid reasons to deprecate software elements. Some include: - the feature or function is insecure - the feature or function is buggy - the feature or function will be removed in a future release The obvious problem with deprecation is that it tends to break implementations that are using the deprecated features. While deprecation is sometimes necessary, it should be documented in the code, not somewhere else (e.g., as Eclipse API deprecation recommends). Unfortunately, this is not followed in PCIMe. For example, the priority attribute is deprecated in PolicyRule in PCIMe. Section 6.3 says: Priority DEPRECATED FOR PolicySetComponent.Priority AND FOR PolicySetInSystem.Priority which, to a non-modeler, looks like it is being replaced by two attributes that unfortunately have the name (which in itself is bad). It would be much more useful to note that the priority attribute is being deprecated for an attribute of the same name, but the attribute is moved to two different association classes. The high-level problem with deprecation in PCIMe is that it effectively rewrites most of PCIM. This is because deprecation is used as a general redesign mechanism (e.g., moving attributes from one class to another or to a relationship, or adding to existing classes; both break backwards-compatibility). Some features that were deprecated (e.g., PolicyRepository) frankly don't matter, as the definition was poor and needed augmentation anyway. Other features that were deprecated (e.g., replacing the two aggregations PolicyGroupInPolicyGroup and PolicyRuleInPolicyGroup with the single aggregation PolicySetComponent, or refactoring the priority attribute) will break existing implementations, even if they are better options. 5.4. The guidance about generalization. PCIMe says: "Classes may be inserted into the inheritance hierarchy above existing classes, and properties from the existing classes may then be "pulled up" into the new classes. The net effect is that the existing classes have exactly the same properties they had before, but the properties are inherited rather than defined explicitly in the classes." This violates the LSP, SRP, and OCP. It breaks implementations, and the statement is incorrect if the affected classes are all concrete; this also breaks data models. 5.5. The guidance about specialization. PCIMe says "New subclasses may be defined below existing classes". While this is true in general, care must be taken to obey the LSP, SRP, and OCP, or implementations will suffer. 6. References [1] Gamma, E., Helm, R., Johnson, R., Vlissides, J., "Design Patterns - Elements of Reusable Object-Oriented Software", Addison-Wesley, 1994, ISBN 0-201-63361-2 [2] Liskov, B.H., Wing, J.M., "A Behavioral Notion of subtyping", ACM Transactions on Programming languages and Systems, 16 (6): 1811 - 1841, 1994 [3] Martin, R.C., "Agile Software Development, Principles, Patterns, and Practices", Prentice-Hall, 2002 ISBN: 0-13-597444-5 [4] Meyer, B., "Object-Oriented Software Construction", 2nd edition, Prentice Hall, 1997 ISBN: 0-13-629155-4 --001a1142a4d2017a6b0526a68e07 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
The I2NSF framewor= k draft mentions PCIM (RFC3060) and PCIMe (RFC3460) as possible candidates = for guiding the policy structure that can be mapped to the Capability Layer= 's "Subject-Object-Action-Function" paradigm. This note provides a brief analysis of the suita= bility of PCIMe for this task.

Attributes= in PCIM and PCIMe do not obey standard coding conventions of nonCapThenCap= , they are CapThenCap. Please note that I name attributes in the traditiona= l nonCapThenCap manner in the following discussion.

Finally, sorry for the length of this note, but RFC3460 is a 93-= page document, and even more complex than PCIM. Therefore, I have tried to = keep this as brief as possible by splitting it into two, called Post 2a and= Post 2b. This post (2a) gives a high-level overview, and is intended for n= on-modelers. Post 2b adds detail to post 2a, and is intended for modelers.<= /font>

<= font face=3D"monospace,monospace">If you need more explanation on anything,= please do not hesitate to ask!


1.=C2=A0=C2= =A0Focus of PCIMe

PCIMe was built to accomplish two things:

=C2=A0=C2=A0 1) EXTEND PCIM into areas that were being = worked on at the time
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 (e.g., header= filtering), and
=C2=A0= =C2=A0 2) DEPRECATE parts of PCIM based on early experience

Note that PCIMe is still tightly tied to th= e DMTF CIM. For an overview of what this means in modeling terms, please se= e section 5 of Post 1: Background Information on PCIM.
1.1.=C2=A0 EXTENSION<= /font>
In general, extensions sh= ould not cause a problem. One important exception is when=C2=A0generalizati= on (introduction of a new superclass) is used, and properties are added to = the newly introduced superclass. This means that prior implementations will= not have either the new class or its properties.

One imp= ortant example is=C2=A0the PolicySet class, which=C2=A0is the new parent of= PolicyRule and PolicyGroup. PolicySet introduces two attributes - one is n= ew (so existing implementations won't have it), and one is MOVED from a= nother class (which will cause different problems).

One a= rea that will cause always problems is the unfortunate implementation of re= lationships.=C2=A0 Remember that in PCIM and CIM, ALL associations, aggrega= tions, and compositions are implemented as classes, which means that associ= ations also are subject to inheritance. Furthermore, PCIMe, PCIM, and CIM u= se the strange practice of overriding keys. Not only should keys NOT be use= d in an information model (they are technology-specific), but this is poor = practice from a relational algebra point-of-view.

1.2.=C2=A0 DEPRECATION

Deprecation is sometimes unavoidable. In general, such chang= es are not backwards-compatible. Note that PCIMe does not include in its cl= ass definitions annotations as to why a particular element was deprecated.<= /font>


2.=C2=A0 SUMM= ARY: main drawbacks of using PCIMe

Note that the current CIM Policy Model (2.44.1) = is significantly different than either PCIM or PCIMe. PCIM is based on CIM = 2.4; PCIMe is based on CIM 2.5. PCIMe is NOT backwards compatible with PCIM= in all areas. Note also that many of the deprecated items in 2.4 and 2.5 s= till exist in 2.44.1, though some have been removed.
=C2=A0
2.1.=C2=A0 Critical Problems

These are in=C2=A0addition to those pointed out in Post 1. All= items from post 1 are repeated; those bullets with additional information = are marked with asterisks (***).

2.1.1.=C2= =A0 PolicyRule Problems

=C2=A0 - There is no way to properly aggregate PolicyRules into=C2=A0=C2=A0=C2=A0 PolicyGroups (PolicySetComponent is recursive, so it ca= n be used
=C2=A0=C2=A0=C2=A0 to aggregates homogeneous, but not heteroge= neous, objects
*** Nested policy rules (also called s= ub-rules) are no different than
=C2=A0=C2=A0=C2=A0 making a method call = to another PolicyAction; this would greatly
=C2=A0=C2=A0=C2=A0 simplify = implementation and understanding. Specifically:
=C2=A0=C2=A0=C2= =A0 *** since the parent's rules are executed before any of the sub-=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 rules are executed, this has the exact same= effect as making
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 a call to another Polic= yAction; the PolicyEvent and
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 PolicyCondit= ion clauses of the sub-rule do not exist
=C2=A0=C2=A0=C2=A0 *** O= ptimization of sub-rules is implementation-dependent; if
=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 any sub-rule has side effects, then interoperability is bro= ken
=C2=A0 - There is no mechanism to make use of the executionSt= rategy
=C2=A0=C2=A0=C2=A0 attribute, since neither errors nor events are= defined
=C2=A0 - There is no mechanism that can prevent side effects ca= used by
=C2=A0=C2=A0=C2=A0 the evaluation of conditions
=C2=A0 - Ther= e is no mechanism that can prevent side effects caused by
=C2=A0=C2=A0= =C2=A0 the execution of actions

2.1.2.=C2=A0 = Role Problems

=C2=A0 - Using attributes (i.e., pol= icyRoles) to associate a PolicyRule
=C2=A0=C2=A0=C2=A0 to a resource is = broken. This is what associations,
=C2=A0=C2=A0=C2=A0 aggregations, and = compositions are for.
*** Worse, the mechanism for aggregating roles is = **backwards** in
=C2=A0=C2=A0=C2=A0 PCIMe. A PolicyRoleCollection aggreg= ates ManagedElement objects.
=C2=A0=C2=A0=C2=A0 Instead, ManagedElement = objects have different responsibilities
=C2=A0=C2=A0=C2=A0 (i.e., roles)= , so the aggregation should be reversed.
=C2=A0=C2=A0- Worse yet, there = is no mechanism for ensuring that the same
=C2=A0=C2=A0=C2=A0 System, wh= ich provides scoping, is used for the ManagedElement
=C2=A0=C2=A0=C2=A0 = object as is for the PolicyRoleCollection object
*** Finally, there is n= o mechanism for role inheritance to be
=C2=A0=C2=A0=C2=A0 sanitized. Spe= cifically, in PCIMe, both PolicyRules and
=C2=A0=C2=A0=C2=A0 PolicyGroup= s are, in effect, containers that can have
=C2=A0=C2=A0=C2=A0 policyRole= s; there is no mechanism to either remove
=C2=A0=C2=A0=C2=A0 duplicatio= ns, remove role conflicts, or perform other aspects
=C2=A0=C2=A0 = =C2=A0of role engineering

*** Finally, note that t= he DMTF CIM model has deprecated the policyRole attribute in the PolicySet = class.

<= div>2.1.3.=C2=A0 Conditions and Actions

*** There is no reaso= n to define the SimplePolicyCondition and
=C2=A0=C2=A0=C2=A0 CompoundPol= icyCondition classes
=C2=A0=C2=A0=C2=A0 *** this requires an addi= tional aggregation
=C2=A0=C2=A0=C2=A0 *** the only difference=C2= =A0between these classes is an attribute
=C2=A0=C2=A0=C2=A0 that specifi= es whether the clause is in DNF or CNF (note that
=C2=A0=C2=A0=C2=A0 the= additional classes mandate a new aggregation as well)
*** Th= ere is no reason to define the SimplePolicyAction and
=C2=A0=C2=A0=C2=A0= CompoundPolicyAction classes
=C2=A0=C2=A0=C2=A0 *** this require= s an additional aggregation
=C2=A0=C2=A0=C2=A0 *** while SimplePo= licyAction has no attributes and
=C2=A0=C2=A0=C2=A0=C2=A0 Compoun= dPolicyAction has two, both attributes SHOULD be
=C2=A0=C2=A0=C2= =A0=C2=A0 moved to the Action class, since they are applicable to
=C2=A0= =C2=A0=C2=A0 =C2=A0both classes

2.1.4.= =C2=A0 Variables

***=C2=A0There is no reason to ha= ve both a PolicyImplicitVariable
=C2=A0=C2=A0=C2=A0 and a PolicyExplicit= Variable class, as=C2=A0they are
=C2=A0=C2=A0=C2=A0 performing the same = semantic function

2.1.5.=C2=A0 Additional Prob= lems

These are so important that they are repeated= from Post 1:

=C2=A0 - There is no way to uniquely identify i= nstances of the
=C2=A0=C2=A0=C2=A0=C2=A0same object
=C2=A0=C2= =A0- There is no concept of error or exception handling
=C2=A0 - There i= s no concept of the subject or the target of a policy
=C2=A0 - Adding a = new type of policy (e.g., declarative or functional)
=C2=A0=C2=A0=C2=A0 = will cause a major rewrite of the entire model
=C2=A0=C2=A0- There is no= approach to detecting and solving policy conflicts

2.2.=C2=A0 Major Problems

2.2.1.=C2=A0 Abstraction Pro= blems

=C2=A0 - The "levels of abstraction&quo= t; (domain- and device-level policies)
=C2=A0=C2=A0=C2=A0 have no mechan= isms defined in the model to support them
=C2=A0=C2=A0=C2=A0 (see Post = 2b)
*** The PolicyComponent aggregation, defined on Policy, means that=C2=A0=C2=A0=C2=A0 ANY SUBCLASS can aggregate itself. This is clearly bro= ken, even
=C2=A0=C2=A0=C2=A0 if the aggregation is optional, since imple= mentations will never
=C2=A0=C2=A0=C2=A0 know in advance if it is being = implemented or not. In addition,
=C2=A0=C2=A0=C2=A0 this aggregation doe= s not make sense for the majority of the
=C2=A0=C2=A0=C2=A0 classes defi= ned in PCIM (e.g., what does it mean for a
=C2=A0=C2=A0=C2=A0 PolicyVari= able to aggregate itself?). (see Post 2b)
*** Scoping has no mec= hanisms to ensure that the PolicyRule and the
=C2=A0=C2=A0=C2=A0 = resource to which it applies are in the same namespace.
=C2=A0=C2= =A0=C2=A0 *** First, this is represented using weak relationships (a
<= div>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 relational algebra construct= ), which=C2=A0should not be used in
=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 =C2=A0information models.
=C2=A0=C2=A0=C2=A0 *** Second, this = requires two relationships (one for PolicyGroup
=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0 and a different one for PolicyRule) to be used.
=C2=A0=C2= =A0=C2=A0 *** Third, the PCIMe implementation uses overriding of keys (!)
=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0to implement these aggregations.

2.2.2.=C2=A0 PolicyRule Problems

<= div>***=C2=A0The "first-match" decision strategy is powerful, but= deceptive:
=C2=A0=C2=A0=C2=A0 if the PolicySet is a PolicyGroup, then t= he first-match
=C2=A0=C2=A0=C2=A0=C2=A0criterion (for termination) will = match if ANY one or more
=C2=A0=C2=A0=C2=A0 contained PolicyRules OR Pol= icyGroups match
=C2=A0 - The notion of "rooted" vs. &qu= ot;unrooted" PolicySets defeats the
=C2=A0=C2=A0=C2=A0=C2=A0purpose= of having a decisionStrategy attribute
***=C2=A0There is no mechanism to ensure that priority attrib= ute values
=C2=A0=C2=A0=C2=A0 are unique within a PolicySet (or PolicySe= tInSystem); this
=C2=A0=C2=A0=C2=A0 leads to non-deterministic behavior<= br>=C2=A0 - Different classes are required to associate each condition with=
=C2=A0=C2=A0=C2=A0 a PolicyRule
=C2=A0 - Different classes are requi= red to associate each action with
=C2=A0=C2=A0=C2=A0 a PolicyRule=

2.2.3.=C2=A0 Condition and Ac= tion Problems

*** Both simple and compound policy co= nditions use the canonical
=C2=A0=C2=A0=C2=A0 form {variable MATCH value= }; however, there is no object that
=C2=A0=C2=A0=C2=A0 represents the di= fferent semantics for MATCH, and hence, the
=C2=A0=C2=A0=C2=A0 MATCH ope= rator is overloaded and ambiguous (e.g., is a shallow
=C2=A0=C2=A0=C2=A0= or deep equality match desired)
*** CompoundPolicyConditions are very expensive, as each Boolean<= br>=C2=A0=C2=A0=C2=A0 condition clause must be aggregated using a unique ag= gregation
=C2=A0 - This also applies to CompoundPolicyActions
*** Bui= lding a Boolean condition clause is complex and requires too
=C2=A0=C2= =A0=C2=A0 many aggregations; e.g., a simple PolicyCondition requires:
= =C2=A0=C2=A0=C2=A0 *** one PolicyConditionInPolicyRule to associate the con= dition
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0clause with the P= olicyRule
=C2=A0=C2=A0=C2=A0 *** one PolicyVariableInSimplePolicyCondition aggregation to
=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 associate the variable used to the condition= clause
=C2=A0=C2=A0=C2=A0 *** n ExpectedPolicyValuesForVariable associations to
=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0associate the allowed value range(s) to the vari= able
=C2=A0=C2=A0=C2=A0 *** one PolicyValueInSimplePolicyCondition aggregation to
=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 associate the value used to the condition clause*** The above is more complex when PolicyConditions are nested, as
=C2= =A0=C2=A0=C2=A0=C2=A0well as when CompoundPolicyConditions are used; in bot= h cases,
=C2=A0=C2=A0=C2=A0=C2=A0the number of associations and aggregat= ions multiply
=C2=A0 - The above two points apply equally to PolicyActio= ns

2.2.4= . Miscellaneous Problems

***=C2=A0The associations PolicyInSy= stem, PolicyGroupInSystem,
=C2=A0=C2=A0=C2=A0 and PolicyRuleInSystem are= superfluous; modern software
=C2=A0=C2=A0=C2=A0 techniques like introsp= ection or reflection do the same
=C2=A0=C2=A0=C2=A0 things in more power= ful ways.
***=C2=A0Filters are too difficult to construct (an obj= ect is defined
=C2=A0=C2=A0=C2=A0 for each filter, and each such object = requires an aggregation
=C2=A0=C2=A0=C2=A0 to add it to another object)<= /div>


2.3.=C2=A0 Minor Problems

=
=C2=A0 - PolicyRule has an attribute named "mandatory" whose= semantics are
=C2=A0=C2=A0=C2=A0 ambiguous depending on the values of o= ther attributes
=C2=A0 - The class CompoundFilterCondition defines one a= dditional attribute;
=C2=A0=C2=A0=C2=A0 this is insufficient to standard= ize how filtering conditions
=C2=A0=C2=A0=C2=A0 should be structured
= =C2=A0 - Copying the attributes sequencedActions and executionStrategy in=C2=A0=C2=A0=C2=A0 both PolicyRule and CompoundPolicyAction does not make= sense
***=C2=A0All ImplicitPolicyVariable subclasses have no mechanism = to
=C2=A0=C2=A0 =C2=A0enforce their allowed value types except an associ= ation, and
=C2=A0=C2=A0=C2=A0 that association has no attributes or OCL = constraints to
=C2=A0=C2=A0=C2=A0 enforce the value types (in other word= s, the enforcement is
=C2=A0=C2=A0=C2=A0 by looking at class names or at= tribute values)
=C2=A0 - The ReusablePolicyContainer class does n= ot define any useful
=C2=A0=C2=A0=C2=A0 attributes for policy-based mana= gement

Finally, note that the DMTF CIM = model has deprecated the mandatory attribute in the PolicyRule class.
3. PCIMe Class Hierarchy
=C2=A0
The PCIMe Class Hierarchy is=C2=A0still a CA (condition-action) model,= as shown below (changes are briefly noted in parentheses):

ManagedElement (abstract)
=C2=A0 |
=C2=A0 +---Poli= cy (abstract)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0= =C2=A0=C2=A0 +---PolicySet (abstract, new)
=C2=A0=C2=A0|=C2=A0=C2=A0=C2= =A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |= =C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyGroup (MOVED to here)
=C2=A0=C2=A0|= =C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2= =A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyRule (MOVED to here)=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +--= -PolicyCondition (abstract)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2= =A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2= =A0=C2=A0 +---PolicyTimePeriodCondition
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0+---VendorPolicyCondition
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2= =A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0= =C2=A0 +---SimplePolicyCondition (NEW)
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0= =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2= =A0=C2=A0=C2=A0=C2=A0 +---CompoundPolicyCondition (NEW)
=C2=A0=C2=A0|=C2= =A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyFilterCondition (NEW)
=C2=A0 |=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0|
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyAct= ion (abstract)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0= =C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0= +---VendorPolicyAction
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2= =A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0= =C2=A0 +---SimplePolicyAction (NEW)
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2= =A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0= =C2=A0=C2=A0=C2=A0 +---CompoundPolicyAction (NEW)
=C2=A0=C2=A0|=C2=A0=C2= =A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0= =C2=A0 +---PolicyVariable (abstract, NEW)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0|=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyExplicitVariable (NEW)
=C2=A0=C2= =A0|=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0= =C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyImplicitVariable (ab= stract, NEW)
=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0 +---(NEW SUBCLASSES)
=C2= =A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---Pol= icyValue (abstract, NEW)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0= =C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0= =C2=A0=C2=A0 +---(NEW SUBCLASSES)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0= =C2=A0 +---Collection (Abstract, NEW*)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 = |
=C2=A0 |=C2=A0=C2=A0= =C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyRoleCollection (NEW)
= =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---= ManagedSystemElement (abstract, NEW*)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |= =C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---LogicalE= lement (abstract, NEW*)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0= =C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2= =A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---System (abstrac= t, NEW*)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2= =A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0= =C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2= =A0=C2=A0=C2=A0... (deprecated PolicyRepository with ReusablePolicyContaine= r, NEW*)
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2= =A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0= =C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---FilterEntryBase (abstract, NEW*)=
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2= =A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0= =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2= =A0=C2=A0 +---IpHeadersFilter (NEW)*
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |= =C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2= =A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0= =C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---8021Filter (NEW*)
=C2= =A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0= =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2= =A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---FilterList (NEW*)

= Note that RFC3460 says that the classes = marked by NEW* are not new, as they are defined in the CIM. However, they A= RE new to PCIMe, so I have marked them as NEW*.

=
The rest of this section adds detail to Post 2a.

<= /div>
The main STRUCTURAL chang= es in the class hierarchy are:

=C2=A0=C2= =A0 1) Introduce a new superclass (PolicySet) to parent PolicyRule and
= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0PolicyGroup (NOT backwards-compatible, = see 3.1)
=C2=A0=C2=A0 2= ) Change how PolicyRules and PolicyGroups are aggregated (see 3.2)
=C2=A0=C2=A0 3) Change PolicyRu= le prioritization (see 3.3)
=C2=A0=C2=A0 4) Change PolicyRule execution (see 3.4)
=C2=A0=C2=A0 5) Change PolicyRules (cov= ered in Section 2 above)
=C2=A0=C2=A0 6) Extend PolicyCondition with two new concrete classes
= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 (SimplePolicyCondition and CompoundPolicyCon= dition)
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0(covered in Section 2 above)=
=C2=A0=C2=A0 7) E= xtend PolicyAction with two new concrete classes
=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 (SimplePolicyAction and CompoundPolicyAction)
=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 (covered in Section 2 above)
=C2=A0=C2=A0=C2=A08) Change how policyRoles are Repre= sented and Used (covered in
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Section 2 ab= ove)
=C2=A0=C2=A0 9) Introdu= ce PolicyVariable (covered in Section 2 above)
=C2=A0=C2=A010) Introduce PolicyValue (covered in = Section 2 above)
=C2=A0 11) More about PolicyRoleCollectio= n (see 3.5)

<= div>These will be described in the follo= wing subsections.

<= /font>
3.1.=C2=A0Int= roduce a new superclass (PolicySet)

This change has several problems; the most important are described below.<= /font>

3.1.1. PolicyS= et Structure

This change was done to defi= ne a common parent for the PolicyRule and PolicyGroup classes. This change = is NOT backwards-compatible:

=C2=A0=C2=A0= a) It moves the policyRoles attribute from PolicyRule to PolicySet, which = breaks existing implementations
=C2=A0=C2=A0 b) The priority attribute is moved from PolicyRule to= two different relationships (both of which break existing implementations)= :
=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A01. The PolicySetInSystem association (which is implemented a= s an association class)
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A02. The PolicySetComponent aggregation = (which is also implemented as an association class)
=C2=A0=C2=A0 c) It introduces a new attribute = (policyDecisionStrategy) that applies to both PolicyRule and PolicyGroup;=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 existing implementations will not have thi= s attribute and will break

3.1.2.=C2=A0 U= nique Naming

From a code robustness persp= ective, software elements (classes, attributes, relationships) should be un= iquely named; there is no good reason to duplicate the name "priority&= quot; here. Unfortunately, this is a systemic problem in the DMTF CIM.

Semantically, it is strange to see the same p= roperty applied to an association as well as an aggregation, since these ar= e very different types of relationships.

= 3.1.3.=C2=A0 Evaluation of PolicyRules

Th= e justification for adding the new attribute policyDecisionStrategy to Poli= cySet (Section 3.2.3, page 7 of PCIMe) is incorrect. First, this attribute = may not directly affect how priority is used, since its purpose is to defin= e how rules are evaluated (first matching or not). Second, there is no mech= anism specified to enable the combination of this attribute and the priorit= y attribute (both in PolicySet) to **deterministically** specify how a rule= is evaluated (i.e., while the text "...PolicySetComponent.Priority MUST have a unique value when comp= ared with others defined for the same aggregating PolicySet" is present, no UML mechanism= , such as OCL, is defined to enforce this text).

3.1.4.=C2=A0 Moving policyRoles from PolicyRule to PolicySet=

The rationale for this change is to expand the = use of this attribute. Since PCIMe is trying to fix grouping (PolicyRules c= an contain PolicyRules, and PolicyGroups can contain PolicyRules or PolicyG= roups), then at first glance, it makes sense to move this attribute to Poli= cySet, so both PolicyRule and PolicyGroup can benefit from it. Unfortunatel= y, the role-object pattern [1] was invented for this purpose (almost two de= cades ago). Furthermore, this would solve the problem stated in 3.2.4 (page= 8) of "...there is no mechanism in = PCIM for assigning roles to resources" in a much more elegant fashion.=

Note that the DMTF CIM mod= el has deprecated this attribute.


3.2.=C2=A0 Change How Pol= icyRules and PolicyGroups are Aggregated

= The previous section alluded to the changes in grouping in PCIMe. PCIM had = two aggregations (PolicyRuleInPolicyGroup and PolicyGroupInPolicyGroup); th= e first=C2=A0enabled PolicyRules to be aggregated by a PolicyGroup, while t= he second enabled PolicyGroups to be aggregated by a PolicyGroup. These hav= e now both been replaced by a single recursive aggregation (PolicySetCompon= ent) on PolicySet.

=
This is broken! Policy= SetComponent means that any subclass of PolicySet can recursively aggregate= itself (so, you get PolicyRules aggregated by a PolicyRule, and PolicyGrou= ps aggregated by a PolicyGroup). You do NOT get the ability for a PolicyGro= up to aggregate a PolicyRule!!! This is mandatory for any policy implementa= tion - otherwise, PolicyGroups cannot contain a PolicyRule!


3.3.=C2=A0 Change PolicyRule prioritization

PolicySetComponent defines the priority attribute (it was moved fr= om PolicyRule). From 3.2 above, this means that you can NOT prioritize whic= h set of PolicyRules are in which set of PolicyGroups (e.g., Gold vs. Silve= r might want different flow actions, even though the PolicyRules are the sa= me).

<= /div>

3.4.=C2=A0 Change PolicyRule execution

A new attribute (policyDecisionStrategy) is define= d for PolicySet. It is a uint16, which is used to define 2 values: first-ma= tch and all-match.=C2=A0Given that there are only 2 values, this should be = a Boolean, not a 16-bit unsigned integer! Second, the firstMatching =3D=3D = TRUE value means that the first PolicyRule whose conditions matched should = be executed, and then execution stops (even if other PolicyRules are there = waiting to be executed). Clearly, this only works if the priority attribute= is also used. Unfortunately, this falls well short of controlling executio= n context. For example, what happens if a PolicyRule fails to execute prope= rly?

<= div>
3.5.=C2=A0=C2=A0PolicyRoleCollection
=
The purpose of this class= is to define a collection of resources that are associated with a <= /div>
particular role. The process, = however, is cumbersome and fragile:
=C2=A0=C2=A0 a) Define appropriate PolicyRules
=C2=A0=C2=A0= b) Define appropriate values for each policyRole (inherited)
=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0 attribute of affected PolicyRules=C2=A0(these are used to
=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0 represent a resource having that role that the PolicyRule
=C2=A0= =C2=A0=C2=A0=C2=A0 =C2=A0applies = to)
=C2=A0=C2=A0 c) Define appropriate PolicyGroups
=C2=A0=C2=A0 d) D= efine appropriate values for each policyRole (inherited)
=C2=A0=C2=A0=C2= =A0=C2=A0 =C2=A0attribute of affected PolicyGroups
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 (these are used to repr= esent a resource having that role
=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0that th= e PolicyGroup applies to)
=C2= =A0=C2=A0 e) Define the PolicyRoleCollection class
=C2=A0=C2=A0 f) Insta= ntiate its policyRoles attribute, and populate it
=C2=A0=C2=A0=C2=A0=C2= =A0 =C2=A0with the same values as the above
=C2=A0=C2=A0 g) Tie the PolicyCollection class to the set of = PolicyRule
=C2=A0=C2=A0= =C2=A0=C2=A0 =C2=A0classes with the same role using the
= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 PolicySetInRoleCollection aggregation (note:= one
=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 aggregation is required for EACH reference. Aggregations
=C2=A0=C2=A0=C2=A0=C2=A0 = =C2=A0are not easily handled in YANG; more on that later).

The obvious problem with the tedious procedure is that th= e policyRole attribute in
PolicyRoleCollection is a **string**. Thus, if someone gives a resource= the same name as
anot= her resource, this fails to identify which resource is being referred to. I= f someone
forgets to a= ssign a role to that resource, this also fails. If someone gives the same r= ole
name to multiple P= olicyRules and/or PolicyGroups, this fails. It is also unclear how <= /div>
Boolean combinations of differ= ent policyRoles work.

Finally, note that the DMTF CIM model has deprecated the poli= cyRole attribute in the PolicySet class.


4.=C2=A0 Relationships

PCIMe uses the same approach as PCIM with respect to associations and agg= regations (no compositions are defined): implement them as a class. The imp= act to building YANG data models will be discussed in a future post. For no= w, YANG is hierarchical, which corresponds to composition. Aggregation and = association are very different models. This section is not in Post 2a.

4.1. Changes to the PolicyComponent Hierarchy=

= The following relationships are changed = in PCIMe:

=C2=A0=C2=A0 - = PolicyRuleInPolicyGroup is DEPRECATED
=C2=A0=C2=A0 - PolicyGrou= pInPolicyGroup is DEPRECATED
= =C2=A0=C2=A0 - PolicyConditionStructure is NEW
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0- PolicyConditionInPolicyRul= e is MOVED to be a subclass of PolicyConditionStructure
=C2=A0=C2=A0=C2=A0=C2=A0 - PolicyConditionInPolicy= Condition is NEW
=C2=A0=C2=A0 - PolicyActionStructure is NEW
<= div>=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0- PolicyAction= InPolicyRule is MOVED to be a subclass of PolicyActionStructure
=C2=A0=C2=A0=C2=A0=C2=A0 - PolicyActionInP= olicyAction is NEW
=C2=A0=C2=A0 - PolicyVariableInSimplePo= licyCondition is NEW
=C2=A0=C2=A0 - PolicyValueInSimplePolicyCondition is NEW
=C2=A0=C2=A0 - PolicyVariableInSimplePolic= yAction is NEW
=C2=A0=C2=A0 - P= olicyValueInSimplePolicyAction is NEW
=C2=A0=C2=A0 - PolicySetInSystem is NEW
=C2=A0=C2=A0=C2=A0=C2=A0 - PolicyRuleInSystem is MOVED to = be a subclass of PolicySetInSystem
=C2=A0=C2=A0=C2=A0=C2=A0 - PolicyRGroupnSystem is MOVED to be a subclas= s of PolicySetInSystem
=C2=A0= =C2=A0=C2=A0=C2=A0 - ReusablePolicy is NEW
=C2=A0=C2=A0=C2=A0=C2=A0 - PolicyConditionInPolicyRepository is= DEPRECATED
=C2=A0=C2=A0=C2=A0= =C2=A0 - PolicyActionInPolicyRepository is DEPRECATED
=C2=A0=C2=A0=C2=A0=C2=A0 - ExpectedPolicyValuesForVa= riable is NEW
=C2=A0=C2=A0=C2= =A0=C2=A0 - PolicyRoleCollectionInSystem is NEW
=C2=A0=C2=A0 - ContainedDomain is NEW
=C2=A0=C2=A0 - PolicyRepositoryInPolicyRepository i= s DEPRECATED
=C2=A0=C2=A0=C2=A0= - EntriesInFilterList is NEW
= =C2=A0=C2=A0 - MemberOfCollection is NEW
=C2=A0=C2=A0 - ElementInPolicyRoleCollection is NEW

5. Comments on the Philosophy of Changing an In= formation Model, used by CIM/PCIM/PCIMe
=C2=A0
This is a **theory** section; please skip unless you want to un= derstand the model in more detail. This section is not in Post 2a.
=C2=A0
<= div>If you have made it this far :-) the= n you will no doubt have looked at RFC3460. Please now refer to section 3.1= "How to Change an Information Model" on page 6. ALL FOUR RECOMME= NDATIONS WILL BREAK MODELS IF EXTREME CARE IS NOT TAKEN.
<= font face=3D"monospace,monospace">
5.1 Background - Software Architecture

In software design, there are a set of fundamental principles= that should be used to guide implementations. These include, but are not l= imited to:

<= /div>
=C2=A0=C2=A0 1) the Liskov Sub= stitution Principle [2]
=C2=A0=C2=A0 2) the Single Responsibility Principle [3]
<= font face=3D"monospace,monospace">=C2=A0=C2=A0 3) the Open-Closed Principle= [4]
=C2=A0=C2=A0 4) so= ftware contracts [4]
5.1.1.=C2=A0 The Lis= kov Substitution Principle (LSP)

This pri= nciple states that if A is a subclass of B, then objects instantiated from = class B may be replaced with objects instantiated from class A WITHOUT ALTE= RING ANY OF THE DESIRED SEMANTICS OF THE PROGRAM. This is often called Stro= ng Behavioral Subclassing (or Subtyping). Note that it is **strong** becaus= e it defines semantic substitution of types; the use of simple syntactical = substitution fails. For the paranoid (i.e., me), one can ensure semantic co= rrectness with things like software contracts [4].

5.1.2.=C2=A0 The Single Responsibility Principle (SRP)

This principle states that every class should have= responsibility over one, and only one, part of the functionality provided = by the program. More specifically, there should only be one function in the= specification of the class that causes it to change. This is routinely vio= lated (e.g., Martin's example of a class that compiles and prints a rep= ort). Furthermore, the responsibility should be encapsulated within that cl= ass, and that services it provides should support that responsibility, and = only that responsibility.

In particular, = this avoids the (systemic and far too prevalent) problem of changing one cl= ass, but breaking other parts of the system. It also enables the function o= f each class to be related back to a specific requirement.
=

5.1.3.=C2=A0 The Open-Closed Principle (OCP)

This principle states that software entities shou= ld be open for extension, but closed for modification. For example, the sof= tware entity can allow its behavior to be extended without modifying its so= urce code. The difference between open and closed is that once a class has = one or more clients, it is closed for modification, since changes to it wil= l adversely affect the classes that use it.

5.1.4. Software Contracts

A software c= ontract is a mechanism to specify semantics abstractly. For any interaction= , one or more of the following three mechanisms are required to specify the= semantics of the interaction:

=C2=A0=C2= =A0 - pre-conditions (e.g., the conditions imposed on the rest of the syste= m before a method can execute)
=C2=A0=C2=A0 - post-conditions (e.g., the conditions guaranteed to = the rest of the system after a method has executed)
=C2=A0=C2=A0 - invariants (e.g., consistency c= onstraints maintained throughout the method execution)


5.2.= The guidance "Properties may be added to existing classes"

This is a really BAD idea. This violates at le= ast the SRP and the OCP; in some cases, it will also violate the LSP. More = importantly, if you have already generated data models from an information = model, this causes regeneration of those data models. It can be thought of = as changing the schema, which typically causes recompilation and redeployme= nt. There are more robust ways to do this (e.g., the decorator pattern or t= he adapter pattern, depending on what, exactly, you would like to do).

5.3.=C2=A0 The guidance about Deprecation

There are many valid reasons to deprecate software elements. Some incl= ude:

=C2=A0=C2=A0 - the feature or function is insecure
=C2=A0=C2=A0 - t= he feature or function is buggy
=C2=A0=C2=A0 - the feature or function will be r= emoved in a future release

The obvious problem with deprecation is = that it tends to break implementations that are using the deprecated featur= es. While deprecation is sometimes necessary, it should be documented in th= e code, not somewhere else (e.g., as Eclipse API deprecation recommends). U= nfortunately, this is not followed in PCIMe. For example, the priority attr= ibute is deprecated in PolicyRule in PCIMe. Section 6.3 says:
<= div>

=C2=A0=C2=A0 Priority DEPRECATED FOR Poli= cySetComponent.Priority AND FOR PolicySetInSystem.Priority

whi= ch, to a non-modeler, looks like it is being replaced by two attributes tha= t unfortunately have the name (which in itself is bad). It would be much mo= re useful to note that the priority attribute is being deprecated for an at= tribute of the same name, but the attribute is moved to two different assoc= iation classes.

The high-level problem with deprecation in PCIMe i= s that it effectively rewrites most of PCIM. This is because deprecation is= used as a general redesign mechanism (e.g., moving attributes from one cla= ss to another or to a relationship, or adding to existing classes; both bre= ak backwards-compatibility). Some features that were deprecated (e.g., Poli= cyRepository) frankly don't matter, as the definition was poor and need= ed augmentation anyway. Other features that were deprecated (e.g., replacin= g the two aggregations PolicyGroupInPolicyGroup and PolicyRuleInPolicyGroup= with the single aggregation PolicySetComponent, or refactoring the priorit= y attribute) will break existing implementations, even if they are better o= ptions.

5.4. The guidance about generalization.

=
PCIMe says:= "Classes may be inserted into the i= nheritance hierarchy above existing classes, and properties from the existi= ng classes may then be "pulled up" into the new classes. The net = effect is that the existing classes have exactly the same properties they h= ad before, but the properties are inherited rather than defined explicitly = in the classes." This violates the LSP, SRP, and OCP. It= breaks implementations, and the statement is incorrect if the affected cla= sses are all concrete; this also breaks data models.

5.5.=C2=A0 The= guidance about specialization.
PCIMe says "New subclasses may be defined below existing classe= s". While this is true in general, care must be taken to obey the LSP,= SRP, and OCP, or implementations will suffer.<= /div>


6.=C2=A0 References

[1= ]=C2=A0=C2=A0 Gamma, E., Helm, R., Johnson, R., Vlissides, J.,
=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0"Design Patterns - Elements of Reusable Obj= ect-Oriented
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0Software", Addison= -Wesley, 1994, ISBN 0-201-63361-2
[2]=C2=A0=C2=A0 Liskov, B.H., Wing, J.M., "A Behavioral Noti= on of subtyping",
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0ACM Transacti= ons on Programming languages and
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Systems= , 16 (6): 1811 - 1841, 1994
[3]=C2=A0=C2=A0 Martin, R.C., "Agile So= ftware Development, Principles,
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0Patt= erns, and Practices", Prentice-Hall, 2002
=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0 ISBN: 0-13-597444-5
[4]=C2=A0=C2=A0 Meyer, B., "Object-Oriented Software Construction&= quot;, 2nd edition,
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0Prentice Hall, 1= 997=C2=A0 ISBN:=C2=A0 0-13-629155-4
--001a1142a4d2017a6b0526a68e07-- From nobody Fri Dec 11 15:32:30 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D67951A1AD3 for ; Fri, 11 Dec 2015 15:32:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.399 X-Spam-Level: X-Spam-Status: No, score=-1.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_45=0.6, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o0vW0jJKG79h for ; Fri, 11 Dec 2015 15:32:22 -0800 (PST) Received: from mail-vk0-x231.google.com (mail-vk0-x231.google.com [IPv6:2607:f8b0:400c:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3222B1A1AB3 for ; Fri, 11 Dec 2015 15:32:22 -0800 (PST) Received: by vkgj66 with SMTP id j66so28893777vkg.1 for ; Fri, 11 Dec 2015 15:32:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=Q0VVqeRLEycdk/dCn51HYPOJ0CtfRj16l10oL36Tpx0=; b=nd8XKKlnVEcmUC7IODdhOGtwzZDAOfevP9Ick9SqXtuJcC8FBajWWpqQRoUCf7AEbs n7lwzYdwn+rUMlG72tnYgYgs9+LagXdnaL5wkRQqxnKeoqsA7Oo/P8+cfZBJPKj9l0D3 7UnHHqh/75M9P4SK/rvMwtp1XcF2y8olGB3Ajn0Z/+p8kw6Jn/iojEBucF5WLRt+4BH1 U3ZaFvyvOJ3Imh/+rUUaANX6wrsRQmcz9TUmYoNYU2cIq4G6bTT2aUpGWZS1LmrYS3tE BeipNdq7EBnjD0iaCRJpRUZkObo+wSW+G85gLix/jPjDm2pWNQFNu/zESqhXX1nfFAuf /NYg== MIME-Version: 1.0 X-Received: by 10.31.5.15 with SMTP id 15mr16120966vkf.108.1449876740401; Fri, 11 Dec 2015 15:32:20 -0800 (PST) Received: by 10.103.40.131 with HTTP; Fri, 11 Dec 2015 15:32:20 -0800 (PST) In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> References: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> Date: Fri, 11 Dec 2015 15:32:20 -0800 Message-ID: From: John Strassner To: Linda Dunbar Content-Type: multipart/alternative; boundary=001a1143df74146f1b0526a7bcec Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Service Layer Policies - Post 1: Background Information on PCIM X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Dec 2015 23:32:28 -0000 --001a1143df74146f1b0526a7bcec Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Linda, thank you for your kind words. My replies are inline: Thank you very much for the in-depth analysis of PCIM and its suitability as something that I2NSF should be based on. What you write is very valuable. I think the analysis should be added to the I2NSF gap analysis, (or be a standalone Policy Analysis ID). If desired, I could summarize the key points for the gap analysis. I would be willing to do a Policy Analysis I-D, but I think that this probably belongs in SUPA. However, feedback from I2NSF is invaluable for such a document. Note: It is possible to define limited constraints in PCIM as conditions. For example, the VendorPolicyCondition class has two attributes, Constraint and ConstraintEncoding, that do this. This will be discussed more in Post 4= . Note: Context is NOT defined in the PCIM. [Linda] Do you agree that =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D = =E2=80=9CI2NSF subject=E2=80=9D & =E2=80=9Cthe Contextual states (or the I2NSF object)=E2=80=9D? PCIM/PCIMe conditions are clearly similar to what is now called "I2NSF Subject". However, the contextual state is trickier. Part of the problem is how we want to define Context. I'll save the bulk for Post 4 (as outlined in my Post 0 note). However, looking at page 6 of draft-merged-i2nsf-framework-04: "Object-Match values, based on context (e.g., state, direction of the traffic, time, geo-location, etc.)", in which case: - state: likely NOT part of the condition; rather, it applies to the entire PolicyRule as a whole - traffic direction: part of the condition - time: part of the condition - geo-location: part of the condition ... Critical Problems: There is no unique ID that can be used to distinguish different instances of the same PolicyRule, PolicyGroup, PolicyCondition, or PolicyAction. [Linda] Can we simply create an ID (string or numeric) for instances of the same PolicyRule? Or it is more complicated? SUPA and DEN-ng use two attributes to do this: - a string that contains the content of the identifier - a string that is an enum, which defines how to interpret the content This allows different IDs to be mixed (e.g., URIs, GUIDs, keys, FQDNs, etc.= ) That being said, it is certainly easier to pick one and go with it, but since I2NSF SHOULD interoperate with other models easily, I would recommend a scheme similar to the one I used (or the above, of course). Relationships are implemented by defining an abstract class with keys, and then overriding the keys in the subclasses of the relationship. This is broken. Would you override keys in an RDBMS? [Linda] Is the =E2=80=9CKey=E2=80=9D to differentiating different =E2=80=9C= PolicyRule=E2=80=9D? Can you give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D? What events can cause =E2=80=9Coverriding the keys in the subclasses of the relationship=E2=80=9D? No, the key (as in primary and foreign keys, just to be clear) is used as part of how CIM data models are built. I believe that this strategy is fundamentally incorrect (as in, would you override keys in an RDBMS). It also violates a host of object-oriented principles (see Post 2b). Remember, PCIM and PCIMe do NOT define events. This is a design (compile-time) definition of how you build CIM classes. - Most of the classes that are used to implement the relationships do NOT have attributes, so it is impossible to restrict which classes are related to which other classes (e.g., by context). Put another way, the same relationship must always be used between two types, even if the semantics varies. (The two exceptions are PolicyConditionInPolicyRule and PolicyActionInPolicyRule). [Linda] Does =E2=80=9Cclasses=E2=80=9D =3D=3D =E2=80=9CPolicyRule=E2=80=9D? No, "classes" =3D=3D {association | aggregation | composition}. This is another artifact of CIM. They implement ALL relationships as classes. In UML, there is a difference between these three relationships and realizing them as a class; the CIM approach eliminates this distinction= . - The "ignore this unless you need this" philosophy does not work. How do you know if other implementations that you are supposed to interoperate with are using them? [Linda] Is =E2=80=9CIgnore this unless you need this=E2=80=9D an new type o= f =E2=80=9CPolicyRule=E2=80=9D? No, sorry, this is one of the key points underlying the design philosophy of CIM, and carried into PCIM and PCIMe. Basically, it means that it is OK to define model elements on another model element if they are optional. Examples: - defining an optional attribute, method, or relationship on a class - defining an optional constraint This violates all of the 4 design principles in Post 2b (references section= ) There is no concept of the subject or the target of a policy [Linda] Does your =E2=80=9Csubject=E2=80=9D have the same meaning as the = =E2=80=9CI2NSF subject=E2=80=9D which means bits&bytes extracted from packets? No. A PolicySubject is the author of a policy. One could also differentiate between author, owner, and executor, but that is more complex. It is vital for deontic logic (i.e., the logic of obligations and permissions, as in MUST, MUST NOT, SHOULD, MAY, etc.). This is one of my concerns with the Sbbject-Object-Action-Function model - one cannot build authorization policies that can be logically proven to be correct or not without a PolicySubject. Adding a new type of policy (e.g., declarative or functional) will cause a major rewrite of the entire model [Linda] Can we say that I2NSF policies have one type =E2=80=9CSubject-ContextualStates- action- function? So in I2NSF environmen= t, there is only the notion of adding a new =E2=80=9CPolicyRule=E2=80=9D, but no add= ing a new policy type. Is this correct statement? No. The meaning of what I wrote above is much broader. If you think of ECA policies as imperative in nature, then the analogy is that PCIM/PCIMe are hard-wired to imperative policies. The schema cannot be used for other forms (declarative, functional, etc.) of policies. Put another way, ECA (or CA, which is all that the PCIM/PCIMe can do) is imperative - it specifies that, given this particular state, the ONLY state that you are allowed to transition to is this other state. Rationality MUST be compiled into the policy. In contrast, for declarative logic, given a particular state, there are a SET of states that either satisfy the goal, or take you closer to the goal. Hence, rationality is GENERATED by a logic planner/optimizer. There is no approach to detecting and solving policy conflicts; this is due to the simplistic notion of just using a PDP and a PEP for applying policies. [Linda] in I2NSF, there could be a lot of conflicts, for example, there could be two rules entered at different time: 1. Virtual Network X can=E2=80=99t access =E2=80=9CYouTube=E2=80=9D, 2. 10.1.1.1 can access =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is a = host within the Virtual Network X). Do you call the 2 rules above conflict? Bob already answered this in http://www.ietf.org/mail-archive/web/i2nsf/current/msg00729.html +1 to his answer (or see my reply) Given the large amount of problems, I recommend that we not consider PCIM further. [Linda] should I2NSF reference PCIM? I don't see any harm in **referencing** PCIM or PCIMe; I just don't want to **use** either to construct our policies. best regards, John On Tue, Dec 8, 2015 at 1:10 PM, Linda Dunbar wrote: > John, > > > > Thank you very much for the in-depth analysis of PCIM and its suitability > as something that I2NSF should be based on. What you write is very > valuable. I think the analysis should be added to the I2NSF gap analysis, > (or be a standalone Policy Analysis ID). > > > > I have some questions inserted below: > > > > *From:* I2nsf [mailto:i2nsf-bounces@ietf.org] *On Behalf Of *John > Strassner > *Sent:* Sunday, December 06, 2015 7:01 PM > *To:* i2nsf@ietf.org > *Subject:* [I2nsf] Service Layer Policies - Post 1: Background > Information on PCIM > > > > > > > > 2. Brief description of PCIM > > > > The PCIM Class Hierarchy is very simple, as this is a CA > (condition-action) model. Events are NOT represented. PCIM defines a > PolicyRule, a PolicyGroup (group of PolicyRules), PolicyCondition, and > PolicyAction. These are all siblings; their common superclass is called > Policy, as shown below: > > > > ManagedElement (abstract) > | > +---Policy (abstract) > | | > | +---PolicyGroup > | | > | +---PolicyRule > | | > | +---PolicyCondition (abstract) > | | | > | | +---PolicyTimePeriodCondition > | | | > | | +---VendorPolicyCondition > | | > | +---PolicyAction (abstract) > | | > | +---VendorPolicyAction > > > > Note: PCIM does have a simple notion of Roles, but implements them as > attributes, instead of objects. This is not scalable, and does not fully > realize the power of using roles. This will be discussed more in Post 3. > > > > Note: It is possible to define limited constraints in PCIM as conditions. > For example, the VendorPolicyCondition class has two attributes, Constrai= nt > and ConstraintEncoding, that do this. This will be discussed more in Post= 4. > > > > Note: Context is NOT defined in the PCIM. > > > > [Linda] Do you agree that =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D= =E2=80=9CI2NSF subject=E2=80=9D & > =E2=80=9Cthe Contextual states (or the I2NSF object)=E2=80=9D? > > > > > > 3. Summary: main drawbacks of using PCIM > > > > Note that the current CIM Policy Model (2.44.1) is significantly differen= t > than either PCIM or PCIMe. PCIM is based on CIM 2.4; PCIMe is based on CI= M > 2.5. PCIMe is NOT backwards compatible with PCIM in all areas. > > > > Critical Problems: > > - There is no unique ID that can be used to distinguish different > instances of the same PolicyRule, PolicyGroup, PolicyCondition, > or PolicyAction. > > [Linda] Can we simply create an ID (string or numeric) for instances of > the same PolicyRule? Or it is more complicated? > > - Relationships are implemented by defining an abstract class > with keys, and then overriding the keys in the subclasses of the > relationship. This is broken. Would you override keys in an RDBMS? > > [Linda] Is the =E2=80=9CKey=E2=80=9D to differentiating different =E2=80= =9CPolicyRule=E2=80=9D? Can you > give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D? > > What events can cause =E2=80=9Coverriding the keys in the subclasses of t= he > relationship=E2=80=9D? > > - Most of the classes that are used to implement the relationships > do NOT have attributes, so it is impossible to restrict which > classes are related to which other classes (e.g., by context). > Put another way, the same relationship must always be used > between two types, even if the semantics varies. (The two > exceptions are PolicyConditionInPolicyRule and > PolicyActionInPolicyRule). > > [Linda] Does =E2=80=9Cclasses=E2=80=9D =3D=3D =E2=80=9CPolicyRule=E2=80= =9D? > > - The "ignore this unless you need this" philosophy does not > work. How do you know if other implementations that you are > supposed to interoperate with are using them? > > [Linda] Is =E2=80=9CIgnore this unless you need this=E2=80=9D an new type= of =E2=80=9CPolicyRule=E2=80=9D? > > - There is no concept of error or exception handling > - There is no concept of the subject or the target of a policy > > [Linda] Does your =E2=80=9Csubject=E2=80=9D have the same meaning as the = =E2=80=9CI2NSF subject=E2=80=9D > which means bits&bytes extracted from packets? > > - Adding a new type of policy (e.g., declarative or functional) > will cause a major rewrite of the entire model > > > > [Linda] Can we say that I2NSF policies have one type > =E2=80=9CSubject-ContextualStates- action- function? So in I2NSF environm= ent, there > is only the notion of adding a new =E2=80=9CPolicyRule=E2=80=9D, but no a= dding a new policy > type. Is this correct statement? > > - There is no approach to detecting and solving policy conflicts; > this is due to the simplistic notion of just using a PDP and a > PEP for applying policies. > > > > [Linda] in I2NSF, there could be a lot of conflicts, for example, there > could be two rules entered at different time: > > 1. Virtual Network X can=E2=80=99t access =E2=80=9CYouTube=E2=80=9D= , > > 2. 10.1.1.1 can access =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is = a host within > the Virtual Network X). > > Do you call the 2 rules above conflict? > > > > > > 4. Recommendations > > > > Given the large amount of problems, I recommend that we not consider PCIM > further. > > [Linda] should I2NSF reference PCIM? > > > > Thank you very much. Linda > > > > 5. Origin of PCIM/PCIMe > > > > This is a **theory** section; please skip unless you want to understand > the model in more detail. > > > > The PCIM is based on the DMTF CIM, which is actually a **data model** > (despite its name) because it uses relational technologies (e.g., keys an= d > weak references) to create its model. PCIM is based on an early version o= f > the CIM (2.4); the current version of the CIM is 2.44.1 as of this writin= g. > Since this is tied to the CIM, this means that: > > > > 1) Policy is subclassed from a more generic class (ManagedElement) > > 2) ALL relationships (associations, aggregations, and compositions) > > are realized as **classes** > > 3) As a result of 2), relationships are subclassed > > 4) Both attributes and associations are **inherited** > > 5) The same design approach (as much as possible) was used in > > PCIM/PCIMe as was in CIM. Specifically, it was thought better > > to define a generic, but optional, relationship instead of not > > defining the relationship. > > 6) The CIM does NOT have a single rooted hierarchy; this makes > > code generation more complex > > 7) The CIM uses a proprietary language and is not strictly UML > > compliant, even though it looks like UML (unfortunately, this > > language is also called MOF) > > > > Depending on the complexity of the implementation, the above have been > shown to produce problems in large environments. For example, the spirit = of > "let's define an attribute or association in case it is useful, and make = it > optional so you don't have to worry about it" not only violates some > well-known software architectural guidelines (e.g., Single Responsibility > Principle and the Liskov Substitution Principle), but it makes things > difficult to interoperate with (since you never really know if an attribu= te > or relationship should be instantiated or not). > > > > > > regards, > > John > --=20 regards, John --001a1143df74146f1b0526a7bcec Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Linda,

thank you for your= kind words. My replies are inline:

Thank you very much for the in-dep= th analysis of PCIM and its suitability as something that I2NSF should be b= ased on. What you write is very valuable. I think the analysis should be ad= ded to the I2NSF gap analysis, (or be a standalone Policy Analysis ID).

<jcs>
If desired, I could summa= rize the key points for the gap analysis. I would be willing to do a Policy= Analysis I-D, but I think that this probably belongs in SUPA. However, fee= dback from I2NSF is invaluable for such a document.
</jcs><= /div>


Note: It is = possible to define limited constraints in PCIM as conditions. For example, = the VendorPolicyCondition class has two attributes, Constraint and Constrai= ntEncoding, that do this. This will be discussed more in Post 4.<= /u>

=C2=A0

Note: Context is NOT defined in the PCIM.

= =C2=A0

[Linda] =C2=A0Do you agree that =E2=80=9CCondition of the PCIM=E2=80=9D= =3D=3D =E2=80=9CI2NSF subject=E2=80=9D & =E2=80=9Cthe Contextual state= s (or the I2NSF object)=E2=80=9D?


<jcs>

PCIM/PCIMe conditions are clearly similar to what is now called= "I2NSF Subject". However, the contextual state is trickier. Part= of the problem is how we want to define Context. I'll save the bulk fo= r Post 4 (as outlined in my Post 0 note). However, looking at page 6 of dra= ft-merged-i2nsf-framework-04:

&= quot;Object-Match values, based on context (e.g., state, direction of the t= raffic, time, geo-location, etc.)", in which case:

=C2=A0=C2=A0 - state:=C2=A0 likely NOT part of the condition= ; rather, it applies to the entire PolicyRule as a whole

=C2=A0=C2=A0 - traffic direction:=C2=A0 part of the condition

=C2=A0=C2=A0 - time:=C2=A0 part of the condition

=C2=A0=C2=A0 - geo-location:=C2=A0 part of the conditi= on

</jcs>

=C2=A0

...


Critical Problem= s:


There is no uni= que ID that can be used to distinguish different
instances of the same = PolicyRule, PolicyGroup, PolicyCondition,
or PolicyAction.

[Linda] Can we = simply create an ID (string or numeric) for instances of the same PolicyRul= e? Or it is more complicated?


=

<jcs>

SUPA and DEN-n= g use two attributes to do this:


=C2=A0=C2=A0 - a string that contains the content of the ide= ntifier

=C2=A0=C2=A0 - a string that is an enum, = which defines how to interpret the content


This allows different IDs to be mixed (e.g., URIs,= GUIDs, keys, FQDNs, etc.)


That being said, it is certainly easier to pick one and go with it= , but since I2NSF SHOULD interoperate with other models easily, I would rec= ommend a scheme similar to the one I used (or the above, of course).

</jcs>



Relationships are impleme= nted by defining an abstract class
with keys, and then overriding the k= eys in the subclasses of the
relationship. This is broken. Would you ov= erride keys in an RDBMS?

[Linda] Is the =E2=80=9CKey=E2=80=9D to differentiati= ng different =E2=80=9CPolicyRule=E2=80=9D?=C2=A0 =C2=A0Can you give an exam= ple of =E2=80=9Csubclasses of the relationship=E2=80=9D?

What events c= an cause =E2=80=9Coverriding the keys in the subclasses of the relationship= =E2=80=9D?


<jcs>
No, the key (as in primary and foreign key= s, just to be clear) is used as part of how CIM data models are built. I be= lieve that this strategy is fundamentally incorrect (as in, would you overr= ide keys in an RDBMS). It also violates a host of object-oriented principle= s (see Post 2b).


R= emember, PCIM and PCIMe do NOT define events. This is a design (compile-tim= e) definition of how you build CIM classes.
</jcs>



  • M= ost of the classes that are used to implement the relationships
    do NOT = have attributes, so it is impossible to restrict which
    classes are rela= ted to which other classes (e.g., by context).
    Put another way, the sam= e relationship must always be used
    between two types, even if the seman= tics varies. (The two
    exceptions are PolicyConditionInPolicyRule and PolicyActionInPolicyRule).

    • [Linda] Does =E2=80=9Cclasses=E2=80=9D =3D=3D = =E2=80=9CPolicyRule=E2=80=9D?


    <jcs>

    No, "classes" =3D=3D {association | aggregation | composition}.<= /p>


    This is another ar= tifact of CIM. They implement ALL relationships as classes. In UML, there i= s a difference between these three relationships and realizing them as a cl= ass; the CIM approach eliminates this distinction.

    </jcs>



    • The "ignore this un= less you need this" philosophy does not
      work. How do you know if o= ther implementations that you are
      supposed to interoperate with are usi= ng them?

    [Linda] Is =E2=80=9CIgnore this unless you need this=E2=80=9D a= n new type of =E2=80=9CPolicyRule=E2=80=9D?


    <jcs>

    No, sorry, this is one of the key points underlying the desi= gn philosophy of CIM, and carried into PCIM and PCIMe. Basically, it means = that it is OK to define model elements on another model element if they are= optional. Examples:


    =C2=A0=C2=A0 - defining an optional attribute, method, or relationship= =C2=A0on a class
    =C2=A0=C2=A0 - defining an optional constraint


    This violates all of the 4= design principles in Post 2b (references section)

    </jcs>


    There is no concept of the subject or the targe= t of a policy

    [Linda] Does your =E2=80=9Csubject=E2=80=9D have the same meanin= g as the =E2=80=9CI2NSF subject=E2=80=9D which means bits&bytes extract= ed from packets?


    <jcs>

    No. A PolicySubject is the aut= hor of a policy. One could also differentiate between author, owner, and ex= ecutor, but that is more complex. It is vital for deontic logic (i.e., the = logic of obligations and permissions, as in MUST, MUST NOT, SHOULD, MAY, et= c.). This is one of my concerns with the Sbbject-Object-Action-Function mod= el - one cannot build authorization policies that can be logically proven t= o be correct or not without a PolicySubject.

    <= /jcs>



    <= p class=3D"MsoNormal">Adding a new type of policy (e.g., declarative or fun= ctional)
    will cause a major rewrite of the entire model

    =C2=A0

    [Linda]= Can we say that =C2=A0I2NSF policies have one type =E2=80=9CSubject-Contex= tualStates- action- function? So in I2NSF environment, there is only the no= tion of adding a new =E2=80=9CPolicyRule=E2=80=9D, but no adding a new poli= cy type. Is this correct statement? =C2=A0


    <jcs>

    No. The meaning of what I wrote above is much broader. If you thin= k of ECA policies as imperative in nature, then the analogy is that PCIM/PC= IMe are hard-wired to imperative policies. The schema cannot be used for ot= her forms (declarative, functional, etc.) of policies.


    Put another way, ECA (or CA, which is = all that the PCIM/PCIMe can do) is imperative - it specifies that, given th= is particular state, the ONLY state that you are allowed to transition to i= s this other state. Rationality MUST be compiled into the policy. In contra= st, for declarative logic, given a particular state, there are a SET of sta= tes that either satisfy the goal, or take you closer to the goal. Hence, ra= tionality is GENERATED by a logic planner/optimizer.

    </jcs>



    There is no approach to detecting and sol= ving policy conflicts;
    this is due to the simplistic notion of just usi= ng a PDP and a
    PEP for applying policies.

    =C2=A0

    <= p class=3D"MsoNormal">[Linda] in I2NSF, the= re could be a lot of conflicts, for example, there could be two rules enter= ed at different time:

    1.=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 =C2=A0Virtu= al Network X can=E2=80=99t access =E2=80=9CYouTube=E2=80=9D, =

    2.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 10.1.1.1 can access =E2=80=9CYouTube=E2=80=9D = (where 10.1.1.1 is a host within the Virtual Network X).

    Do you call the 2 rules above con= flict?

    <jcs>

    Bob already answered this in http://www.ietf.org/mail-a= rchive/web/i2nsf/current/msg00729.html

    +1 to = his answer (or see my reply)

    </jcs>

    =



    Given the large amount of problems, I recommend that we= not consider PCIM further.

    [Linda] should I2NSF referen= ce PCIM?


    <jcs>

    I don't see an= y harm in **referencing** PCIM or PCIMe; I just don't want to **use** e= ither to construct our policies.

    </jcs>=



    best regards,

    John

    =



    On Tue, Dec 8, 2015 at 1:10 PM, Linda Dunbar <l= inda.dunbar@huawei.com> wrote:

    John,

    =C2=A0=

    Thank you very much = for the in-depth analysis of PCIM and its suitability as something that I2N= SF should be based on. What you write is very valuable. I think the analysis should be added to the I2NSF gap analysis, (or be a standalon= e Policy Analysis ID).

    =C2=A0=

    I have some question= s inserted below:

    =C2=A0=

    From: I2nsf [mailt= o:i2nsf-bounces= @ietf.org] On Behalf Of John Strassner
    Sent: Sunday, December 06, 2015 7:01 PM
    To: i2nsf@ietf.o= rg
    Subject: [I2nsf] Service Layer Policies - Post 1: Background Informa= tion on PCIM

    =C2=A0

    <Snipped>=

    =C2=A0

    2.=C2=A0 Brief description of PCIM

    =C2=A0

    The PCIM Class Hierarchy is very simple, as this is = a CA (condition-action) model. Events are NOT represented. PCIM defines a P= olicyRule, a PolicyGroup (group of PolicyRules), PolicyCondition, and Polic= yAction. These are all siblings; their common superclass is called Policy, as shown below:

    =C2=A0

    = ManagedElement (abstract)
    =C2=A0 |
    =C2=A0 +---Policy (abstract)
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyGroup
    =C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyRule
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyCondition (abstract)
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 +---P= olicyTimePeriodCondition
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= +---VendorPolicyCondition
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyAction (abstract)
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = +---VendorPolicyAction

    = =C2=A0

    Note: PCIM does have a simple notion of Roles, but i= mplements them as attributes, instead of objects. This is not scalable, and= does not fully realize the power of using roles. This will be discussed mo= re in Post 3.

    =C2=A0

    Note: It is possible to define limited constraints i= n PCIM as conditions. For example, the VendorPolicyCondition class has two = attributes, Constraint and ConstraintEncoding, that do this. This will be d= iscussed more in Post 4.

    =C2=A0

    Note: Context is NOT defined in the PCIM.<= /u>

    =C2=A0=

    [Linda] =C2=A0Do you= agree that =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D =E2=80=9CI2NSF s= ubject=E2=80=9D & =E2=80=9Cthe Contextual states (or the I2NSF object)= =E2=80=9D?

    =C2=A0

    =C2=A0

    3.=C2=A0 Summary: main drawbacks of using PCIM

    =C2=A0

    Note that the current CIM Policy Model (2.44.1) is s= ignificantly different than either PCIM or PCIMe.=C2=A0PCIM is based on CIM= 2.4; PCIMe is based on CIM 2.5. PCIMe is NOT backwards compatible with PCI= M in all areas.

    =C2=A0

    Critical Problems:

    • There is no unique ID that can be used to distinguish different
      instances of the same PolicyRule, PolicyGroup, PolicyCondition,
      or PolicyAction.

    [Linda] Can we simpl= y create an ID (string or numeric) for instances of the same PolicyRule? Or= it is more complicated?

    • Relationships are implemented by defining an abstract class
      with keys, and then overriding the keys in the subclasses of the
      relationship. This is broken. Would you override keys in an RDBMS?

    [Linda] Is the =E2= =80=9CKey=E2=80=9D to differentiating different =E2=80=9CPolicyRule=E2=80= =9D?=C2=A0 =C2=A0Can you give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D?

    What events can caus= e =E2=80=9Coverriding the keys in the subclasses of the relationship=E2=80= =9D?

    • Most of the classes that are used to implement the relationships
      do NOT have attributes, so it is impossible to restrict which
      classes are related to which other classes (e.g., by context).
      Put another way, the same relationship must always be used
      between two types, even if the semantics varies. (The two
      exceptions are PolicyConditionInPolicyRule and
      PolicyActionInPolicyRule).

    [Linda] Does =E2=80= =9Cclasses=E2=80=9D =3D=3D =E2=80=9CPolicyRule=E2=80=9D?

    • The "ignore this unless you need this" philosophy does not
      work. How do you know if other implementations that you are
      supposed to interoperate with are using them?

    [Linda] Is =E2=80=9C= Ignore this unless you need this=E2=80=9D an new type of =E2=80=9CPolicyRul= e=E2=80=9D?

    • There is no concept of error or exception handling
    • There is no concept of the subject or the target of a policy<= /li>

    [Linda] Does your = =E2=80=9Csubject=E2=80=9D have the same meaning as the =E2=80=9CI2NSF subje= ct=E2=80=9D which means bits&bytes extracted from packets?

    • Adding a new type of policy (e.g., declarative or functional)
      will cause a major rewrite of the entire model

    =C2=A0=

    [Linda] Can we say t= hat =C2=A0I2NSF policies have one type =E2=80=9CSubject-ContextualStates- a= ction- function? So in I2NSF environment, there is only the notion of adding a new =E2=80= =9CPolicyRule=E2=80=9D, but no adding a new policy type. Is this correct st= atement? =C2=A0

    • There is no approach to detecting and solving policy conflicts;
      this is due to the simplistic notion of just using a PDP and a
      PEP for applying policies.

    =C2=A0=

    [Linda] in I2NSF, th= ere could be a lot of conflicts, for example, there could be two rules ente= red at different time:

    1.= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0Virtual N= etwork X can=E2=80=99t access =E2=80=9CYouTube=E2=80=9D,

    2.= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 10.1.1.1 can ac= cess =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is a host within the Virtual= Network X).

    Do you call the 2 rules above conflict?

    =C2=A0

    =C2=A0

    4. Recommendations

    =C2=A0

    Given the large amount of problems, I recommend that= we not consider PCIM further.

    [Linda] should = I2NSF reference PCIM?

    =C2=A0=

    Thank you very much.= Linda

    =C2=A0

    5. Origin of PCIM/PCIMe

    =C2=A0

    This is a **theory** section; please skip unless you= want to understand the model in more detail.

    =C2=A0

    The PCIM is based on the DMTF CIM, which is actually= a **data model** (despite its name) because it uses relational technologie= s (e.g., keys and weak references) to create its model. PCIM is based on an= early version of the CIM (2.4); the current version of the CIM is 2.44.1 as of this writing. Since this is tie= d to the CIM, this means that:

    =C2=A0

    =C2=A0=C2=A0 1) Policy is subclassed from a more gen= eric class (ManagedElement)

    =C2=A0=C2=A0 2) ALL relationships (associations, agg= regations, and compositions)

    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 are realized as= **classes**

    =C2=A0=C2=A0 3) As a result of 2), relationships are= subclassed

    =C2=A0=C2=A0 4) Both attributes and associations are= **inherited**

    =C2=A0=C2=A0 5) The same design approach (as much as= possible) was used in

    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 PCIM/PCIM= e as was in CIM. Specifically, it was thought better

    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 to define= a generic, but optional, relationship instead of not

    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 defining = the relationship.

    =C2=A0=C2=A0 6) The CIM does NOT have a single roote= d hierarchy; this makes

    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 code gene= ration more complex

    =C2=A0=C2=A0 7) The CIM uses a proprietary language = and is not strictly UML

    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 compliant= , even though it looks like UML (unfortunately, this

    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 language = is also called MOF)=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0

    =C2=A0

    Depending on the complexity of the implementation, t= he above have been shown to produce problems in large environments. For exa= mple, the spirit of "let's define an attribute or association in c= ase it is useful, and make it optional so you don't have to worry about it" not only violates some well-known s= oftware architectural guidelines (e.g., Single Responsibility Principle and= the Liskov Substitution Principle), but it makes things difficult to inter= operate with (since you never really know if an attribute or relationship should be instantiated or not).<= /u>

    =C2=A0

    =C2=A0

    regards,

    John




    --
    regards,
    John
    --001a1143df74146f1b0526a7bcec-- From nobody Sun Dec 13 17:34:58 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E42281A882E for ; Sun, 13 Dec 2015 17:34:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.911 X-Spam-Level: X-Spam-Status: No, score=-3.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f3xfHQCAK57M for ; Sun, 13 Dec 2015 17:34:55 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19EC61A8A6E for ; Sun, 13 Dec 2015 17:34:54 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml401-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CBN80433; Mon, 14 Dec 2015 01:34:53 +0000 (GMT) Received: from lhreml704-cah.china.huawei.com (10.201.5.130) by lhreml401-hub.china.huawei.com (10.201.5.240) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 14 Dec 2015 01:34:52 +0000 Received: from SZXEMA414-HUB.china.huawei.com (10.82.72.73) by lhreml704-cah.china.huawei.com (10.201.5.130) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 14 Dec 2015 01:34:51 +0000 Received: from SZXEMA502-MBS.china.huawei.com ([169.254.4.87]) by SZXEMA414-HUB.china.huawei.com ([10.82.72.73]) with mapi id 14.03.0235.001; Mon, 14 Dec 2015 09:34:47 +0800 From: "Xialiang (Frank)" To: Robert Moskowitz Thread-Topic: [I2nsf] Definitions in draft-merged-i2nsf-problem-statement-use-cases-00 Thread-Index: AQHRND5oJu0aRPo5UkO30fvq1mpHBZ7Js9pA Date: Mon, 14 Dec 2015 01:34:45 +0000 Message-ID: References: <566B1018.2090904@htt-consult.com> In-Reply-To: <566B1018.2090904@htt-consult.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.135.43.91] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020205.566E1CBD.00AD, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.4.87, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: e21b814124b6f36f54f444e8fd94f2b6 Archived-At: Cc: "i2nsf@ietf.org" Subject: [I2nsf] =?utf-8?b?562U5aSNOiAgRGVmaW5pdGlvbnMgaW4JZHJhZnQtbWVy?= =?utf-8?q?ged-i2nsf-problem-statement-use-cases-00?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Dec 2015 01:34:57 -0000 Qm9iLCBwbGVhc2Ugc2VlIGlubGluZToNCg0KLS0tLS3pgq7ku7bljp/ku7YtLS0tLQ0K5Y+R5Lu2 5Lq6OiBJMm5zZiBbbWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmddIOS7o+ihqCBSb2JlcnQg TW9za293aXR6DQrlj5HpgIHml7bpl7Q6IDIwMTXlubQxMuaciDEy5pelIDI6MDQNCuaUtuS7tuS6 ujogaTJuc2ZAaWV0Zi5vcmcNCuS4u+mimDogW0kybnNmXSBEZWZpbml0aW9ucyBpbiBkcmFmdC1t ZXJnZWQtaTJuc2YtcHJvYmxlbS1zdGF0ZW1lbnQtdXNlLWNhc2VzLTAwDQoNCkkgaGF2ZSBiZWVu IHdvcmtpbmcgd2l0aCBTdWUgYW5kIExpbmRhIG9uIHJldmlld2luZyBhbmQgY2xlYW5pbmcgdXAg dGhpcyBJRC4gIEkgbG9va2VkIGF0Ow0KDQpOZXR3b3JrIFNlY3VyaXR5IEZ1bmN0aW9uIChOU0Yp OiBBIGZ1bmN0aW9uIHdoaWNoIGVuc3VyZXMgaW50ZWdyaXR5LCBjb25maWRlbnRpYWxpdHkgYW5k IGF2YWlsYWJpbGl0eSBvZiBuZXR3b3JrIGNvbW11bmljYXRpb25zOyBkZXRlY3RzIHVud2FudGVk IGFjdGl2aXR5LCAgYmxvY2tzIG9yIG1pdGlnYXRlcyB0aGUgZWZmZWN0IG9mIHN1Y2ggdW53YW50 ZWQgYWN0aXZpdHkgb24gdGhlIG5ldHdvcmsuDQoNCkFuZCBJIHRvb2sgZXhjZXB0aW9uIHdpdGgg YXQgbGVhc3QgJ2Vuc3VyZXMnLiAgVGhpcyBpcyB0b28gc3Ryb25nIG9mIGEgc3RhdGVtZW50LiAg Tm90aGluZyB3ZSBkbyB3aXRoIHRoaXMgdGVjaG5vbG9neSB3aWxsICdlbnN1cmUnIENJQS4gRmly c3Qgd2hhdCBpcyAnQ0lBJzoNCg0KQ29uZmlkZW50aWFsaXR5IGJ5IHJlc3RyaWN0aW5nIGFjY2Vz cyB0byB0aGUgaW50ZXJuYWwgYXNzZXRzLg0KSW50ZWdyaXR5IGJ5LCAod2VsbCBnZWUsIHdoYXQg SVMgSW50ZWdyaXR5KT8gIEludGVncml0eSBieSBlbmFibGluZyB1c2VycyB0byB0cnVzdCB1c2lu ZyB0aGVpciBhc3NldHMuDQpBdmFpbGFibGl0eSBieSBibG9ja2luZyBhdHRhY2tzIHRoYXQgbWFr ZSBhc3NldHMgdW51c2FibGUuDQoNClNvIGZpcnN0LCBkbyB3ZSBhZ3JlZSB3aGF0IENJQSBtZWFu cyBhbmQgdGhhdCBpdCBpcyBpbXBvcnRhbnQ/ICBJZiBzbywgd2UgbWlnaHQgZ2V0IHNvbWV0aGlu ZyBsaWtlOg0KDQpBIGZ1bmN0aW9uIHRoYXQgZGV0ZWN0cyB1bndhbnRlZCBhY3Rpdml0eSBhbmQg YmxvY2tzL21pdGlnYXRlcyB0aGUgZWZmZWN0IG9mIHN1Y2ggdW53YW50ZWQgYWN0aXZpdHkgaW4g b3JkZXIgdG8gc3VwcG9ydCBhdmFpbGFiaWxpdHkgb2YgYSANCm5ldHdvcmsuICBJbiBhZGRpdGlv biwgdGhlIE5TRiAgIGhlbHBzIHN1cHBvcnQgY29tbXVuaWNhdGlvbiBzdHJlYW0gDQrigJxpbnRl Z3JpdHkgYW5kIGNvbmZpZGVudGlhbGl0eeKAnS4NCltGcmFua106IFN1cHBvcnQgdG8gcmVwbGFj ZSB0aGUgd29yZCAiZW5zdXJlcyIsIHRoaXMgZGVmaW5pdGlvbiBtYWtlcyBzZW5zZSBtb3JlLg0K DQpFdmVuIHRoaXMgaXMgdG9vIHNlbGYtYXNzdXJlZC4gIEFuIE5TRiBkZXRlY3RzIHVud2FudGVk IGFjdGl2aXR5PyANClJlYWxseT8gIEl0IGRldGVjdHMgd2hhdCB3ZSBoYXZlIHNvIGZhciBoYXZl IGNsYXNzaWZpZWQgYXMgdW53YW50ZWQgDQphY3Rpdml0eS4gIEkga25vdyB0aGF0IElQUyBOU0Yg ZGV2aWNlcyBhcmUgbWFya2V0ZWQgdG8gJ2xlYXJuJyBhbmQgDQphZGFwdCwgYnV0IHdpdGhvdXQg c29waGlzdGljYXRlZCBBSSwgZXZlbiBoZXJlIHRoZXJlIGFyZSBsaW1pdHMuIFBlcmhhcHMgDQpJ IGFtIHRvbyBwZWRhbnRpYywgYnV0IHRoaXMgZG9jdW1lbnQgaW5jbHVkZXMgJ3VzZXIgZXhwZWN0 YXRpb25zJywgYW5kIEkgDQpkb24ndCB3YW50IGFuIGV4cGVjdGF0aW9uIG9mICc2IHNpZ21hcyBv ZiBkZXRlY3Rpb24nLg0KW0ZyYW5rXTogTWF5YmUgc29tZSBjb25zdHJhaW50cyBhcmUgdXNlZnVs IGhlcmUuIEZvciBleGFtcGxlOiAiQSBmdW5jdGlvbiB0aGF0IGRldGVjdHMgdW53YW50ZWQgYWN0 aXZpdHkgKGtub3duIG9yIHBvc3NpYmx5IHNvbWUgbmV3KSAuLi4iLg0KDQpNeSBzaXhwZW5jZSB3 b3J0aC4NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xw0KSTJuc2YgbWFpbGluZyBsaXN0DQpJMm5zZkBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9pMm5zZg0K From nobody Sun Dec 13 18:45:40 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 023D91A9089 for ; Sun, 13 Dec 2015 18:45:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.61 X-Spam-Level: X-Spam-Status: No, score=-0.61 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, J_CHICKENPOX_45=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g1iYFTQwltqo for ; Sun, 13 Dec 2015 18:45:32 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9CD01A0193 for ; Sun, 13 Dec 2015 18:45:30 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CFJ85894; Mon, 14 Dec 2015 02:45:28 +0000 (GMT) Received: from LHREML706-CAH.china.huawei.com (10.201.5.182) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 14 Dec 2015 02:45:27 +0000 Received: from SZXEMA412-HUB.china.huawei.com (10.82.72.71) by lhreml706-cah.china.huawei.com (10.201.5.182) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 14 Dec 2015 02:45:26 +0000 Received: from SZXEMA502-MBS.china.huawei.com ([169.254.4.87]) by SZXEMA412-HUB.china.huawei.com ([10.82.72.71]) with mapi id 14.03.0235.001; Mon, 14 Dec 2015 10:45:15 +0800 From: "Xialiang (Frank)" To: John Strassner , Linda Dunbar Thread-Topic: [I2nsf] Service Layer Policies - Post 1: Background Information on PCIM Thread-Index: AQHRNGw3AkjO3G5gJEOmYctLqPuBTZ7JwhCg Date: Mon, 14 Dec 2015 02:45:14 +0000 Message-ID: References: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.135.43.91] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F12AEBE1AASZXEMA502MBSchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020205.566E2D48.010D, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.4.87, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: e0ee0c352a844e659896d61615372bec Archived-At: Cc: "i2nsf@ietf.org" Subject: [I2nsf] =?utf-8?b?562U5aSNOiAgU2VydmljZSBMYXllciBQb2xpY2llcyAt?= =?utf-8?q?_Post_1=3A_Background_Information_on_PCIM?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Dec 2015 02:45:39 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F12AEBE1AASZXEMA502MBSchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSm9obiwNClNpbmNlIGN1cnJlbnQgZGVzaWduIHByaW5jaXBsZSBmb3IgdGhlIHBvbGljeSBt b2RlbCBvZiBjYXBhYmlsaXR5IGludGVyZmFjZSBpcyB0byBhYnN0cmFjdCBmcm9tIG1vc3QgY29t bW9uIGV4aXN0aW5nIE5TRiBzZWN1cml0eSBwb2xpY3kgaW1wbGVtZW50YXRpb25zIGFuZCBjb25z b2xpZGF0ZSB0aGVtIGludG8gYSBnZW5lcmFsIGFuZCBleHRlbnNpdmUgbW9kZWwsIEkgdGhpbmsg aW1wZXJhdGl2ZSBsb2dpYyBpcyBtb3JlIHN1aXRhYmxlIGZvciB0aGlzIGdvYWwuDQoNCkkgYW0g dmVyeSBpbnRlcmVzdGVkIGluIHdoZXRoZXIg4oCcZXZlbnTigJ0gY2FuIGJlIHVzZWQgaW4gSTJO U0YgY2FwYWJpbGl0eSBpbnRlcmZhY2UuIERvIHlvdSBoYXZlIHNvbWUgc3VnZ2VzdGlvbnM/DQoN CkFyZSB0aGUg4oCcc3ViamVjdOKAnSBhbmQg4oCcdGFyZ2V04oCdIHR3byBkaWZmZXJlbnQgY2xh c3NlcyBpbiBQQ0lNZT8gRG8geW91IHN1Z2dlc3QgdG8gaW5jbHVkZSB0aGVtIGluIEkyTlNGIHBv bGljeSBtb2RlbCBvZiBjYXBhYmlsaXR5IGludGVyZmFjZSBmb3IgdGhlIGdvYWwgb2YgYXV0aG9y aXppbmcgdGhlIHBvbGljeT8NCg0KQi5SLg0KRnJhbmsNCg0K5Y+R5Lu25Lq6OiBJMm5zZiBbbWFp bHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmddIOS7o+ihqCBKb2huIFN0cmFzc25lcg0K5Y+R6YCB 5pe26Ze0OiAyMDE15bm0MTLmnIgxMuaXpSA3OjMyDQrmlLbku7bkuro6IExpbmRhIER1bmJhcg0K 5oqE6YCBOiBpMm5zZkBpZXRmLm9yZw0K5Li76aKYOiBSZTogW0kybnNmXSBTZXJ2aWNlIExheWVy IFBvbGljaWVzIC0gUG9zdCAxOiBCYWNrZ3JvdW5kIEluZm9ybWF0aW9uIG9uIFBDSU0NCg0KSGkg TGluZGEsDQoNCnRoYW5rIHlvdSBmb3IgeW91ciBraW5kIHdvcmRzLiBNeSByZXBsaWVzIGFyZSBp bmxpbmU6DQoNClRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHRoZSBpbi1kZXB0aCBhbmFseXNpcyBv ZiBQQ0lNIGFuZCBpdHMgc3VpdGFiaWxpdHkgYXMgc29tZXRoaW5nIHRoYXQgSTJOU0Ygc2hvdWxk IGJlIGJhc2VkIG9uLiBXaGF0IHlvdSB3cml0ZSBpcyB2ZXJ5IHZhbHVhYmxlLiBJIHRoaW5rIHRo ZSBhbmFseXNpcyBzaG91bGQgYmUgYWRkZWQgdG8gdGhlIEkyTlNGIGdhcCBhbmFseXNpcywgKG9y IGJlIGEgc3RhbmRhbG9uZSBQb2xpY3kgQW5hbHlzaXMgSUQpLg0KDQo8amNzPg0KSWYgZGVzaXJl ZCwgSSBjb3VsZCBzdW1tYXJpemUgdGhlIGtleSBwb2ludHMgZm9yIHRoZSBnYXAgYW5hbHlzaXMu IEkgd291bGQgYmUgd2lsbGluZyB0byBkbyBhIFBvbGljeSBBbmFseXNpcyBJLUQsIGJ1dCBJIHRo aW5rIHRoYXQgdGhpcyBwcm9iYWJseSBiZWxvbmdzIGluIFNVUEEuIEhvd2V2ZXIsIGZlZWRiYWNr IGZyb20gSTJOU0YgaXMgaW52YWx1YWJsZSBmb3Igc3VjaCBhIGRvY3VtZW50Lg0KPC9qY3M+DQoN Cg0KTm90ZTogSXQgaXMgcG9zc2libGUgdG8gZGVmaW5lIGxpbWl0ZWQgY29uc3RyYWludHMgaW4g UENJTSBhcyBjb25kaXRpb25zLiBGb3IgZXhhbXBsZSwgdGhlIFZlbmRvclBvbGljeUNvbmRpdGlv biBjbGFzcyBoYXMgdHdvIGF0dHJpYnV0ZXMsIENvbnN0cmFpbnQgYW5kIENvbnN0cmFpbnRFbmNv ZGluZywgdGhhdCBkbyB0aGlzLiBUaGlzIHdpbGwgYmUgZGlzY3Vzc2VkIG1vcmUgaW4gUG9zdCA0 Lg0KDQpOb3RlOiBDb250ZXh0IGlzIE5PVCBkZWZpbmVkIGluIHRoZSBQQ0lNLg0KDQpbTGluZGFd ICBEbyB5b3UgYWdyZWUgdGhhdCDigJxDb25kaXRpb24gb2YgdGhlIFBDSU3igJ0gPT0g4oCcSTJO U0Ygc3ViamVjdOKAnSAmIOKAnHRoZSBDb250ZXh0dWFsIHN0YXRlcyAob3IgdGhlIEkyTlNGIG9i amVjdCnigJ0/DQoNCjxqY3M+DQpQQ0lNL1BDSU1lIGNvbmRpdGlvbnMgYXJlIGNsZWFybHkgc2lt aWxhciB0byB3aGF0IGlzIG5vdyBjYWxsZWQgIkkyTlNGIFN1YmplY3QiLiBIb3dldmVyLCB0aGUg Y29udGV4dHVhbCBzdGF0ZSBpcyB0cmlja2llci4gUGFydCBvZiB0aGUgcHJvYmxlbSBpcyBob3cg d2Ugd2FudCB0byBkZWZpbmUgQ29udGV4dC4gSSdsbCBzYXZlIHRoZSBidWxrIGZvciBQb3N0IDQg KGFzIG91dGxpbmVkIGluIG15IFBvc3QgMCBub3RlKS4gSG93ZXZlciwgbG9va2luZyBhdCBwYWdl IDYgb2YgZHJhZnQtbWVyZ2VkLWkybnNmLWZyYW1ld29yay0wNDoNCiJPYmplY3QtTWF0Y2ggdmFs dWVzLCBiYXNlZCBvbiBjb250ZXh0IChlLmcuLCBzdGF0ZSwgZGlyZWN0aW9uIG9mIHRoZSB0cmFm ZmljLCB0aW1lLCBnZW8tbG9jYXRpb24sIGV0Yy4pIiwgaW4gd2hpY2ggY2FzZToNCiAgIC0gc3Rh dGU6ICBsaWtlbHkgTk9UIHBhcnQgb2YgdGhlIGNvbmRpdGlvbjsgcmF0aGVyLCBpdCBhcHBsaWVz IHRvIHRoZSBlbnRpcmUgUG9saWN5UnVsZSBhcyBhIHdob2xlDQogICAtIHRyYWZmaWMgZGlyZWN0 aW9uOiAgcGFydCBvZiB0aGUgY29uZGl0aW9uDQogICAtIHRpbWU6ICBwYXJ0IG9mIHRoZSBjb25k aXRpb24NCiAgIC0gZ2VvLWxvY2F0aW9uOiAgcGFydCBvZiB0aGUgY29uZGl0aW9uDQo8L2pjcz4N Cg0KLi4uDQoNCkNyaXRpY2FsIFByb2JsZW1zOg0KDQpUaGVyZSBpcyBubyB1bmlxdWUgSUQgdGhh dCBjYW4gYmUgdXNlZCB0byBkaXN0aW5ndWlzaCBkaWZmZXJlbnQNCmluc3RhbmNlcyBvZiB0aGUg c2FtZSBQb2xpY3lSdWxlLCBQb2xpY3lHcm91cCwgUG9saWN5Q29uZGl0aW9uLA0Kb3IgUG9saWN5 QWN0aW9uLg0KW0xpbmRhXSBDYW4gd2Ugc2ltcGx5IGNyZWF0ZSBhbiBJRCAoc3RyaW5nIG9yIG51 bWVyaWMpIGZvciBpbnN0YW5jZXMgb2YgdGhlIHNhbWUgUG9saWN5UnVsZT8gT3IgaXQgaXMgbW9y ZSBjb21wbGljYXRlZD8NCg0KPGpjcz4NClNVUEEgYW5kIERFTi1uZyB1c2UgdHdvIGF0dHJpYnV0 ZXMgdG8gZG8gdGhpczoNCg0KICAgLSBhIHN0cmluZyB0aGF0IGNvbnRhaW5zIHRoZSBjb250ZW50 IG9mIHRoZSBpZGVudGlmaWVyDQogICAtIGEgc3RyaW5nIHRoYXQgaXMgYW4gZW51bSwgd2hpY2gg ZGVmaW5lcyBob3cgdG8gaW50ZXJwcmV0IHRoZSBjb250ZW50DQoNClRoaXMgYWxsb3dzIGRpZmZl cmVudCBJRHMgdG8gYmUgbWl4ZWQgKGUuZy4sIFVSSXMsIEdVSURzLCBrZXlzLCBGUUROcywgZXRj LikNCg0KVGhhdCBiZWluZyBzYWlkLCBpdCBpcyBjZXJ0YWlubHkgZWFzaWVyIHRvIHBpY2sgb25l IGFuZCBnbyB3aXRoIGl0LCBidXQgc2luY2UgSTJOU0YgU0hPVUxEIGludGVyb3BlcmF0ZSB3aXRo IG90aGVyIG1vZGVscyBlYXNpbHksIEkgd291bGQgcmVjb21tZW5kIGEgc2NoZW1lIHNpbWlsYXIg dG8gdGhlIG9uZSBJIHVzZWQgKG9yIHRoZSBhYm92ZSwgb2YgY291cnNlKS4NCjwvamNzPg0KDQoN ClJlbGF0aW9uc2hpcHMgYXJlIGltcGxlbWVudGVkIGJ5IGRlZmluaW5nIGFuIGFic3RyYWN0IGNs YXNzDQp3aXRoIGtleXMsIGFuZCB0aGVuIG92ZXJyaWRpbmcgdGhlIGtleXMgaW4gdGhlIHN1YmNs YXNzZXMgb2YgdGhlDQpyZWxhdGlvbnNoaXAuIFRoaXMgaXMgYnJva2VuLiBXb3VsZCB5b3Ugb3Zl cnJpZGUga2V5cyBpbiBhbiBSREJNUz8NCltMaW5kYV0gSXMgdGhlIOKAnEtleeKAnSB0byBkaWZm ZXJlbnRpYXRpbmcgZGlmZmVyZW50IOKAnFBvbGljeVJ1bGXigJ0/ICAgQ2FuIHlvdSBnaXZlIGFu IGV4YW1wbGUgb2Yg4oCcc3ViY2xhc3NlcyBvZiB0aGUgcmVsYXRpb25zaGlw4oCdPw0KV2hhdCBl dmVudHMgY2FuIGNhdXNlIOKAnG92ZXJyaWRpbmcgdGhlIGtleXMgaW4gdGhlIHN1YmNsYXNzZXMg b2YgdGhlIHJlbGF0aW9uc2hpcOKAnT8NCg0KPGpjcz4NCk5vLCB0aGUga2V5IChhcyBpbiBwcmlt YXJ5IGFuZCBmb3JlaWduIGtleXMsIGp1c3QgdG8gYmUgY2xlYXIpIGlzIHVzZWQgYXMgcGFydCBv ZiBob3cgQ0lNIGRhdGEgbW9kZWxzIGFyZSBidWlsdC4gSSBiZWxpZXZlIHRoYXQgdGhpcyBzdHJh dGVneSBpcyBmdW5kYW1lbnRhbGx5IGluY29ycmVjdCAoYXMgaW4sIHdvdWxkIHlvdSBvdmVycmlk ZSBrZXlzIGluIGFuIFJEQk1TKS4gSXQgYWxzbyB2aW9sYXRlcyBhIGhvc3Qgb2Ygb2JqZWN0LW9y aWVudGVkIHByaW5jaXBsZXMgKHNlZSBQb3N0IDJiKS4NCg0KUmVtZW1iZXIsIFBDSU0gYW5kIFBD SU1lIGRvIE5PVCBkZWZpbmUgZXZlbnRzLiBUaGlzIGlzIGEgZGVzaWduIChjb21waWxlLXRpbWUp IGRlZmluaXRpb24gb2YgaG93IHlvdSBidWlsZCBDSU0gY2xhc3Nlcy4NCjwvamNzPg0KDQoNCuKA oiAgTW9zdCBvZiB0aGUgY2xhc3NlcyB0aGF0IGFyZSB1c2VkIHRvIGltcGxlbWVudCB0aGUgcmVs YXRpb25zaGlwcw0KZG8gTk9UIGhhdmUgYXR0cmlidXRlcywgc28gaXQgaXMgaW1wb3NzaWJsZSB0 byByZXN0cmljdCB3aGljaA0KY2xhc3NlcyBhcmUgcmVsYXRlZCB0byB3aGljaCBvdGhlciBjbGFz c2VzIChlLmcuLCBieSBjb250ZXh0KS4NClB1dCBhbm90aGVyIHdheSwgdGhlIHNhbWUgcmVsYXRp b25zaGlwIG11c3QgYWx3YXlzIGJlIHVzZWQNCmJldHdlZW4gdHdvIHR5cGVzLCBldmVuIGlmIHRo ZSBzZW1hbnRpY3MgdmFyaWVzLiAoVGhlIHR3bw0KZXhjZXB0aW9ucyBhcmUgUG9saWN5Q29uZGl0 aW9uSW5Qb2xpY3lSdWxlIGFuZA0KUG9saWN5QWN0aW9uSW5Qb2xpY3lSdWxlKS4NCltMaW5kYV0g RG9lcyDigJxjbGFzc2Vz4oCdID09IOKAnFBvbGljeVJ1bGXigJ0/DQoNCjxqY3M+DQpObywgImNs YXNzZXMiID09IHthc3NvY2lhdGlvbiB8IGFnZ3JlZ2F0aW9uIHwgY29tcG9zaXRpb259Lg0KDQpU aGlzIGlzIGFub3RoZXIgYXJ0aWZhY3Qgb2YgQ0lNLiBUaGV5IGltcGxlbWVudCBBTEwgcmVsYXRp b25zaGlwcyBhcyBjbGFzc2VzLiBJbiBVTUwsIHRoZXJlIGlzIGEgZGlmZmVyZW5jZSBiZXR3ZWVu IHRoZXNlIHRocmVlIHJlbGF0aW9uc2hpcHMgYW5kIHJlYWxpemluZyB0aGVtIGFzIGEgY2xhc3M7 IHRoZSBDSU0gYXBwcm9hY2ggZWxpbWluYXRlcyB0aGlzIGRpc3RpbmN0aW9uLg0KPC9qY3M+DQoN Cg0KDQogICogICBUaGUgImlnbm9yZSB0aGlzIHVubGVzcyB5b3UgbmVlZCB0aGlzIiBwaGlsb3Nv cGh5IGRvZXMgbm90DQp3b3JrLiBIb3cgZG8geW91IGtub3cgaWYgb3RoZXIgaW1wbGVtZW50YXRp b25zIHRoYXQgeW91IGFyZQ0Kc3VwcG9zZWQgdG8gaW50ZXJvcGVyYXRlIHdpdGggYXJlIHVzaW5n IHRoZW0/DQpbTGluZGFdIElzIOKAnElnbm9yZSB0aGlzIHVubGVzcyB5b3UgbmVlZCB0aGlz4oCd IGFuIG5ldyB0eXBlIG9mIOKAnFBvbGljeVJ1bGXigJ0/DQoNCjxqY3M+DQpObywgc29ycnksIHRo aXMgaXMgb25lIG9mIHRoZSBrZXkgcG9pbnRzIHVuZGVybHlpbmcgdGhlIGRlc2lnbiBwaGlsb3Nv cGh5IG9mIENJTSwgYW5kIGNhcnJpZWQgaW50byBQQ0lNIGFuZCBQQ0lNZS4gQmFzaWNhbGx5LCBp dCBtZWFucyB0aGF0IGl0IGlzIE9LIHRvIGRlZmluZSBtb2RlbCBlbGVtZW50cyBvbiBhbm90aGVy IG1vZGVsIGVsZW1lbnQgaWYgdGhleSBhcmUgb3B0aW9uYWwuIEV4YW1wbGVzOg0KDQogICAtIGRl ZmluaW5nIGFuIG9wdGlvbmFsIGF0dHJpYnV0ZSwgbWV0aG9kLCBvciByZWxhdGlvbnNoaXAgb24g YSBjbGFzcw0KICAgLSBkZWZpbmluZyBhbiBvcHRpb25hbCBjb25zdHJhaW50DQoNClRoaXMgdmlv bGF0ZXMgYWxsIG9mIHRoZSA0IGRlc2lnbiBwcmluY2lwbGVzIGluIFBvc3QgMmIgKHJlZmVyZW5j ZXMgc2VjdGlvbikNCjwvamNzPg0KDQoNClRoZXJlIGlzIG5vIGNvbmNlcHQgb2YgdGhlIHN1Ympl Y3Qgb3IgdGhlIHRhcmdldCBvZiBhIHBvbGljeQ0KW0xpbmRhXSBEb2VzIHlvdXIg4oCcc3ViamVj dOKAnSBoYXZlIHRoZSBzYW1lIG1lYW5pbmcgYXMgdGhlIOKAnEkyTlNGIHN1YmplY3TigJ0gd2hp Y2ggbWVhbnMgYml0cyZieXRlcyBleHRyYWN0ZWQgZnJvbSBwYWNrZXRzPw0KDQo8amNzPg0KTm8u IEEgUG9saWN5U3ViamVjdCBpcyB0aGUgYXV0aG9yIG9mIGEgcG9saWN5LiBPbmUgY291bGQgYWxz byBkaWZmZXJlbnRpYXRlIGJldHdlZW4gYXV0aG9yLCBvd25lciwgYW5kIGV4ZWN1dG9yLCBidXQg dGhhdCBpcyBtb3JlIGNvbXBsZXguIEl0IGlzIHZpdGFsIGZvciBkZW9udGljIGxvZ2ljIChpLmUu LCB0aGUgbG9naWMgb2Ygb2JsaWdhdGlvbnMgYW5kIHBlcm1pc3Npb25zLCBhcyBpbiBNVVNULCBN VVNUIE5PVCwgU0hPVUxELCBNQVksIGV0Yy4pLiBUaGlzIGlzIG9uZSBvZiBteSBjb25jZXJucyB3 aXRoIHRoZSBTYmJqZWN0LU9iamVjdC1BY3Rpb24tRnVuY3Rpb24gbW9kZWwgLSBvbmUgY2Fubm90 IGJ1aWxkIGF1dGhvcml6YXRpb24gcG9saWNpZXMgdGhhdCBjYW4gYmUgbG9naWNhbGx5IHByb3Zl biB0byBiZSBjb3JyZWN0IG9yIG5vdCB3aXRob3V0IGEgUG9saWN5U3ViamVjdC4NCjwvamNzPg0K DQoNCkFkZGluZyBhIG5ldyB0eXBlIG9mIHBvbGljeSAoZS5nLiwgZGVjbGFyYXRpdmUgb3IgZnVu Y3Rpb25hbCkNCndpbGwgY2F1c2UgYSBtYWpvciByZXdyaXRlIG9mIHRoZSBlbnRpcmUgbW9kZWwN Cg0KW0xpbmRhXSBDYW4gd2Ugc2F5IHRoYXQgIEkyTlNGIHBvbGljaWVzIGhhdmUgb25lIHR5cGUg 4oCcU3ViamVjdC1Db250ZXh0dWFsU3RhdGVzLSBhY3Rpb24tIGZ1bmN0aW9uPyBTbyBpbiBJMk5T RiBlbnZpcm9ubWVudCwgdGhlcmUgaXMgb25seSB0aGUgbm90aW9uIG9mIGFkZGluZyBhIG5ldyDi gJxQb2xpY3lSdWxl4oCdLCBidXQgbm8gYWRkaW5nIGEgbmV3IHBvbGljeSB0eXBlLiBJcyB0aGlz IGNvcnJlY3Qgc3RhdGVtZW50Pw0KDQo8amNzPg0KTm8uIFRoZSBtZWFuaW5nIG9mIHdoYXQgSSB3 cm90ZSBhYm92ZSBpcyBtdWNoIGJyb2FkZXIuIElmIHlvdSB0aGluayBvZiBFQ0EgcG9saWNpZXMg YXMgaW1wZXJhdGl2ZSBpbiBuYXR1cmUsIHRoZW4gdGhlIGFuYWxvZ3kgaXMgdGhhdCBQQ0lNL1BD SU1lIGFyZSBoYXJkLXdpcmVkIHRvIGltcGVyYXRpdmUgcG9saWNpZXMuIFRoZSBzY2hlbWEgY2Fu bm90IGJlIHVzZWQgZm9yIG90aGVyIGZvcm1zIChkZWNsYXJhdGl2ZSwgZnVuY3Rpb25hbCwgZXRj Likgb2YgcG9saWNpZXMuDQoNClB1dCBhbm90aGVyIHdheSwgRUNBIChvciBDQSwgd2hpY2ggaXMg YWxsIHRoYXQgdGhlIFBDSU0vUENJTWUgY2FuIGRvKSBpcyBpbXBlcmF0aXZlIC0gaXQgc3BlY2lm aWVzIHRoYXQsIGdpdmVuIHRoaXMgcGFydGljdWxhciBzdGF0ZSwgdGhlIE9OTFkgc3RhdGUgdGhh dCB5b3UgYXJlIGFsbG93ZWQgdG8gdHJhbnNpdGlvbiB0byBpcyB0aGlzIG90aGVyIHN0YXRlLiBS YXRpb25hbGl0eSBNVVNUIGJlIGNvbXBpbGVkIGludG8gdGhlIHBvbGljeS4gSW4gY29udHJhc3Qs IGZvciBkZWNsYXJhdGl2ZSBsb2dpYywgZ2l2ZW4gYSBwYXJ0aWN1bGFyIHN0YXRlLCB0aGVyZSBh cmUgYSBTRVQgb2Ygc3RhdGVzIHRoYXQgZWl0aGVyIHNhdGlzZnkgdGhlIGdvYWwsIG9yIHRha2Ug eW91IGNsb3NlciB0byB0aGUgZ29hbC4gSGVuY2UsIHJhdGlvbmFsaXR5IGlzIEdFTkVSQVRFRCBi eSBhIGxvZ2ljIHBsYW5uZXIvb3B0aW1pemVyLg0KPC9qY3M+DQoNCg0KVGhlcmUgaXMgbm8gYXBw cm9hY2ggdG8gZGV0ZWN0aW5nIGFuZCBzb2x2aW5nIHBvbGljeSBjb25mbGljdHM7DQp0aGlzIGlz IGR1ZSB0byB0aGUgc2ltcGxpc3RpYyBub3Rpb24gb2YganVzdCB1c2luZyBhIFBEUCBhbmQgYQ0K UEVQIGZvciBhcHBseWluZyBwb2xpY2llcy4NCg0KW0xpbmRhXSBpbiBJMk5TRiwgdGhlcmUgY291 bGQgYmUgYSBsb3Qgb2YgY29uZmxpY3RzLCBmb3IgZXhhbXBsZSwgdGhlcmUgY291bGQgYmUgdHdv IHJ1bGVzIGVudGVyZWQgYXQgZGlmZmVyZW50IHRpbWU6DQoNCjEuICAgICAgIFZpcnR1YWwgTmV0 d29yayBYIGNhbuKAmXQgYWNjZXNzIOKAnFlvdVR1YmXigJ0sDQoNCjIuICAgICAgMTAuMS4xLjEg Y2FuIGFjY2VzcyDigJxZb3VUdWJl4oCdICh3aGVyZSAxMC4xLjEuMSBpcyBhIGhvc3Qgd2l0aGlu IHRoZSBWaXJ0dWFsIE5ldHdvcmsgWCkuDQoNCkRvIHlvdSBjYWxsIHRoZSAyIHJ1bGVzIGFib3Zl IGNvbmZsaWN0Pw0KPGpjcz4NCkJvYiBhbHJlYWR5IGFuc3dlcmVkIHRoaXMgaW4gaHR0cDovL3d3 dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2kybnNmL2N1cnJlbnQvbXNnMDA3MjkuaHRtbA0K KzEgdG8gaGlzIGFuc3dlciAob3Igc2VlIG15IHJlcGx5KQ0KPC9qY3M+DQoNCg0KR2l2ZW4gdGhl IGxhcmdlIGFtb3VudCBvZiBwcm9ibGVtcywgSSByZWNvbW1lbmQgdGhhdCB3ZSBub3QgY29uc2lk ZXIgUENJTSBmdXJ0aGVyLg0KW0xpbmRhXSBzaG91bGQgSTJOU0YgcmVmZXJlbmNlIFBDSU0/DQoN CjxqY3M+DQpJIGRvbid0IHNlZSBhbnkgaGFybSBpbiAqKnJlZmVyZW5jaW5nKiogUENJTSBvciBQ Q0lNZTsgSSBqdXN0IGRvbid0IHdhbnQgdG8gKip1c2UqKiBlaXRoZXIgdG8gY29uc3RydWN0IG91 ciBwb2xpY2llcy4NCjwvamNzPg0KDQoNCmJlc3QgcmVnYXJkcywNCkpvaG4NCg0KDQoNCk9uIFR1 ZSwgRGVjIDgsIDIwMTUgYXQgMToxMCBQTSwgTGluZGEgRHVuYmFyIDxsaW5kYS5kdW5iYXJAaHVh d2VpLmNvbTxtYWlsdG86bGluZGEuZHVuYmFyQGh1YXdlaS5jb20+PiB3cm90ZToNCkpvaG4sDQoN ClRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHRoZSBpbi1kZXB0aCBhbmFseXNpcyBvZiBQQ0lNIGFu ZCBpdHMgc3VpdGFiaWxpdHkgYXMgc29tZXRoaW5nIHRoYXQgSTJOU0Ygc2hvdWxkIGJlIGJhc2Vk IG9uLiBXaGF0IHlvdSB3cml0ZSBpcyB2ZXJ5IHZhbHVhYmxlLiBJIHRoaW5rIHRoZSBhbmFseXNp cyBzaG91bGQgYmUgYWRkZWQgdG8gdGhlIEkyTlNGIGdhcCBhbmFseXNpcywgKG9yIGJlIGEgc3Rh bmRhbG9uZSBQb2xpY3kgQW5hbHlzaXMgSUQpLg0KDQpJIGhhdmUgc29tZSBxdWVzdGlvbnMgaW5z ZXJ0ZWQgYmVsb3c6DQoNCkZyb206IEkybnNmIFttYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9y ZzxtYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZz5dIE9uIEJlaGFsZiBPZiBKb2huIFN0cmFz c25lcg0KU2VudDogU3VuZGF5LCBEZWNlbWJlciAwNiwgMjAxNSA3OjAxIFBNDQpUbzogaTJuc2ZA aWV0Zi5vcmc8bWFpbHRvOmkybnNmQGlldGYub3JnPg0KU3ViamVjdDogW0kybnNmXSBTZXJ2aWNl IExheWVyIFBvbGljaWVzIC0gUG9zdCAxOiBCYWNrZ3JvdW5kIEluZm9ybWF0aW9uIG9uIFBDSU0N Cg0KPFNuaXBwZWQ+DQoNCjIuICBCcmllZiBkZXNjcmlwdGlvbiBvZiBQQ0lNDQoNClRoZSBQQ0lN IENsYXNzIEhpZXJhcmNoeSBpcyB2ZXJ5IHNpbXBsZSwgYXMgdGhpcyBpcyBhIENBIChjb25kaXRp b24tYWN0aW9uKSBtb2RlbC4gRXZlbnRzIGFyZSBOT1QgcmVwcmVzZW50ZWQuIFBDSU0gZGVmaW5l cyBhIFBvbGljeVJ1bGUsIGEgUG9saWN5R3JvdXAgKGdyb3VwIG9mIFBvbGljeVJ1bGVzKSwgUG9s aWN5Q29uZGl0aW9uLCBhbmQgUG9saWN5QWN0aW9uLiBUaGVzZSBhcmUgYWxsIHNpYmxpbmdzOyB0 aGVpciBjb21tb24gc3VwZXJjbGFzcyBpcyBjYWxsZWQgUG9saWN5LCBhcyBzaG93biBiZWxvdzoN Cg0KTWFuYWdlZEVsZW1lbnQgKGFic3RyYWN0KQ0KICB8DQogICstLS1Qb2xpY3kgKGFic3RyYWN0 KQ0KICB8ICAgICB8DQogIHwgICAgICstLS1Qb2xpY3lHcm91cA0KICB8ICAgICB8DQogIHwgICAg ICstLS1Qb2xpY3lSdWxlDQogIHwgICAgIHwNCiAgfCAgICAgKy0tLVBvbGljeUNvbmRpdGlvbiAo YWJzdHJhY3QpDQogIHwgICAgIHwgICAgICB8DQogIHwgICAgIHwgICAgICArLS0tUG9saWN5VGlt ZVBlcmlvZENvbmRpdGlvbg0KICB8ICAgICB8ICAgICAgfA0KICB8ICAgICB8ICAgICAgKy0tLVZl bmRvclBvbGljeUNvbmRpdGlvbg0KICB8ICAgICB8DQogIHwgICAgICstLS1Qb2xpY3lBY3Rpb24g KGFic3RyYWN0KQ0KICB8ICAgICAgICAgICAgfA0KICB8ICAgICAgICAgICAgKy0tLVZlbmRvclBv bGljeUFjdGlvbg0KDQpOb3RlOiBQQ0lNIGRvZXMgaGF2ZSBhIHNpbXBsZSBub3Rpb24gb2YgUm9s ZXMsIGJ1dCBpbXBsZW1lbnRzIHRoZW0gYXMgYXR0cmlidXRlcywgaW5zdGVhZCBvZiBvYmplY3Rz LiBUaGlzIGlzIG5vdCBzY2FsYWJsZSwgYW5kIGRvZXMgbm90IGZ1bGx5IHJlYWxpemUgdGhlIHBv d2VyIG9mIHVzaW5nIHJvbGVzLiBUaGlzIHdpbGwgYmUgZGlzY3Vzc2VkIG1vcmUgaW4gUG9zdCAz Lg0KDQpOb3RlOiBJdCBpcyBwb3NzaWJsZSB0byBkZWZpbmUgbGltaXRlZCBjb25zdHJhaW50cyBp biBQQ0lNIGFzIGNvbmRpdGlvbnMuIEZvciBleGFtcGxlLCB0aGUgVmVuZG9yUG9saWN5Q29uZGl0 aW9uIGNsYXNzIGhhcyB0d28gYXR0cmlidXRlcywgQ29uc3RyYWludCBhbmQgQ29uc3RyYWludEVu Y29kaW5nLCB0aGF0IGRvIHRoaXMuIFRoaXMgd2lsbCBiZSBkaXNjdXNzZWQgbW9yZSBpbiBQb3N0 IDQuDQoNCk5vdGU6IENvbnRleHQgaXMgTk9UIGRlZmluZWQgaW4gdGhlIFBDSU0uDQoNCltMaW5k YV0gIERvIHlvdSBhZ3JlZSB0aGF0IOKAnENvbmRpdGlvbiBvZiB0aGUgUENJTeKAnSA9PSDigJxJ Mk5TRiBzdWJqZWN04oCdICYg4oCcdGhlIENvbnRleHR1YWwgc3RhdGVzIChvciB0aGUgSTJOU0Yg b2JqZWN0KeKAnT8NCg0KDQozLiAgU3VtbWFyeTogbWFpbiBkcmF3YmFja3Mgb2YgdXNpbmcgUENJ TQ0KDQpOb3RlIHRoYXQgdGhlIGN1cnJlbnQgQ0lNIFBvbGljeSBNb2RlbCAoMi40NC4xKSBpcyBz aWduaWZpY2FudGx5IGRpZmZlcmVudCB0aGFuIGVpdGhlciBQQ0lNIG9yIFBDSU1lLiBQQ0lNIGlz IGJhc2VkIG9uIENJTSAyLjQ7IFBDSU1lIGlzIGJhc2VkIG9uIENJTSAyLjUuIFBDSU1lIGlzIE5P VCBiYWNrd2FyZHMgY29tcGF0aWJsZSB3aXRoIFBDSU0gaW4gYWxsIGFyZWFzLg0KDQpDcml0aWNh bCBQcm9ibGVtczoNCg0KICAqICAgVGhlcmUgaXMgbm8gdW5pcXVlIElEIHRoYXQgY2FuIGJlIHVz ZWQgdG8gZGlzdGluZ3Vpc2ggZGlmZmVyZW50DQppbnN0YW5jZXMgb2YgdGhlIHNhbWUgUG9saWN5 UnVsZSwgUG9saWN5R3JvdXAsIFBvbGljeUNvbmRpdGlvbiwNCm9yIFBvbGljeUFjdGlvbi4NCltM aW5kYV0gQ2FuIHdlIHNpbXBseSBjcmVhdGUgYW4gSUQgKHN0cmluZyBvciBudW1lcmljKSBmb3Ig aW5zdGFuY2VzIG9mIHRoZSBzYW1lIFBvbGljeVJ1bGU/IE9yIGl0IGlzIG1vcmUgY29tcGxpY2F0 ZWQ/DQoNCiAgKiAgIFJlbGF0aW9uc2hpcHMgYXJlIGltcGxlbWVudGVkIGJ5IGRlZmluaW5nIGFu IGFic3RyYWN0IGNsYXNzDQp3aXRoIGtleXMsIGFuZCB0aGVuIG92ZXJyaWRpbmcgdGhlIGtleXMg aW4gdGhlIHN1YmNsYXNzZXMgb2YgdGhlDQpyZWxhdGlvbnNoaXAuIFRoaXMgaXMgYnJva2VuLiBX b3VsZCB5b3Ugb3ZlcnJpZGUga2V5cyBpbiBhbiBSREJNUz8NCltMaW5kYV0gSXMgdGhlIOKAnEtl eeKAnSB0byBkaWZmZXJlbnRpYXRpbmcgZGlmZmVyZW50IOKAnFBvbGljeVJ1bGXigJ0/ICAgQ2Fu IHlvdSBnaXZlIGFuIGV4YW1wbGUgb2Yg4oCcc3ViY2xhc3NlcyBvZiB0aGUgcmVsYXRpb25zaGlw 4oCdPw0KV2hhdCBldmVudHMgY2FuIGNhdXNlIOKAnG92ZXJyaWRpbmcgdGhlIGtleXMgaW4gdGhl IHN1YmNsYXNzZXMgb2YgdGhlIHJlbGF0aW9uc2hpcOKAnT8NCg0KICAqICAgTW9zdCBvZiB0aGUg Y2xhc3NlcyB0aGF0IGFyZSB1c2VkIHRvIGltcGxlbWVudCB0aGUgcmVsYXRpb25zaGlwcw0KZG8g Tk9UIGhhdmUgYXR0cmlidXRlcywgc28gaXQgaXMgaW1wb3NzaWJsZSB0byByZXN0cmljdCB3aGlj aA0KY2xhc3NlcyBhcmUgcmVsYXRlZCB0byB3aGljaCBvdGhlciBjbGFzc2VzIChlLmcuLCBieSBj b250ZXh0KS4NClB1dCBhbm90aGVyIHdheSwgdGhlIHNhbWUgcmVsYXRpb25zaGlwIG11c3QgYWx3 YXlzIGJlIHVzZWQNCmJldHdlZW4gdHdvIHR5cGVzLCBldmVuIGlmIHRoZSBzZW1hbnRpY3MgdmFy aWVzLiAoVGhlIHR3bw0KZXhjZXB0aW9ucyBhcmUgUG9saWN5Q29uZGl0aW9uSW5Qb2xpY3lSdWxl IGFuZA0KUG9saWN5QWN0aW9uSW5Qb2xpY3lSdWxlKS4NCltMaW5kYV0gRG9lcyDigJxjbGFzc2Vz 4oCdID09IOKAnFBvbGljeVJ1bGXigJ0/DQoNCiAgKiAgIFRoZSAiaWdub3JlIHRoaXMgdW5sZXNz IHlvdSBuZWVkIHRoaXMiIHBoaWxvc29waHkgZG9lcyBub3QNCndvcmsuIEhvdyBkbyB5b3Uga25v dyBpZiBvdGhlciBpbXBsZW1lbnRhdGlvbnMgdGhhdCB5b3UgYXJlDQpzdXBwb3NlZCB0byBpbnRl cm9wZXJhdGUgd2l0aCBhcmUgdXNpbmcgdGhlbT8NCltMaW5kYV0gSXMg4oCcSWdub3JlIHRoaXMg dW5sZXNzIHlvdSBuZWVkIHRoaXPigJ0gYW4gbmV3IHR5cGUgb2Yg4oCcUG9saWN5UnVsZeKAnT8N Cg0KICAqICAgVGhlcmUgaXMgbm8gY29uY2VwdCBvZiBlcnJvciBvciBleGNlcHRpb24gaGFuZGxp bmcNCiAgKiAgIFRoZXJlIGlzIG5vIGNvbmNlcHQgb2YgdGhlIHN1YmplY3Qgb3IgdGhlIHRhcmdl dCBvZiBhIHBvbGljeQ0KW0xpbmRhXSBEb2VzIHlvdXIg4oCcc3ViamVjdOKAnSBoYXZlIHRoZSBz YW1lIG1lYW5pbmcgYXMgdGhlIOKAnEkyTlNGIHN1YmplY3TigJ0gd2hpY2ggbWVhbnMgYml0cyZi eXRlcyBleHRyYWN0ZWQgZnJvbSBwYWNrZXRzPw0KDQogICogICBBZGRpbmcgYSBuZXcgdHlwZSBv ZiBwb2xpY3kgKGUuZy4sIGRlY2xhcmF0aXZlIG9yIGZ1bmN0aW9uYWwpDQp3aWxsIGNhdXNlIGEg bWFqb3IgcmV3cml0ZSBvZiB0aGUgZW50aXJlIG1vZGVsDQoNCltMaW5kYV0gQ2FuIHdlIHNheSB0 aGF0ICBJMk5TRiBwb2xpY2llcyBoYXZlIG9uZSB0eXBlIOKAnFN1YmplY3QtQ29udGV4dHVhbFN0 YXRlcy0gYWN0aW9uLSBmdW5jdGlvbj8gU28gaW4gSTJOU0YgZW52aXJvbm1lbnQsIHRoZXJlIGlz IG9ubHkgdGhlIG5vdGlvbiBvZiBhZGRpbmcgYSBuZXcg4oCcUG9saWN5UnVsZeKAnSwgYnV0IG5v IGFkZGluZyBhIG5ldyBwb2xpY3kgdHlwZS4gSXMgdGhpcyBjb3JyZWN0IHN0YXRlbWVudD8NCg0K ICAqICAgVGhlcmUgaXMgbm8gYXBwcm9hY2ggdG8gZGV0ZWN0aW5nIGFuZCBzb2x2aW5nIHBvbGlj eSBjb25mbGljdHM7DQp0aGlzIGlzIGR1ZSB0byB0aGUgc2ltcGxpc3RpYyBub3Rpb24gb2YganVz dCB1c2luZyBhIFBEUCBhbmQgYQ0KUEVQIGZvciBhcHBseWluZyBwb2xpY2llcy4NCg0KW0xpbmRh XSBpbiBJMk5TRiwgdGhlcmUgY291bGQgYmUgYSBsb3Qgb2YgY29uZmxpY3RzLCBmb3IgZXhhbXBs ZSwgdGhlcmUgY291bGQgYmUgdHdvIHJ1bGVzIGVudGVyZWQgYXQgZGlmZmVyZW50IHRpbWU6DQoN CjEuICAgICAgIFZpcnR1YWwgTmV0d29yayBYIGNhbuKAmXQgYWNjZXNzIOKAnFlvdVR1YmXigJ0s DQoNCjIuICAgICAgMTAuMS4xLjEgY2FuIGFjY2VzcyDigJxZb3VUdWJl4oCdICh3aGVyZSAxMC4x LjEuMSBpcyBhIGhvc3Qgd2l0aGluIHRoZSBWaXJ0dWFsIE5ldHdvcmsgWCkuDQoNCkRvIHlvdSBj YWxsIHRoZSAyIHJ1bGVzIGFib3ZlIGNvbmZsaWN0Pw0KDQoNCg0KNC4gUmVjb21tZW5kYXRpb25z DQoNCkdpdmVuIHRoZSBsYXJnZSBhbW91bnQgb2YgcHJvYmxlbXMsIEkgcmVjb21tZW5kIHRoYXQg d2Ugbm90IGNvbnNpZGVyIFBDSU0gZnVydGhlci4NCltMaW5kYV0gc2hvdWxkIEkyTlNGIHJlZmVy ZW5jZSBQQ0lNPw0KDQpUaGFuayB5b3UgdmVyeSBtdWNoLiBMaW5kYQ0KDQo1LiBPcmlnaW4gb2Yg UENJTS9QQ0lNZQ0KDQpUaGlzIGlzIGEgKip0aGVvcnkqKiBzZWN0aW9uOyBwbGVhc2Ugc2tpcCB1 bmxlc3MgeW91IHdhbnQgdG8gdW5kZXJzdGFuZCB0aGUgbW9kZWwgaW4gbW9yZSBkZXRhaWwuDQoN ClRoZSBQQ0lNIGlzIGJhc2VkIG9uIHRoZSBETVRGIENJTSwgd2hpY2ggaXMgYWN0dWFsbHkgYSAq KmRhdGEgbW9kZWwqKiAoZGVzcGl0ZSBpdHMgbmFtZSkgYmVjYXVzZSBpdCB1c2VzIHJlbGF0aW9u YWwgdGVjaG5vbG9naWVzIChlLmcuLCBrZXlzIGFuZCB3ZWFrIHJlZmVyZW5jZXMpIHRvIGNyZWF0 ZSBpdHMgbW9kZWwuIFBDSU0gaXMgYmFzZWQgb24gYW4gZWFybHkgdmVyc2lvbiBvZiB0aGUgQ0lN ICgyLjQpOyB0aGUgY3VycmVudCB2ZXJzaW9uIG9mIHRoZSBDSU0gaXMgMi40NC4xIGFzIG9mIHRo aXMgd3JpdGluZy4gU2luY2UgdGhpcyBpcyB0aWVkIHRvIHRoZSBDSU0sIHRoaXMgbWVhbnMgdGhh dDoNCg0KICAgMSkgUG9saWN5IGlzIHN1YmNsYXNzZWQgZnJvbSBhIG1vcmUgZ2VuZXJpYyBjbGFz cyAoTWFuYWdlZEVsZW1lbnQpDQogICAyKSBBTEwgcmVsYXRpb25zaGlwcyAoYXNzb2NpYXRpb25z LCBhZ2dyZWdhdGlvbnMsIGFuZCBjb21wb3NpdGlvbnMpDQogICAgICAgYXJlIHJlYWxpemVkIGFz ICoqY2xhc3NlcyoqDQogICAzKSBBcyBhIHJlc3VsdCBvZiAyKSwgcmVsYXRpb25zaGlwcyBhcmUg c3ViY2xhc3NlZA0KICAgNCkgQm90aCBhdHRyaWJ1dGVzIGFuZCBhc3NvY2lhdGlvbnMgYXJlICoq aW5oZXJpdGVkKioNCiAgIDUpIFRoZSBzYW1lIGRlc2lnbiBhcHByb2FjaCAoYXMgbXVjaCBhcyBw b3NzaWJsZSkgd2FzIHVzZWQgaW4NCiAgICAgICAgUENJTS9QQ0lNZSBhcyB3YXMgaW4gQ0lNLiBT cGVjaWZpY2FsbHksIGl0IHdhcyB0aG91Z2h0IGJldHRlcg0KICAgICAgICB0byBkZWZpbmUgYSBn ZW5lcmljLCBidXQgb3B0aW9uYWwsIHJlbGF0aW9uc2hpcCBpbnN0ZWFkIG9mIG5vdA0KICAgICAg ICBkZWZpbmluZyB0aGUgcmVsYXRpb25zaGlwLg0KICAgNikgVGhlIENJTSBkb2VzIE5PVCBoYXZl IGEgc2luZ2xlIHJvb3RlZCBoaWVyYXJjaHk7IHRoaXMgbWFrZXMNCiAgICAgICAgY29kZSBnZW5l cmF0aW9uIG1vcmUgY29tcGxleA0KICAgNykgVGhlIENJTSB1c2VzIGEgcHJvcHJpZXRhcnkgbGFu Z3VhZ2UgYW5kIGlzIG5vdCBzdHJpY3RseSBVTUwNCiAgICAgICAgY29tcGxpYW50LCBldmVuIHRo b3VnaCBpdCBsb29rcyBsaWtlIFVNTCAodW5mb3J0dW5hdGVseSwgdGhpcw0KICAgICAgICBsYW5n dWFnZSBpcyBhbHNvIGNhbGxlZCBNT0YpDQoNCkRlcGVuZGluZyBvbiB0aGUgY29tcGxleGl0eSBv ZiB0aGUgaW1wbGVtZW50YXRpb24sIHRoZSBhYm92ZSBoYXZlIGJlZW4gc2hvd24gdG8gcHJvZHVj ZSBwcm9ibGVtcyBpbiBsYXJnZSBlbnZpcm9ubWVudHMuIEZvciBleGFtcGxlLCB0aGUgc3Bpcml0 IG9mICJsZXQncyBkZWZpbmUgYW4gYXR0cmlidXRlIG9yIGFzc29jaWF0aW9uIGluIGNhc2UgaXQg aXMgdXNlZnVsLCBhbmQgbWFrZSBpdCBvcHRpb25hbCBzbyB5b3UgZG9uJ3QgaGF2ZSB0byB3b3Jy eSBhYm91dCBpdCIgbm90IG9ubHkgdmlvbGF0ZXMgc29tZSB3ZWxsLWtub3duIHNvZnR3YXJlIGFy Y2hpdGVjdHVyYWwgZ3VpZGVsaW5lcyAoZS5nLiwgU2luZ2xlIFJlc3BvbnNpYmlsaXR5IFByaW5j aXBsZSBhbmQgdGhlIExpc2tvdiBTdWJzdGl0dXRpb24gUHJpbmNpcGxlKSwgYnV0IGl0IG1ha2Vz IHRoaW5ncyBkaWZmaWN1bHQgdG8gaW50ZXJvcGVyYXRlIHdpdGggKHNpbmNlIHlvdSBuZXZlciBy ZWFsbHkga25vdyBpZiBhbiBhdHRyaWJ1dGUgb3IgcmVsYXRpb25zaGlwIHNob3VsZCBiZSBpbnN0 YW50aWF0ZWQgb3Igbm90KS4NCg0KDQpyZWdhcmRzLA0KSm9obg0KDQoNCg0KLS0NCnJlZ2FyZHMs DQpKb2huDQo= --_000_C02846B1344F344EB4FAA6FA7AF481F12AEBE1AASZXEMA502MBSchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQOWui+S9kyI7DQoJ cGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5 OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQovKiBTdHlsZSBEZWZp bml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXtt YXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OuWui+S9kzt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQpwDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsN CgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdp bi1sZWZ0OjBjbTsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OuWui+S9kzt9DQpw Lk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUsIGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoi5om55rOo5qGG5paH5pysIENoYXIiOw0KCW1h cmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo5LjBwdDsNCglm b250LWZhbWlseTrlrovkvZM7fQ0Kc3Bhbi5DaGFyDQoJe21zby1zdHlsZS1uYW1lOiLmibnms6jm oYbmlofmnKwgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5r OuaJueazqOahhuaWh+acrDsNCglmb250LWZhbWlseTrlrovkvZM7fQ0Kc3Bhbi5FbWFpbFN0eWxl MjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGli cmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21z by1zdHlsZS10eXBlOmV4cG9ydC1vbmx5O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYx Mi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDkwLjBwdCA3Mi4wcHQgOTAuMHB0O30NCmRp di5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9u cyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6Njc5MjExODA7DQoJbXNvLWxpc3QtdGVtcGxh dGUtaWRzOjE0MDQzNTIxNjY7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJv bDt9DQpAbGlzdCBsMQ0KCXttc28tbGlzdC1pZDoxODU5NDc5OTc7DQoJbXNvLWxpc3QtdGVtcGxh dGUtaWRzOi0xMjY4NzU2MjcyO30NCkBsaXN0IGwxOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDozNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDINCgl7bXNvLWxpc3QtaWQ6NDA0Njg5Mzg0Ow0KCW1zby1saXN0LXRlbXBs YXRlLWlkczoxMzEwNTIyNTU0O30NCkBsaXN0IGwyOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDozNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDMNCgl7bXNvLWxpc3QtaWQ6NDQ2ODUxNDM2Ow0KCW1zby1saXN0LXRlbXBs YXRlLWlkczo5MDgyMDUzNTI7fQ0KQGxpc3QgbDM6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJv bDt9DQpAbGlzdCBsNA0KCXttc28tbGlzdC1pZDoxMTk0ODA3Njc1Ow0KCW1zby1saXN0LXRlbXBs YXRlLWlkczoxNTU5NTIyODU0O30NCkBsaXN0IGw0OmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDozNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDUNCgl7bXNvLWxpc3QtaWQ6MTI0NDk1NDM0NzsNCgltc28tbGlzdC10ZW1w bGF0ZS1pZHM6LTE4MTM4NjIwNTA7fQ0KQGxpc3QgbDU6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpAbGlzdCBsNg0KCXttc28tbGlzdC1pZDoxOTkxNzEyNDk0Ow0KCW1zby1saXN0LXRl bXBsYXRlLWlkczoxNzk3MTg4Mzg2O30NCkBsaXN0IGw2OmxldmVsMQ0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWIt c3RvcDozNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpT eW1ib2w7fQ0KQGxpc3QgbDcNCgl7bXNvLWxpc3QtaWQ6MjAzMjYxMDg1NDsNCgltc28tbGlzdC10 ZW1wbGF0ZS1pZHM6OTcyNTcyODEyO30NCkBsaXN0IGw3OmxldmVsMQ0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWIt c3RvcDozNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpT eW1ib2w7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTow Y207fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVs dHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0t W2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlk bWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2Vu ZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iWkgtQ04iIGxpbms9ImJsdWUiIHZsaW5rPSJw dXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ SGkgSm9obiw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlNpbmNl IGN1cnJlbnQgZGVzaWduIHByaW5jaXBsZSBmb3IgdGhlIHBvbGljeSBtb2RlbCBvZiBjYXBhYmls aXR5IGludGVyZmFjZSBpcyB0byBhYnN0cmFjdCBmcm9tIG1vc3QgY29tbW9uIGV4aXN0aW5nIE5T RiBzZWN1cml0eSBwb2xpY3kgaW1wbGVtZW50YXRpb25zDQogYW5kIGNvbnNvbGlkYXRlIHRoZW0g aW50byBhIGdlbmVyYWwgYW5kIGV4dGVuc2l2ZSBtb2RlbCwgSSB0aGluayBpbXBlcmF0aXZlIGxv Z2ljIGlzIG1vcmUgc3VpdGFibGUgZm9yIHRoaXMgZ29hbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+SSBhbSB2ZXJ5IGludGVyZXN0ZWQgaW4gd2hldGhlciDigJxldmVudOKA nSBjYW4gYmUgdXNlZCBpbiBJMk5TRiBjYXBhYmlsaXR5IGludGVyZmFjZS4gRG8geW91IGhhdmUg c29tZSBzdWdnZXN0aW9ucz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+QXJl IHRoZSDigJxzdWJqZWN04oCdIGFuZCDigJx0YXJnZXTigJ0gdHdvIGRpZmZlcmVudCBjbGFzc2Vz IGluIFBDSU1lPyBEbyB5b3Ugc3VnZ2VzdCB0byBpbmNsdWRlIHRoZW0gaW4gSTJOU0YgcG9saWN5 IG1vZGVsIG9mIGNhcGFiaWxpdHkgaW50ZXJmYWNlIGZvcg0KIHRoZSBnb2FsIG9mIGF1dGhvcml6 aW5nIHRoZSBwb2xpY3k/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkIuUi48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkZyYW5rPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYg MS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+5Y+R5Lu25Lq6PHNwYW4gbGFuZz0iRU4t VVMiPjo8L3NwYW4+PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQiPiBJMm5zZiBbbWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmddDQo8L3NwYW4+ PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPuS7o+ihqCA8L3NwYW4+PC9iPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Sm9obiBTdHJhc3NuZXI8YnI+ DQo8L3NwYW4+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPuWPkemAgeaXtumXtDxz cGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0Ij4gMjAxNTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdCI+5bm0PHNwYW4gbGFuZz0iRU4tVVMiPjEyPC9zcGFuPuaciDxzcGFuIGxhbmc9IkVO LVVTIj4xMjwvc3Bhbj7ml6U8c3BhbiBsYW5nPSJFTi1VUyI+IDc6MzI8YnI+DQo8L3NwYW4+PGI+ 5pS25Lu25Lq6PHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVT Ij4gTGluZGEgRHVuYmFyPGJyPg0KPC9zcGFuPjxiPuaKhOmAgTxzcGFuIGxhbmc9IkVOLVVTIj46 PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyI+IGkybnNmQGlldGYub3JnPGJyPg0KPC9zcGFu PjxiPuS4u+mimDxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1V UyI+IFJlOiBbSTJuc2ZdIFNlcnZpY2UgTGF5ZXIgUG9saWNpZXMgLSBQb3N0IDE6IEJhY2tncm91 bmQgSW5mb3JtYXRpb24gb24gUENJTTxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIj5IaSBMaW5kYSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiPnRoYW5rIHlvdSBmb3IgeW91ciBraW5kIHdvcmRzLiBNeSByZXBsaWVz IGFyZSBpbmxpbmU6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGFuayB5b3UgdmVy eSBtdWNoIGZvciB0aGUgaW4tZGVwdGggYW5hbHlzaXMgb2YgUENJTSBhbmQgaXRzIHN1aXRhYmls aXR5IGFzIHNvbWV0aGluZw0KIHRoYXQgSTJOU0Ygc2hvdWxkIGJlIGJhc2VkIG9uLiBXaGF0IHlv dSB3cml0ZSBpcyB2ZXJ5IHZhbHVhYmxlLiBJIHRoaW5rIHRoZSBhbmFseXNpcyBzaG91bGQgYmUg YWRkZWQgdG8gdGhlIEkyTlNGIGdhcCBhbmFseXNpcywgKG9yIGJlIGEgc3RhbmRhbG9uZSBQb2xp Y3kgQW5hbHlzaXMgSUQpLg0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+Jmx0O2pjcyZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+ SWYgZGVzaXJlZCwgSSBjb3VsZCBzdW1tYXJpemUgdGhlIGtleSBwb2ludHMgZm9yIHRoZSBnYXAg YW5hbHlzaXMuIEkgd291bGQgYmUgd2lsbGluZyB0byBkbyBhIFBvbGljeSBBbmFseXNpcyBJLUQs IGJ1dCBJIHRoaW5rIHRoYXQgdGhpcyBwcm9iYWJseSBiZWxvbmdzIGluIFNVUEEuIEhvd2V2ZXIs IGZlZWRiYWNrIGZyb20gSTJOU0YgaXMgaW52YWx1YWJsZSBmb3Igc3VjaCBhDQogZG9jdW1lbnQu PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZsdDsvamNzJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+ Tm90ZTogSXQgaXMgcG9zc2libGUgdG8gZGVmaW5lIGxpbWl0ZWQgY29uc3RyYWludHMgaW4gUENJ TSBhcyBjb25kaXRpb25zLiBGb3IgZXhhbXBsZSwgdGhlIFZlbmRvclBvbGljeUNvbmRpdGlvbiBj bGFzcyBoYXMgdHdvIGF0dHJpYnV0ZXMsIENvbnN0cmFpbnQgYW5kIENvbnN0cmFpbnRFbmNvZGlu ZywNCiB0aGF0IGRvIHRoaXMuIFRoaXMgd2lsbCBiZSBkaXNjdXNzZWQgbW9yZSBpbiBQb3N0IDQu PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4t VVMiPk5vdGU6IENvbnRleHQgaXMgTk9UIGRlZmluZWQgaW4gdGhlIFBDSU0uPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltM aW5kYV0gJm5ic3A7RG8geW91IGFncmVlIHRoYXQg4oCcQ29uZGl0aW9uIG9mIHRoZSBQQ0lN4oCd ID09IOKAnEkyTlNGIHN1YmplY3TigJ0gJmFtcDsg4oCcdGhlIENvbnRleHR1YWwNCiBzdGF0ZXMg KG9yIHRoZSBJMk5TRiBvYmplY3Qp4oCdPyA8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZsdDtqY3MmZ3Q7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+UENJ TS9QQ0lNZSBjb25kaXRpb25zIGFyZSBjbGVhcmx5IHNpbWlsYXIgdG8gd2hhdCBpcyBub3cgY2Fs bGVkICZxdW90O0kyTlNGIFN1YmplY3QmcXVvdDsuIEhvd2V2ZXIsIHRoZSBjb250ZXh0dWFsIHN0 YXRlIGlzIHRyaWNraWVyLiBQYXJ0IG9mIHRoZSBwcm9ibGVtIGlzIGhvdyB3ZSB3YW50DQogdG8g ZGVmaW5lIENvbnRleHQuIEknbGwgc2F2ZSB0aGUgYnVsayBmb3IgUG9zdCA0IChhcyBvdXRsaW5l ZCBpbiBteSBQb3N0IDAgbm90ZSkuIEhvd2V2ZXIsIGxvb2tpbmcgYXQgcGFnZSA2IG9mIGRyYWZ0 LW1lcmdlZC1pMm5zZi1mcmFtZXdvcmstMDQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTiI+JnF1b3Q7T2JqZWN0LU1hdGNoIHZhbHVl cywgYmFzZWQgb24gY29udGV4dCAoZS5nLiwgc3RhdGUsIGRpcmVjdGlvbiBvZiB0aGUgdHJhZmZp YywgdGltZSwgZ2VvLWxvY2F0aW9uLCBldGMuKSZxdW90OywgaW4gd2hpY2ggY2FzZTo8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT Ij4mbmJzcDsmbmJzcDsgLSBzdGF0ZTombmJzcDsgbGlrZWx5IE5PVCBwYXJ0IG9mIHRoZSBjb25k aXRpb247IHJhdGhlciwgaXQgYXBwbGllcyB0byB0aGUgZW50aXJlIFBvbGljeVJ1bGUgYXMgYSB3 aG9sZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNwOyAtIHRyYWZmaWMgZGlyZWN0aW9uOiZuYnNwOyBwYXJ0 IG9mIHRoZSBjb25kaXRpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsgLSB0aW1lOiZuYnNwOyBwYXJ0 IG9mIHRoZSBjb25kaXRpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsgLSBnZW8tbG9jYXRpb246Jm5i c3A7IHBhcnQgb2YgdGhlIGNvbmRpdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZsdDsvamNzJmd0OzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPi4uLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPkNyaXRpY2FsIFByb2JsZW1zOjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPlRoZXJlIGlzIG5vIHVuaXF1ZSBJRCB0aGF0IGNhbiBiZSB1c2VkIHRvIGRp c3Rpbmd1aXNoIGRpZmZlcmVudDxicj4NCmluc3RhbmNlcyBvZiB0aGUgc2FtZSBQb2xpY3lSdWxl LCBQb2xpY3lHcm91cCwgUG9saWN5Q29uZGl0aW9uLDxicj4NCm9yIFBvbGljeUFjdGlvbi48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBDYW4gd2Ug c2ltcGx5IGNyZWF0ZSBhbiBJRCAoc3RyaW5nIG9yIG51bWVyaWMpIGZvciBpbnN0YW5jZXMgb2Yg dGhlIHNhbWUgUG9saWN5UnVsZT8NCiBPciBpdCBpcyBtb3JlIGNvbXBsaWNhdGVkPzwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jmx0O2pjcyZndDs8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVO LVVTIj5TVVBBIGFuZCBERU4tbmcgdXNlIHR3byBhdHRyaWJ1dGVzIHRvIGRvIHRoaXM6PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7Jm5ic3A7IC0gYSBzdHJpbmcgdGhhdCBjb250YWlucyB0 aGUgY29udGVudCBvZiB0aGUgaWRlbnRpZmllcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNwOyAtIGEgc3Ry aW5nIHRoYXQgaXMgYW4gZW51bSwgd2hpY2ggZGVmaW5lcyBob3cgdG8gaW50ZXJwcmV0IHRoZSBj b250ZW50PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+VGhpcyBhbGxvd3MgZGlmZmVyZW50IElEcyB0 byBiZSBtaXhlZCAoZS5nLiwgVVJJcywgR1VJRHMsIGtleXMsIEZRRE5zLCBldGMuKTxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iRU4tVVMiPlRoYXQgYmVpbmcgc2FpZCwgaXQgaXMgY2VydGFpbmx5IGVhc2llciB0 byBwaWNrIG9uZSBhbmQgZ28gd2l0aCBpdCwgYnV0IHNpbmNlIEkyTlNGIFNIT1VMRCBpbnRlcm9w ZXJhdGUgd2l0aCBvdGhlciBtb2RlbHMgZWFzaWx5LCBJIHdvdWxkIHJlY29tbWVuZCBhIHNjaGVt ZSBzaW1pbGFyDQogdG8gdGhlIG9uZSBJIHVzZWQgKG9yIHRoZSBhYm92ZSwgb2YgY291cnNlKS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIj4mbHQ7L2pjcyZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT Ij5SZWxhdGlvbnNoaXBzIGFyZSBpbXBsZW1lbnRlZCBieSBkZWZpbmluZyBhbiBhYnN0cmFjdCBj bGFzczxicj4NCndpdGgga2V5cywgYW5kIHRoZW4gb3ZlcnJpZGluZyB0aGUga2V5cyBpbiB0aGUg c3ViY2xhc3NlcyBvZiB0aGU8YnI+DQpyZWxhdGlvbnNoaXAuIFRoaXMgaXMgYnJva2VuLiBXb3Vs ZCB5b3Ugb3ZlcnJpZGUga2V5cyBpbiBhbiBSREJNUz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBJcyB0aGUg4oCcS2V54oCdIHRvIGRpZmZlcmVu dGlhdGluZyBkaWZmZXJlbnQg4oCcUG9saWN5UnVsZeKAnT8mbmJzcDsgJm5ic3A7Q2FuIHlvdSBn aXZlIGFuIGV4YW1wbGUNCiBvZiDigJxzdWJjbGFzc2VzIG9mIHRoZSByZWxhdGlvbnNoaXDigJ0/ IDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPldoYXQgZXZlbnRzIGNhbiBjYXVzZSDigJxvdmVycmlkaW5nIHRoZSBr ZXlzIGluIHRoZSBzdWJjbGFzc2VzIG9mIHRoZSByZWxhdGlvbnNoaXDigJ0/PC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbHQ7amNzJmd0Ozxicj4NCk5v LCB0aGUga2V5IChhcyBpbiBwcmltYXJ5IGFuZCBmb3JlaWduIGtleXMsIGp1c3QgdG8gYmUgY2xl YXIpIGlzIHVzZWQgYXMgcGFydCBvZiBob3cgQ0lNIGRhdGEgbW9kZWxzIGFyZSBidWlsdC4gSSBi ZWxpZXZlIHRoYXQgdGhpcyBzdHJhdGVneSBpcyBmdW5kYW1lbnRhbGx5IGluY29ycmVjdCAoYXMg aW4sIHdvdWxkIHlvdSBvdmVycmlkZSBrZXlzIGluIGFuIFJEQk1TKS4gSXQgYWxzbyB2aW9sYXRl cyBhIGhvc3Qgb2Ygb2JqZWN0LW9yaWVudGVkDQogcHJpbmNpcGxlcyAoc2VlIFBvc3QgMmIpLjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gbGFuZz0iRU4tVVMiPlJlbWVtYmVyLCBQQ0lNIGFuZCBQQ0lNZSBkbyBOT1QgZGVm aW5lIGV2ZW50cy4gVGhpcyBpcyBhIGRlc2lnbiAoY29tcGlsZS10aW1lKSBkZWZpbml0aW9uIG9m IGhvdyB5b3UgYnVpbGQgQ0lNIGNsYXNzZXMuPGJyPg0KJmx0Oy9qY3MmZ3Q7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTpTeW1ib2wiPsK3PC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsgTW9zdCBvZiB0aGUgY2xhc3NlcyB0aGF0IGFy ZSB1c2VkIHRvIGltcGxlbWVudCB0aGUgcmVsYXRpb25zaGlwczxicj4NCmRvIE5PVCBoYXZlIGF0 dHJpYnV0ZXMsIHNvIGl0IGlzIGltcG9zc2libGUgdG8gcmVzdHJpY3Qgd2hpY2g8YnI+DQpjbGFz c2VzIGFyZSByZWxhdGVkIHRvIHdoaWNoIG90aGVyIGNsYXNzZXMgKGUuZy4sIGJ5IGNvbnRleHQp Ljxicj4NClB1dCBhbm90aGVyIHdheSwgdGhlIHNhbWUgcmVsYXRpb25zaGlwIG11c3QgYWx3YXlz IGJlIHVzZWQ8YnI+DQpiZXR3ZWVuIHR3byB0eXBlcywgZXZlbiBpZiB0aGUgc2VtYW50aWNzIHZh cmllcy4gKFRoZSB0d288YnI+DQpleGNlcHRpb25zIGFyZSBQb2xpY3lDb25kaXRpb25JblBvbGlj eVJ1bGUgYW5kPGJyPg0KUG9saWN5QWN0aW9uSW5Qb2xpY3lSdWxlKS48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBEb2VzIOKAnGNsYXNzZXPigJ0g PT0g4oCcUG9saWN5UnVsZeKAnT8NCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyI+Jmx0O2pjcyZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5ObywgJnF1b3Q7Y2xhc3NlcyZxdW90 OyA9PSB7YXNzb2NpYXRpb24gfCBhZ2dyZWdhdGlvbiB8IGNvbXBvc2l0aW9ufS48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIj5UaGlzIGlzIGFub3RoZXIgYXJ0aWZhY3Qgb2YgQ0lNLiBUaGV5IGltcGxl bWVudCBBTEwgcmVsYXRpb25zaGlwcyBhcyBjbGFzc2VzLiBJbiBVTUwsIHRoZXJlIGlzIGEgZGlm ZmVyZW5jZSBiZXR3ZWVuIHRoZXNlIHRocmVlIHJlbGF0aW9uc2hpcHMgYW5kIHJlYWxpemluZyB0 aGVtDQogYXMgYSBjbGFzczsgdGhlIENJTSBhcHByb2FjaCBlbGltaW5hdGVzIHRoaXMgZGlzdGlu Y3Rpb24uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyI+Jmx0Oy9qY3MmZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0bzttc28tbGlzdDpsNiBsZXZlbDEgbGZvMSI+DQo8c3BhbiBsYW5nPSJFTi1VUyI+VGhl ICZxdW90O2lnbm9yZSB0aGlzIHVubGVzcyB5b3UgbmVlZCB0aGlzJnF1b3Q7IHBoaWxvc29waHkg ZG9lcyBub3Q8YnI+DQp3b3JrLiBIb3cgZG8geW91IGtub3cgaWYgb3RoZXIgaW1wbGVtZW50YXRp b25zIHRoYXQgeW91IGFyZTxicj4NCnN1cHBvc2VkIHRvIGludGVyb3BlcmF0ZSB3aXRoIGFyZSB1 c2luZyB0aGVtPzxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj5bTGluZGFdIElzIOKAnElnbm9yZSB0aGlzIHVubGVzcyB5b3UgbmVlZCB0aGlz4oCdIGFu IG5ldyB0eXBlIG9mIOKAnFBvbGljeVJ1bGXigJ0/DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFu Zz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZsdDtqY3MmZ3Q7PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Tm8sIHNvcnJ5LCB0 aGlzIGlzIG9uZSBvZiB0aGUga2V5IHBvaW50cyB1bmRlcmx5aW5nIHRoZSBkZXNpZ24gcGhpbG9z b3BoeSBvZiBDSU0sIGFuZCBjYXJyaWVkIGludG8gUENJTSBhbmQgUENJTWUuIEJhc2ljYWxseSwg aXQgbWVhbnMgdGhhdCBpdCBpcyBPSyB0byBkZWZpbmUNCiBtb2RlbCBlbGVtZW50cyBvbiBhbm90 aGVyIG1vZGVsIGVsZW1lbnQgaWYgdGhleSBhcmUgb3B0aW9uYWwuIEV4YW1wbGVzOjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNwOyAtIGRlZmluaW5nIGFuIG9wdGlvbmFsIGF0dHJp YnV0ZSwgbWV0aG9kLCBvciByZWxhdGlvbnNoaXAmbmJzcDtvbiBhIGNsYXNzPGJyPg0KJm5ic3A7 Jm5ic3A7IC0gZGVmaW5pbmcgYW4gb3B0aW9uYWwgY29uc3RyYWludDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiPlRoaXMgdmlvbGF0ZXMgYWxsIG9mIHRoZSA0IGRlc2lnbiBwcmluY2lwbGVzIGluIFBv c3QgMmIgKHJlZmVyZW5jZXMgc2VjdGlvbik8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbHQ7L2pjcyZndDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGVyZSBpcyBubyBjb25jZXB0IG9mIHRoZSBz dWJqZWN0IG9yIHRoZSB0YXJnZXQgb2YgYSBwb2xpY3k8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBEb2VzIHlvdXIg4oCcc3ViamVjdOKAnSBoYXZl IHRoZSBzYW1lIG1lYW5pbmcgYXMgdGhlIOKAnEkyTlNGIHN1YmplY3TigJ0gd2hpY2ggbWVhbnMN CiBiaXRzJmFtcDtieXRlcyBleHRyYWN0ZWQgZnJvbSBwYWNrZXRzPyA8L3NwYW4+PHNwYW4gbGFu Zz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZsdDtqY3MmZ3Q7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Tm8u IEEgUG9saWN5U3ViamVjdCBpcyB0aGUgYXV0aG9yIG9mIGEgcG9saWN5LiBPbmUgY291bGQgYWxz byBkaWZmZXJlbnRpYXRlIGJldHdlZW4gYXV0aG9yLCBvd25lciwgYW5kIGV4ZWN1dG9yLCBidXQg dGhhdCBpcyBtb3JlIGNvbXBsZXguIEl0IGlzIHZpdGFsIGZvciBkZW9udGljDQogbG9naWMgKGku ZS4sIHRoZSBsb2dpYyBvZiBvYmxpZ2F0aW9ucyBhbmQgcGVybWlzc2lvbnMsIGFzIGluIE1VU1Qs IE1VU1QgTk9ULCBTSE9VTEQsIE1BWSwgZXRjLikuIFRoaXMgaXMgb25lIG9mIG15IGNvbmNlcm5z IHdpdGggdGhlIFNiYmplY3QtT2JqZWN0LUFjdGlvbi1GdW5jdGlvbiBtb2RlbCAtIG9uZSBjYW5u b3QgYnVpbGQgYXV0aG9yaXphdGlvbiBwb2xpY2llcyB0aGF0IGNhbiBiZSBsb2dpY2FsbHkgcHJv dmVuIHRvIGJlIGNvcnJlY3Qgb3INCiBub3Qgd2l0aG91dCBhIFBvbGljeVN1YmplY3QuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyI+Jmx0Oy9qY3MmZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+QWRk aW5nIGEgbmV3IHR5cGUgb2YgcG9saWN5IChlLmcuLCBkZWNsYXJhdGl2ZSBvciBmdW5jdGlvbmFs KTxicj4NCndpbGwgY2F1c2UgYSBtYWpvciByZXdyaXRlIG9mIHRoZSBlbnRpcmUgbW9kZWw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxz cGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFG NDk3RCI+W0xpbmRhXSBDYW4gd2Ugc2F5IHRoYXQgJm5ic3A7STJOU0YgcG9saWNpZXMgaGF2ZSBv bmUgdHlwZSDigJxTdWJqZWN0LUNvbnRleHR1YWxTdGF0ZXMtIGFjdGlvbi0NCiBmdW5jdGlvbj8g U28gaW4gSTJOU0YgZW52aXJvbm1lbnQsIHRoZXJlIGlzIG9ubHkgdGhlIG5vdGlvbiBvZiBhZGRp bmcgYSBuZXcg4oCcUG9saWN5UnVsZeKAnSwgYnV0IG5vIGFkZGluZyBhIG5ldyBwb2xpY3kgdHlw ZS4gSXMgdGhpcyBjb3JyZWN0IHN0YXRlbWVudD8gJm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVO LVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbHQ7amNzJmd0OzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPk5vLiBUaGUg bWVhbmluZyBvZiB3aGF0IEkgd3JvdGUgYWJvdmUgaXMgbXVjaCBicm9hZGVyLiBJZiB5b3UgdGhp bmsgb2YgRUNBIHBvbGljaWVzIGFzIGltcGVyYXRpdmUgaW4gbmF0dXJlLCB0aGVuIHRoZSBhbmFs b2d5IGlzIHRoYXQgUENJTS9QQ0lNZSBhcmUgaGFyZC13aXJlZA0KIHRvIGltcGVyYXRpdmUgcG9s aWNpZXMuIFRoZSBzY2hlbWEgY2Fubm90IGJlIHVzZWQgZm9yIG90aGVyIGZvcm1zIChkZWNsYXJh dGl2ZSwgZnVuY3Rpb25hbCwgZXRjLikgb2YgcG9saWNpZXMuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyI+UHV0IGFub3RoZXIgd2F5LCBFQ0EgKG9yIENBLCB3aGljaCBpcyBhbGwgdGhhdCB0aGUgUENJ TS9QQ0lNZSBjYW4gZG8pIGlzIGltcGVyYXRpdmUgLSBpdCBzcGVjaWZpZXMgdGhhdCwgZ2l2ZW4g dGhpcyBwYXJ0aWN1bGFyIHN0YXRlLCB0aGUgT05MWSBzdGF0ZSB0aGF0IHlvdQ0KIGFyZSBhbGxv d2VkIHRvIHRyYW5zaXRpb24gdG8gaXMgdGhpcyBvdGhlciBzdGF0ZS4gUmF0aW9uYWxpdHkgTVVT VCBiZSBjb21waWxlZCBpbnRvIHRoZSBwb2xpY3kuIEluIGNvbnRyYXN0LCBmb3IgZGVjbGFyYXRp dmUgbG9naWMsIGdpdmVuIGEgcGFydGljdWxhciBzdGF0ZSwgdGhlcmUgYXJlIGEgU0VUIG9mIHN0 YXRlcyB0aGF0IGVpdGhlciBzYXRpc2Z5IHRoZSBnb2FsLCBvciB0YWtlIHlvdSBjbG9zZXIgdG8g dGhlIGdvYWwuIEhlbmNlLCByYXRpb25hbGl0eQ0KIGlzIEdFTkVSQVRFRCBieSBhIGxvZ2ljIHBs YW5uZXIvb3B0aW1pemVyLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZsdDsvamNzJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gbGFuZz0iRU4tVVMiPlRoZXJlIGlzIG5vIGFwcHJvYWNoIHRvIGRldGVjdGluZyBhbmQg c29sdmluZyBwb2xpY3kgY29uZmxpY3RzOzxicj4NCnRoaXMgaXMgZHVlIHRvIHRoZSBzaW1wbGlz dGljIG5vdGlvbiBvZiBqdXN0IHVzaW5nIGEgUERQIGFuZCBhPGJyPg0KUEVQIGZvciBhcHBseWlu ZyBwb2xpY2llcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBpbiBJMk5TRiwgdGhlcmUgY291bGQgYmUgYSBs b3Qgb2YgY29uZmxpY3RzLCBmb3IgZXhhbXBsZSwgdGhlcmUgY291bGQgYmUgdHdvDQogcnVsZXMg ZW50ZXJlZCBhdCBkaWZmZXJlbnQgdGltZTo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+MS48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCZx dW90O3NlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+Jm5ic3A7VmlydHVhbCBOZXR3b3JrIFggY2Fu4oCZdCBhY2Nlc3Mg4oCcWW91 VHViZeKAnSwNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj4yLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtm b250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4xMC4x LjEuMSBjYW4gYWNjZXNzIOKAnFlvdVR1YmXigJ0gKHdoZXJlIDEwLjEuMS4xIGlzIGEgaG9zdCB3 aXRoaW4gdGhlIFZpcnR1YWwgTmV0d29yayBYKS4NCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5EbyB5b3UgY2FsbCB0aGUgMiBydWxlcyBhYm92ZSBj b25mbGljdD8NCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jmx0O2pjcyZndDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIj5Cb2IgYWxyZWFkeSBhbnN3ZXJlZCB0aGlzIGluDQo8YSBocmVmPSJodHRwOi8vd3d3 LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvaTJuc2YvY3VycmVudC9tc2cwMDcyOS5odG1sIj5o dHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvaTJuc2YvY3VycmVudC9tc2cwMDcy OS5odG1sPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gbGFuZz0iRU4tVVMiPiYjNDM7MSB0byBoaXMgYW5zd2VyIChvciBzZWUgbXkgcmVwbHkp PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5n PSJFTi1VUyI+Jmx0Oy9qY3MmZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIj5HaXZlbiB0aGUgbGFyZ2UgYW1vdW50IG9mIHByb2JsZW1zLCBJIHJl Y29tbWVuZCB0aGF0IHdlIG5vdCBjb25zaWRlciBQQ0lNIGZ1cnRoZXIuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0xpbmRhXSBzaG91bGQgSTJO U0YgcmVmZXJlbmNlIFBDSU0/DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJF Ti1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyI+Jmx0O2pjcyZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5JIGRvbid0IHNlZSBhbnkg aGFybSBpbiAqKnJlZmVyZW5jaW5nKiogUENJTSBvciBQQ0lNZTsgSSBqdXN0IGRvbid0IHdhbnQg dG8gKip1c2UqKiBlaXRoZXIgdG8gY29uc3RydWN0IG91ciBwb2xpY2llcy48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbHQ7 L2pjcyZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5iZXN0IHJlZ2Fy ZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyI+Sm9objxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiPk9uIFR1ZSwgRGVjIDgsIDIwMTUgYXQgMToxMCBQTSwgTGluZGEgRHVu YmFyICZsdDs8YSBocmVmPSJtYWlsdG86bGluZGEuZHVuYmFyQGh1YXdlaS5jb20iIHRhcmdldD0i X2JsYW5rIj5saW5kYS5kdW5iYXJAaHVhd2VpLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkpvaG4sDQo8 L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGFuayB5b3UgdmVyeSBtdWNoIGZv ciB0aGUgaW4tZGVwdGggYW5hbHlzaXMgb2YgUENJTSBhbmQgaXRzIHN1aXRhYmlsaXR5IGFzIHNv bWV0aGluZw0KIHRoYXQgSTJOU0Ygc2hvdWxkIGJlIGJhc2VkIG9uLiBXaGF0IHlvdSB3cml0ZSBp cyB2ZXJ5IHZhbHVhYmxlLiBJIHRoaW5rIHRoZSBhbmFseXNpcyBzaG91bGQgYmUgYWRkZWQgdG8g dGhlIEkyTlNGIGdhcCBhbmFseXNpcywgKG9yIGJlIGEgc3RhbmRhbG9uZSBQb2xpY3kgQW5hbHlz aXMgSUQpLg0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+SSBoYXZlIHNvbWUg cXVlc3Rpb25zIGluc2VydGVkIGJlbG93Og0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxz cGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkIHdpbmRvd3RleHQgMS4wcHQ7cGFkZGluZzozLjBwdCAw Y20gMGNtIDBjbTtib3JkZXItY29sb3I6Y3VycmVudENvbG9yIGN1cnJlbnRDb2xvciI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+IEkybnNmDQogW21haWx0bzo8YSBocmVmPSJtYWlsdG86aTJuc2YtYm91bmNlc0BpZXRm Lm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmkybnNmLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPGI+T24g QmVoYWxmIE9mIDwvYj5Kb2huIFN0cmFzc25lcjxicj4NCjxiPlNlbnQ6PC9iPiBTdW5kYXksIERl Y2VtYmVyIDA2LCAyMDE1IDc6MDEgUE08YnI+DQo8Yj5Ubzo8L2I+IDxhIGhyZWY9Im1haWx0bzpp Mm5zZkBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmkybnNmQGlldGYub3JnPC9hPjxicj4NCjxi PlN1YmplY3Q6PC9iPiBbSTJuc2ZdIFNlcnZpY2UgTGF5ZXIgUG9saWNpZXMgLSBQb3N0IDE6IEJh Y2tncm91bmQgSW5mb3JtYXRpb24gb24gUENJTTwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Y29sb3I6IzFGNDk3RCI+Jmx0O1NuaXBwZWQmZ3Q7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyI+Mi4mbmJzcDsgQnJpZWYgZGVzY3JpcHRpb24gb2YgUENJTTxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT Ij5UaGUgUENJTSBDbGFzcyBIaWVyYXJjaHkgaXMgdmVyeSBzaW1wbGUsIGFzIHRoaXMgaXMgYSBD QSAoY29uZGl0aW9uLWFjdGlvbikgbW9kZWwuIEV2ZW50cyBhcmUgTk9UIHJlcHJlc2VudGVkLiBQ Q0lNIGRlZmluZXMgYSBQb2xpY3lSdWxlLCBhIFBvbGljeUdyb3VwIChncm91cA0KIG9mIFBvbGlj eVJ1bGVzKSwgUG9saWN5Q29uZGl0aW9uLCBhbmQgUG9saWN5QWN0aW9uLiBUaGVzZSBhcmUgYWxs IHNpYmxpbmdzOyB0aGVpciBjb21tb24gc3VwZXJjbGFzcyBpcyBjYWxsZWQgUG9saWN5LCBhcyBz aG93biBiZWxvdzo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPk1hbmFn ZWRFbGVtZW50IChhYnN0cmFjdCk8YnI+DQombmJzcDsgfDxicj4NCiZuYnNwOyAmIzQzOy0tLVBv bGljeSAoYWJzdHJhY3QpPGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDxi cj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tUG9saWN5R3JvdXA8 YnI+DQombmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8YnI+DQombmJzcDsm bmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tUG9saWN5UnVsZTxicj4NCiZu YnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8YnI+DQombmJzcDsgfCZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyAmIzQzOy0tLVBvbGljeUNvbmRpdGlvbiAoYWJzdHJhY3QpPGJyPg0KJm5i c3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB8PGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt8Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tUG9saWN5VGltZVBlcmlvZENvbmRpdGlv bjxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7fCZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyB8PGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JiM0MzstLS1WZW5k b3JQb2xpY3lDb25kaXRpb248YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwO3w8YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLVBvbGlj eUFjdGlvbiAoYWJzdHJhY3QpPGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfDxicj4NCiZuYnNwOyB8 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7ICYjNDM7LS0tVmVuZG9yUG9saWN5QWN0aW9uPC9zcGFuPjxzcGFuIGxhbmc9IkVO LVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Tm90ZTogUENJTSBkb2VzIGhhdmUgYSBzaW1w bGUgbm90aW9uIG9mIFJvbGVzLCBidXQgaW1wbGVtZW50cyB0aGVtIGFzIGF0dHJpYnV0ZXMsIGlu c3RlYWQgb2Ygb2JqZWN0cy4gVGhpcyBpcyBub3Qgc2NhbGFibGUsIGFuZCBkb2VzIG5vdCBmdWxs eSByZWFsaXplIHRoZSBwb3dlcg0KIG9mIHVzaW5nIHJvbGVzLiBUaGlzIHdpbGwgYmUgZGlzY3Vz c2VkIG1vcmUgaW4gUG9zdCAzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPk5vdGU6IEl0IGlzIHBvc3NpYmxlIHRvIGRl ZmluZSBsaW1pdGVkIGNvbnN0cmFpbnRzIGluIFBDSU0gYXMgY29uZGl0aW9ucy4gRm9yIGV4YW1w bGUsIHRoZSBWZW5kb3JQb2xpY3lDb25kaXRpb24gY2xhc3MgaGFzIHR3byBhdHRyaWJ1dGVzLCBD b25zdHJhaW50IGFuZCBDb25zdHJhaW50RW5jb2RpbmcsDQogdGhhdCBkbyB0aGlzLiBUaGlzIHdp bGwgYmUgZGlzY3Vzc2VkIG1vcmUgaW4gUG9zdCA0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVO LVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPk5vdGU6IENvbnRleHQg aXMgTk9UIGRlZmluZWQgaW4gdGhlIFBDSU0uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltMaW5kYV0gJm5ic3A7RG8geW91 IGFncmVlIHRoYXQg4oCcQ29uZGl0aW9uIG9mIHRoZSBQQ0lN4oCdID09IOKAnEkyTlNGIHN1Ympl Y3TigJ0gJmFtcDsg4oCcdGhlIENvbnRleHR1YWwNCiBzdGF0ZXMgKG9yIHRoZSBJMk5TRiBvYmpl Y3Qp4oCdPyA8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi PiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4t VVMiPjMuJm5ic3A7IFN1bW1hcnk6IG1haW4gZHJhd2JhY2tzIG9mIHVzaW5nIFBDSU08bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPk5vdGUgdGhhdCB0aGUgY3VycmVudCBDSU0gUG9saWN5IE1vZGVsICgyLjQ0 LjEpIGlzIHNpZ25pZmljYW50bHkgZGlmZmVyZW50IHRoYW4gZWl0aGVyIFBDSU0gb3IgUENJTWUu Jm5ic3A7UENJTSBpcyBiYXNlZCBvbiBDSU0gMi40OyBQQ0lNZSBpcyBiYXNlZCBvbiBDSU0gMi41 LiBQQ0lNZQ0KIGlzIE5PVCBiYWNrd2FyZHMgY29tcGF0aWJsZSB3aXRoIFBDSU0gaW4gYWxsIGFy ZWFzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi PkNyaXRpY2FsIFByb2JsZW1zOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHVsIHR5 cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsMSBsZXZlbDEgbGZv MiI+DQo8c3BhbiBsYW5nPSJFTi1VUyI+VGhlcmUgaXMgbm8gdW5pcXVlIElEIHRoYXQgY2FuIGJl IHVzZWQgdG8gZGlzdGluZ3Vpc2ggZGlmZmVyZW50PGJyPg0KaW5zdGFuY2VzIG9mIHRoZSBzYW1l IFBvbGljeVJ1bGUsIFBvbGljeUdyb3VwLCBQb2xpY3lDb25kaXRpb24sPGJyPg0Kb3IgUG9saWN5 QWN0aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij5bTGluZGFdIENhbiB3ZSBzaW1wbHkgY3JlYXRlIGFuIElEIChzdHJpbmcgb3IgbnVtZXJpYykg Zm9yIGluc3RhbmNlcyBvZiB0aGUgc2FtZSBQb2xpY3lSdWxlPw0KIE9yIGl0IGlzIG1vcmUgY29t cGxpY2F0ZWQ/IDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsNCBs ZXZlbDEgbGZvMyI+DQo8c3BhbiBsYW5nPSJFTi1VUyI+UmVsYXRpb25zaGlwcyBhcmUgaW1wbGVt ZW50ZWQgYnkgZGVmaW5pbmcgYW4gYWJzdHJhY3QgY2xhc3M8YnI+DQp3aXRoIGtleXMsIGFuZCB0 aGVuIG92ZXJyaWRpbmcgdGhlIGtleXMgaW4gdGhlIHN1YmNsYXNzZXMgb2YgdGhlPGJyPg0KcmVs YXRpb25zaGlwLiBUaGlzIGlzIGJyb2tlbi4gV291bGQgeW91IG92ZXJyaWRlIGtleXMgaW4gYW4g UkRCTVM/PG86cD48L286cD48L3NwYW4+PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PltMaW5kYV0gSXMgdGhlIOKAnEtleeKAnSB0byBkaWZmZXJlbnRpYXRpbmcgZGlmZmVyZW50IOKA nFBvbGljeVJ1bGXigJ0/Jm5ic3A7ICZuYnNwO0NhbiB5b3UgZ2l2ZSBhbiBleGFtcGxlDQogb2Yg 4oCcc3ViY2xhc3NlcyBvZiB0aGUgcmVsYXRpb25zaGlw4oCdPyA8L3NwYW4+PHNwYW4gbGFuZz0i RU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5XaGF0 IGV2ZW50cyBjYW4gY2F1c2Ug4oCcb3ZlcnJpZGluZyB0aGUga2V5cyBpbiB0aGUgc3ViY2xhc3Nl cyBvZiB0aGUgcmVsYXRpb25zaGlw4oCdPzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 bzttc28tbGlzdDpsMiBsZXZlbDEgbGZvNCI+DQo8c3BhbiBsYW5nPSJFTi1VUyI+TW9zdCBvZiB0 aGUgY2xhc3NlcyB0aGF0IGFyZSB1c2VkIHRvIGltcGxlbWVudCB0aGUgcmVsYXRpb25zaGlwczxi cj4NCmRvIE5PVCBoYXZlIGF0dHJpYnV0ZXMsIHNvIGl0IGlzIGltcG9zc2libGUgdG8gcmVzdHJp Y3Qgd2hpY2g8YnI+DQpjbGFzc2VzIGFyZSByZWxhdGVkIHRvIHdoaWNoIG90aGVyIGNsYXNzZXMg KGUuZy4sIGJ5IGNvbnRleHQpLjxicj4NClB1dCBhbm90aGVyIHdheSwgdGhlIHNhbWUgcmVsYXRp b25zaGlwIG11c3QgYWx3YXlzIGJlIHVzZWQ8YnI+DQpiZXR3ZWVuIHR3byB0eXBlcywgZXZlbiBp ZiB0aGUgc2VtYW50aWNzIHZhcmllcy4gKFRoZSB0d288YnI+DQpleGNlcHRpb25zIGFyZSBQb2xp Y3lDb25kaXRpb25JblBvbGljeVJ1bGUgYW5kPGJyPg0KUG9saWN5QWN0aW9uSW5Qb2xpY3lSdWxl KS48bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xp bmRhXSBEb2VzIOKAnGNsYXNzZXPigJ0gPT0g4oCcUG9saWN5UnVsZeKAnT8NCjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0K PGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsMyBsZXZlbDEgbGZvNSI+DQo8c3BhbiBs YW5nPSJFTi1VUyI+VGhlICZxdW90O2lnbm9yZSB0aGlzIHVubGVzcyB5b3UgbmVlZCB0aGlzJnF1 b3Q7IHBoaWxvc29waHkgZG9lcyBub3Q8YnI+DQp3b3JrLiBIb3cgZG8geW91IGtub3cgaWYgb3Ro ZXIgaW1wbGVtZW50YXRpb25zIHRoYXQgeW91IGFyZTxicj4NCnN1cHBvc2VkIHRvIGludGVyb3Bl cmF0ZSB3aXRoIGFyZSB1c2luZyB0aGVtPzxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PC91bD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj5bTGluZGFdIElzIOKAnElnbm9yZSB0aGlzIHVubGVzcyB5b3Ug bmVlZCB0aGlz4oCdIGFuIG5ldyB0eXBlIG9mIOKAnFBvbGljeVJ1bGXigJ0/DQo8L3NwYW4+PHNw YW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCB0eXBlPSJkaXNjIj4N CjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDcgbGV2ZWwxIGxmbzYiPg0KPHNwYW4g bGFuZz0iRU4tVVMiPlRoZXJlIGlzIG5vIGNvbmNlcHQgb2YgZXJyb3Igb3IgZXhjZXB0aW9uIGhh bmRsaW5nPG86cD48L286cD48L3NwYW4+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1s aXN0Omw3IGxldmVsMSBsZm82Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIj5UaGVyZSBpcyBubyBjb25j ZXB0IG9mIHRoZSBzdWJqZWN0IG9yIHRoZSB0YXJnZXQgb2YgYSBwb2xpY3k8bzpwPjwvbzpwPjwv c3Bhbj48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBEb2VzIHlvdXIg 4oCcc3ViamVjdOKAnSBoYXZlIHRoZSBzYW1lIG1lYW5pbmcgYXMgdGhlIOKAnEkyTlNGIHN1Ympl Y3TigJ0gd2hpY2ggbWVhbnMNCiBiaXRzJmFtcDtieXRlcyBleHRyYWN0ZWQgZnJvbSBwYWNrZXRz PyA8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjx1bCB0 eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDUgbGV2ZWwxIGxm bzciPg0KPHNwYW4gbGFuZz0iRU4tVVMiPkFkZGluZyBhIG5ldyB0eXBlIG9mIHBvbGljeSAoZS5n LiwgZGVjbGFyYXRpdmUgb3IgZnVuY3Rpb25hbCk8YnI+DQp3aWxsIGNhdXNlIGEgbWFqb3IgcmV3 cml0ZSBvZiB0aGUgZW50aXJlIG1vZGVsPG86cD48L286cD48L3NwYW4+PC9saT48L3VsPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltMaW5kYV0gQ2FuIHdlIHNh eSB0aGF0ICZuYnNwO0kyTlNGIHBvbGljaWVzIGhhdmUgb25lIHR5cGUg4oCcU3ViamVjdC1Db250 ZXh0dWFsU3RhdGVzLSBhY3Rpb24tDQogZnVuY3Rpb24/IFNvIGluIEkyTlNGIGVudmlyb25tZW50 LCB0aGVyZSBpcyBvbmx5IHRoZSBub3Rpb24gb2YgYWRkaW5nIGEgbmV3IOKAnFBvbGljeVJ1bGXi gJ0sIGJ1dCBubyBhZGRpbmcgYSBuZXcgcG9saWN5IHR5cGUuIElzIHRoaXMgY29ycmVjdCBzdGF0 ZW1lbnQ/ICZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDps MCBsZXZlbDEgbGZvOCI+DQo8c3BhbiBsYW5nPSJFTi1VUyI+VGhlcmUgaXMgbm8gYXBwcm9hY2gg dG8gZGV0ZWN0aW5nIGFuZCBzb2x2aW5nIHBvbGljeSBjb25mbGljdHM7PGJyPg0KdGhpcyBpcyBk dWUgdG8gdGhlIHNpbXBsaXN0aWMgbm90aW9uIG9mIGp1c3QgdXNpbmcgYSBQRFAgYW5kIGE8YnI+ DQpQRVAgZm9yIGFwcGx5aW5nIHBvbGljaWVzLjxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PC91bD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5bTGluZGFdIGluIEky TlNGLCB0aGVyZSBjb3VsZCBiZSBhIGxvdCBvZiBjb25mbGljdHMsIGZvciBleGFtcGxlLCB0aGVy ZSBjb3VsZCBiZSB0d28NCiBydWxlcyBlbnRlcmVkIGF0IGRpZmZlcmVudCB0aW1lOjwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHA+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4xLjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtU aW1lcyBOZXcgUm9tYW4mcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDtWaXJ0dWFsIE5ldHdvcmsg WCBjYW7igJl0IGFjY2VzcyDigJxZb3VUdWJl4oCdLA0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjIuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90OywmcXVvdDtzZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPjEwLjEuMS4xIGNhbiBhY2Nlc3Mg4oCcWW91VHViZeKAnSAod2hl cmUgMTAuMS4xLjEgaXMgYSBob3N0IHdpdGhpbiB0aGUgVmlydHVhbCBOZXR3b3JrIFgpLg0KPC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cD48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkRvIHlvdSBj YWxsIHRoZSAyIHJ1bGVzIGFib3ZlIGNvbmZsaWN0Pw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVT Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1V UyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiPjQuIFJlY29tbWVuZGF0aW9uczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4m bmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5HaXZlbiB0aGUgbGFy Z2UgYW1vdW50IG9mIHByb2JsZW1zLCBJIHJlY29tbWVuZCB0aGF0IHdlIG5vdCBjb25zaWRlciBQ Q0lNIGZ1cnRoZXIuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+W0xpbmRhXSBzaG91bGQgSTJOU0YgcmVmZXJlbmNlIFBDSU0/DQo8L3NwYW4+PHNw YW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGFuayB5b3UgdmVyeSBtdWNoLiBMaW5kYQ0KPC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsNCjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gbGFuZz0iRU4tVVMiPjUuIE9yaWdpbiBvZiBQQ0lNL1BDSU1lPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+ VGhpcyBpcyBhICoqdGhlb3J5Kiogc2VjdGlvbjsgcGxlYXNlIHNraXAgdW5sZXNzIHlvdSB3YW50 IHRvIHVuZGVyc3RhbmQgdGhlIG1vZGVsIGluIG1vcmUgZGV0YWlsLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPlRoZSBQ Q0lNIGlzIGJhc2VkIG9uIHRoZSBETVRGIENJTSwgd2hpY2ggaXMgYWN0dWFsbHkgYSAqKmRhdGEg bW9kZWwqKiAoZGVzcGl0ZSBpdHMgbmFtZSkgYmVjYXVzZSBpdCB1c2VzIHJlbGF0aW9uYWwgdGVj aG5vbG9naWVzIChlLmcuLCBrZXlzIGFuZCB3ZWFrIHJlZmVyZW5jZXMpDQogdG8gY3JlYXRlIGl0 cyBtb2RlbC4gUENJTSBpcyBiYXNlZCBvbiBhbiBlYXJseSB2ZXJzaW9uIG9mIHRoZSBDSU0gKDIu NCk7IHRoZSBjdXJyZW50IHZlcnNpb24gb2YgdGhlIENJTSBpcyAyLjQ0LjEgYXMgb2YgdGhpcyB3 cml0aW5nLiBTaW5jZSB0aGlzIGlzIHRpZWQgdG8gdGhlIENJTSwgdGhpcyBtZWFucyB0aGF0Ojxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFu Zz0iRU4tVVMiPiZuYnNwOyZuYnNwOyAxKSBQb2xpY3kgaXMgc3ViY2xhc3NlZCBmcm9tIGEgbW9y ZSBnZW5lcmljIGNsYXNzIChNYW5hZ2VkRWxlbWVudCk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4m bmJzcDsmbmJzcDsgMikgQUxMIHJlbGF0aW9uc2hpcHMgKGFzc29jaWF0aW9ucywgYWdncmVnYXRp b25zLCBhbmQgY29tcG9zaXRpb25zKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBhcmUgcmVhbGl6ZWQgYXMgKipjbGFzc2VzKio8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsgMykgQXMgYSByZXN1bHQgb2YgMiksIHJl bGF0aW9uc2hpcHMgYXJlIHN1YmNsYXNzZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsm bmJzcDsgNCkgQm90aCBhdHRyaWJ1dGVzIGFuZCBhc3NvY2lhdGlvbnMgYXJlICoqaW5oZXJpdGVk Kio8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsgNSkgVGhlIHNhbWUgZGVzaWdu IGFwcHJvYWNoIChhcyBtdWNoIGFzIHBvc3NpYmxlKSB3YXMgdXNlZCBpbjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFu Zz0iRU4tVVMiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBQQ0lN L1BDSU1lIGFzIHdhcyBpbiBDSU0uIFNwZWNpZmljYWxseSwgaXQgd2FzIHRob3VnaHQgYmV0dGVy PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IHRvIGRlZmluZSBhIGdlbmVyaWMsIGJ1dCBvcHRpb25hbCwgcmVsYXRpb25zaGlw IGluc3RlYWQgb2Ygbm90PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGRlZmluaW5nIHRoZSByZWxhdGlvbnNoaXAuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7Jm5ic3A7IDYpIFRoZSBDSU0gZG9lcyBOT1QgaGF2ZSBh IHNpbmdsZSByb290ZWQgaGllcmFyY2h5OyB0aGlzIG1ha2VzPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGNvZGUgZ2VuZXJh dGlvbiBtb3JlIGNvbXBsZXg8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsgNykg VGhlIENJTSB1c2VzIGEgcHJvcHJpZXRhcnkgbGFuZ3VhZ2UgYW5kIGlzIG5vdCBzdHJpY3RseSBV TUw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgY29tcGxpYW50LCBldmVuIHRob3VnaCBpdCBsb29rcyBsaWtlIFVNTCAodW5m b3J0dW5hdGVseSwgdGhpczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBsYW5ndWFnZSBpcyBhbHNvIGNhbGxlZCBNT0YpJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5EZXBl bmRpbmcgb24gdGhlIGNvbXBsZXhpdHkgb2YgdGhlIGltcGxlbWVudGF0aW9uLCB0aGUgYWJvdmUg aGF2ZSBiZWVuIHNob3duIHRvIHByb2R1Y2UgcHJvYmxlbXMgaW4gbGFyZ2UgZW52aXJvbm1lbnRz LiBGb3IgZXhhbXBsZSwgdGhlIHNwaXJpdCBvZiAmcXVvdDtsZXQncyBkZWZpbmUNCiBhbiBhdHRy aWJ1dGUgb3IgYXNzb2NpYXRpb24gaW4gY2FzZSBpdCBpcyB1c2VmdWwsIGFuZCBtYWtlIGl0IG9w dGlvbmFsIHNvIHlvdSBkb24ndCBoYXZlIHRvIHdvcnJ5IGFib3V0IGl0JnF1b3Q7IG5vdCBvbmx5 IHZpb2xhdGVzIHNvbWUgd2VsbC1rbm93biBzb2Z0d2FyZSBhcmNoaXRlY3R1cmFsIGd1aWRlbGlu ZXMgKGUuZy4sIFNpbmdsZSBSZXNwb25zaWJpbGl0eSBQcmluY2lwbGUgYW5kIHRoZSBMaXNrb3Yg U3Vic3RpdHV0aW9uIFByaW5jaXBsZSksIGJ1dA0KIGl0IG1ha2VzIHRoaW5ncyBkaWZmaWN1bHQg dG8gaW50ZXJvcGVyYXRlIHdpdGggKHNpbmNlIHlvdSBuZXZlciByZWFsbHkga25vdyBpZiBhbiBh dHRyaWJ1dGUgb3IgcmVsYXRpb25zaGlwIHNob3VsZCBiZSBpbnN0YW50aWF0ZWQgb3Igbm90KS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+cmVnYXJkcyw8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5Kb2huPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxicj4NCjxiciBjbGVhcj0iYWxsIj4NCjxicj4NCi0t IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiPnJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkpvaG48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv Ym9keT4NCjwvaHRtbD4NCg== --_000_C02846B1344F344EB4FAA6FA7AF481F12AEBE1AASZXEMA502MBSchi_-- From nobody Sun Dec 13 21:27:29 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA9FE1ACCE0 for ; Sun, 13 Dec 2015 21:27:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.099 X-Spam-Level: X-Spam-Status: No, score=-1.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_45=0.6, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PbsdwFD8MBSW for ; Sun, 13 Dec 2015 21:27:23 -0800 (PST) Received: from mail-vk0-x236.google.com (mail-vk0-x236.google.com [IPv6:2607:f8b0:400c:c05::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8BC3B1ACCE5 for ; Sun, 13 Dec 2015 21:27:22 -0800 (PST) Received: by vkay187 with SMTP id y187so147149359vka.3 for ; Sun, 13 Dec 2015 21:27:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=wX+zbOEHL6lzrJq3q7y/1Cpg5hKm+1vpmzUBjfHa5+0=; b=Pwcz6rkp1pwqUXLrG7YldLhDMY89Niqm5az7eHZcnfFO0OILHqHlx6n8Gnz/JMSAAz 8dIAD5dRR6z9gZ5lzjF5YSqlmn2K+uMC+A2Pw3dQ/YvsS+YH0/l8p15ldoYuBBqhtc7D 1WciQIwkrlJ1Pu8xnBUG0HMid+kocSshtYn5faEUdpYh+Lpsh42/Ky69W5vLcockfjcg 2iJFF3k5k7onzqbDOGZhy16XJrS4iYtJURGwvGOCZci6E1wD0WZYgKO2R3MenmlNY2za Anz8j4gyBoBfHu4QWW4kX1rWxfvHf1o9g8k2bIFEaHZKRuVZ73yaNsy5IeGsRkEr7juQ 9F4w== MIME-Version: 1.0 X-Received: by 10.31.166.208 with SMTP id p199mr11247760vke.122.1450070841516; Sun, 13 Dec 2015 21:27:21 -0800 (PST) Received: by 10.103.40.131 with HTTP; Sun, 13 Dec 2015 21:27:21 -0800 (PST) In-Reply-To: References: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> Date: Sun, 13 Dec 2015 21:27:21 -0800 Message-ID: From: John Strassner To: "Xialiang (Frank)" , John Strassner Content-Type: multipart/alternative; boundary=001a11416fbc686c590526d4ed63 Archived-At: Cc: "i2nsf@ietf.org" , Linda Dunbar Subject: Re: [I2nsf] =?utf-8?b?562U5aSNOiAgU2VydmljZSBMYXllciBQb2xpY2llcyAt?= =?utf-8?q?_Post_1=3A_Background_Information_on_PCIM?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Dec 2015 05:27:28 -0000 --001a11416fbc686c590526d4ed63 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Frank, Since current design principle for the policy model of capability interface is to abstract from most common existing NSF security policy implementations and consolidate them into a general and extensive model, I think imperative logic is more suitable for this goal. I agree. For example, declarative policies will require a much more complex translation to a form that security devices can ingest than imperative policies do. I am very interested in whether =E2=80=9Cevent=E2=80=9D can be used in I2NS= F capability interface. Do you have some suggestions? Why not? :-) There are a lot of advantages to using Events. For example, events can be used to debug the system by providing a real-time trace of which policies executed. Logs like this are also crucial for accounting and auditing. I think that we should at least make Events (and hence, event-condition-action policies) optional in our policy structure. Are the =E2=80=9Csubject=E2=80=9D and =E2=80=9Ctarget=E2=80=9D two differen= t classes in PCIMe? Do you suggest to include them in I2NSF policy model of capability interface for the goal of authorizing the policy? Subject and Target are NOT part of PCIM or PCIMe (see Post 2a or 2b). IFF I2NSF needs to represent authorization policies (and I don't see why we wouldn't), then SUBJECT is MANDATORY; it is also mandatory for performing deontic and/or alethic logic. Target (especially if modeled as a set of roles) is a much more scalable and robust way of defining what entities policy will be applied to. regards, John On Sun, Dec 13, 2015 at 6:45 PM, Xialiang (Frank) wrote: > Hi John, > > Since current design principle for the policy model of capability > interface is to abstract from most common existing NSF security policy > implementations and consolidate them into a general and extensive model, = I > think imperative logic is more suitable for this goal. > > > > I am very interested in whether =E2=80=9Cevent=E2=80=9D can be used in I2= NSF capability > interface. Do you have some suggestions? > > > > Are the =E2=80=9Csubject=E2=80=9D and =E2=80=9Ctarget=E2=80=9D two differ= ent classes in PCIMe? Do you > suggest to include them in I2NSF policy model of capability interface for > the goal of authorizing the policy? > > > > B.R. > > Frank > > > > *=E5=8F=91=E4=BB=B6=E4=BA=BA:* I2nsf [mailto:i2nsf-bounces@ietf.org] *=E4= =BB=A3=E8=A1=A8 *John Strassner > *=E5=8F=91=E9=80=81=E6=97=B6=E9=97=B4:* 2015=E5=B9=B412=E6=9C=8812=E6=97= =A5 7:32 > *=E6=94=B6=E4=BB=B6=E4=BA=BA:* Linda Dunbar > *=E6=8A=84=E9=80=81:* i2nsf@ietf.org > *=E4=B8=BB=E9=A2=98:* Re: [I2nsf] Service Layer Policies - Post 1: Backgr= ound Information > on PCIM > > > > Hi Linda, > > > > thank you for your kind words. My replies are inline: > > > > Thank you very much for the in-depth analysis of PCIM and its suitability > as something that I2NSF should be based on. What you write is very > valuable. I think the analysis should be added to the I2NSF gap analysis, > (or be a standalone Policy Analysis ID). > > > > > > If desired, I could summarize the key points for the gap analysis. I woul= d > be willing to do a Policy Analysis I-D, but I think that this probably > belongs in SUPA. However, feedback from I2NSF is invaluable for such a > document. > > > > > > > > Note: It is possible to define limited constraints in PCIM as conditions. > For example, the VendorPolicyCondition class has two attributes, Constrai= nt > and ConstraintEncoding, that do this. This will be discussed more in Post= 4. > > > > Note: Context is NOT defined in the PCIM. > > > > [Linda] Do you agree that =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D= =E2=80=9CI2NSF subject=E2=80=9D & > =E2=80=9Cthe Contextual states (or the I2NSF object)=E2=80=9D? > > > > > > PCIM/PCIMe conditions are clearly similar to what is now called "I2NSF > Subject". However, the contextual state is trickier. Part of the problem = is > how we want to define Context. I'll save the bulk for Post 4 (as outlined > in my Post 0 note). However, looking at page 6 of > draft-merged-i2nsf-framework-04: > > "Object-Match values, based on context (e.g., state, direction of the > traffic, time, geo-location, etc.)", in which case: > > - state: likely NOT part of the condition; rather, it applies to the > entire PolicyRule as a whole > > - traffic direction: part of the condition > > - time: part of the condition > > - geo-location: part of the condition > > > > > > ... > > > > Critical Problems: > > > > There is no unique ID that can be used to distinguish different > instances of the same PolicyRule, PolicyGroup, PolicyCondition, > or PolicyAction. > > [Linda] Can we simply create an ID (string or numeric) for instances of > the same PolicyRule? Or it is more complicated? > > > > > > SUPA and DEN-ng use two attributes to do this: > > > > - a string that contains the content of the identifier > > - a string that is an enum, which defines how to interpret the content > > > > This allows different IDs to be mixed (e.g., URIs, GUIDs, keys, FQDNs, > etc.) > > > > That being said, it is certainly easier to pick one and go with it, but > since I2NSF SHOULD interoperate with other models easily, I would recomme= nd > a scheme similar to the one I used (or the above, of course). > > > > > > > > Relationships are implemented by defining an abstract class > with keys, and then overriding the keys in the subclasses of the > relationship. This is broken. Would you override keys in an RDBMS? > > [Linda] Is the =E2=80=9CKey=E2=80=9D to differentiating different =E2=80= =9CPolicyRule=E2=80=9D? Can you > give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D? > > What events can cause =E2=80=9Coverriding the keys in the subclasses of t= he > relationship=E2=80=9D? > > > > > No, the key (as in primary and foreign keys, just to be clear) is used as > part of how CIM data models are built. I believe that this strategy is > fundamentally incorrect (as in, would you override keys in an RDBMS). It > also violates a host of object-oriented principles (see Post 2b). > > > > Remember, PCIM and PCIMe do NOT define events. This is a design > (compile-time) definition of how you build CIM classes. > > > > > > > =C2=B7 Most of the classes that are used to implement the relationships > do NOT have attributes, so it is impossible to restrict which > classes are related to which other classes (e.g., by context). > Put another way, the same relationship must always be used > between two types, even if the semantics varies. (The two > exceptions are PolicyConditionInPolicyRule and > PolicyActionInPolicyRule). > > [Linda] Does =E2=80=9Cclasses=E2=80=9D =3D=3D =E2=80=9CPolicyRule=E2=80= =9D? > > > > > > No, "classes" =3D=3D {association | aggregation | composition}. > > > > This is another artifact of CIM. They implement ALL relationships as > classes. In UML, there is a difference between these three relationships > and realizing them as a class; the CIM approach eliminates this distincti= on. > > > > > > > > - The "ignore this unless you need this" philosophy does not > work. How do you know if other implementations that you are > supposed to interoperate with are using them? > > [Linda] Is =E2=80=9CIgnore this unless you need this=E2=80=9D an new type= of =E2=80=9CPolicyRule=E2=80=9D? > > > > > > No, sorry, this is one of the key points underlying the design philosophy > of CIM, and carried into PCIM and PCIMe. Basically, it means that it is O= K > to define model elements on another model element if they are optional. > Examples: > > > > - defining an optional attribute, method, or relationship on a class > - defining an optional constraint > > > > This violates all of the 4 design principles in Post 2b (references > section) > > > > > > > > There is no concept of the subject or the target of a policy > > [Linda] Does your =E2=80=9Csubject=E2=80=9D have the same meaning as the = =E2=80=9CI2NSF subject=E2=80=9D > which means bits&bytes extracted from packets? > > > > > > No. A PolicySubject is the author of a policy. One could also > differentiate between author, owner, and executor, but that is more > complex. It is vital for deontic logic (i.e., the logic of obligations an= d > permissions, as in MUST, MUST NOT, SHOULD, MAY, etc.). This is one of my > concerns with the Sbbject-Object-Action-Function model - one cannot build > authorization policies that can be logically proven to be correct or not > without a PolicySubject. > > > > > > > > Adding a new type of policy (e.g., declarative or functional) > will cause a major rewrite of the entire model > > > > [Linda] Can we say that I2NSF policies have one type > =E2=80=9CSubject-ContextualStates- action- function? So in I2NSF environm= ent, there > is only the notion of adding a new =E2=80=9CPolicyRule=E2=80=9D, but no a= dding a new policy > type. Is this correct statement? > > > > > > No. The meaning of what I wrote above is much broader. If you think of EC= A > policies as imperative in nature, then the analogy is that PCIM/PCIMe are > hard-wired to imperative policies. The schema cannot be used for other > forms (declarative, functional, etc.) of policies. > > > > Put another way, ECA (or CA, which is all that the PCIM/PCIMe can do) is > imperative - it specifies that, given this particular state, the ONLY sta= te > that you are allowed to transition to is this other state. Rationality MU= ST > be compiled into the policy. In contrast, for declarative logic, given a > particular state, there are a SET of states that either satisfy the goal, > or take you closer to the goal. Hence, rationality is GENERATED by a logi= c > planner/optimizer. > > > > > > > > There is no approach to detecting and solving policy conflicts; > this is due to the simplistic notion of just using a PDP and a > PEP for applying policies. > > > > [Linda] in I2NSF, there could be a lot of conflicts, for example, there > could be two rules entered at different time: > > 1. Virtual Network X can=E2=80=99t access =E2=80=9CYouTube=E2=80=9D= , > > 2. 10.1.1.1 can access =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is = a host within > the Virtual Network X). > > Do you call the 2 rules above conflict? > > > > Bob already answered this in > http://www.ietf.org/mail-archive/web/i2nsf/current/msg00729.html > > +1 to his answer (or see my reply) > > > > > > > > Given the large amount of problems, I recommend that we not consider PCIM > further. > > [Linda] should I2NSF reference PCIM? > > > > > > I don't see any harm in **referencing** PCIM or PCIMe; I just don't want > to **use** either to construct our policies. > > > > > > > > best regards, > > John > > > > > > > > On Tue, Dec 8, 2015 at 1:10 PM, Linda Dunbar > wrote: > > John, > > > > Thank you very much for the in-depth analysis of PCIM and its suitability > as something that I2NSF should be based on. What you write is very > valuable. I think the analysis should be added to the I2NSF gap analysis, > (or be a standalone Policy Analysis ID). > > > > I have some questions inserted below: > > > > *From:* I2nsf [mailto:i2nsf-bounces@ietf.org] *On Behalf Of *John > Strassner > *Sent:* Sunday, December 06, 2015 7:01 PM > *To:* i2nsf@ietf.org > *Subject:* [I2nsf] Service Layer Policies - Post 1: Background > Information on PCIM > > > > > > > > 2. Brief description of PCIM > > > > The PCIM Class Hierarchy is very simple, as this is a CA > (condition-action) model. Events are NOT represented. PCIM defines a > PolicyRule, a PolicyGroup (group of PolicyRules), PolicyCondition, and > PolicyAction. These are all siblings; their common superclass is called > Policy, as shown below: > > > > ManagedElement (abstract) > | > +---Policy (abstract) > | | > | +---PolicyGroup > | | > | +---PolicyRule > | | > | +---PolicyCondition (abstract) > | | | > | | +---PolicyTimePeriodCondition > | | | > | | +---VendorPolicyCondition > | | > | +---PolicyAction (abstract) > | | > | +---VendorPolicyAction > > > > Note: PCIM does have a simple notion of Roles, but implements them as > attributes, instead of objects. This is not scalable, and does not fully > realize the power of using roles. This will be discussed more in Post 3. > > > > Note: It is possible to define limited constraints in PCIM as conditions. > For example, the VendorPolicyCondition class has two attributes, Constrai= nt > and ConstraintEncoding, that do this. This will be discussed more in Post= 4. > > > > Note: Context is NOT defined in the PCIM. > > > > [Linda] Do you agree that =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D= =E2=80=9CI2NSF subject=E2=80=9D & > =E2=80=9Cthe Contextual states (or the I2NSF object)=E2=80=9D? > > > > > > 3. Summary: main drawbacks of using PCIM > > > > Note that the current CIM Policy Model (2.44.1) is significantly differen= t > than either PCIM or PCIMe. PCIM is based on CIM 2.4; PCIMe is based on CI= M > 2.5. PCIMe is NOT backwards compatible with PCIM in all areas. > > > > Critical Problems: > > - There is no unique ID that can be used to distinguish different > instances of the same PolicyRule, PolicyGroup, PolicyCondition, > or PolicyAction. > > [Linda] Can we simply create an ID (string or numeric) for instances of > the same PolicyRule? Or it is more complicated? > > - Relationships are implemented by defining an abstract class > with keys, and then overriding the keys in the subclasses of the > relationship. This is broken. Would you override keys in an RDBMS? > > [Linda] Is the =E2=80=9CKey=E2=80=9D to differentiating different =E2=80= =9CPolicyRule=E2=80=9D? Can you > give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D? > > What events can cause =E2=80=9Coverriding the keys in the subclasses of t= he > relationship=E2=80=9D? > > - Most of the classes that are used to implement the relationships > do NOT have attributes, so it is impossible to restrict which > classes are related to which other classes (e.g., by context). > Put another way, the same relationship must always be used > between two types, even if the semantics varies. (The two > exceptions are PolicyConditionInPolicyRule and > PolicyActionInPolicyRule). > > [Linda] Does =E2=80=9Cclasses=E2=80=9D =3D=3D =E2=80=9CPolicyRule=E2=80= =9D? > > - The "ignore this unless you need this" philosophy does not > work. How do you know if other implementations that you are > supposed to interoperate with are using them? > > [Linda] Is =E2=80=9CIgnore this unless you need this=E2=80=9D an new type= of =E2=80=9CPolicyRule=E2=80=9D? > > - There is no concept of error or exception handling > - There is no concept of the subject or the target of a policy > > [Linda] Does your =E2=80=9Csubject=E2=80=9D have the same meaning as the = =E2=80=9CI2NSF subject=E2=80=9D > which means bits&bytes extracted from packets? > > - Adding a new type of policy (e.g., declarative or functional) > will cause a major rewrite of the entire model > > > > [Linda] Can we say that I2NSF policies have one type > =E2=80=9CSubject-ContextualStates- action- function? So in I2NSF environm= ent, there > is only the notion of adding a new =E2=80=9CPolicyRule=E2=80=9D, but no a= dding a new policy > type. Is this correct statement? > > - There is no approach to detecting and solving policy conflicts; > this is due to the simplistic notion of just using a PDP and a > PEP for applying policies. > > > > [Linda] in I2NSF, there could be a lot of conflicts, for example, there > could be two rules entered at different time: > > 1. Virtual Network X can=E2=80=99t access =E2=80=9CYouTube=E2=80=9D= , > > 2. 10.1.1.1 can access =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is = a host within > the Virtual Network X). > > Do you call the 2 rules above conflict? > > > > > > 4. Recommendations > > > > Given the large amount of problems, I recommend that we not consider PCIM > further. > > [Linda] should I2NSF reference PCIM? > > > > Thank you very much. Linda > > > > 5. Origin of PCIM/PCIMe > > > > This is a **theory** section; please skip unless you want to understand > the model in more detail. > > > > The PCIM is based on the DMTF CIM, which is actually a **data model** > (despite its name) because it uses relational technologies (e.g., keys an= d > weak references) to create its model. PCIM is based on an early version o= f > the CIM (2.4); the current version of the CIM is 2.44.1 as of this writin= g. > Since this is tied to the CIM, this means that: > > > > 1) Policy is subclassed from a more generic class (ManagedElement) > > 2) ALL relationships (associations, aggregations, and compositions) > > are realized as **classes** > > 3) As a result of 2), relationships are subclassed > > 4) Both attributes and associations are **inherited** > > 5) The same design approach (as much as possible) was used in > > PCIM/PCIMe as was in CIM. Specifically, it was thought better > > to define a generic, but optional, relationship instead of not > > defining the relationship. > > 6) The CIM does NOT have a single rooted hierarchy; this makes > > code generation more complex > > 7) The CIM uses a proprietary language and is not strictly UML > > compliant, even though it looks like UML (unfortunately, this > > language is also called MOF) > > > > Depending on the complexity of the implementation, the above have been > shown to produce problems in large environments. For example, the spirit = of > "let's define an attribute or association in case it is useful, and make = it > optional so you don't have to worry about it" not only violates some > well-known software architectural guidelines (e.g., Single Responsibility > Principle and the Liskov Substitution Principle), but it makes things > difficult to interoperate with (since you never really know if an attribu= te > or relationship should be instantiated or not). > > > > > > regards, > > John > > > > > -- > > regards, > > John > --=20 regards, John --001a11416fbc686c590526d4ed63 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
    Hi Frank,

    Since current design = principle for the policy model of capability interface is to abstract from = most common existing NSF security policy implementations and consolidate th= em into a general and extensive model, I think imperative logic is more sui= table for this goal.


    <jcs= >
    I agree. For example, declarative policies will require a mu= ch more complex translation to a form that security devices can ingest than= imperative policies do.
    </jcs>

    I am = very interested in whether =E2=80=9Cevent=E2=80=9D can be used in I2NSF cap= ability interface. Do you have some suggestions?

    =C2=A0

    <jcs>
    Why not? :-)
    There are a lot of advantages to using Events. For example, events c= an be used to debug the system by providing a real-time trace of which poli= cies executed. Logs like this are also crucial for accounting and auditing.=
    I think that we should at least make Events (and hence, event-co= ndition-action policies) optional in our policy structure.
    </j= cs>

    Are the =E2=80=9Csubject=E2=80=9D and =E2=80= =9Ctarget=E2=80=9D two different classes in PCIMe? Do you suggest to includ= e them in I2NSF policy model of capability interface for the goal of author= izing the policy?


    <jcs>= ;
    Subject and Target are NOT part of PCIM or PCIMe (see Post 2a o= r 2b).
    IFF I2NSF needs to represent authorization policies (and I= don't see why we wouldn't), then SUBJECT is MANDATORY; it is also = mandatory for performing deontic and/or alethic logic.
    Target (es= pecially if modeled as a set of roles) is a much more scalable and robust w= ay of defining what entities policy will be applied to.
    </jcs&= gt;



    regards,
    John


    On Sun, Dec 13, 2015 at 6:45 PM, Xialiang (Frank) <frank.xialiang@huawei.com> wrote:

    Hi = John,

    Sin= ce current design principle for the policy model of capability interface is= to abstract from most common existing NSF security policy implementations and consolidate them into a general and extensive model, I think imperativ= e logic is more suitable for this goal.

    = =C2=A0

    I a= m very interested in whether =E2=80=9Cevent=E2=80=9D can be used in I2NSF c= apability interface. Do you have some suggestions?

    = =C2=A0

    Are= the =E2=80=9Csubject=E2=80=9D and =E2=80=9Ctarget=E2=80=9D two different c= lasses in PCIMe? Do you suggest to include them in I2NSF policy model of ca= pability interface for the goal of authorizing the policy?

    = =C2=A0

    B.R= .

    Fra= nk

    = =C2=A0

    =E5=8F=91=E4=BB=B6= =E4=BA=BA: I2nsf [mailto:i2nsf-bounces@ietf.org] =E4=BB=A3=E8=A1=A8 John Strassner
    =E5=8F=91=E9=80=81=E6=97=B6=E9=97= =B4: 2015=E5=B9=B412=E6=9C=8812=E6=97=A5 7:32
    =E6=94=B6=E4=BB=B6=E4=BA=BA: Linda Dunbar
    =E6=8A=84=E9=80=81: i2nsf@ietf.org<= /a>
    =E4=B8=BB=E9=A2=98: Re: [I2nsf] Service Layer Policies - Post 1: Background Information= on PCIM

    =C2=A0

    Hi Linda,<= /p>

    =C2=A0

    thank you for your kind words. = My replies are inline:

    =C2=A0

    Thank= you very much for the in-depth analysis of PCIM and its suitability as som= ething that I2NSF should be based on. What you write is very valuable. I think th= e analysis should be added to the I2NSF gap analysis, (or be a standalone P= olicy Analysis ID).

    =C2=A0

    <jcs>

    If desired, I could summarize t= he key points for the gap analysis. I would be willing to do a Policy Analy= sis I-D, but I think that this probably belongs in SUPA. However, feedback = from I2NSF is invaluable for such a document.

    </jcs>

    =C2=A0

    =C2=A0

    Note: It is possible to define = limited constraints in PCIM as conditions. For example, the VendorPolicyCon= dition class has two attributes, Constraint and ConstraintEncoding, that do this. This will be discussed more in Post 4.<= /p>

    =C2=A0

    Note: Context is NOT defined in= the PCIM.

    =C2= =A0

    [Lind= a] =C2=A0Do you agree that =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D = =E2=80=9CI2NSF subject=E2=80=9D & =E2=80=9Cthe Contextual states (or the I2NSF object)=E2=80=9D? =

    =C2=A0

    <jcs>

    PCIM/PCIMe conditions are clear= ly similar to what is now called "I2NSF Subject". However, the co= ntextual state is trickier. Part of the problem is how we want to define Context. I'll save the bulk for Post 4 (as outlined in my Po= st 0 note). However, looking at page 6 of draft-merged-i2nsf-framework-04:<= u>

    "Object-Match values, based o= n context (e.g., state, direction of the traffic, time, geo-location, etc.)= ", in which case:

    =C2=A0=C2=A0 - state:=C2=A0 lik= ely NOT part of the condition; rather, it applies to the entire PolicyRule = as a whole

    =C2=A0=C2=A0 - traffic directio= n:=C2=A0 part of the condition

    =C2=A0=C2=A0 - time:=C2=A0 part= of the condition

    =C2=A0=C2=A0 - geo-location:=C2= =A0 part of the condition

    </jcs>

    =C2=A0

    ...

    =C2=A0

    Critical Problems:

    =C2=A0

    There is no unique ID that can = be used to distinguish different
    instances of the same PolicyRule, PolicyGroup, PolicyCondition,
    or PolicyAction.

    [Lind= a] Can we simply create an ID (string or numeric) for instances of the same= PolicyRule? Or it is more complicated?

    =C2=A0

    <jcs>

    SUPA and DEN-ng use two attribu= tes to do this:

    =C2=A0

    =C2=A0=C2=A0 - a string that co= ntains the content of the identifier

    =C2=A0=C2=A0 - a string that is= an enum, which defines how to interpret the content

    =C2=A0

    This allows different IDs to be= mixed (e.g., URIs, GUIDs, keys, FQDNs, etc.)

    =C2=A0

    That being said, it is certainl= y easier to pick one and go with it, but since I2NSF SHOULD interoperate wi= th other models easily, I would recommend a scheme similar to the one I used (or the above, of course).

    </jcs>

    =C2=A0

    =C2=A0

    Relationships are implemented b= y defining an abstract class
    with keys, and then overriding the keys in the subclasses of the
    relationship. This is broken. Would you override keys in an RDBMS?

    [Lind= a] Is the =E2=80=9CKey=E2=80=9D to differentiating different =E2=80=9CPolic= yRule=E2=80=9D?=C2=A0 =C2=A0Can you give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D?

    What = events can cause =E2=80=9Coverriding the keys in the subclasses of the rela= tionship=E2=80=9D?

    =C2=A0

    <jcs>
    No, the key (as in primary and foreign keys, just to be clear) is used as p= art of how CIM data models are built. I believe that this strategy is funda= mentally incorrect (as in, would you override keys in an RDBMS). It also vi= olates a host of object-oriented principles (see Post 2b).

    =C2=A0

    Remember, PCIM and PCIMe do NOT= define events. This is a design (compile-time) definition of how you build= CIM classes.
    </jcs>

    =C2=A0

    =C2=A0

    = =C2=B7=C2=A0 Most of the classes that are used = to implement the relationships
    do NOT have attributes, so it is impossible to restrict which
    classes are related to which other classes (e.g., by context).
    Put another way, the same relationship must always be used
    between two types, even if the semantics varies. (The two
    exceptions are PolicyConditionInPolicyRule and
    PolicyActionInPolicyRule).

    [Lind= a] Does =E2=80=9Cclasses=E2=80=9D =3D=3D =E2=80=9CPolicyRule=E2=80=9D?

    =C2=A0

    <jcs>

    No, "classes" =3D=3D = {association | aggregation | composition}.

    =C2=A0

    This is another artifact of CIM= . They implement ALL relationships as classes. In UML, there is a differenc= e between these three relationships and realizing them as a class; the CIM approach eliminates this distinction.

    </jcs>

    =C2=A0

    =C2=A0

    =C2=A0

    =C2=A0

    =C2=A0

    On Tue, Dec 8, 2015 at 1:10 PM,= Linda Dunbar <linda.dunbar@huawei.com> wrote:

    John,

    =C2= =A0

    Thank= you very much for the in-depth analysis of PCIM and its suitability as som= ething that I2NSF should be based on. What you write is very valuable. I think th= e analysis should be added to the I2NSF gap analysis, (or be a standalone P= olicy Analysis ID).

    =C2= =A0

    I hav= e some questions inserted below:

    =C2= =A0

    From: I2nsf [mailto:i2nsf-= bounces@ietf.org] On Behalf Of John Strassner
    Sent: Sunday, December 06, 2015 7:01 PM
    To: i2nsf@ietf.o= rg
    Subject: [I2nsf] Service Layer Policies - Post 1: Background Informa= tion on PCIM

    =C2=A0

    = <Snipped>

    =C2=A0

    2.=C2=A0 Brief description of P= CIM

    =C2=A0

    The PCIM Class Hierarchy is ver= y simple, as this is a CA (condition-action) model. Events are NOT represen= ted. PCIM defines a PolicyRule, a PolicyGroup (group of PolicyRules), PolicyCondition, and PolicyAction. These are all siblings= ; their common superclass is called Policy, as shown below:

    =C2=A0

    ManagedElement (abstract)
    =C2=A0 |
    =C2=A0 +---Policy (abstract)
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyGroup
    =C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyRule
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyCondition (abstract)
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 +---P= olicyTimePeriodCondition
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= +---VendorPolicyCondition
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyAction (abstract)
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = +---VendorPolicyAction

    =C2=A0

    Note: PCIM does have a simple n= otion of Roles, but implements them as attributes, instead of objects. This= is not scalable, and does not fully realize the power of using roles. This will be discussed more in Post 3.

    =C2=A0

    Note: It is possible to define = limited constraints in PCIM as conditions. For example, the VendorPolicyCon= dition class has two attributes, Constraint and ConstraintEncoding, that do this. This will be discussed more in Post 4.<= /p>

    =C2=A0

    Note: Context is NOT defined in= the PCIM.

    =C2= =A0

    [Lind= a] =C2=A0Do you agree that =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D = =E2=80=9CI2NSF subject=E2=80=9D & =E2=80=9Cthe Contextual states (or the I2NSF object)=E2=80=9D? =

    =C2=A0

    =C2=A0

    3.=C2=A0 Summary: main drawback= s of using PCIM

    =C2=A0

    Note that the current CIM Polic= y Model (2.44.1) is significantly different than either PCIM or PCIMe.=C2= =A0PCIM is based on CIM 2.4; PCIMe is based on CIM 2.5. PCIMe is NOT backwards compatible with PCIM in all areas.

    =C2=A0

    Critical Problems:

    • There is no unique ID that can be used to distinguish = different
      instances of the same PolicyRule, PolicyGroup, PolicyCondition,
      or PolicyAction.

    [Lind= a] Can we simply create an ID (string or numeric) for instances of the same= PolicyRule? Or it is more complicated?

    • Relationships are implemented by defining an abstract = class
      with keys, and then overriding the keys in the subclasses of the
      relationship. This is broken. Would you override keys in an RDBMS?

    [Lind= a] Is the =E2=80=9CKey=E2=80=9D to differentiating different =E2=80=9CPolic= yRule=E2=80=9D?=C2=A0 =C2=A0Can you give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D?

    What = events can cause =E2=80=9Coverriding the keys in the subclasses of the rela= tionship=E2=80=9D?

    • Most of the classes that are used to implement the rel= ationships
      do NOT have attributes, so it is impossible to restrict which
      classes are related to which other classes (e.g., by context).
      Put another way, the same relationship must always be used
      between two types, even if the semantics varies. (The two
      exceptions are PolicyConditionInPolicyRule and
      PolicyActionInPolicyRule).

    [Lind= a] Does =E2=80=9Cclasses=E2=80=9D =3D=3D =E2=80=9CPolicyRule=E2=80=9D?

    • The "ignore this unless you need this" philo= sophy does not
      work. How do you know if other implementations that you are
      supposed to interoperate with are using them?

      • [Lind= a] Is =E2=80=9CIgnore this unless you need this=E2=80=9D an new type of =E2= =80=9CPolicyRule=E2=80=9D?

      • There is no concept of error or exception handling<= /u>
      • There is no concept of the subject or the target of a = policy

      [Lind= a] Does your =E2=80=9Csubject=E2=80=9D have the same meaning as the =E2=80= =9CI2NSF subject=E2=80=9D which means bits&bytes extracted from packets? =

      • Adding a new type of policy (e.g., declarative or func= tional)
        will cause a major rewrite of the entire model

        • =C2= =A0

        [Lind= a] Can we say that =C2=A0I2NSF policies have one type =E2=80=9CSubject-Cont= extualStates- action- function? So in I2NSF environment, there is only the notion of adding a ne= w =E2=80=9CPolicyRule=E2=80=9D, but no adding a new policy type. Is this co= rrect statement? =C2=A0

        • There is no approach to detecting and solving policy c= onflicts;
          this is due to the simplistic notion of just using a PDP and a
          PEP for applying policies.

        =C2= =A0

        [Lind= a] in I2NSF, there could be a lot of conflicts, for example, there could be= two rules entered at different time:=

        1.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0Virtual Network= X can=E2=80=99t access =E2=80=9CYouTube=E2=80=9D,

        2.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 10.1.1.1 can access = =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is a host within the Virtual Netw= ork X).

        Do you call the 2 rules a= bove conflict?

        =C2=A0

        =C2=A0

        4. Recommendations

        =C2=A0

        Given the large amount of probl= ems, I recommend that we not consider PCIM further.

        = [Linda] should I2NSF reference PCIM?

        =C2= =A0

        Thank= you very much. Linda

        =C2=A0

        5. Origin of PCIM/PCIMe<= u>

        =C2=A0

        This is a **theory** section; p= lease skip unless you want to understand the model in more detail.

        =C2=A0

        The PCIM is based on the DMTF C= IM, which is actually a **data model** (despite its name) because it uses r= elational technologies (e.g., keys and weak references) to create its model. PCIM is based on an early version of the CIM (2.4); t= he current version of the CIM is 2.44.1 as of this writing. Since this is t= ied to the CIM, this means that:

        =C2=A0

        =C2=A0=C2=A0 1) Policy is subcl= assed from a more generic class (ManagedElement)

        =C2=A0=C2=A0 2) ALL relationshi= ps (associations, aggregations, and compositions)

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0 are realized as **classes**

        =C2=A0=C2=A0 3) As a result of = 2), relationships are subclassed

        =C2=A0=C2=A0 4) Both attributes= and associations are **inherited**

        =C2=A0=C2=A0 5) The same design= approach (as much as possible) was used in

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 PCIM/PCIMe as was in CIM. Specifically, it was thought better<= u>

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 to define a generic, but optional, relationship instead of not=

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 defining the relationship.

        =C2=A0=C2=A0 6) The CIM does NO= T have a single rooted hierarchy; this makes

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 code generation more complex

        =C2=A0=C2=A0 7) The CIM uses a = proprietary language and is not strictly UML

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 compliant, even though it looks like UML (unfortunately, this<= u>

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 language is also called MOF)=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0

        =C2=A0

        Depending on the complexity of = the implementation, the above have been shown to produce problems in large = environments. For example, the spirit of "let's define an attribute or association in case it is useful, and make it optional so = you don't have to worry about it" not only violates some well-know= n software architectural guidelines (e.g., Single Responsibility Principle = and the Liskov Substitution Principle), but it makes things difficult to interoperate with (since you never really kno= w if an attribute or relationship should be instantiated or not).=

        =C2=A0

        =C2=A0

        regards,

        John




    --

    regards,

    John




    --
    regards,
    John
    --001a11416fbc686c590526d4ed63-- From nobody Mon Dec 14 19:51:05 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 398B41A00A1 for ; Mon, 14 Dec 2015 19:51:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.099 X-Spam-Level: X-Spam-Status: No, score=-1.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_45=0.6, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XyUWmKW_vFSp for ; Mon, 14 Dec 2015 19:50:59 -0800 (PST) Received: from mail-vk0-x232.google.com (mail-vk0-x232.google.com [IPv6:2607:f8b0:400c:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F0251ACF09 for ; Mon, 14 Dec 2015 19:50:59 -0800 (PST) Received: by vkgj66 with SMTP id j66so71255337vkg.1 for ; Mon, 14 Dec 2015 19:50:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=udjDm32u/c2pwM+PAh4xIwbkkVqVi2TQDXfDGqUpwyE=; b=QeuejhpH+rDU45aGyC0+QhVUtUn6unSDMKBnkqM7kwE599T6zD1/xFlSK60bFaRwas 9/03HxvC297iT10mHeOoR/ZRxtH4Uwa2IBhiI7na+RMBLVdMa+ixZl1Gygk68x08+5Jb J7g9jjaqmehB1/nldc/XBeqBwJ8Lr7noYVSZPq29eew/gSi7GSXCxJZVPGSdS1QHqCt5 N3/PGzwa9YENWnOdiOhuj1VO5lN/w0WsjK/JyPiGk5/AfO/8nAkgLxBsVzYl8KACPI+A Mur8Dp+iv/uyx/TF4lhld1uBMAYMyaNA6xNUkhtuVDpn44d/F2j+I6i45IVQ7aoZv7V2 mCUw== MIME-Version: 1.0 X-Received: by 10.31.4.208 with SMTP id 199mr24866114vke.110.1450151458521; Mon, 14 Dec 2015 19:50:58 -0800 (PST) Received: by 10.103.40.131 with HTTP; Mon, 14 Dec 2015 19:50:58 -0800 (PST) In-Reply-To: References: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> <4A95BA014132FF49AE685FAB4B9F17F657DAF428@dfweml701-chm> Date: Mon, 14 Dec 2015 19:50:58 -0800 Message-ID: From: John Strassner To: "Xialiang (Frank)" , John Strassner Content-Type: multipart/alternative; boundary=001a1142a4d28e47da0526e7b2df Archived-At: Cc: "i2nsf@ietf.org" , "Natale, Bob" , Linda Dunbar Subject: Re: [I2nsf] =?utf-8?b?562U5aSNOiAgU2VydmljZSBMYXllciBQb2xpY2llcyAt?= =?utf-8?q?_Post_1=3A_Background_Information_on_PCIM?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2015 03:51:04 -0000 --001a1142a4d28e47da0526e7b2df Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Frank, sorry for the delay in replying. > Rule prioritization example [Frank]: Take this example, I am a little worried about the complexity brought by the nesting and recursion operation. They are powerful but also complicated. I think we should be careful in designing the information model to prevent it to be too complex. That was the point. :-) In particular, PCIM and PCIMe (and CIM) collapse under the weight of the numerous relationships that must be instantiated. Looking ahead to generating YANG, I see no point in building a model that requires countless leaf nodes just to express simple Boolean clauses. SUPA is designed to give the developer choices in how such clauses are implemented (e.g., the entire clause as one object, the entire clause as a URI (for example) to a script, each and every little variable, operator, and value as an object (to facilitate a machine building this dynamically), or others in between these scopes. Of course, I2NSF doesn't have to use SUPA, but hopefully, SUPA can answer questions about what the best security policy rule structure would be. > Context-aware policy rules [Frank]: This context-aware policy rules make sense for I2NSF in my opinion. Are you going to introduce it into I2NSF? Yes. :-) But this is why we need to be very careful about terminology (i.e., context). I would like to work with you and your co-authors on your Capability Interface information model I-D as one place to introduce this..= . regards, John On Thu, Dec 10, 2015 at 10:52 PM, Xialiang (Frank) < frank.xialiang@huawei.com> wrote: > Hi John, > > Firstly, thanks for raising this valuable discussion about I2NSF policy > model. It=E2=80=99s really useful to our interface information model draf= ts. > > Please see my comments inline: > > > > B.R. > > Frank > > *=E5=8F=91=E4=BB=B6=E4=BA=BA:* I2nsf [mailto:i2nsf-bounces@ietf.org] *=E4= =BB=A3=E8=A1=A8 *John Strassner > *=E5=8F=91=E9=80=81=E6=97=B6=E9=97=B4:* 2015=E5=B9=B412=E6=9C=8811=E6=97= =A5 4:43 > *=E6=94=B6=E4=BB=B6=E4=BA=BA:* Linda Dunbar; John Strassner > *=E6=8A=84=E9=80=81:* i2nsf@ietf.org; Natale, Bob > *=E4=B8=BB=E9=A2=98:* Re: [I2nsf] Service Layer Policies - Post 1: Backgr= ound Information > on PCIM > > > > Hi Linda, > > > > IMHO, a priority attribute should not be overly used. PCIM's > implementation fails (see Post 1), and PCIMe's has other problems (define= d > in Post 2, hopefully out tonight). For example, how do you ensure that th= e > priorities of all instances of all rules are always updated? There is no > mechanism in either PCIM or PCIMe that guarantees that priorities are > deterministically determined. Remember, you can have priorities on policy > rules, and priorities on policy groups. So, if you had: > > > > Group1 (priority 5) > > Rule A (priority 10) > Rule B (priority 1) > > Rule C (priority 50) > > Rule 2 (priority 10) > > Group 3 (priority 3) > > Rule x, priority y > > > > Rule 2 will execute first, even though Group1.RuleC.priority =3D=3D 50 > > Likewise, it doesn't matter how many rules are in Group 3, or what their > priorities are, they will all execute after Rule2, followed by the Rules = in > Group1 (C, A, B). > > This gets harder as you start nesting groups within groups and rules > within rules. > > [Frank]: Take this example, I am a little worried about the complexity > brought by the nesting and recursion operation. They are powerful but als= o > complicated. I think we should be careful in designing the information > model to prevent it to be too complex. > > > > PCIMe has a policyDecisionStrategy attribute, which is used to define > whether the container (PolicyGroup or PolicyRule) of the PolicyRules uses > first-match or all-match. This obfuscates the value of the priority > attribute. > > > > As Bob rightly pointed out, execution context is everything. In FOCALE, I > defined context-aware policy rules. Context was used to select a working > set of policies; this working set collectively constituted the intelligen= ce > that the manager implemented. Tie that into feedback from what was being > managed, and as the overall context changes, the working set of policies > change. Kinda cool. But NOT maintainable using just priority. > > [Frank]: This context-aware policy rules make sense for I2NSF in my > opinion. Are you going to introduce it into I2NSF? > > > > regards, > > John > > > > On Thu, Dec 10, 2015 at 9:32 AM, Linda Dunbar > wrote: > > Bob, > > > > Thank you very much for listing down multiple scenarios below. > > With what you described, the I2NSF rule-set may need a priority so that > the NSF can enforce them accordingly. > > In our current product implementation, the router=E2=80=99s longest match > principle has been used, i.e. rules for individual hosts override the rul= es > for the subnet to which that hosts belong. > > But there could be more complicated conflict that what is listed below. > Having a priority can be more precise. > > > > > > Linda > > > > *From:* Natale, Bob [mailto:RNATALE@mitre.org] > *Sent:* Thursday, December 10, 2015 12:47 AM > *To:* Linda Dunbar; John Strassner > *Cc:* i2nsf@ietf.org > *Subject:* RE: [I2nsf] Service Layer Policies - Post 1: Background > Information on PCIM > > > > Hi Linda, > > > > Input here from a lurker =E2=80=A6 calibrate accordingly! > > > > You asked: > =E2=80=9C[Linda] in I2NSF, there could be a lot of conflicts, for example= , there > could be two rules entered at different time: > > 1. Virtual Network X can=E2=80=99t access =E2=80=9CYouTube=E2=80= =9D, > > 2. 10.1.1.1 can access =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is= a host within > the Virtual Network X). > > Do you call the 2 rules above conflict?=E2=80=9D > > The answer is =E2=80=9Cit depends=E2=80=9D =E2=80=A6 depends on a broader= policy execution context > =E2=80=A6 a concept that PCIM itself does not directly support. For examp= le, that > broader context could stipulate (via policy) that #1 is the default but > explicit exception specifications like #2 can override the default =E2=80= =A6 > alternatively, that broader context could stipulate that #1 is absolute a= nd > any attempt to specify (preferably) or execute #2 would be denied =E2=80= =A6 those > are only two examples, there are multiple potentially valid variations. H= ow > much of that context a group wants to standardize is an important decisio= n > for the group to understand and make =E2=80=A6 PCIM itself will not take = you very > far, however. > > Avanti, > > BobN > > > > *From:* I2nsf [mailto:i2nsf-bounces@ietf.org ] *O= n > Behalf Of *Linda Dunbar > *Sent:* Tuesday, December 08, 2015 4:11 PM > *To:* John Strassner ; i2nsf@ietf.org > *Subject:* Re: [I2nsf] Service Layer Policies - Post 1: Background > Information on PCIM > > > > John, > > > > Thank you very much for the in-depth analysis of PCIM and its suitability > as something that I2NSF should be based on. What you write is very > valuable. I think the analysis should be added to the I2NSF gap analysis, > (or be a standalone Policy Analysis ID). > > > > I have some questions inserted below: > > > > *From:* I2nsf [mailto:i2nsf-bounces@ietf.org ] *O= n > Behalf Of *John Strassner > *Sent:* Sunday, December 06, 2015 7:01 PM > *To:* i2nsf@ietf.org > *Subject:* [I2nsf] Service Layer Policies - Post 1: Background > Information on PCIM > > > > > > > > 2. Brief description of PCIM > > > > The PCIM Class Hierarchy is very simple, as this is a CA > (condition-action) model. Events are NOT represented. PCIM defines a > PolicyRule, a PolicyGroup (group of PolicyRules), PolicyCondition, and > PolicyAction. These are all siblings; their common superclass is called > Policy, as shown below: > > > > ManagedElement (abstract) > | > +---Policy (abstract) > | | > | +---PolicyGroup > | | > | +---PolicyRule > | | > | +---PolicyCondition (abstract) > | | | > | | +---PolicyTimePeriodCondition > | | | > | | +---VendorPolicyCondition > | | > | +---PolicyAction (abstract) > | | > | +---VendorPolicyAction > > > > Note: PCIM does have a simple notion of Roles, but implements them as > attributes, instead of objects. This is not scalable, and does not fully > realize the power of using roles. This will be discussed more in Post 3. > > > > Note: It is possible to define limited constraints in PCIM as conditions. > For example, the VendorPolicyCondition class has two attributes, Constrai= nt > and ConstraintEncoding, that do this. This will be discussed more in Post= 4. > > > > Note: Context is NOT defined in the PCIM. > > > > [Linda] Do you agree that =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D= =E2=80=9CI2NSF subject=E2=80=9D & > =E2=80=9Cthe Contextual states (or the I2NSF object)=E2=80=9D? > > > > > > 3. Summary: main drawbacks of using PCIM > > > > Note that the current CIM Policy Model (2.44.1) is significantly differen= t > than either PCIM or PCIMe. PCIM is based on CIM 2.4; PCIMe is based on CI= M > 2.5. PCIMe is NOT backwards compatible with PCIM in all areas. > > > > Critical Problems: > > - There is no unique ID that can be used to distinguish different > instances of the same PolicyRule, PolicyGroup, PolicyCondition, > or PolicyAction. > > [Linda] Can we simply create an ID (string or numeric) for instances of > the same PolicyRule? Or it is more complicated? > > - Relationships are implemented by defining an abstract class > with keys, and then overriding the keys in the subclasses of the > relationship. This is broken. Would you override keys in an RDBMS? > > [Linda] Is the =E2=80=9CKey=E2=80=9D to differentiating different =E2=80= =9CPolicyRule=E2=80=9D? Can you > give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D? > > What events can cause =E2=80=9Coverriding the keys in the subclasses of t= he > relationship=E2=80=9D? > > - Most of the classes that are used to implement the relationships > do NOT have attributes, so it is impossible to restrict which > classes are related to which other classes (e.g., by context). > Put another way, the same relationship must always be used > between two types, even if the semantics varies. (The two > exceptions are PolicyConditionInPolicyRule and > PolicyActionInPolicyRule). > > [Linda] Does =E2=80=9Cclasses=E2=80=9D =3D=3D =E2=80=9CPolicyRule=E2=80= =9D? > > - The "ignore this unless you need this" philosophy does not > work. How do you know if other implementations that you are > supposed to interoperate with are using them? > > [Linda] Is =E2=80=9CIgnore this unless you need this=E2=80=9D an new type= of =E2=80=9CPolicyRule=E2=80=9D? > > - There is no concept of error or exception handling > - There is no concept of the subject or the target of a policy > > [Linda] Does your =E2=80=9Csubject=E2=80=9D have the same meaning as the = =E2=80=9CI2NSF subject=E2=80=9D > which means bits&bytes extracted from packets? > > - Adding a new type of policy (e.g., declarative or functional) > will cause a major rewrite of the entire model > > > > [Linda] Can we say that I2NSF policies have one type > =E2=80=9CSubject-ContextualStates- action- function? So in I2NSF environm= ent, there > is only the notion of adding a new =E2=80=9CPolicyRule=E2=80=9D, but no a= dding a new policy > type. Is this correct statement? > > - There is no approach to detecting and solving policy conflicts; > this is due to the simplistic notion of just using a PDP and a > PEP for applying policies. > > > > [Linda] in I2NSF, there could be a lot of conflicts, for example, there > could be two rules entered at different time: > > 1. Virtual Network X can=E2=80=99t access =E2=80=9CYouTube=E2=80= =9D, > > 2. 10.1.1.1 can access =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is= a host within > the Virtual Network X). > > Do you call the 2 rules above conflict? > > > > > > 4. Recommendations > > > > Given the large amount of problems, I recommend that we not consider PCIM > further. > > [Linda] should I2NSF reference PCIM? > > > > Thank you very much. Linda > > > > 5. Origin of PCIM/PCIMe > > > > This is a **theory** section; please skip unless you want to understand > the model in more detail. > > > > The PCIM is based on the DMTF CIM, which is actually a **data model** > (despite its name) because it uses relational technologies (e.g., keys an= d > weak references) to create its model. PCIM is based on an early version o= f > the CIM (2.4); the current version of the CIM is 2.44.1 as of this writin= g. > Since this is tied to the CIM, this means that: > > > > 1) Policy is subclassed from a more generic class (ManagedElement) > > 2) ALL relationships (associations, aggregations, and compositions) > > are realized as **classes** > > 3) As a result of 2), relationships are subclassed > > 4) Both attributes and associations are **inherited** > > 5) The same design approach (as much as possible) was used in > > PCIM/PCIMe as was in CIM. Specifically, it was thought better > > to define a generic, but optional, relationship instead of not > > defining the relationship. > > 6) The CIM does NOT have a single rooted hierarchy; this makes > > code generation more complex > > 7) The CIM uses a proprietary language and is not strictly UML > > compliant, even though it looks like UML (unfortunately, this > > language is also called MOF) > > > > Depending on the complexity of the implementation, the above have been > shown to produce problems in large environments. For example, the spirit = of > "let's define an attribute or association in case it is useful, and make = it > optional so you don't have to worry about it" not only violates some > well-known software architectural guidelines (e.g., Single Responsibility > Principle and the Liskov Substitution Principle), but it makes things > difficult to interoperate with (since you never really know if an attribu= te > or relationship should be instantiated or not). > > > > > > regards, > > John > > > > > -- > > regards, > > John > --=20 regards, John --001a1142a4d28e47da0526e7b2df Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
    Hi Frank,

    sorry for the dela= y in replying.

    > Rule prioritization example

    [Frank]:=C2=A0 Take this example, I am a little worried about the comp= lexity brought by the nesting and recursion operation. They are powerful bu= t also complicated. I think we should be careful in designing the informati= on model to prevent it to be too complex.


    <jcs>
    That was the point. :-) In particular, PCIM and= PCIMe (and CIM) collapse under the weight of the numerous relationships th= at must be instantiated. Looking ahead to generating YANG, I see no point i= n building a model that requires countless leaf nodes just to express simpl= e Boolean clauses.

    SUPA is designed to give the de= veloper choices in how such clauses are implemented (e.g., the entire claus= e as one object, the entire clause as a URI (for example) to a script, each= and every little variable, operator, and value as an object (to facilitate= a machine building this dynamically), or others in between these scopes. O= f course, I2NSF doesn't have to use SUPA, but hopefully, SUPA can answe= r questions about what the best security policy rule structure would be.
    </jcs>

    > Context-aware policy rules

    [Frank= ]: This context-aware policy rules make sense for I2NSF in my opinion. Are = you going to introduce it into I2NSF?


    <jcs>
    Yes. :-) But this is why we need to be very careful about terminology (i.e= ., context). I would like to work with you and your co-authors on your Capa= bility Interface information model I-D as one place to introduce this...
    </jcs>

    regards,
    John
    =

    On Thu, Dec= 10, 2015 at 10:52 PM, Xialiang (Frank) <frank.xialiang@huawei.com= > wrote:

    Hi = John,

    Fir= stly, thanks for raising this valuable discussion about I2NSF policy model.= It=E2=80=99s really useful to our interface information model drafts.

    Ple= ase see my comments inline:

    = =C2=A0

    B.R= .

    Fra= nk

    =E5=8F=91=E4=BB=B6= =E4=BA=BA: I2nsf [mailto:i2nsf-bounces@ietf.org] =E4=BB=A3=E8=A1=A8 John Strassner
    =E5=8F=91=E9=80=81=E6=97=B6=E9=97= =B4: 2015=E5=B9=B412=E6=9C=8811=E6=97=A5 4:43
    =E6=94=B6=E4=BB=B6=E4=BA=BA: Linda Dunbar; John Strassner
    =E6=8A=84=E9=80=81: i2nsf@ietf.org<= /a>; Natale, Bob
    =E4=B8=BB=E9=A2=98: Re: [I2nsf] Service Layer Policies - Post 1: Background Information= on PCIM

    =C2=A0

    Hi Linda,<= /p>

    =C2=A0

    IMHO, a priority attribute shou= ld not be overly used. PCIM's implementation fails (see Post 1), and PC= IMe's has other problems (defined in Post 2, hopefully out tonight). Fo= r example, how do you ensure that the priorities of all instances of all rules are always updated? There is no mechanism in= either PCIM or PCIMe that guarantees that priorities are deterministically= determined. Remember, you can have priorities on policy rules, and priorit= ies on policy groups. So, if you had:

    =C2=A0

    =C2=A0=C2=A0 Group1 (priority 5= )

    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Rule A (priority 10)
    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Rule B (priority 1)

    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Rule C (priority 50)

    =C2=A0=C2=A0 Rule 2 (priority 1= 0)

    =C2=A0=C2=A0 Group 3 (priority = 3)

    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Rule x, priority y

    =C2=A0

    Rule 2 will execute first, even= though Group1.RuleC.priority =3D=3D 50

    Likewise, it doesn't matter= how many rules are in Group 3, or what their priorities are, they will all= execute after Rule2, followed by the Rules in Group1 (C, A, B).<= /u>

    This gets harder as you start n= esting groups within groups and rules within rules.

    [Fr= ank]:=C2=A0 Take this example, I am a little worried about the complexity b= rought by the nesting and recursion operation. They are powerful but also complicated. I think we should be careful in designing the information mod= el to prevent it to be too complex.

    =C2=A0

    PCIMe has a policyDecisionStrat= egy attribute, which is used to define whether the container (PolicyGroup o= r PolicyRule) of the PolicyRules uses first-match or all-match. This obfusc= ates the value of the priority attribute.

    =C2=A0

    As Bob rightly pointed out, exe= cution context is everything. In FOCALE, I defined context-aware policy rul= es. Context was used to select a working set of policies; this working set = collectively constituted the intelligence that the manager implemented. Tie that into feedback from what was being m= anaged, and as the overall context changes, the working set of policies cha= nge. Kinda cool. But NOT maintainable using just priority.

    [Frank]: This contex= t-aware policy rules make sense for I2NSF in my opinion. Are you going to i= ntroduce it into I2NSF?

    =C2=A0

    regards,

    John

    =C2=A0

    On Thu, Dec 10, 2015 at 9:32 AM= , Linda Dunbar <linda.dunbar@huawei.com> wrote:

    Bob,

    =C2= =A0

    Thank= you very much for listing down multiple scenarios below.

    With = what you described, the I2NSF rule-set may need a priority so that the NSF = can enforce them accordingly.

    In ou= r current product implementation, the router=E2=80=99s longest match princi= ple has been used, i.e. rules for individual hosts override the rules for the subnet to= which that hosts belong.

    But t= here could be more complicated conflict that what is listed below. Having a= priority can be more precise.

    =C2= =A0

    =C2= =A0

    Linda

    =C2= =A0

    From: Natale, Bob [mailto:RNATALE= @mitre.org]
    Sent: Thursday, December 10, 2015 12:47 AM
    To: Linda Dunbar; John Strassner
    Cc: i2nsf@ietf.o= rg
    Subject: RE: [I2nsf] Service Layer Policies - Post 1: Background Inf= ormation on PCIM

    =C2=A0

    Hi Linda,

    =C2=A0

    Input here from a lur= ker =E2=80=A6 calibrate accordingly!<= /u>

    =C2=A0

    You asked:
    =E2=80=9C    [Linda] in I= 2NSF, there could be a lot of conflicts, for example, there could be two ru= les entered at different time:

    1.=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 =C2=A0Virtual Network= X can=E2=80=99t access =E2=80=9CYouTube=E2=80=9D,

    2.=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 10.1.1.1 can access = =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is a host within the Virtual Netw= ork X).

    Do you call the 2 rules a= bove conflict?=E2=80=9D

    The answer is =E2=80=9Cit depends=E2=80= =9D =E2=80=A6 depends on a broader policy execution context =E2=80=A6 a con= cept that PCIM itself does not directly support. For example, that broader = context could stipulate (via policy) that #1 is the default but explicit exception specifications = like #2 can override the default =E2=80=A6 alternatively, that broader cont= ext could stipulate that #1 is absolute and any attempt to specify (prefera= bly) or execute #2 would be denied =E2=80=A6 those are only two examples, there are multiple potentially valid variations. Ho= w much of that context a group wants to standardize is an important decisio= n for the group to understand and make =E2=80=A6 PCIM itself will not take = you very far, however.

    Avanti,

    BobN

    =C2=A0

    From: I2nsf [mailto:= i2nsf-bounces@ietf.org] On Behalf Of Linda Dunbar
    Sent: Tuesday, December 08, 2015 4:11 PM
    To: John Strassner <strazpdj@gmail.com>; i2nsf@ietf.org
    Subject: Re: [I2nsf] Service Layer Policies - Post 1: Background Inf= ormation on PCIM

    =C2=A0

    John,

    =C2= =A0

    Thank= you very much for the in-depth analysis of PCIM and its suitability as som= ething that I2NSF should be based on. What you write is very valuable. I think th= e analysis should be added to the I2NSF gap analysis, (or be a standalone P= olicy Analysis ID).

    =C2= =A0

    I hav= e some questions inserted below:

    =C2= =A0

    From: I2nsf [mailto:i2nsf-= bounces@ietf.org] On Behalf Of John Strassner
    Sent: Sunday, December 06, 2015 7:01 PM
    To: i2nsf@ietf.o= rg
    Subject: [I2nsf] Service Layer Policies - Post 1: Background Informa= tion on PCIM

    =C2=A0

    = <Snipped>

    =C2=A0

    2.=C2=A0 Brief description of P= CIM

    =C2=A0

    The PCIM Class Hierarchy is ver= y simple, as this is a CA (condition-action) model. Events are NOT represen= ted. PCIM defines a PolicyRule, a PolicyGroup (group of PolicyRules), PolicyCondition, and PolicyAction. These are all siblings= ; their common superclass is called Policy, as shown below:

    =C2=A0

    ManagedElement (abstract)
    =C2=A0 |
    =C2=A0 +---Policy (abstract)
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyGroup
    =C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyRule
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyCondition (abstract)
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 +---P= olicyTimePeriodCondition
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= +---VendorPolicyCondition
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 +---PolicyAction (abstract)
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = |
    =C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = +---VendorPolicyAction

    =C2=A0

    Note: PCIM does have a simple n= otion of Roles, but implements them as attributes, instead of objects. This= is not scalable, and does not fully realize the power of using roles. This will be discussed more in Post 3.

    =C2=A0

    Note: It is possible to define = limited constraints in PCIM as conditions. For example, the VendorPolicyCon= dition class has two attributes, Constraint and ConstraintEncoding, that do this. This will be discussed more in Post 4.<= /p>

    =C2=A0

    Note: Context is NOT defined in= the PCIM.

    =C2= =A0

    [Lind= a] =C2=A0Do you agree that =E2=80=9CCondition of the PCIM=E2=80=9D =3D=3D = =E2=80=9CI2NSF subject=E2=80=9D & =E2=80=9Cthe Contextual states (or the I2NSF object)=E2=80=9D? =

    =C2=A0

    =C2=A0

    3.=C2=A0 Summary: main drawback= s of using PCIM

    =C2=A0

    Note that the current CIM Polic= y Model (2.44.1) is significantly different than either PCIM or PCIMe.=C2= =A0PCIM is based on CIM 2.4; PCIMe is based on CIM 2.5. PCIMe is NOT backwards compatible with PCIM in all areas.

    =C2=A0

    Critical Problems:

    • There is no unique ID that can be used to distinguish = different
      instances of the same PolicyRule, PolicyGroup, PolicyCondition,
      or PolicyAction.

    [Lind= a] Can we simply create an ID (string or numeric) for instances of the same= PolicyRule? Or it is more complicated?

    • Relationships are implemented by defining an abstract = class
      with keys, and then overriding the keys in the subclasses of the
      relationship. This is broken. Would you override keys in an RDBMS?

    [Lind= a] Is the =E2=80=9CKey=E2=80=9D to differentiating different =E2=80=9CPolic= yRule=E2=80=9D?=C2=A0 =C2=A0Can you give an example of =E2=80=9Csubclasses of the relationship=E2=80=9D?

    What = events can cause =E2=80=9Coverriding the keys in the subclasses of the rela= tionship=E2=80=9D?

    • Most of the classes that are used to implement the rel= ationships
      do NOT have attributes, so it is impossible to restrict which
      classes are related to which other classes (e.g., by context).
      Put another way, the same relationship must always be used
      between two types, even if the semantics varies. (The two
      exceptions are PolicyConditionInPolicyRule and
      PolicyActionInPolicyRule).

    [Lind= a] Does =E2=80=9Cclasses=E2=80=9D =3D=3D =E2=80=9CPolicyRule=E2=80=9D?

    • The "ignore this unless you need this" philo= sophy does not
      work. How do you know if other implementations that you are
      supposed to interoperate with are using them?

      • [Lind= a] Is =E2=80=9CIgnore this unless you need this=E2=80=9D an new type of =E2= =80=9CPolicyRule=E2=80=9D?

      • There is no concept of error or exception handling<= /u>
      • There is no concept of the subject or the target of a = policy

      [Lind= a] Does your =E2=80=9Csubject=E2=80=9D have the same meaning as the =E2=80= =9CI2NSF subject=E2=80=9D which means bits&bytes extracted from packets? =

      • Adding a new type of policy (e.g., declarative or func= tional)
        will cause a major rewrite of the entire model

        • =C2= =A0

        [Lind= a] Can we say that =C2=A0I2NSF policies have one type =E2=80=9CSubject-Cont= extualStates- action- function? So in I2NSF environment, there is only the notion of adding a ne= w =E2=80=9CPolicyRule=E2=80=9D, but no adding a new policy type. Is this co= rrect statement? =C2=A0

        • There is no approach to detecting and solving policy c= onflicts;
          this is due to the simplistic notion of just using a PDP and a
          PEP for applying policies.

        =C2= =A0

        [Lind= a] in I2NSF, there could be a lot of conflicts, for example, there could be= two rules entered at different time:=

        1.=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 =C2=A0Virtual Network= X can=E2=80=99t access =E2=80=9CYouTube=E2=80=9D,

        2.=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 10.1.1.1 can access = =E2=80=9CYouTube=E2=80=9D (where 10.1.1.1 is a host within the Virtual Netw= ork X).

        Do you call the 2 rules a= bove conflict?

        =C2=A0

        =C2=A0

        4. Recommendations

        =C2=A0

        Given the large amount of probl= ems, I recommend that we not consider PCIM further.

        = [Linda] should I2NSF reference PCIM?

        =C2= =A0

        Thank= you very much. Linda

        =C2=A0

        5. Origin of PCIM/PCIMe<= u>

        =C2=A0

        This is a **theory** section; p= lease skip unless you want to understand the model in more detail.

        =C2=A0

        The PCIM is based on the DMTF C= IM, which is actually a **data model** (despite its name) because it uses r= elational technologies (e.g., keys and weak references) to create its model. PCIM is based on an early version of the CIM (2.4); t= he current version of the CIM is 2.44.1 as of this writing. Since this is t= ied to the CIM, this means that:

        =C2=A0

        =C2=A0=C2=A0 1) Policy is subcl= assed from a more generic class (ManagedElement)

        =C2=A0=C2=A0 2) ALL relationshi= ps (associations, aggregations, and compositions)

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0 are realized as **classes**

        =C2=A0=C2=A0 3) As a result of = 2), relationships are subclassed

        =C2=A0=C2=A0 4) Both attributes= and associations are **inherited**

        =C2=A0=C2=A0 5) The same design= approach (as much as possible) was used in

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 PCIM/PCIMe as was in CIM. Specifically, it was thought better<= u>

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 to define a generic, but optional, relationship instead of not=

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 defining the relationship.

        =C2=A0=C2=A0 6) The CIM does NO= T have a single rooted hierarchy; this makes

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 code generation more complex

        =C2=A0=C2=A0 7) The CIM uses a = proprietary language and is not strictly UML

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 compliant, even though it looks like UML (unfortunately, this<= u>

        =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 language is also called MOF)=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0

        =C2=A0

        Depending on the complexity of = the implementation, the above have been shown to produce problems in large = environments. For example, the spirit of "let's define an attribute or association in case it is useful, and make it optional so = you don't have to worry about it" not only violates some well-know= n software architectural guidelines (e.g., Single Responsibility Principle = and the Liskov Substitution Principle), but it makes things difficult to interoperate with (since you never really kno= w if an attribute or relationship should be instantiated or not).=

        =C2=A0

        =C2=A0

        regards,

        John




    --

    regards,

    John




    --
    regards,
    John
    --001a1142a4d28e47da0526e7b2df-- From nobody Mon Dec 14 23:12:01 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 082231B2BCD for ; Mon, 14 Dec 2015 23:11:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.31 X-Spam-Level: X-Spam-Status: No, score=-3.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_45=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UqmF0MPdseYN for ; Mon, 14 Dec 2015 23:11:52 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40BF51B2BC8 for ; Mon, 14 Dec 2015 23:11:51 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CBP33281; Tue, 15 Dec 2015 07:11:48 +0000 (GMT) Received: from SZXEMA413-HUB.china.huawei.com (10.82.72.72) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 15 Dec 2015 07:11:46 +0000 Received: from SZXEMA502-MBS.china.huawei.com ([169.254.4.87]) by SZXEMA413-HUB.china.huawei.com ([10.82.72.72]) with mapi id 14.03.0235.001; Tue, 15 Dec 2015 15:11:35 +0800 From: "Xialiang (Frank)" To: John Strassner Thread-Topic: =?utf-8?B?562U5aSNOiBbSTJuc2ZdIFNlcnZpY2UgTGF5ZXIgUG9saWNpZXMgLSBQb3N0?= =?utf-8?Q?_1:_Background_Information_on_PCIM?= Thread-Index: AQHRM4t3GNqmcuz2REO8dZSdd+PFf57FUN7ggAWZiwCAAL2+sA== Date: Tue, 15 Dec 2015 07:11:34 +0000 Message-ID: References: <4A95BA014132FF49AE685FAB4B9F17F657DAE627@dfweml701-chm> <4A95BA014132FF49AE685FAB4B9F17F657DAF428@dfweml701-chm> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.135.43.91] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F12AEBE4E2SZXEMA502MBSchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020203.566FBD35.0013, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.4.87, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 4e552fbbf08ed9c704b1ce5c03f61196 Archived-At: Cc: "i2nsf@ietf.org" , "Natale, Bob" , Linda Dunbar Subject: [I2nsf] =?utf-8?b?562U5aSNOiDnrZTlpI06ICBTZXJ2aWNlIExheWVyIFBv?= =?utf-8?q?licies_-_Post_1=3A_Background_Information_on_PCIM?= X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2015 07:11:59 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F12AEBE4E2SZXEMA502MBSchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSm9obiwNCkl04oCZcyBncmVhdCB5b3UgY2FuIGpvaW4gdGhlIHdvcmsgb2YgY2FwYWJpbGl0 eSBpbnRlcmZhY2UgaW5mb3JtYXRpb24gbW9kZWwgSS1ELg0KDQpCLlIuDQpGcmFuaw0KDQrlj5Hk u7bkuro6IEpvaG4gU3RyYXNzbmVyIFttYWlsdG86c3RyYXpwZGpAZ21haWwuY29tXQ0K5Y+R6YCB 5pe26Ze0OiAyMDE15bm0MTLmnIgxNeaXpSAxMTo1MQ0K5pS25Lu25Lq6OiBYaWFsaWFuZyAoRnJh bmspOyBKb2huIFN0cmFzc25lcg0K5oqE6YCBOiBMaW5kYSBEdW5iYXI7IGkybnNmQGlldGYub3Jn OyBOYXRhbGUsIEJvYg0K5Li76aKYOiBSZTog562U5aSNOiBbSTJuc2ZdIFNlcnZpY2UgTGF5ZXIg UG9saWNpZXMgLSBQb3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRpb24gb24gUENJTQ0KDQpIaSBG cmFuaywNCg0Kc29ycnkgZm9yIHRoZSBkZWxheSBpbiByZXBseWluZy4NCg0KPiBSdWxlIHByaW9y aXRpemF0aW9uIGV4YW1wbGUNCltGcmFua106ICBUYWtlIHRoaXMgZXhhbXBsZSwgSSBhbSBhIGxp dHRsZSB3b3JyaWVkIGFib3V0IHRoZSBjb21wbGV4aXR5IGJyb3VnaHQgYnkgdGhlIG5lc3Rpbmcg YW5kIHJlY3Vyc2lvbiBvcGVyYXRpb24uIFRoZXkgYXJlIHBvd2VyZnVsIGJ1dCBhbHNvIGNvbXBs aWNhdGVkLiBJIHRoaW5rIHdlIHNob3VsZCBiZSBjYXJlZnVsIGluIGRlc2lnbmluZyB0aGUgaW5m b3JtYXRpb24gbW9kZWwgdG8gcHJldmVudCBpdCB0byBiZSB0b28gY29tcGxleC4NCg0KPGpjcz4N ClRoYXQgd2FzIHRoZSBwb2ludC4gOi0pIEluIHBhcnRpY3VsYXIsIFBDSU0gYW5kIFBDSU1lIChh bmQgQ0lNKSBjb2xsYXBzZSB1bmRlciB0aGUgd2VpZ2h0IG9mIHRoZSBudW1lcm91cyByZWxhdGlv bnNoaXBzIHRoYXQgbXVzdCBiZSBpbnN0YW50aWF0ZWQuIExvb2tpbmcgYWhlYWQgdG8gZ2VuZXJh dGluZyBZQU5HLCBJIHNlZSBubyBwb2ludCBpbiBidWlsZGluZyBhIG1vZGVsIHRoYXQgcmVxdWly ZXMgY291bnRsZXNzIGxlYWYgbm9kZXMganVzdCB0byBleHByZXNzIHNpbXBsZSBCb29sZWFuIGNs YXVzZXMuDQoNClNVUEEgaXMgZGVzaWduZWQgdG8gZ2l2ZSB0aGUgZGV2ZWxvcGVyIGNob2ljZXMg aW4gaG93IHN1Y2ggY2xhdXNlcyBhcmUgaW1wbGVtZW50ZWQgKGUuZy4sIHRoZSBlbnRpcmUgY2xh dXNlIGFzIG9uZSBvYmplY3QsIHRoZSBlbnRpcmUgY2xhdXNlIGFzIGEgVVJJIChmb3IgZXhhbXBs ZSkgdG8gYSBzY3JpcHQsIGVhY2ggYW5kIGV2ZXJ5IGxpdHRsZSB2YXJpYWJsZSwgb3BlcmF0b3Is IGFuZCB2YWx1ZSBhcyBhbiBvYmplY3QgKHRvIGZhY2lsaXRhdGUgYSBtYWNoaW5lIGJ1aWxkaW5n IHRoaXMgZHluYW1pY2FsbHkpLCBvciBvdGhlcnMgaW4gYmV0d2VlbiB0aGVzZSBzY29wZXMuIE9m IGNvdXJzZSwgSTJOU0YgZG9lc24ndCBoYXZlIHRvIHVzZSBTVVBBLCBidXQgaG9wZWZ1bGx5LCBT VVBBIGNhbiBhbnN3ZXIgcXVlc3Rpb25zIGFib3V0IHdoYXQgdGhlIGJlc3Qgc2VjdXJpdHkgcG9s aWN5IHJ1bGUgc3RydWN0dXJlIHdvdWxkIGJlLg0KPC9qY3M+DQoNCj4gQ29udGV4dC1hd2FyZSBw b2xpY3kgcnVsZXMNCltGcmFua106IFRoaXMgY29udGV4dC1hd2FyZSBwb2xpY3kgcnVsZXMgbWFr ZSBzZW5zZSBmb3IgSTJOU0YgaW4gbXkgb3Bpbmlvbi4gQXJlIHlvdSBnb2luZyB0byBpbnRyb2R1 Y2UgaXQgaW50byBJMk5TRj8NCg0KPGpjcz4NClllcy4gOi0pIEJ1dCB0aGlzIGlzIHdoeSB3ZSBu ZWVkIHRvIGJlIHZlcnkgY2FyZWZ1bCBhYm91dCB0ZXJtaW5vbG9neSAoaS5lLiwgY29udGV4dCku IEkgd291bGQgbGlrZSB0byB3b3JrIHdpdGggeW91IGFuZCB5b3VyIGNvLWF1dGhvcnMgb24geW91 ciBDYXBhYmlsaXR5IEludGVyZmFjZSBpbmZvcm1hdGlvbiBtb2RlbCBJLUQgYXMgb25lIHBsYWNl IHRvIGludHJvZHVjZSB0aGlzLi4uDQo8L2pjcz4NCg0KcmVnYXJkcywNCkpvaG4NCg0KT24gVGh1 LCBEZWMgMTAsIDIwMTUgYXQgMTA6NTIgUE0sIFhpYWxpYW5nIChGcmFuaykgPGZyYW5rLnhpYWxp YW5nQGh1YXdlaS5jb208bWFpbHRvOmZyYW5rLnhpYWxpYW5nQGh1YXdlaS5jb20+PiB3cm90ZToN CkhpIEpvaG4sDQpGaXJzdGx5LCB0aGFua3MgZm9yIHJhaXNpbmcgdGhpcyB2YWx1YWJsZSBkaXNj dXNzaW9uIGFib3V0IEkyTlNGIHBvbGljeSBtb2RlbC4gSXTigJlzIHJlYWxseSB1c2VmdWwgdG8g b3VyIGludGVyZmFjZSBpbmZvcm1hdGlvbiBtb2RlbCBkcmFmdHMuDQpQbGVhc2Ugc2VlIG15IGNv bW1lbnRzIGlubGluZToNCg0KQi5SLg0KRnJhbmsNCuWPkeS7tuS6ujogSTJuc2YgW21haWx0bzpp Mm5zZi1ib3VuY2VzQGlldGYub3JnPG1haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnPl0g5Luj 6KGoIEpvaG4gU3RyYXNzbmVyDQrlj5HpgIHml7bpl7Q6IDIwMTXlubQxMuaciDEx5pelIDQ6NDMN CuaUtuS7tuS6ujogTGluZGEgRHVuYmFyOyBKb2huIFN0cmFzc25lcg0K5oqE6YCBOiBpMm5zZkBp ZXRmLm9yZzxtYWlsdG86aTJuc2ZAaWV0Zi5vcmc+OyBOYXRhbGUsIEJvYg0K5Li76aKYOiBSZTog W0kybnNmXSBTZXJ2aWNlIExheWVyIFBvbGljaWVzIC0gUG9zdCAxOiBCYWNrZ3JvdW5kIEluZm9y bWF0aW9uIG9uIFBDSU0NCg0KSGkgTGluZGEsDQoNCklNSE8sIGEgcHJpb3JpdHkgYXR0cmlidXRl IHNob3VsZCBub3QgYmUgb3Zlcmx5IHVzZWQuIFBDSU0ncyBpbXBsZW1lbnRhdGlvbiBmYWlscyAo c2VlIFBvc3QgMSksIGFuZCBQQ0lNZSdzIGhhcyBvdGhlciBwcm9ibGVtcyAoZGVmaW5lZCBpbiBQ b3N0IDIsIGhvcGVmdWxseSBvdXQgdG9uaWdodCkuIEZvciBleGFtcGxlLCBob3cgZG8geW91IGVu c3VyZSB0aGF0IHRoZSBwcmlvcml0aWVzIG9mIGFsbCBpbnN0YW5jZXMgb2YgYWxsIHJ1bGVzIGFy ZSBhbHdheXMgdXBkYXRlZD8gVGhlcmUgaXMgbm8gbWVjaGFuaXNtIGluIGVpdGhlciBQQ0lNIG9y IFBDSU1lIHRoYXQgZ3VhcmFudGVlcyB0aGF0IHByaW9yaXRpZXMgYXJlIGRldGVybWluaXN0aWNh bGx5IGRldGVybWluZWQuIFJlbWVtYmVyLCB5b3UgY2FuIGhhdmUgcHJpb3JpdGllcyBvbiBwb2xp Y3kgcnVsZXMsIGFuZCBwcmlvcml0aWVzIG9uIHBvbGljeSBncm91cHMuIFNvLCBpZiB5b3UgaGFk Og0KDQogICBHcm91cDEgKHByaW9yaXR5IDUpDQogICAgICBSdWxlIEEgKHByaW9yaXR5IDEwKQ0K ICAgICAgUnVsZSBCIChwcmlvcml0eSAxKQ0KICAgICAgUnVsZSBDIChwcmlvcml0eSA1MCkNCiAg IFJ1bGUgMiAocHJpb3JpdHkgMTApDQogICBHcm91cCAzIChwcmlvcml0eSAzKQ0KICAgICAgUnVs ZSB4LCBwcmlvcml0eSB5DQoNClJ1bGUgMiB3aWxsIGV4ZWN1dGUgZmlyc3QsIGV2ZW4gdGhvdWdo IEdyb3VwMS5SdWxlQy5wcmlvcml0eSA9PSA1MA0KTGlrZXdpc2UsIGl0IGRvZXNuJ3QgbWF0dGVy IGhvdyBtYW55IHJ1bGVzIGFyZSBpbiBHcm91cCAzLCBvciB3aGF0IHRoZWlyIHByaW9yaXRpZXMg YXJlLCB0aGV5IHdpbGwgYWxsIGV4ZWN1dGUgYWZ0ZXIgUnVsZTIsIGZvbGxvd2VkIGJ5IHRoZSBS dWxlcyBpbiBHcm91cDEgKEMsIEEsIEIpLg0KVGhpcyBnZXRzIGhhcmRlciBhcyB5b3Ugc3RhcnQg bmVzdGluZyBncm91cHMgd2l0aGluIGdyb3VwcyBhbmQgcnVsZXMgd2l0aGluIHJ1bGVzLg0KW0Zy YW5rXTogIFRha2UgdGhpcyBleGFtcGxlLCBJIGFtIGEgbGl0dGxlIHdvcnJpZWQgYWJvdXQgdGhl IGNvbXBsZXhpdHkgYnJvdWdodCBieSB0aGUgbmVzdGluZyBhbmQgcmVjdXJzaW9uIG9wZXJhdGlv bi4gVGhleSBhcmUgcG93ZXJmdWwgYnV0IGFsc28gY29tcGxpY2F0ZWQuIEkgdGhpbmsgd2Ugc2hv dWxkIGJlIGNhcmVmdWwgaW4gZGVzaWduaW5nIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCB0byBwcmV2 ZW50IGl0IHRvIGJlIHRvbyBjb21wbGV4Lg0KDQpQQ0lNZSBoYXMgYSBwb2xpY3lEZWNpc2lvblN0 cmF0ZWd5IGF0dHJpYnV0ZSwgd2hpY2ggaXMgdXNlZCB0byBkZWZpbmUgd2hldGhlciB0aGUgY29u dGFpbmVyIChQb2xpY3lHcm91cCBvciBQb2xpY3lSdWxlKSBvZiB0aGUgUG9saWN5UnVsZXMgdXNl cyBmaXJzdC1tYXRjaCBvciBhbGwtbWF0Y2guIFRoaXMgb2JmdXNjYXRlcyB0aGUgdmFsdWUgb2Yg dGhlIHByaW9yaXR5IGF0dHJpYnV0ZS4NCg0KQXMgQm9iIHJpZ2h0bHkgcG9pbnRlZCBvdXQsIGV4 ZWN1dGlvbiBjb250ZXh0IGlzIGV2ZXJ5dGhpbmcuIEluIEZPQ0FMRSwgSSBkZWZpbmVkIGNvbnRl eHQtYXdhcmUgcG9saWN5IHJ1bGVzLiBDb250ZXh0IHdhcyB1c2VkIHRvIHNlbGVjdCBhIHdvcmtp bmcgc2V0IG9mIHBvbGljaWVzOyB0aGlzIHdvcmtpbmcgc2V0IGNvbGxlY3RpdmVseSBjb25zdGl0 dXRlZCB0aGUgaW50ZWxsaWdlbmNlIHRoYXQgdGhlIG1hbmFnZXIgaW1wbGVtZW50ZWQuIFRpZSB0 aGF0IGludG8gZmVlZGJhY2sgZnJvbSB3aGF0IHdhcyBiZWluZyBtYW5hZ2VkLCBhbmQgYXMgdGhl IG92ZXJhbGwgY29udGV4dCBjaGFuZ2VzLCB0aGUgd29ya2luZyBzZXQgb2YgcG9saWNpZXMgY2hh bmdlLiBLaW5kYSBjb29sLiBCdXQgTk9UIG1haW50YWluYWJsZSB1c2luZyBqdXN0IHByaW9yaXR5 Lg0KW0ZyYW5rXTogVGhpcyBjb250ZXh0LWF3YXJlIHBvbGljeSBydWxlcyBtYWtlIHNlbnNlIGZv ciBJMk5TRiBpbiBteSBvcGluaW9uLiBBcmUgeW91IGdvaW5nIHRvIGludHJvZHVjZSBpdCBpbnRv IEkyTlNGPw0KDQpyZWdhcmRzLA0KSm9obg0KDQpPbiBUaHUsIERlYyAxMCwgMjAxNSBhdCA5OjMy IEFNLCBMaW5kYSBEdW5iYXIgPGxpbmRhLmR1bmJhckBodWF3ZWkuY29tPG1haWx0bzpsaW5kYS5k dW5iYXJAaHVhd2VpLmNvbT4+IHdyb3RlOg0KQm9iLA0KDQpUaGFuayB5b3UgdmVyeSBtdWNoIGZv ciBsaXN0aW5nIGRvd24gbXVsdGlwbGUgc2NlbmFyaW9zIGJlbG93Lg0KV2l0aCB3aGF0IHlvdSBk ZXNjcmliZWQsIHRoZSBJMk5TRiBydWxlLXNldCBtYXkgbmVlZCBhIHByaW9yaXR5IHNvIHRoYXQg dGhlIE5TRiBjYW4gZW5mb3JjZSB0aGVtIGFjY29yZGluZ2x5Lg0KSW4gb3VyIGN1cnJlbnQgcHJv ZHVjdCBpbXBsZW1lbnRhdGlvbiwgdGhlIHJvdXRlcuKAmXMgbG9uZ2VzdCBtYXRjaCBwcmluY2lw bGUgaGFzIGJlZW4gdXNlZCwgaS5lLiBydWxlcyBmb3IgaW5kaXZpZHVhbCBob3N0cyBvdmVycmlk ZSB0aGUgcnVsZXMgZm9yIHRoZSBzdWJuZXQgdG8gd2hpY2ggdGhhdCBob3N0cyBiZWxvbmcuDQpC dXQgdGhlcmUgY291bGQgYmUgbW9yZSBjb21wbGljYXRlZCBjb25mbGljdCB0aGF0IHdoYXQgaXMg bGlzdGVkIGJlbG93LiBIYXZpbmcgYSBwcmlvcml0eSBjYW4gYmUgbW9yZSBwcmVjaXNlLg0KDQoN CkxpbmRhDQoNCkZyb206IE5hdGFsZSwgQm9iIFttYWlsdG86Uk5BVEFMRUBtaXRyZS5vcmc8bWFp bHRvOlJOQVRBTEVAbWl0cmUub3JnPl0NClNlbnQ6IFRodXJzZGF5LCBEZWNlbWJlciAxMCwgMjAx NSAxMjo0NyBBTQ0KVG86IExpbmRhIER1bmJhcjsgSm9obiBTdHJhc3NuZXINCkNjOiBpMm5zZkBp ZXRmLm9yZzxtYWlsdG86aTJuc2ZAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSRTogW0kybnNmXSBTZXJ2 aWNlIExheWVyIFBvbGljaWVzIC0gUG9zdCAxOiBCYWNrZ3JvdW5kIEluZm9ybWF0aW9uIG9uIFBD SU0NCg0KSGkgTGluZGEsDQoNCklucHV0IGhlcmUgZnJvbSBhIGx1cmtlciDigKYgY2FsaWJyYXRl IGFjY29yZGluZ2x5IQ0KDQpZb3UgYXNrZWQ6DQrigJxbTGluZGFdIGluIEkyTlNGLCB0aGVyZSBj b3VsZCBiZSBhIGxvdCBvZiBjb25mbGljdHMsIGZvciBleGFtcGxlLCB0aGVyZSBjb3VsZCBiZSB0 d28gcnVsZXMgZW50ZXJlZCBhdCBkaWZmZXJlbnQgdGltZToNCg0KMS4gICAgICAgIFZpcnR1YWwg TmV0d29yayBYIGNhbuKAmXQgYWNjZXNzIOKAnFlvdVR1YmXigJ0sDQoNCjIuICAgICAgIDEwLjEu MS4xIGNhbiBhY2Nlc3Mg4oCcWW91VHViZeKAnSAod2hlcmUgMTAuMS4xLjEgaXMgYSBob3N0IHdp dGhpbiB0aGUgVmlydHVhbCBOZXR3b3JrIFgpLg0KDQpEbyB5b3UgY2FsbCB0aGUgMiBydWxlcyBh Ym92ZSBjb25mbGljdD/igJ0NCg0KVGhlIGFuc3dlciBpcyDigJxpdCBkZXBlbmRz4oCdIOKApiBk ZXBlbmRzIG9uIGEgYnJvYWRlciBwb2xpY3kgZXhlY3V0aW9uIGNvbnRleHQg4oCmIGEgY29uY2Vw dCB0aGF0IFBDSU0gaXRzZWxmIGRvZXMgbm90IGRpcmVjdGx5IHN1cHBvcnQuIEZvciBleGFtcGxl LCB0aGF0IGJyb2FkZXIgY29udGV4dCBjb3VsZCBzdGlwdWxhdGUgKHZpYSBwb2xpY3kpIHRoYXQg IzEgaXMgdGhlIGRlZmF1bHQgYnV0IGV4cGxpY2l0IGV4Y2VwdGlvbiBzcGVjaWZpY2F0aW9ucyBs aWtlICMyIGNhbiBvdmVycmlkZSB0aGUgZGVmYXVsdCDigKYgYWx0ZXJuYXRpdmVseSwgdGhhdCBi cm9hZGVyIGNvbnRleHQgY291bGQgc3RpcHVsYXRlIHRoYXQgIzEgaXMgYWJzb2x1dGUgYW5kIGFu eSBhdHRlbXB0IHRvIHNwZWNpZnkgKHByZWZlcmFibHkpIG9yIGV4ZWN1dGUgIzIgd291bGQgYmUg ZGVuaWVkIOKApiB0aG9zZSBhcmUgb25seSB0d28gZXhhbXBsZXMsIHRoZXJlIGFyZSBtdWx0aXBs ZSBwb3RlbnRpYWxseSB2YWxpZCB2YXJpYXRpb25zLiBIb3cgbXVjaCBvZiB0aGF0IGNvbnRleHQg YSBncm91cCB3YW50cyB0byBzdGFuZGFyZGl6ZSBpcyBhbiBpbXBvcnRhbnQgZGVjaXNpb24gZm9y IHRoZSBncm91cCB0byB1bmRlcnN0YW5kIGFuZCBtYWtlIOKApiBQQ0lNIGl0c2VsZiB3aWxsIG5v dCB0YWtlIHlvdSB2ZXJ5IGZhciwgaG93ZXZlci4NCkF2YW50aSwNCkJvYk4NCg0KRnJvbTogSTJu c2YgW21haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgTGluZGEgRHVu YmFyDQpTZW50OiBUdWVzZGF5LCBEZWNlbWJlciAwOCwgMjAxNSA0OjExIFBNDQpUbzogSm9obiBT dHJhc3NuZXIgPHN0cmF6cGRqQGdtYWlsLmNvbTxtYWlsdG86c3RyYXpwZGpAZ21haWwuY29tPj47 IGkybnNmQGlldGYub3JnPG1haWx0bzppMm5zZkBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbSTJu c2ZdIFNlcnZpY2UgTGF5ZXIgUG9saWNpZXMgLSBQb3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRp b24gb24gUENJTQ0KDQpKb2huLA0KDQpUaGFuayB5b3UgdmVyeSBtdWNoIGZvciB0aGUgaW4tZGVw dGggYW5hbHlzaXMgb2YgUENJTSBhbmQgaXRzIHN1aXRhYmlsaXR5IGFzIHNvbWV0aGluZyB0aGF0 IEkyTlNGIHNob3VsZCBiZSBiYXNlZCBvbi4gV2hhdCB5b3Ugd3JpdGUgaXMgdmVyeSB2YWx1YWJs ZS4gSSB0aGluayB0aGUgYW5hbHlzaXMgc2hvdWxkIGJlIGFkZGVkIHRvIHRoZSBJMk5TRiBnYXAg YW5hbHlzaXMsIChvciBiZSBhIHN0YW5kYWxvbmUgUG9saWN5IEFuYWx5c2lzIElEKS4NCg0KSSBo YXZlIHNvbWUgcXVlc3Rpb25zIGluc2VydGVkIGJlbG93Og0KDQpGcm9tOiBJMm5zZiBbbWFpbHRv OmkybnNmLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBKb2huIFN0cmFzc25lcg0KU2Vu dDogU3VuZGF5LCBEZWNlbWJlciAwNiwgMjAxNSA3OjAxIFBNDQpUbzogaTJuc2ZAaWV0Zi5vcmc8 bWFpbHRvOmkybnNmQGlldGYub3JnPg0KU3ViamVjdDogW0kybnNmXSBTZXJ2aWNlIExheWVyIFBv bGljaWVzIC0gUG9zdCAxOiBCYWNrZ3JvdW5kIEluZm9ybWF0aW9uIG9uIFBDSU0NCg0KPFNuaXBw ZWQ+DQoNCjIuICBCcmllZiBkZXNjcmlwdGlvbiBvZiBQQ0lNDQoNClRoZSBQQ0lNIENsYXNzIEhp ZXJhcmNoeSBpcyB2ZXJ5IHNpbXBsZSwgYXMgdGhpcyBpcyBhIENBIChjb25kaXRpb24tYWN0aW9u KSBtb2RlbC4gRXZlbnRzIGFyZSBOT1QgcmVwcmVzZW50ZWQuIFBDSU0gZGVmaW5lcyBhIFBvbGlj eVJ1bGUsIGEgUG9saWN5R3JvdXAgKGdyb3VwIG9mIFBvbGljeVJ1bGVzKSwgUG9saWN5Q29uZGl0 aW9uLCBhbmQgUG9saWN5QWN0aW9uLiBUaGVzZSBhcmUgYWxsIHNpYmxpbmdzOyB0aGVpciBjb21t b24gc3VwZXJjbGFzcyBpcyBjYWxsZWQgUG9saWN5LCBhcyBzaG93biBiZWxvdzoNCg0KTWFuYWdl ZEVsZW1lbnQgKGFic3RyYWN0KQ0KICB8DQogICstLS1Qb2xpY3kgKGFic3RyYWN0KQ0KICB8ICAg ICB8DQogIHwgICAgICstLS1Qb2xpY3lHcm91cA0KICB8ICAgICB8DQogIHwgICAgICstLS1Qb2xp Y3lSdWxlDQogIHwgICAgIHwNCiAgfCAgICAgKy0tLVBvbGljeUNvbmRpdGlvbiAoYWJzdHJhY3Qp DQogIHwgICAgIHwgICAgICB8DQogIHwgICAgIHwgICAgICArLS0tUG9saWN5VGltZVBlcmlvZENv bmRpdGlvbg0KICB8ICAgICB8ICAgICAgfA0KICB8ICAgICB8ICAgICAgKy0tLVZlbmRvclBvbGlj eUNvbmRpdGlvbg0KICB8ICAgICB8DQogIHwgICAgICstLS1Qb2xpY3lBY3Rpb24gKGFic3RyYWN0 KQ0KICB8ICAgICAgICAgICAgfA0KICB8ICAgICAgICAgICAgKy0tLVZlbmRvclBvbGljeUFjdGlv bg0KDQpOb3RlOiBQQ0lNIGRvZXMgaGF2ZSBhIHNpbXBsZSBub3Rpb24gb2YgUm9sZXMsIGJ1dCBp bXBsZW1lbnRzIHRoZW0gYXMgYXR0cmlidXRlcywgaW5zdGVhZCBvZiBvYmplY3RzLiBUaGlzIGlz IG5vdCBzY2FsYWJsZSwgYW5kIGRvZXMgbm90IGZ1bGx5IHJlYWxpemUgdGhlIHBvd2VyIG9mIHVz aW5nIHJvbGVzLiBUaGlzIHdpbGwgYmUgZGlzY3Vzc2VkIG1vcmUgaW4gUG9zdCAzLg0KDQpOb3Rl OiBJdCBpcyBwb3NzaWJsZSB0byBkZWZpbmUgbGltaXRlZCBjb25zdHJhaW50cyBpbiBQQ0lNIGFz IGNvbmRpdGlvbnMuIEZvciBleGFtcGxlLCB0aGUgVmVuZG9yUG9saWN5Q29uZGl0aW9uIGNsYXNz IGhhcyB0d28gYXR0cmlidXRlcywgQ29uc3RyYWludCBhbmQgQ29uc3RyYWludEVuY29kaW5nLCB0 aGF0IGRvIHRoaXMuIFRoaXMgd2lsbCBiZSBkaXNjdXNzZWQgbW9yZSBpbiBQb3N0IDQuDQoNCk5v dGU6IENvbnRleHQgaXMgTk9UIGRlZmluZWQgaW4gdGhlIFBDSU0uDQoNCltMaW5kYV0gIERvIHlv dSBhZ3JlZSB0aGF0IOKAnENvbmRpdGlvbiBvZiB0aGUgUENJTeKAnSA9PSDigJxJMk5TRiBzdWJq ZWN04oCdICYg4oCcdGhlIENvbnRleHR1YWwgc3RhdGVzIChvciB0aGUgSTJOU0Ygb2JqZWN0KeKA nT8NCg0KDQozLiAgU3VtbWFyeTogbWFpbiBkcmF3YmFja3Mgb2YgdXNpbmcgUENJTQ0KDQpOb3Rl IHRoYXQgdGhlIGN1cnJlbnQgQ0lNIFBvbGljeSBNb2RlbCAoMi40NC4xKSBpcyBzaWduaWZpY2Fu dGx5IGRpZmZlcmVudCB0aGFuIGVpdGhlciBQQ0lNIG9yIFBDSU1lLiBQQ0lNIGlzIGJhc2VkIG9u IENJTSAyLjQ7IFBDSU1lIGlzIGJhc2VkIG9uIENJTSAyLjUuIFBDSU1lIGlzIE5PVCBiYWNrd2Fy ZHMgY29tcGF0aWJsZSB3aXRoIFBDSU0gaW4gYWxsIGFyZWFzLg0KDQpDcml0aWNhbCBQcm9ibGVt czoNCg0KICAqICAgVGhlcmUgaXMgbm8gdW5pcXVlIElEIHRoYXQgY2FuIGJlIHVzZWQgdG8gZGlz dGluZ3Vpc2ggZGlmZmVyZW50DQppbnN0YW5jZXMgb2YgdGhlIHNhbWUgUG9saWN5UnVsZSwgUG9s aWN5R3JvdXAsIFBvbGljeUNvbmRpdGlvbiwNCm9yIFBvbGljeUFjdGlvbi4NCltMaW5kYV0gQ2Fu IHdlIHNpbXBseSBjcmVhdGUgYW4gSUQgKHN0cmluZyBvciBudW1lcmljKSBmb3IgaW5zdGFuY2Vz IG9mIHRoZSBzYW1lIFBvbGljeVJ1bGU/IE9yIGl0IGlzIG1vcmUgY29tcGxpY2F0ZWQ/DQoNCiAg KiAgIFJlbGF0aW9uc2hpcHMgYXJlIGltcGxlbWVudGVkIGJ5IGRlZmluaW5nIGFuIGFic3RyYWN0 IGNsYXNzDQp3aXRoIGtleXMsIGFuZCB0aGVuIG92ZXJyaWRpbmcgdGhlIGtleXMgaW4gdGhlIHN1 YmNsYXNzZXMgb2YgdGhlDQpyZWxhdGlvbnNoaXAuIFRoaXMgaXMgYnJva2VuLiBXb3VsZCB5b3Ug b3ZlcnJpZGUga2V5cyBpbiBhbiBSREJNUz8NCltMaW5kYV0gSXMgdGhlIOKAnEtleeKAnSB0byBk aWZmZXJlbnRpYXRpbmcgZGlmZmVyZW50IOKAnFBvbGljeVJ1bGXigJ0/ICAgQ2FuIHlvdSBnaXZl IGFuIGV4YW1wbGUgb2Yg4oCcc3ViY2xhc3NlcyBvZiB0aGUgcmVsYXRpb25zaGlw4oCdPw0KV2hh dCBldmVudHMgY2FuIGNhdXNlIOKAnG92ZXJyaWRpbmcgdGhlIGtleXMgaW4gdGhlIHN1YmNsYXNz ZXMgb2YgdGhlIHJlbGF0aW9uc2hpcOKAnT8NCg0KICAqICAgTW9zdCBvZiB0aGUgY2xhc3NlcyB0 aGF0IGFyZSB1c2VkIHRvIGltcGxlbWVudCB0aGUgcmVsYXRpb25zaGlwcw0KZG8gTk9UIGhhdmUg YXR0cmlidXRlcywgc28gaXQgaXMgaW1wb3NzaWJsZSB0byByZXN0cmljdCB3aGljaA0KY2xhc3Nl cyBhcmUgcmVsYXRlZCB0byB3aGljaCBvdGhlciBjbGFzc2VzIChlLmcuLCBieSBjb250ZXh0KS4N ClB1dCBhbm90aGVyIHdheSwgdGhlIHNhbWUgcmVsYXRpb25zaGlwIG11c3QgYWx3YXlzIGJlIHVz ZWQNCmJldHdlZW4gdHdvIHR5cGVzLCBldmVuIGlmIHRoZSBzZW1hbnRpY3MgdmFyaWVzLiAoVGhl IHR3bw0KZXhjZXB0aW9ucyBhcmUgUG9saWN5Q29uZGl0aW9uSW5Qb2xpY3lSdWxlIGFuZA0KUG9s aWN5QWN0aW9uSW5Qb2xpY3lSdWxlKS4NCltMaW5kYV0gRG9lcyDigJxjbGFzc2Vz4oCdID09IOKA nFBvbGljeVJ1bGXigJ0/DQoNCiAgKiAgIFRoZSAiaWdub3JlIHRoaXMgdW5sZXNzIHlvdSBuZWVk IHRoaXMiIHBoaWxvc29waHkgZG9lcyBub3QNCndvcmsuIEhvdyBkbyB5b3Uga25vdyBpZiBvdGhl ciBpbXBsZW1lbnRhdGlvbnMgdGhhdCB5b3UgYXJlDQpzdXBwb3NlZCB0byBpbnRlcm9wZXJhdGUg d2l0aCBhcmUgdXNpbmcgdGhlbT8NCltMaW5kYV0gSXMg4oCcSWdub3JlIHRoaXMgdW5sZXNzIHlv dSBuZWVkIHRoaXPigJ0gYW4gbmV3IHR5cGUgb2Yg4oCcUG9saWN5UnVsZeKAnT8NCg0KICAqICAg VGhlcmUgaXMgbm8gY29uY2VwdCBvZiBlcnJvciBvciBleGNlcHRpb24gaGFuZGxpbmcNCiAgKiAg IFRoZXJlIGlzIG5vIGNvbmNlcHQgb2YgdGhlIHN1YmplY3Qgb3IgdGhlIHRhcmdldCBvZiBhIHBv bGljeQ0KW0xpbmRhXSBEb2VzIHlvdXIg4oCcc3ViamVjdOKAnSBoYXZlIHRoZSBzYW1lIG1lYW5p bmcgYXMgdGhlIOKAnEkyTlNGIHN1YmplY3TigJ0gd2hpY2ggbWVhbnMgYml0cyZieXRlcyBleHRy YWN0ZWQgZnJvbSBwYWNrZXRzPw0KDQogICogICBBZGRpbmcgYSBuZXcgdHlwZSBvZiBwb2xpY3kg KGUuZy4sIGRlY2xhcmF0aXZlIG9yIGZ1bmN0aW9uYWwpDQp3aWxsIGNhdXNlIGEgbWFqb3IgcmV3 cml0ZSBvZiB0aGUgZW50aXJlIG1vZGVsDQoNCltMaW5kYV0gQ2FuIHdlIHNheSB0aGF0ICBJMk5T RiBwb2xpY2llcyBoYXZlIG9uZSB0eXBlIOKAnFN1YmplY3QtQ29udGV4dHVhbFN0YXRlcy0gYWN0 aW9uLSBmdW5jdGlvbj8gU28gaW4gSTJOU0YgZW52aXJvbm1lbnQsIHRoZXJlIGlzIG9ubHkgdGhl IG5vdGlvbiBvZiBhZGRpbmcgYSBuZXcg4oCcUG9saWN5UnVsZeKAnSwgYnV0IG5vIGFkZGluZyBh IG5ldyBwb2xpY3kgdHlwZS4gSXMgdGhpcyBjb3JyZWN0IHN0YXRlbWVudD8NCg0KICAqICAgVGhl cmUgaXMgbm8gYXBwcm9hY2ggdG8gZGV0ZWN0aW5nIGFuZCBzb2x2aW5nIHBvbGljeSBjb25mbGlj dHM7DQp0aGlzIGlzIGR1ZSB0byB0aGUgc2ltcGxpc3RpYyBub3Rpb24gb2YganVzdCB1c2luZyBh IFBEUCBhbmQgYQ0KUEVQIGZvciBhcHBseWluZyBwb2xpY2llcy4NCg0KW0xpbmRhXSBpbiBJMk5T RiwgdGhlcmUgY291bGQgYmUgYSBsb3Qgb2YgY29uZmxpY3RzLCBmb3IgZXhhbXBsZSwgdGhlcmUg Y291bGQgYmUgdHdvIHJ1bGVzIGVudGVyZWQgYXQgZGlmZmVyZW50IHRpbWU6DQoNCjEuICAgICAg ICBWaXJ0dWFsIE5ldHdvcmsgWCBjYW7igJl0IGFjY2VzcyDigJxZb3VUdWJl4oCdLA0KDQoyLiAg ICAgICAxMC4xLjEuMSBjYW4gYWNjZXNzIOKAnFlvdVR1YmXigJ0gKHdoZXJlIDEwLjEuMS4xIGlz IGEgaG9zdCB3aXRoaW4gdGhlIFZpcnR1YWwgTmV0d29yayBYKS4NCg0KRG8geW91IGNhbGwgdGhl IDIgcnVsZXMgYWJvdmUgY29uZmxpY3Q/DQoNCg0KDQo0LiBSZWNvbW1lbmRhdGlvbnMNCg0KR2l2 ZW4gdGhlIGxhcmdlIGFtb3VudCBvZiBwcm9ibGVtcywgSSByZWNvbW1lbmQgdGhhdCB3ZSBub3Qg Y29uc2lkZXIgUENJTSBmdXJ0aGVyLg0KW0xpbmRhXSBzaG91bGQgSTJOU0YgcmVmZXJlbmNlIFBD SU0/DQoNClRoYW5rIHlvdSB2ZXJ5IG11Y2guIExpbmRhDQoNCjUuIE9yaWdpbiBvZiBQQ0lNL1BD SU1lDQoNClRoaXMgaXMgYSAqKnRoZW9yeSoqIHNlY3Rpb247IHBsZWFzZSBza2lwIHVubGVzcyB5 b3Ugd2FudCB0byB1bmRlcnN0YW5kIHRoZSBtb2RlbCBpbiBtb3JlIGRldGFpbC4NCg0KVGhlIFBD SU0gaXMgYmFzZWQgb24gdGhlIERNVEYgQ0lNLCB3aGljaCBpcyBhY3R1YWxseSBhICoqZGF0YSBt b2RlbCoqIChkZXNwaXRlIGl0cyBuYW1lKSBiZWNhdXNlIGl0IHVzZXMgcmVsYXRpb25hbCB0ZWNo bm9sb2dpZXMgKGUuZy4sIGtleXMgYW5kIHdlYWsgcmVmZXJlbmNlcykgdG8gY3JlYXRlIGl0cyBt b2RlbC4gUENJTSBpcyBiYXNlZCBvbiBhbiBlYXJseSB2ZXJzaW9uIG9mIHRoZSBDSU0gKDIuNCk7 IHRoZSBjdXJyZW50IHZlcnNpb24gb2YgdGhlIENJTSBpcyAyLjQ0LjEgYXMgb2YgdGhpcyB3cml0 aW5nLiBTaW5jZSB0aGlzIGlzIHRpZWQgdG8gdGhlIENJTSwgdGhpcyBtZWFucyB0aGF0Og0KDQog ICAxKSBQb2xpY3kgaXMgc3ViY2xhc3NlZCBmcm9tIGEgbW9yZSBnZW5lcmljIGNsYXNzIChNYW5h Z2VkRWxlbWVudCkNCiAgIDIpIEFMTCByZWxhdGlvbnNoaXBzIChhc3NvY2lhdGlvbnMsIGFnZ3Jl Z2F0aW9ucywgYW5kIGNvbXBvc2l0aW9ucykNCiAgICAgICBhcmUgcmVhbGl6ZWQgYXMgKipjbGFz c2VzKioNCiAgIDMpIEFzIGEgcmVzdWx0IG9mIDIpLCByZWxhdGlvbnNoaXBzIGFyZSBzdWJjbGFz c2VkDQogICA0KSBCb3RoIGF0dHJpYnV0ZXMgYW5kIGFzc29jaWF0aW9ucyBhcmUgKippbmhlcml0 ZWQqKg0KICAgNSkgVGhlIHNhbWUgZGVzaWduIGFwcHJvYWNoIChhcyBtdWNoIGFzIHBvc3NpYmxl KSB3YXMgdXNlZCBpbg0KICAgICAgICBQQ0lNL1BDSU1lIGFzIHdhcyBpbiBDSU0uIFNwZWNpZmlj YWxseSwgaXQgd2FzIHRob3VnaHQgYmV0dGVyDQogICAgICAgIHRvIGRlZmluZSBhIGdlbmVyaWMs IGJ1dCBvcHRpb25hbCwgcmVsYXRpb25zaGlwIGluc3RlYWQgb2Ygbm90DQogICAgICAgIGRlZmlu aW5nIHRoZSByZWxhdGlvbnNoaXAuDQogICA2KSBUaGUgQ0lNIGRvZXMgTk9UIGhhdmUgYSBzaW5n bGUgcm9vdGVkIGhpZXJhcmNoeTsgdGhpcyBtYWtlcw0KICAgICAgICBjb2RlIGdlbmVyYXRpb24g bW9yZSBjb21wbGV4DQogICA3KSBUaGUgQ0lNIHVzZXMgYSBwcm9wcmlldGFyeSBsYW5ndWFnZSBh bmQgaXMgbm90IHN0cmljdGx5IFVNTA0KICAgICAgICBjb21wbGlhbnQsIGV2ZW4gdGhvdWdoIGl0 IGxvb2tzIGxpa2UgVU1MICh1bmZvcnR1bmF0ZWx5LCB0aGlzDQogICAgICAgIGxhbmd1YWdlIGlz IGFsc28gY2FsbGVkIE1PRikNCg0KRGVwZW5kaW5nIG9uIHRoZSBjb21wbGV4aXR5IG9mIHRoZSBp bXBsZW1lbnRhdGlvbiwgdGhlIGFib3ZlIGhhdmUgYmVlbiBzaG93biB0byBwcm9kdWNlIHByb2Js ZW1zIGluIGxhcmdlIGVudmlyb25tZW50cy4gRm9yIGV4YW1wbGUsIHRoZSBzcGlyaXQgb2YgImxl dCdzIGRlZmluZSBhbiBhdHRyaWJ1dGUgb3IgYXNzb2NpYXRpb24gaW4gY2FzZSBpdCBpcyB1c2Vm dWwsIGFuZCBtYWtlIGl0IG9wdGlvbmFsIHNvIHlvdSBkb24ndCBoYXZlIHRvIHdvcnJ5IGFib3V0 IGl0IiBub3Qgb25seSB2aW9sYXRlcyBzb21lIHdlbGwta25vd24gc29mdHdhcmUgYXJjaGl0ZWN0 dXJhbCBndWlkZWxpbmVzIChlLmcuLCBTaW5nbGUgUmVzcG9uc2liaWxpdHkgUHJpbmNpcGxlIGFu ZCB0aGUgTGlza292IFN1YnN0aXR1dGlvbiBQcmluY2lwbGUpLCBidXQgaXQgbWFrZXMgdGhpbmdz IGRpZmZpY3VsdCB0byBpbnRlcm9wZXJhdGUgd2l0aCAoc2luY2UgeW91IG5ldmVyIHJlYWxseSBr bm93IGlmIGFuIGF0dHJpYnV0ZSBvciByZWxhdGlvbnNoaXAgc2hvdWxkIGJlIGluc3RhbnRpYXRl ZCBvciBub3QpLg0KDQoNCnJlZ2FyZHMsDQpKb2huDQoNCg0KDQotLQ0KcmVnYXJkcywNCkpvaG4N Cg0KDQoNCi0tDQpyZWdhcmRzLA0KSm9obg0K --_000_C02846B1344F344EB4FAA6FA7AF481F12AEBE4E2SZXEMA502MBSchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQOWui+S9kyI7DQoJ cGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5 OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQovKiBTdHlsZSBEZWZp bml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXtt YXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OuWui+S9kzt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQpwDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsN CgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdp bi1sZWZ0OjBjbTsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OuWui+S9kzt9DQpw Lk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUsIGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoi5om55rOo5qGG5paH5pysIENoYXIiOw0KCW1h cmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo5LjBwdDsNCglm b250LWZhbWlseTrlrovkvZM7fQ0Kc3Bhbi5DaGFyDQoJe21zby1zdHlsZS1uYW1lOiLmibnms6jm oYbmlofmnKwgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5r OuaJueazqOahhuaWh+acrDsNCglmb250LWZhbWlseTrlrovkvZM7fQ0Kc3Bhbi5FbWFpbFN0eWxl MjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGli cmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21z by1zdHlsZS10eXBlOmV4cG9ydC1vbmx5O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYx Mi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDkwLjBwdCA3Mi4wcHQgOTAuMHB0O30NCmRp di5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9u cyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MjMxMjQwMjQwOw0KCW1zby1saXN0LXRlbXBs YXRlLWlkczotODg4Mzk4NTI2O30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDozNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6MjY0OTI1Mzc2Ow0KCW1zby1saXN0LXRlbXBs YXRlLWlkczoxODc3NzU4MTU0O30NCkBsaXN0IGwxOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDozNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDINCgl7bXNvLWxpc3QtaWQ6MzA5MDE1NzkxOw0KCW1zby1saXN0LXRlbXBs YXRlLWlkczotMjAxNjk3MjQyO30NCkBsaXN0IGwyOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDozNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDMNCgl7bXNvLWxpc3QtaWQ6MTQxMjQ1OTk4MzsNCgltc28tbGlzdC10ZW1w bGF0ZS1pZHM6LTExNjY3NjkwODg7fQ0KQGxpc3QgbDM6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpAbGlzdCBsNA0KCXttc28tbGlzdC1pZDoxNDU2NzQ5MTcxOw0KCW1zby1saXN0LXRl bXBsYXRlLWlkczo0MzY2NDAyNTg7fQ0KQGxpc3QgbDQ6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjM2LjBwdDsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LTE4LjBwdDsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5 bWJvbDt9DQpAbGlzdCBsNQ0KCXttc28tbGlzdC1pZDoxNzc3NjAxMjY4Ow0KCW1zby1saXN0LXRl bXBsYXRlLWlkczotMTAyNjc3ODg4Njt9DQpAbGlzdCBsNTpsZXZlbDENCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6MzYuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6 U3ltYm9sO30NCkBsaXN0IGw2DQoJe21zby1saXN0LWlkOjE4MzU0OTE1NDE7DQoJbXNvLWxpc3Qt dGVtcGxhdGUtaWRzOjUwNjQ5OTIwNjt9DQpAbGlzdCBsNjpsZXZlbDENCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6MzYuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6 U3ltYm9sO30NCm9sDQoJe21hcmdpbi1ib3R0b206MGNtO30NCnVsDQoJe21hcmdpbi1ib3R0b206 MGNtO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1 bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEt LVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzpp ZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtl bmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IlpILUNOIiBsaW5rPSJibHVlIiB2bGluaz0i cHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PkhpIEpvaG4sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JdOKA mXMgZ3JlYXQgeW91IGNhbiBqb2luIHRoZSB3b3JrIG9mIGNhcGFiaWxpdHkgaW50ZXJmYWNlIGlu Zm9ybWF0aW9uIG1vZGVsIEktRC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ Qi5SLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+RnJhbms8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1 QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij7lj5Hku7bkuro8c3BhbiBsYW5n PSJFTi1VUyI+Ojwvc3Bhbj48L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdCI+IEpvaG4gU3RyYXNzbmVyIFttYWlsdG86c3RyYXpwZGpAZ21haWwuY29t XQ0KPGJyPg0KPC9zcGFuPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij7lj5HpgIHm l7bpl7Q8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+IDIwMTU8L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQiPuW5tDxzcGFuIGxhbmc9IkVOLVVTIj4xMjwvc3Bhbj7mnIg8c3BhbiBs YW5nPSJFTi1VUyI+MTU8L3NwYW4+5pelPHNwYW4gbGFuZz0iRU4tVVMiPiAxMTo1MTxicj4NCjwv c3Bhbj48Yj7mlLbku7bkuro8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFu Zz0iRU4tVVMiPiBYaWFsaWFuZyAoRnJhbmspOyBKb2huIFN0cmFzc25lcjxicj4NCjwvc3Bhbj48 Yj7mioTpgIE8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMi PiBMaW5kYSBEdW5iYXI7IGkybnNmQGlldGYub3JnOyBOYXRhbGUsIEJvYjxicj4NCjwvc3Bhbj48 Yj7kuLvpopg8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMi PiBSZTogPC9zcGFuPuetlOWkjTxzcGFuIGxhbmc9IkVOLVVTIj46IFtJMm5zZl0gU2VydmljZSBM YXllciBQb2xpY2llcyAtIFBvc3QgMTogQmFja2dyb3VuZCBJbmZvcm1hdGlvbiBvbiBQQ0lNPG86 cD48L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkhpIEZyYW5rLDxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+c29ycnkgZm9y IHRoZSBkZWxheSBpbiByZXBseWluZy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiPiZndDsgUnVsZSBwcmlvcml0aXphdGlvbiBleGFtcGxlPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltGcmFu a106Jm5ic3A7IFRha2UgdGhpcyBleGFtcGxlLCBJIGFtIGEgbGl0dGxlIHdvcnJpZWQgYWJvdXQg dGhlIGNvbXBsZXhpdHkgYnJvdWdodCBieSB0aGUNCiBuZXN0aW5nIGFuZCByZWN1cnNpb24gb3Bl cmF0aW9uLiBUaGV5IGFyZSBwb3dlcmZ1bCBidXQgYWxzbyBjb21wbGljYXRlZC4gSSB0aGluayB3 ZSBzaG91bGQgYmUgY2FyZWZ1bCBpbiBkZXNpZ25pbmcgdGhlIGluZm9ybWF0aW9uIG1vZGVsIHRv IHByZXZlbnQgaXQgdG8gYmUgdG9vIGNvbXBsZXguPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZsdDtqY3MmZ3Q7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiPlRoYXQgd2FzIHRoZSBwb2ludC4gOi0pIEluIHBhcnRpY3VsYXIsIFBDSU0gYW5k IFBDSU1lIChhbmQgQ0lNKSBjb2xsYXBzZSB1bmRlciB0aGUgd2VpZ2h0IG9mIHRoZSBudW1lcm91 cyByZWxhdGlvbnNoaXBzIHRoYXQgbXVzdCBiZSBpbnN0YW50aWF0ZWQuIExvb2tpbmcgYWhlYWQg dG8gZ2VuZXJhdGluZyBZQU5HLCBJIHNlZSBubyBwb2ludCBpbiBidWlsZGluZyBhIG1vZGVsIHRo YXQNCiByZXF1aXJlcyBjb3VudGxlc3MgbGVhZiBub2RlcyBqdXN0IHRvIGV4cHJlc3Mgc2ltcGxl IEJvb2xlYW4gY2xhdXNlcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiPlNVUEEgaXMgZGVzaWduZWQgdG8gZ2l2ZSB0aGUgZGV2ZWxvcGVyIGNob2ljZXMg aW4gaG93IHN1Y2ggY2xhdXNlcyBhcmUgaW1wbGVtZW50ZWQgKGUuZy4sIHRoZSBlbnRpcmUgY2xh dXNlIGFzIG9uZSBvYmplY3QsIHRoZSBlbnRpcmUgY2xhdXNlIGFzIGEgVVJJIChmb3IgZXhhbXBs ZSkgdG8gYSBzY3JpcHQsIGVhY2ggYW5kIGV2ZXJ5IGxpdHRsZSB2YXJpYWJsZSwgb3BlcmF0b3Is DQogYW5kIHZhbHVlIGFzIGFuIG9iamVjdCAodG8gZmFjaWxpdGF0ZSBhIG1hY2hpbmUgYnVpbGRp bmcgdGhpcyBkeW5hbWljYWxseSksIG9yIG90aGVycyBpbiBiZXR3ZWVuIHRoZXNlIHNjb3Blcy4g T2YgY291cnNlLCBJMk5TRiBkb2Vzbid0IGhhdmUgdG8gdXNlIFNVUEEsIGJ1dCBob3BlZnVsbHks IFNVUEEgY2FuIGFuc3dlciBxdWVzdGlvbnMgYWJvdXQgd2hhdCB0aGUgYmVzdCBzZWN1cml0eSBw b2xpY3kgcnVsZSBzdHJ1Y3R1cmUgd291bGQgYmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZsdDsv amNzJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT Ij4mZ3Q7IENvbnRleHQtYXdhcmUgcG9saWN5IHJ1bGVzPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj5bRnJhbmtdOiBUaGlzIGNvbnRleHQtYXdhcmUgcG9saWN5IHJ1bGVzIG1ha2Ugc2Vuc2Ug Zm9yIEkyTlNGIGluIG15IG9waW5pb24uIEFyZSB5b3UgZ29pbmcgdG8gaW50cm9kdWNlDQogaXQg aW50byBJMk5TRj88L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIj4mbHQ7amNzJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5ZZXMuIDot KSBCdXQgdGhpcyBpcyB3aHkgd2UgbmVlZCB0byBiZSB2ZXJ5IGNhcmVmdWwgYWJvdXQgdGVybWlu b2xvZ3kgKGkuZS4sIGNvbnRleHQpLiBJIHdvdWxkIGxpa2UgdG8gd29yayB3aXRoIHlvdSBhbmQg eW91ciBjby1hdXRob3JzIG9uIHlvdXIgQ2FwYWJpbGl0eSBJbnRlcmZhY2UgaW5mb3JtYXRpb24g bW9kZWwgSS1EIGFzIG9uZSBwbGFjZSB0byBpbnRyb2R1Y2UgdGhpcy4uLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIj4mbHQ7L2pjcyZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tVVMiPnJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkpvaG48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPk9uIFRodSwgRGVjIDEwLCAy MDE1IGF0IDEwOjUyIFBNLCBYaWFsaWFuZyAoRnJhbmspICZsdDs8YSBocmVmPSJtYWlsdG86ZnJh bmsueGlhbGlhbmdAaHVhd2VpLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmZyYW5rLnhpYWxpYW5nQGh1 YXdlaS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IaSBKb2huLDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1V UyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkZpcnN0bHks IHRoYW5rcyBmb3IgcmFpc2luZyB0aGlzIHZhbHVhYmxlIGRpc2N1c3Npb24gYWJvdXQgSTJOU0Yg cG9saWN5IG1vZGVsLiBJdOKAmXMNCiByZWFsbHkgdXNlZnVsIHRvIG91ciBpbnRlcmZhY2UgaW5m b3JtYXRpb24gbW9kZWwgZHJhZnRzLiA8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5QbGVhc2Ugc2VlIG15IGNvbW1l bnRzIGlubGluZTo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5CLlIuPC9zcGFu PjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+RnJhbms8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgd2luZG93dGV4 dCAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtO2JvcmRlci1jb2xvcjpjdXJyZW50Q29s b3IgY3VycmVudENvbG9yIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQiPuWPkeS7tuS6ujxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwv c3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4gSTJu c2YgW21haWx0bzo8YSBocmVmPSJtYWlsdG86aTJuc2YtYm91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0 PSJfYmxhbmsiPmkybnNmLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPC9zcGFuPjxiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0Ij7ku6PooaggPC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkpvaG4gU3RyYXNzbmVyPGJyPg0KPC9zcGFuPjxi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij7lj5HpgIHml7bpl7Q8c3BhbiBsYW5nPSJF Ti1VUyI+Ojwvc3Bhbj48L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdCI+IDIwMTU8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPuW5 tDxzcGFuIGxhbmc9IkVOLVVTIj4xMjwvc3Bhbj7mnIg8c3BhbiBsYW5nPSJFTi1VUyI+MTE8L3Nw YW4+5pelPHNwYW4gbGFuZz0iRU4tVVMiPiA0OjQzPGJyPg0KPC9zcGFuPjxiPuaUtuS7tuS6ujxz cGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyI+IExpbmRhIER1 bmJhcjsgSm9obiBTdHJhc3NuZXI8YnI+DQo8L3NwYW4+PGI+5oqE6YCBPHNwYW4gbGFuZz0iRU4t VVMiPjo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIj4gPGEgaHJlZj0ibWFpbHRvOmkybnNm QGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+DQppMm5zZkBpZXRmLm9yZzwvYT47IE5hdGFsZSwg Qm9iPGJyPg0KPC9zcGFuPjxiPuS4u+mimDxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvYj48 c3BhbiBsYW5nPSJFTi1VUyI+IFJlOiBbSTJuc2ZdIFNlcnZpY2UgTGF5ZXIgUG9saWNpZXMgLSBQ b3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRpb24gb24gUENJTTwvc3Bhbj48L3NwYW4+PHNwYW4g bGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9w Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT Ij5IaSBMaW5kYSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIj5JTUhPLCBhIHByaW9yaXR5IGF0dHJpYnV0ZSBzaG91bGQgbm90IGJlIG92ZXJseSB1 c2VkLiBQQ0lNJ3MgaW1wbGVtZW50YXRpb24gZmFpbHMgKHNlZSBQb3N0IDEpLCBhbmQgUENJTWUn cyBoYXMgb3RoZXIgcHJvYmxlbXMgKGRlZmluZWQgaW4gUG9zdCAyLCBob3BlZnVsbHkgb3V0DQog dG9uaWdodCkuIEZvciBleGFtcGxlLCBob3cgZG8geW91IGVuc3VyZSB0aGF0IHRoZSBwcmlvcml0 aWVzIG9mIGFsbCBpbnN0YW5jZXMgb2YgYWxsIHJ1bGVzIGFyZSBhbHdheXMgdXBkYXRlZD8gVGhl cmUgaXMgbm8gbWVjaGFuaXNtIGluIGVpdGhlciBQQ0lNIG9yIFBDSU1lIHRoYXQgZ3VhcmFudGVl cyB0aGF0IHByaW9yaXRpZXMgYXJlIGRldGVybWluaXN0aWNhbGx5IGRldGVybWluZWQuIFJlbWVt YmVyLCB5b3UgY2FuIGhhdmUgcHJpb3JpdGllcw0KIG9uIHBvbGljeSBydWxlcywgYW5kIHByaW9y aXRpZXMgb24gcG9saWN5IGdyb3Vwcy4gU28sIGlmIHlvdSBoYWQ6PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJF Ti1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7Jm5ic3A7IEdyb3VwMSAo cHJpb3JpdHkgNSk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgUnVsZSBBIChwcmlvcml0eSAxMCk8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgUnVsZSBCIChwcmlvcml0eSAxKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBSdWxlIEMgKHByaW9yaXR5IDUwKTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNwOyBSdWxlIDIgKHByaW9yaXR5IDEwKTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNwOyBHcm91cCAzIChwcmlvcml0eSAzKTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g bGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBSdWxlIHgsIHByaW9y aXR5IHk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT Ij5SdWxlIDIgd2lsbCBleGVjdXRlIGZpcnN0LCBldmVuIHRob3VnaCBHcm91cDEuUnVsZUMucHJp b3JpdHkgPT0gNTA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5MaWtld2lzZSwgaXQgZG9lc24ndCBt YXR0ZXIgaG93IG1hbnkgcnVsZXMgYXJlIGluIEdyb3VwIDMsIG9yIHdoYXQgdGhlaXIgcHJpb3Jp dGllcyBhcmUsIHRoZXkgd2lsbCBhbGwgZXhlY3V0ZSBhZnRlciBSdWxlMiwgZm9sbG93ZWQgYnkg dGhlIFJ1bGVzIGluIEdyb3VwMSAoQywNCiBBLCBCKS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5U aGlzIGdldHMgaGFyZGVyIGFzIHlvdSBzdGFydCBuZXN0aW5nIGdyb3VwcyB3aXRoaW4gZ3JvdXBz IGFuZCBydWxlcyB3aXRoaW4gcnVsZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPltGcmFua106Jm5ic3A7IFRha2UgdGhpcyBleGFtcGxlLCBJIGFtIGEgbGl0 dGxlIHdvcnJpZWQgYWJvdXQgdGhlIGNvbXBsZXhpdHkgYnJvdWdodCBieSB0aGUNCiBuZXN0aW5n IGFuZCByZWN1cnNpb24gb3BlcmF0aW9uLiBUaGV5IGFyZSBwb3dlcmZ1bCBidXQgYWxzbyBjb21w bGljYXRlZC4gSSB0aGluayB3ZSBzaG91bGQgYmUgY2FyZWZ1bCBpbiBkZXNpZ25pbmcgdGhlIGlu Zm9ybWF0aW9uIG1vZGVsIHRvIHByZXZlbnQgaXQgdG8gYmUgdG9vIGNvbXBsZXguPC9zcGFuPjxz cGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IGxhbmc9IkVOLVVTIj5QQ0lNZSBoYXMgYSBwb2xpY3lEZWNpc2lvblN0cmF0ZWd5IGF0dHJpYnV0 ZSwgd2hpY2ggaXMgdXNlZCB0byBkZWZpbmUgd2hldGhlciB0aGUgY29udGFpbmVyIChQb2xpY3lH cm91cCBvciBQb2xpY3lSdWxlKSBvZiB0aGUgUG9saWN5UnVsZXMgdXNlcyBmaXJzdC1tYXRjaCBv cg0KIGFsbC1tYXRjaC4gVGhpcyBvYmZ1c2NhdGVzIHRoZSB2YWx1ZSBvZiB0aGUgcHJpb3JpdHkg YXR0cmlidXRlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiPkFzIEJvYiByaWdodGx5IHBvaW50ZWQgb3V0LCBleGVjdXRpb24gY29udGV4dCBpcyBl dmVyeXRoaW5nLiBJbiBGT0NBTEUsIEkgZGVmaW5lZCBjb250ZXh0LWF3YXJlIHBvbGljeSBydWxl cy4gQ29udGV4dCB3YXMgdXNlZCB0byBzZWxlY3QgYSB3b3JraW5nIHNldCBvZiBwb2xpY2llczsN CiB0aGlzIHdvcmtpbmcgc2V0IGNvbGxlY3RpdmVseSBjb25zdGl0dXRlZCB0aGUgaW50ZWxsaWdl bmNlIHRoYXQgdGhlIG1hbmFnZXIgaW1wbGVtZW50ZWQuIFRpZSB0aGF0IGludG8gZmVlZGJhY2sg ZnJvbSB3aGF0IHdhcyBiZWluZyBtYW5hZ2VkLCBhbmQgYXMgdGhlIG92ZXJhbGwgY29udGV4dCBj aGFuZ2VzLCB0aGUgd29ya2luZyBzZXQgb2YgcG9saWNpZXMgY2hhbmdlLiBLaW5kYSBjb29sLiBC dXQgTk9UIG1haW50YWluYWJsZSB1c2luZyBqdXN0DQogcHJpb3JpdHkuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5bRnJhbmtdOiBUaGlzIGNvbnRleHQtYXdhcmUg cG9saWN5IHJ1bGVzIG1ha2Ugc2Vuc2UgZm9yIEkyTlNGIGluIG15IG9waW5pb24uIEFyZSB5b3Ug Z29pbmcgdG8gaW50cm9kdWNlDQogaXQgaW50byBJMk5TRj88L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi PnJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Sm9objxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPk9uIFRodSwgRGVjIDEwLCAyMDE1IGF0 IDk6MzIgQU0sIExpbmRhIER1bmJhciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxpbmRhLmR1bmJhckBo dWF3ZWkuY29tIiB0YXJnZXQ9Il9ibGFuayI+bGluZGEuZHVuYmFyQGh1YXdlaS5jb208L2E+Jmd0 OyB3cm90ZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj5Cb2IsDQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0i RU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGFu ayB5b3UgdmVyeSBtdWNoIGZvciBsaXN0aW5nIGRvd24gbXVsdGlwbGUgc2NlbmFyaW9zIGJlbG93 Lg0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+V2l0aCB3aGF0IHlvdSBkZXNjcmliZWQsIHRoZSBJMk5TRiBydWxl LXNldCBtYXkgbmVlZCBhIHByaW9yaXR5IHNvIHRoYXQgdGhlIE5TRiBjYW4NCiBlbmZvcmNlIHRo ZW0gYWNjb3JkaW5nbHkuIDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkluIG91ciBjdXJyZW50IHByb2R1Y3QgaW1w bGVtZW50YXRpb24sIHRoZSByb3V0ZXLigJlzIGxvbmdlc3QgbWF0Y2ggcHJpbmNpcGxlIGhhcyBi ZWVuDQogdXNlZCwgaS5lLiBydWxlcyBmb3IgaW5kaXZpZHVhbCBob3N0cyBvdmVycmlkZSB0aGUg cnVsZXMgZm9yIHRoZSBzdWJuZXQgdG8gd2hpY2ggdGhhdCBob3N0cyBiZWxvbmcuDQo8L3NwYW4+ PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj5CdXQgdGhlcmUgY291bGQgYmUgbW9yZSBjb21wbGljYXRlZCBjb25mbGljdCB0aGF0 IHdoYXQgaXMgbGlzdGVkIGJlbG93LiBIYXZpbmcgYSBwcmlvcml0eQ0KIGNhbiBiZSBtb3JlIHBy ZWNpc2UuIDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPkxpbmRhDQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItdG9wOnNvbGlkIHdpbmRvd3RleHQgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNt IDBjbTtib3JkZXItY29sb3I6Y3VycmVudENvbG9yIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48 L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gTmF0YWxlLA0KIEJv YiBbbWFpbHRvOjxhIGhyZWY9Im1haWx0bzpSTkFUQUxFQG1pdHJlLm9yZyIgdGFyZ2V0PSJfYmxh bmsiPlJOQVRBTEVAbWl0cmUub3JnPC9hPl0NCjxicj4NCjxiPlNlbnQ6PC9iPiBUaHVyc2RheSwg RGVjZW1iZXIgMTAsIDIwMTUgMTI6NDcgQU08YnI+DQo8Yj5Ubzo8L2I+IExpbmRhIER1bmJhcjsg Sm9obiBTdHJhc3NuZXI8YnI+DQo8Yj5DYzo8L2I+IDxhIGhyZWY9Im1haWx0bzppMm5zZkBpZXRm Lm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmkybnNmQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6 PC9iPiBSRTogW0kybnNmXSBTZXJ2aWNlIExheWVyIFBvbGljaWVzIC0gUG9zdCAxOiBCYWNrZ3Jv dW5kIEluZm9ybWF0aW9uIG9uIFBDSU08L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiM5OTMzMDAiPkhpIExp bmRhLDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojOTkzMzAw Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6Izk5 MzMwMCI+SW5wdXQgaGVyZSBmcm9tIGEgbHVya2VyIOKApiBjYWxpYnJhdGUgYWNjb3JkaW5nbHkh PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiM5OTMzMDAiPiZu YnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojOTkzMzAw Ij5Zb3UgYXNrZWQ6PGJyPg0K4oCcPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBpbiBJMk5TRiwgdGhlcmUgY291bGQg YmUgYSBsb3Qgb2YgY29uZmxpY3RzLCBmb3IgZXhhbXBsZSwgdGhlcmUgY291bGQgYmUgdHdvIHJ1 bGVzIGVudGVyZWQgYXQgZGlmZmVyZW50IHRpbWU6PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjEuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjcuMHB0O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7VmlydHVhbCBOZXR3b3JrIFggY2Fu4oCZdCBhY2Nl c3Mg4oCcWW91VHViZeKAnSwNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj4yLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZTo3LjBwdDtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPjEwLjEuMS4xIGNhbiBhY2Nlc3Mg4oCcWW91VHViZeKAnSAod2hlcmUgMTAuMS4x LjEgaXMgYSBob3N0IHdpdGhpbiB0aGUgVmlydHVhbCBOZXR3b3JrIFgpLg0KPC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkRvIHlvdSBjYWxsIHRoZSAy IHJ1bGVzIGFib3ZlIGNvbmZsaWN0Pzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojOTkzMzAwIj7igJ08L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiM5OTMzMDAiPlRoZSBhbnN3 ZXIgaXMg4oCcaXQgZGVwZW5kc+KAnSDigKYgZGVwZW5kcyBvbiBhIGJyb2FkZXIgcG9saWN5IGV4 ZWN1dGlvbiBjb250ZXh0IOKApiBhIGNvbmNlcHQgdGhhdCBQQ0lNIGl0c2VsZiBkb2VzIG5vdCBk aXJlY3RseSBzdXBwb3J0LiBGb3IgZXhhbXBsZSwgdGhhdCBicm9hZGVyIGNvbnRleHQgY291bGQg c3RpcHVsYXRlDQogKHZpYSBwb2xpY3kpIHRoYXQgIzEgaXMgdGhlIGRlZmF1bHQgYnV0IGV4cGxp Y2l0IGV4Y2VwdGlvbiBzcGVjaWZpY2F0aW9ucyBsaWtlICMyIGNhbiBvdmVycmlkZSB0aGUgZGVm YXVsdCDigKYgYWx0ZXJuYXRpdmVseSwgdGhhdCBicm9hZGVyIGNvbnRleHQgY291bGQgc3RpcHVs YXRlIHRoYXQgIzEgaXMgYWJzb2x1dGUgYW5kIGFueSBhdHRlbXB0IHRvIHNwZWNpZnkgKHByZWZl cmFibHkpIG9yIGV4ZWN1dGUgIzIgd291bGQgYmUgZGVuaWVkIOKApiB0aG9zZQ0KIGFyZSBvbmx5 IHR3byBleGFtcGxlcywgdGhlcmUgYXJlIG11bHRpcGxlIHBvdGVudGlhbGx5IHZhbGlkIHZhcmlh dGlvbnMuIEhvdyBtdWNoIG9mIHRoYXQgY29udGV4dCBhIGdyb3VwIHdhbnRzIHRvIHN0YW5kYXJk aXplIGlzIGFuIGltcG9ydGFudCBkZWNpc2lvbiBmb3IgdGhlIGdyb3VwIHRvIHVuZGVyc3RhbmQg YW5kIG1ha2Ug4oCmIFBDSU0gaXRzZWxmIHdpbGwgbm90IHRha2UgeW91IHZlcnkgZmFyLCBob3dl dmVyLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 Izk5MzMwMCI+QXZhbnRpLDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojOTkzMzAwIj5Cb2JOPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6Izk5MzMwMCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCB3aW5kb3d0ZXh0IDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY207 Ym9yZGVyLWNvbG9yOmN1cnJlbnRDb2xvciI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4NCiBJMm5zZiBbPGEgaHJl Zj0ibWFpbHRvOmkybnNmLWJvdW5jZXNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5tYWlsdG86 aTJuc2YtYm91bmNlc0BpZXRmLm9yZzwvYT5dDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPkxpbmRhIER1 bmJhcjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBEZWNlbWJlciAwOCwgMjAxNSA0OjExIFBN PGJyPg0KPGI+VG86PC9iPiBKb2huIFN0cmFzc25lciAmbHQ7PGEgaHJlZj0ibWFpbHRvOnN0cmF6 cGRqQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnN0cmF6cGRqQGdtYWlsLmNvbTwvYT4mZ3Q7 Ow0KPGEgaHJlZj0ibWFpbHRvOmkybnNmQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+aTJuc2ZA aWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbSTJuc2ZdIFNlcnZpY2UgTGF5 ZXIgUG9saWNpZXMgLSBQb3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRpb24gb24gUENJTTwvc3Bh bj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5Kb2huLA0KPC9zcGFuPjxz cGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFG NDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgdGhlIGlu LWRlcHRoIGFuYWx5c2lzIG9mIFBDSU0gYW5kIGl0cyBzdWl0YWJpbGl0eSBhcyBzb21ldGhpbmcN CiB0aGF0IEkyTlNGIHNob3VsZCBiZSBiYXNlZCBvbi4gV2hhdCB5b3Ugd3JpdGUgaXMgdmVyeSB2 YWx1YWJsZS4gSSB0aGluayB0aGUgYW5hbHlzaXMgc2hvdWxkIGJlIGFkZGVkIHRvIHRoZSBJMk5T RiBnYXAgYW5hbHlzaXMsIChvciBiZSBhIHN0YW5kYWxvbmUgUG9saWN5IEFuYWx5c2lzIElEKS4N Cjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkkgaGF2ZSBzb21lIHF1ZXN0aW9u cyBpbnNlcnRlZCBiZWxvdzoNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLXRvcDpzb2xpZCB3aW5kb3d0ZXh0IDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAw Y207Ym9yZGVyLWNvbG9yOmN1cnJlbnRDb2xvciI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9i PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IEkybnNmDQogWzxhIGhy ZWY9Im1haWx0bzppMm5zZi1ib3VuY2VzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+bWFpbHRv OmkybnNmLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5Kb2huIFN0 cmFzc25lcjxicj4NCjxiPlNlbnQ6PC9iPiBTdW5kYXksIERlY2VtYmVyIDA2LCAyMDE1IDc6MDEg UE08YnI+DQo8Yj5Ubzo8L2I+IDxhIGhyZWY9Im1haWx0bzppMm5zZkBpZXRmLm9yZyIgdGFyZ2V0 PSJfYmxhbmsiPmkybnNmQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBbSTJuc2Zd IFNlcnZpY2UgTGF5ZXIgUG9saWNpZXMgLSBQb3N0IDE6IEJhY2tncm91bmQgSW5mb3JtYXRpb24g b24gUENJTTwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbHQ7U25pcHBlZCZn dDsNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4yLiZuYnNw OyBCcmllZiBkZXNjcmlwdGlvbiBvZiBQQ0lNPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7 PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPlRoZSBQQ0lNIENsYXNzIEhpZXJhcmNoeSBp cyB2ZXJ5IHNpbXBsZSwgYXMgdGhpcyBpcyBhIENBIChjb25kaXRpb24tYWN0aW9uKSBtb2RlbC4g RXZlbnRzIGFyZSBOT1QgcmVwcmVzZW50ZWQuIFBDSU0gZGVmaW5lcyBhIFBvbGljeVJ1bGUsIGEg UG9saWN5R3JvdXAgKGdyb3VwDQogb2YgUG9saWN5UnVsZXMpLCBQb2xpY3lDb25kaXRpb24sIGFu ZCBQb2xpY3lBY3Rpb24uIFRoZXNlIGFyZSBhbGwgc2libGluZ3M7IHRoZWlyIGNvbW1vbiBzdXBl cmNsYXNzIGlzIGNhbGxlZCBQb2xpY3ksIGFzIHNob3duIGJlbG93OjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+TWFuYWdlZEVsZW1lbnQgKGFic3RyYWN0KTxicj4NCiZu YnNwOyB8PGJyPg0KJm5ic3A7ICYjNDM7LS0tUG9saWN5IChhYnN0cmFjdCk8YnI+DQombmJzcDsg fCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgJiM0MzstLS1Qb2xpY3lHcm91cDxicj4NCiZuYnNwOyZuYnNwO3wmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfDxicj4NCiZuYnNwOyZuYnNwO3wmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgJiM0MzstLS1Qb2xpY3lSdWxlPGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgfDxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tUG9saWN5 Q29uZGl0aW9uIChhYnN0cmFjdCk8YnI+DQombmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8YnI+DQombmJzcDsgfCZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwO3wmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0 MzstLS1Qb2xpY3lUaW1lUGVyaW9kQ29uZGl0aW9uPGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8YnI+DQom bmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3wmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmIzQzOy0tLVZlbmRvclBvbGljeUNvbmRpdGlvbjxicj4NCiZuYnNw OyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7fDxicj4NCiZuYnNwOyB8Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tUG9saWN5QWN0aW9uIChhYnN0cmFjdCk8YnI+DQombmJz cDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyB8PGJyPg0KJm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0MzstLS1WZW5kb3JQb2xp Y3lBY3Rpb248L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw Ozwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT Ij5Ob3RlOiBQQ0lNIGRvZXMgaGF2ZSBhIHNpbXBsZSBub3Rpb24gb2YgUm9sZXMsIGJ1dCBpbXBs ZW1lbnRzIHRoZW0gYXMgYXR0cmlidXRlcywgaW5zdGVhZCBvZiBvYmplY3RzLiBUaGlzIGlzIG5v dCBzY2FsYWJsZSwgYW5kIGRvZXMgbm90IGZ1bGx5IHJlYWxpemUgdGhlIHBvd2VyDQogb2YgdXNp bmcgcm9sZXMuIFRoaXMgd2lsbCBiZSBkaXNjdXNzZWQgbW9yZSBpbiBQb3N0IDMuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyI+Tm90ZTogSXQgaXMgcG9zc2libGUgdG8gZGVmaW5lIGxpbWl0ZWQgY29uc3RyYWludHMgaW4g UENJTSBhcyBjb25kaXRpb25zLiBGb3IgZXhhbXBsZSwgdGhlIFZlbmRvclBvbGljeUNvbmRpdGlv biBjbGFzcyBoYXMgdHdvIGF0dHJpYnV0ZXMsIENvbnN0cmFpbnQgYW5kIENvbnN0cmFpbnRFbmNv ZGluZywNCiB0aGF0IGRvIHRoaXMuIFRoaXMgd2lsbCBiZSBkaXNjdXNzZWQgbW9yZSBpbiBQb3N0 IDQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyI+Tm90ZTogQ29udGV4dCBpcyBOT1QgZGVmaW5lZCBpbiB0aGUgUENJTS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFu PjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+W0xpbmRhXSAmbmJzcDtEbyB5b3UgYWdyZWUgdGhhdCDigJxDb25kaXRpb24gb2Yg dGhlIFBDSU3igJ0gPT0g4oCcSTJOU0Ygc3ViamVjdOKAnSAmYW1wOyDigJx0aGUgQ29udGV4dHVh bA0KIHN0YXRlcyAob3IgdGhlIEkyTlNGIG9iamVjdCnigJ0/IDwvc3Bhbj48c3BhbiBsYW5nPSJF Ti1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1V UyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+My4mbmJzcDsgU3VtbWFyeTogbWFpbiBk cmF3YmFja3Mgb2YgdXNpbmcgUENJTTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4t VVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Tm90ZSB0aGF0IHRoZSBj dXJyZW50IENJTSBQb2xpY3kgTW9kZWwgKDIuNDQuMSkgaXMgc2lnbmlmaWNhbnRseSBkaWZmZXJl bnQgdGhhbiBlaXRoZXIgUENJTSBvciBQQ0lNZS4mbmJzcDtQQ0lNIGlzIGJhc2VkIG9uIENJTSAy LjQ7IFBDSU1lIGlzIGJhc2VkIG9uIENJTSAyLjUuIFBDSU1lDQogaXMgTk9UIGJhY2t3YXJkcyBj b21wYXRpYmxlIHdpdGggUENJTSBpbiBhbGwgYXJlYXMuPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+ Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Q3JpdGljYWwgUHJvYmxlbXM6PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvO21zby1saXN0Omw0IGxldmVsMSBsZm8xIj4NCjxzcGFuIGxhbmc9IkVOLVVTIj5UaGVy ZSBpcyBubyB1bmlxdWUgSUQgdGhhdCBjYW4gYmUgdXNlZCB0byBkaXN0aW5ndWlzaCBkaWZmZXJl bnQ8YnI+DQppbnN0YW5jZXMgb2YgdGhlIHNhbWUgUG9saWN5UnVsZSwgUG9saWN5R3JvdXAsIFBv bGljeUNvbmRpdGlvbiw8YnI+DQpvciBQb2xpY3lBY3Rpb24uPG86cD48L286cD48L3NwYW4+PC9s aT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltMaW5kYV0gQ2FuIHdlIHNpbXBseSBjcmVh dGUgYW4gSUQgKHN0cmluZyBvciBudW1lcmljKSBmb3IgaW5zdGFuY2VzIG9mIHRoZSBzYW1lIFBv bGljeVJ1bGU/DQogT3IgaXQgaXMgbW9yZSBjb21wbGljYXRlZD8gPC9zcGFuPjxzcGFuIGxhbmc9 IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvO21zby1saXN0Omw2IGxldmVsMSBsZm8yIj4NCjxzcGFuIGxhbmc9IkVO LVVTIj5SZWxhdGlvbnNoaXBzIGFyZSBpbXBsZW1lbnRlZCBieSBkZWZpbmluZyBhbiBhYnN0cmFj dCBjbGFzczxicj4NCndpdGgga2V5cywgYW5kIHRoZW4gb3ZlcnJpZGluZyB0aGUga2V5cyBpbiB0 aGUgc3ViY2xhc3NlcyBvZiB0aGU8YnI+DQpyZWxhdGlvbnNoaXAuIFRoaXMgaXMgYnJva2VuLiBX b3VsZCB5b3Ugb3ZlcnJpZGUga2V5cyBpbiBhbiBSREJNUz88bzpwPjwvbzpwPjwvc3Bhbj48L2xp PjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+W0xpbmRhXSBJcyB0aGUg4oCcS2V54oCdIHRv IGRpZmZlcmVudGlhdGluZyBkaWZmZXJlbnQg4oCcUG9saWN5UnVsZeKAnT8mbmJzcDsgJm5ic3A7 Q2FuIHlvdSBnaXZlIGFuIGV4YW1wbGUNCiBvZiDigJxzdWJjbGFzc2VzIG9mIHRoZSByZWxhdGlv bnNoaXDigJ0/IDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPldoYXQgZXZlbnRzIGNhbiBjYXVzZSDigJxvdmVycmlk aW5nIHRoZSBrZXlzIGluIHRoZSBzdWJjbGFzc2VzIG9mIHRoZSByZWxhdGlvbnNoaXDigJ0/PC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8dWwgdHlwZT0i ZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0Omw1IGxldmVsMSBsZm8zIj4N CjxzcGFuIGxhbmc9IkVOLVVTIj5Nb3N0IG9mIHRoZSBjbGFzc2VzIHRoYXQgYXJlIHVzZWQgdG8g aW1wbGVtZW50IHRoZSByZWxhdGlvbnNoaXBzPGJyPg0KZG8gTk9UIGhhdmUgYXR0cmlidXRlcywg c28gaXQgaXMgaW1wb3NzaWJsZSB0byByZXN0cmljdCB3aGljaDxicj4NCmNsYXNzZXMgYXJlIHJl bGF0ZWQgdG8gd2hpY2ggb3RoZXIgY2xhc3NlcyAoZS5nLiwgYnkgY29udGV4dCkuPGJyPg0KUHV0 IGFub3RoZXIgd2F5LCB0aGUgc2FtZSByZWxhdGlvbnNoaXAgbXVzdCBhbHdheXMgYmUgdXNlZDxi cj4NCmJldHdlZW4gdHdvIHR5cGVzLCBldmVuIGlmIHRoZSBzZW1hbnRpY3MgdmFyaWVzLiAoVGhl IHR3bzxicj4NCmV4Y2VwdGlvbnMgYXJlIFBvbGljeUNvbmRpdGlvbkluUG9saWN5UnVsZSBhbmQ8 YnI+DQpQb2xpY3lBY3Rpb25JblBvbGljeVJ1bGUpLjxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PC91 bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5bTGluZGFdIERvZXMg4oCcY2xhc3Nlc+KAnSA9PSDi gJxQb2xpY3lSdWxl4oCdPw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1s aXN0OmwxIGxldmVsMSBsZm80Ij4NCjxzcGFuIGxhbmc9IkVOLVVTIj5UaGUgJnF1b3Q7aWdub3Jl IHRoaXMgdW5sZXNzIHlvdSBuZWVkIHRoaXMmcXVvdDsgcGhpbG9zb3BoeSBkb2VzIG5vdDxicj4N CndvcmsuIEhvdyBkbyB5b3Uga25vdyBpZiBvdGhlciBpbXBsZW1lbnRhdGlvbnMgdGhhdCB5b3Ug YXJlPGJyPg0Kc3VwcG9zZWQgdG8gaW50ZXJvcGVyYXRlIHdpdGggYXJlIHVzaW5nIHRoZW0/PG86 cD48L286cD48L3NwYW4+PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltMaW5kYV0g SXMg4oCcSWdub3JlIHRoaXMgdW5sZXNzIHlvdSBuZWVkIHRoaXPigJ0gYW4gbmV3IHR5cGUgb2Yg 4oCcUG9saWN5UnVsZeKAnT8NCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttc28t bGlzdDpsMyBsZXZlbDEgbGZvNSI+DQo8c3BhbiBsYW5nPSJFTi1VUyI+VGhlcmUgaXMgbm8gY29u Y2VwdCBvZiBlcnJvciBvciBleGNlcHRpb24gaGFuZGxpbmc8bzpwPjwvbzpwPjwvc3Bhbj48L2xp PjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bXNvLWxpc3Q6bDMgbGV2ZWwxIGxmbzUiPg0KPHNwYW4g bGFuZz0iRU4tVVMiPlRoZXJlIGlzIG5vIGNvbmNlcHQgb2YgdGhlIHN1YmplY3Qgb3IgdGhlIHRh cmdldCBvZiBhIHBvbGljeTxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj5bTGluZGFdIERvZXMgeW91ciDigJxzdWJqZWN04oCdIGhhdmUgdGhlIHNhbWUg bWVhbmluZyBhcyB0aGUg4oCcSTJOU0Ygc3ViamVjdOKAnSB3aGljaCBtZWFucw0KIGJpdHMmYW1w O2J5dGVzIGV4dHJhY3RlZCBmcm9tIHBhY2tldHM/IDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0bzttc28tbGlzdDpsMiBsZXZlbDEgbGZvNiI+DQo8c3BhbiBsYW5nPSJFTi1VUyI+QWRk aW5nIGEgbmV3IHR5cGUgb2YgcG9saWN5IChlLmcuLCBkZWNsYXJhdGl2ZSBvciBmdW5jdGlvbmFs KTxicj4NCndpbGwgY2F1c2UgYSBtYWpvciByZXdyaXRlIG9mIHRoZSBlbnRpcmUgbW9kZWw8bzpw PjwvbzpwPjwvc3Bhbj48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+W0xpbmRhXSBDYW4gd2Ugc2F5IHRoYXQgJm5ic3A7STJOU0YgcG9saWNpZXMg aGF2ZSBvbmUgdHlwZSDigJxTdWJqZWN0LUNvbnRleHR1YWxTdGF0ZXMtIGFjdGlvbi0NCiBmdW5j dGlvbj8gU28gaW4gSTJOU0YgZW52aXJvbm1lbnQsIHRoZXJlIGlzIG9ubHkgdGhlIG5vdGlvbiBv ZiBhZGRpbmcgYSBuZXcg4oCcUG9saWN5UnVsZeKAnSwgYnV0IG5vIGFkZGluZyBhIG5ldyBwb2xp Y3kgdHlwZS4gSXMgdGhpcyBjb3JyZWN0IHN0YXRlbWVudD8gJm5ic3A7PC9zcGFuPjxzcGFuIGxh bmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8dWwgdHlwZT0iZGlzYyI+DQo8bGkg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0OmwwIGxldmVsMSBsZm83Ij4NCjxzcGFuIGxhbmc9 IkVOLVVTIj5UaGVyZSBpcyBubyBhcHByb2FjaCB0byBkZXRlY3RpbmcgYW5kIHNvbHZpbmcgcG9s aWN5IGNvbmZsaWN0czs8YnI+DQp0aGlzIGlzIGR1ZSB0byB0aGUgc2ltcGxpc3RpYyBub3Rpb24g b2YganVzdCB1c2luZyBhIFBEUCBhbmQgYTxicj4NClBFUCBmb3IgYXBwbHlpbmcgcG9saWNpZXMu PG86cD48L286cD48L3NwYW4+PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNw Ozwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPltMaW5kYV0gaW4gSTJOU0YsIHRoZXJlIGNvdWxkIGJlIGEgbG90IG9m IGNvbmZsaWN0cywgZm9yIGV4YW1wbGUsIHRoZXJlIGNvdWxkIGJlIHR3bw0KIHJ1bGVzIGVudGVy ZWQgYXQgZGlmZmVyZW50IHRpbWU6PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjEuPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjcuMHB0O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+Jm5ic3A7VmlydHVhbCBOZXR3b3JrIFggY2Fu4oCZdCBhY2Nlc3Mg4oCcWW91 VHViZeKAnSwNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHA+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj4yLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtj b2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bh bj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PjEwLjEuMS4xIGNhbiBhY2Nlc3Mg4oCcWW91VHViZeKAnSAod2hlcmUgMTAuMS4xLjEgaXMgYSBo b3N0IHdpdGhpbiB0aGUgVmlydHVhbCBOZXR3b3JrIFgpLg0KPC9zcGFuPjxzcGFuIGxhbmc9IkVO LVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkRvIHlvdSBjYWxsIHRoZSAyIHJ1bGVzIGFi b3ZlIGNvbmZsaWN0Pw0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cD48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPjQuIFJlY29tbWVu ZGF0aW9uczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5HaXZlbiB0aGUgbGFyZ2UgYW1vdW50IG9mIHByb2Js ZW1zLCBJIHJlY29tbWVuZCB0aGF0IHdlIG5vdCBjb25zaWRlciBQQ0lNIGZ1cnRoZXIuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0xpbmRhXSBz aG91bGQgSTJOU0YgcmVmZXJlbmNlIFBDSU0/DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+ PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj5UaGFuayB5b3UgdmVyeSBtdWNoLiBMaW5kYQ0KPC9zcGFuPjxzcGFuIGxhbmc9IkVO LVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsNCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4t VVMiPjUuIE9yaWdpbiBvZiBQQ0lNL1BDSU1lPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMi PiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+VGhpcyBpcyBhICoqdGhlb3J5 Kiogc2VjdGlvbjsgcGxlYXNlIHNraXAgdW5sZXNzIHlvdSB3YW50IHRvIHVuZGVyc3RhbmQgdGhl IG1vZGVsIGluIG1vcmUgZGV0YWlsLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPlRoZSBQQ0lNIGlzIGJhc2VkIG9uIHRo ZSBETVRGIENJTSwgd2hpY2ggaXMgYWN0dWFsbHkgYSAqKmRhdGEgbW9kZWwqKiAoZGVzcGl0ZSBp dHMgbmFtZSkgYmVjYXVzZSBpdCB1c2VzIHJlbGF0aW9uYWwgdGVjaG5vbG9naWVzIChlLmcuLCBr ZXlzIGFuZCB3ZWFrIHJlZmVyZW5jZXMpDQogdG8gY3JlYXRlIGl0cyBtb2RlbC4gUENJTSBpcyBi YXNlZCBvbiBhbiBlYXJseSB2ZXJzaW9uIG9mIHRoZSBDSU0gKDIuNCk7IHRoZSBjdXJyZW50IHZl cnNpb24gb2YgdGhlIENJTSBpcyAyLjQ0LjEgYXMgb2YgdGhpcyB3cml0aW5nLiBTaW5jZSB0aGlz IGlzIHRpZWQgdG8gdGhlIENJTSwgdGhpcyBtZWFucyB0aGF0OjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxh bmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOyZu YnNwOyAxKSBQb2xpY3kgaXMgc3ViY2xhc3NlZCBmcm9tIGEgbW9yZSBnZW5lcmljIGNsYXNzIChN YW5hZ2VkRWxlbWVudCk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsgMikgQUxM IHJlbGF0aW9uc2hpcHMgKGFzc29jaWF0aW9ucywgYWdncmVnYXRpb25zLCBhbmQgY29tcG9zaXRp b25zKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyBhcmUgcmVhbGl6ZWQgYXMgKipjbGFzc2VzKio8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT Ij4mbmJzcDsmbmJzcDsgMykgQXMgYSByZXN1bHQgb2YgMiksIHJlbGF0aW9uc2hpcHMgYXJlIHN1 YmNsYXNzZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsgNCkgQm90aCBhdHRy aWJ1dGVzIGFuZCBhc3NvY2lhdGlvbnMgYXJlICoqaW5oZXJpdGVkKio8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIj4mbmJzcDsmbmJzcDsgNSkgVGhlIHNhbWUgZGVzaWduIGFwcHJvYWNoIChhcyBtdWNo IGFzIHBvc3NpYmxlKSB3YXMgdXNlZCBpbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBQQ0lNL1BDSU1lIGFzIHdhcyBpbiBD SU0uIFNwZWNpZmljYWxseSwgaXQgd2FzIHRob3VnaHQgYmV0dGVyPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJF Ti1VUyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHRvIGRlZmlu ZSBhIGdlbmVyaWMsIGJ1dCBvcHRpb25hbCwgcmVsYXRpb25zaGlwIGluc3RlYWQgb2Ygbm90PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IGRlZmluaW5nIHRoZSByZWxhdGlvbnNoaXAuPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+ Jm5ic3A7Jm5ic3A7IDYpIFRoZSBDSU0gZG9lcyBOT1QgaGF2ZSBhIHNpbmdsZSByb290ZWQgaGll cmFyY2h5OyB0aGlzIG1ha2VzPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGNvZGUgZ2VuZXJhdGlvbiBtb3JlIGNvbXBsZXg8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsgNykgVGhlIENJTSB1c2VzIGEgcHJv cHJpZXRhcnkgbGFuZ3VhZ2UgYW5kIGlzIG5vdCBzdHJpY3RseSBVTUw8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9 IkVOLVVTIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgY29tcGxp YW50LCBldmVuIHRob3VnaCBpdCBsb29rcyBsaWtlIFVNTCAodW5mb3J0dW5hdGVseSwgdGhpczxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyBsYW5ndWFnZSBpcyBhbHNvIGNhbGxlZCBNT0YpJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5EZXBlbmRpbmcgb24gdGhlIGNvbXBs ZXhpdHkgb2YgdGhlIGltcGxlbWVudGF0aW9uLCB0aGUgYWJvdmUgaGF2ZSBiZWVuIHNob3duIHRv IHByb2R1Y2UgcHJvYmxlbXMgaW4gbGFyZ2UgZW52aXJvbm1lbnRzLiBGb3IgZXhhbXBsZSwgdGhl IHNwaXJpdCBvZiAmcXVvdDtsZXQncyBkZWZpbmUNCiBhbiBhdHRyaWJ1dGUgb3IgYXNzb2NpYXRp b24gaW4gY2FzZSBpdCBpcyB1c2VmdWwsIGFuZCBtYWtlIGl0IG9wdGlvbmFsIHNvIHlvdSBkb24n dCBoYXZlIHRvIHdvcnJ5IGFib3V0IGl0JnF1b3Q7IG5vdCBvbmx5IHZpb2xhdGVzIHNvbWUgd2Vs bC1rbm93biBzb2Z0d2FyZSBhcmNoaXRlY3R1cmFsIGd1aWRlbGluZXMgKGUuZy4sIFNpbmdsZSBS ZXNwb25zaWJpbGl0eSBQcmluY2lwbGUgYW5kIHRoZSBMaXNrb3YgU3Vic3RpdHV0aW9uIFByaW5j aXBsZSksIGJ1dA0KIGl0IG1ha2VzIHRoaW5ncyBkaWZmaWN1bHQgdG8gaW50ZXJvcGVyYXRlIHdp dGggKHNpbmNlIHlvdSBuZXZlciByZWFsbHkga25vdyBpZiBhbiBhdHRyaWJ1dGUgb3IgcmVsYXRp b25zaGlwIHNob3VsZCBiZSBpbnN0YW50aWF0ZWQgb3Igbm90KS48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBs YW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIGxhbmc9IkVOLVVTIj5yZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+Sm9objxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gbGFuZz0iRU4tVVMiPjxicj4NCjxiciBjbGVhcj0iYWxsIj4NCjxicj4N Ci0tIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBsYW5nPSJFTi1VUyI+cmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIGxhbmc9IkVOLVVT Ij5Kb2huPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiPjxicj4NCjxiciBjbGVhcj0iYWxsIj4NCjxicj4NCi0tIDxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi PnJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkpvaG48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_C02846B1344F344EB4FAA6FA7AF481F12AEBE4E2SZXEMA502MBSchi_-- From nobody Tue Dec 15 13:50:11 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4D291AD357 for ; Tue, 15 Dec 2015 13:50:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.61 X-Spam-Level: X-Spam-Status: No, score=-2.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R9Lk3ooLec77 for ; Tue, 15 Dec 2015 13:50:05 -0800 (PST) Received: from smtptc.telefonica.com (smtptc.telefonica.com [195.76.34.108]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF6241B29FA for ; Tue, 15 Dec 2015 13:50:03 -0800 (PST) Received: from smtptc.telefonica.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 1D34B3A013E; Tue, 15 Dec 2015 22:50:01 +0100 (CET) Received: from ESTGVMSP113.EUROPE.telefonica.corp (unknown [10.92.4.9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtptc.telefonica.com (Postfix) with ESMTPS id F29733A0109; Tue, 15 Dec 2015 22:50:00 +0100 (CET) Received: from emea01-am1-obe.outbound.protection.outlook.com (10.92.5.139) by tls.telefonica.com (10.92.6.55) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 15 Dec 2015 22:50:00 +0100 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com (10.161.13.142) by DB4PR06MB0621.eurprd06.prod.outlook.com (10.161.13.139) with Microsoft SMTP Server (TLS) id 15.1.355.16; Tue, 15 Dec 2015 21:48:58 +0000 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) by DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) with mapi id 15.01.0355.012; Tue, 15 Dec 2015 21:48:58 +0000 From: DIEGO LOPEZ GARCIA To: Robert Moskowitz Thread-Topic: [I2nsf] Definitions in draft-merged-i2nsf-problem-statement-use-cases-00 Thread-Index: AQHRND5q8E+3VxB8cUiaaAVkz50xxJ7MnE+A Date: Tue, 15 Dec 2015 21:48:57 +0000 Message-ID: <100442EB-9F96-4CDD-B31F-D248BFFFD832@telefonica.com> References: <566B1018.2090904@htt-consult.com> In-Reply-To: <566B1018.2090904@htt-consult.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [70.191.149.15] x-microsoft-exchange-diagnostics: 1; DB4PR06MB0621; 5:55qPve8kRzpA2zitNvkC2PxiBN/uOrYzuP1deZHX4VQqZMvvvvZkKis3gOzj/jnD9SeJ6EAEHAYoEjRqOtgKLyjC/ZTOpLIhuGncvOol7QXmZS1ligEfHoW/nh9T4D0GZVoDfn/6pEJA7wT+lI6X/g==; 24:NrAuhaHkYAYbxXTG1m2GkSOzkb5iNKwfOx/fHAMYviMmC1w1prNXb4pxUXRZiz5j83EZNrjbRwboIzYk0HZmLIFwXVF51QOIsIevRq4AcC0= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB4PR06MB0621; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(520078)(8121501046)(5005006)(3002001)(10201501046); SRVR:DB4PR06MB0621; BCL:0; PCL:0; RULEID:; SRVR:DB4PR06MB0621; x-forefront-prvs: 07915F544A x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(24454002)(189002)(252514010)(199003)(105586002)(36756003)(10400500002)(97736004)(5008740100001)(1096002)(106356001)(5001960100002)(2950100001)(2900100001)(19617315012)(86362001)(106116001)(76176999)(230783001)(92566002)(101416001)(102836003)(40100003)(54356999)(6116002)(1220700001)(81156007)(586003)(110136002)(5004730100002)(87936001)(50986999)(82746002)(66066001)(189998001)(15975445007)(11100500001)(83716003)(3846002)(33656002)(122556002)(19580395003)(19580405001)(561944003)(16236675004)(5002640100001)(77096005)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DB4PR06MB0621; H:DB4PR06MB0624.eurprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_100442EB9F964CDDB31FD248BFFFD832telefonicacom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Dec 2015 21:48:57.8526 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR06MB0621 X-OriginatorOrg: telefonica.com X-TM-AS-MML: No Archived-At: Cc: "i2nsf@ietf.org" Subject: Re: [I2nsf] Definitions in draft-merged-i2nsf-problem-statement-use-cases-00 X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2015 21:50:11 -0000 --_000_100442EB9F964CDDB31FD248BFFFD832telefonicacom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQm9iLA0KDQpJIHdvdWxkIHN1cHBvcnQgeW91ciBwcm9wb3NhbCB3aXRob3V0IHRoZSBxdW90 ZXMgYW5kIGEg4oCcY2Fu4oCdIGJlZm9yZSB3aGF0IHRoZSBOU0YgY2FuIGhlbHAgdG8gYWNoaWV2 ZS4gVGh1czoNCg0KQSBmdW5jdGlvbiB0aGF0IGRldGVjdHMgdW53YW50ZWQgYWN0aXZpdHkgYW5k IGJsb2Nrcy9taXRpZ2F0ZXMgdGhlIGVmZmVjdCBvZiBzdWNoIHVud2FudGVkIGFjdGl2aXR5IGlu IG9yZGVyIHRvIHN1cHBvcnQgYXZhaWxhYmlsaXR5IG9mIGEgbmV0d29yay4gSW4gYWRkaXRpb24s IHRoZSBOU0YgY2FuIGhlbHAgaW4gc3VwcG9ydGluZyBjb21tdW5pY2F0aW9uIHN0cmVhbSBpbnRl Z3JpdHkgYW5kIGNvbmZpZGVudGlhbGl0eQ0KDQpJIGRvbuKAmXQgdGhpbmsgZGV0ZWN0aW5nIHVu d2FudGVkIGFjdGl2aXR5IGlzIHRvbyBzZWxmLWFzc3VyZWQ6IHVud2FudGVkIGFjdGl2aXR5IGlz IHdoYXQgdGhlIHVzZXIgYW5kL29yIHByb3ZpZGVyIG9mIHRoZSBOU0YgaGFzIGRlZmluZWQgdGhl eSBkbyBub3Qgd2FudC4gV2hhdGV2ZXIgdGhlIGFjdGl2aXR5IHRoYXQgbWF0Y2hlcyB3aXRoIHRo aXMgZGVmaW5pdGlvbiBpcyB1bndhbnRlZCBhbmQgdGhlIE5TRiB3aWxsIGRvIHdoYXRldmVyIHRo ZXkgY2FuIHRvIHN0b3AgaXQuDQoNCkJlIGdvb2RlLA0KDQpPbiAxMSBEZWMgMjAxNSwgYXQgMTM6 MDQgLCBSb2JlcnQgTW9za293aXR6IDxyZ20taWV0ZkBodHQtY29uc3VsdC5jb208bWFpbHRvOnJn bS1pZXRmQGh0dC1jb25zdWx0LmNvbT4+IHdyb3RlOg0KDQpJIGhhdmUgYmVlbiB3b3JraW5nIHdp dGggU3VlIGFuZCBMaW5kYSBvbiByZXZpZXdpbmcgYW5kIGNsZWFuaW5nIHVwIHRoaXMgSUQuICBJ IGxvb2tlZCBhdDsNCg0KTmV0d29yayBTZWN1cml0eSBGdW5jdGlvbiAoTlNGKTogQSBmdW5jdGlv biB3aGljaCBlbnN1cmVzIGludGVncml0eSwgY29uZmlkZW50aWFsaXR5IGFuZCBhdmFpbGFiaWxp dHkgb2YgbmV0d29yayBjb21tdW5pY2F0aW9uczsgZGV0ZWN0cyB1bndhbnRlZCBhY3Rpdml0eSwg IGJsb2NrcyBvciBtaXRpZ2F0ZXMgdGhlIGVmZmVjdCBvZiBzdWNoIHVud2FudGVkIGFjdGl2aXR5 IG9uIHRoZSBuZXR3b3JrLg0KDQpBbmQgSSB0b29rIGV4Y2VwdGlvbiB3aXRoIGF0IGxlYXN0ICdl bnN1cmVzJy4gIFRoaXMgaXMgdG9vIHN0cm9uZyBvZiBhIHN0YXRlbWVudC4gIE5vdGhpbmcgd2Ug ZG8gd2l0aCB0aGlzIHRlY2hub2xvZ3kgd2lsbCAnZW5zdXJlJyBDSUEuIEZpcnN0IHdoYXQgaXMg J0NJQSc6DQoNCkNvbmZpZGVudGlhbGl0eSBieSByZXN0cmljdGluZyBhY2Nlc3MgdG8gdGhlIGlu dGVybmFsIGFzc2V0cy4NCkludGVncml0eSBieSwgKHdlbGwgZ2VlLCB3aGF0IElTIEludGVncml0 eSk/ICBJbnRlZ3JpdHkgYnkgZW5hYmxpbmcgdXNlcnMgdG8gdHJ1c3QgdXNpbmcgdGhlaXIgYXNz ZXRzLg0KQXZhaWxhYmxpdHkgYnkgYmxvY2tpbmcgYXR0YWNrcyB0aGF0IG1ha2UgYXNzZXRzIHVu dXNhYmxlLg0KDQpTbyBmaXJzdCwgZG8gd2UgYWdyZWUgd2hhdCBDSUEgbWVhbnMgYW5kIHRoYXQg aXQgaXMgaW1wb3J0YW50PyAgSWYgc28sIHdlIG1pZ2h0IGdldCBzb21ldGhpbmcgbGlrZToNCg0K QSBmdW5jdGlvbiB0aGF0IGRldGVjdHMgdW53YW50ZWQgYWN0aXZpdHkgYW5kIGJsb2Nrcy9taXRp Z2F0ZXMgdGhlIGVmZmVjdCBvZiBzdWNoIHVud2FudGVkIGFjdGl2aXR5IGluIG9yZGVyIHRvIHN1 cHBvcnQgYXZhaWxhYmlsaXR5IG9mIGEgbmV0d29yay4gIEluIGFkZGl0aW9uLCB0aGUgTlNGICAg aGVscHMgc3VwcG9ydCBjb21tdW5pY2F0aW9uIHN0cmVhbSDigJxpbnRlZ3JpdHkgYW5kIGNvbmZp ZGVudGlhbGl0eeKAnS4NCg0KDQpFdmVuIHRoaXMgaXMgdG9vIHNlbGYtYXNzdXJlZC4gIEFuIE5T RiBkZXRlY3RzIHVud2FudGVkIGFjdGl2aXR5PyBSZWFsbHk/ICBJdCBkZXRlY3RzIHdoYXQgd2Ug aGF2ZSBzbyBmYXIgaGF2ZSBjbGFzc2lmaWVkIGFzIHVud2FudGVkIGFjdGl2aXR5LiAgSSBrbm93 IHRoYXQgSVBTIE5TRiBkZXZpY2VzIGFyZSBtYXJrZXRlZCB0byAnbGVhcm4nIGFuZCBhZGFwdCwg YnV0IHdpdGhvdXQgc29waGlzdGljYXRlZCBBSSwgZXZlbiBoZXJlIHRoZXJlIGFyZSBsaW1pdHMu IFBlcmhhcHMgSSBhbSB0b28gcGVkYW50aWMsIGJ1dCB0aGlzIGRvY3VtZW50IGluY2x1ZGVzICd1 c2VyIGV4cGVjdGF0aW9ucycsIGFuZCBJIGRvbid0IHdhbnQgYW4gZXhwZWN0YXRpb24gb2YgJzYg c2lnbWFzIG9mIGRldGVjdGlvbicuDQoNCk15IHNpeHBlbmNlIHdvcnRoLg0KDQoNCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpJMm5zZiBtYWlsaW5nIGxp c3QNCkkybnNmQGlldGYub3JnPG1haWx0bzpJMm5zZkBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vaTJuc2YNCg0KLS0NCiJFc3RhIHZleiBubyBmYWxsYXJl bW9zLCBEb2N0b3IgSW5maWVybm8iDQoNCkRyIERpZWdvIFIuIExvcGV6DQpUZWxlZm9uaWNhIEkr RA0KaHR0cDovL3Blb3BsZS50aWQuZXMvZGllZ28ubG9wZXovDQoNCmUtbWFpbDogZGllZ28uci5s b3BlekB0ZWxlZm9uaWNhLmNvbQ0KVGVsOiAgICArMzQgOTEzIDEyOSAwNDENCk1vYmlsZTogKzM0 IDY4MiAwNTEgMDkxDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCg0KX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KRXN0ZSBtZW5zYWplIHkgc3VzIGFkanVu dG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0aW5hdGFyaW8sIHB1ZWRlIGNv bnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRlbmNpYWwgeSBlcyBwYXJh IHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUgZGVzdGluby4gU2kgbm8g ZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90aWZpY2FkbyBkZSBx dWUgbGEgbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24geS9vIGNvcGlhIHNpbiBh dXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0dWQgZGUgbGEgbGVnaXNs YWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2FqZSBwb3IgZXJyb3IsIGxl IHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVudGUgcG9yIGVzdGEgbWlz bWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24uDQoNClRoZSBpbmZvcm1hdGlvbiBj b250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24gaXMgcHJpdmlsZWdlZCBhbmQgY29uZmlkZW50 aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9ubHkgZm9yIHRoZSB1c2Ugb2YgdGhlIGluZGl2aWR1 YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVhZGVyIG9mIHRoaXMgbWVzc2FnZSBp cyBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhh dCBhbnkgZGlzc2VtaW5hdGlvbiwgZGlzdHJpYnV0aW9uIG9yIGNvcHlpbmcgb2YgdGhpcyBjb21t dW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSBoYXZlIHJlY2VpdmVkIHRo aXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4gUGxlYXNlIGltbWVkaWF0 ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11 bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRlIGl0Lg0KDQpFc3RhIG1lbnNhZ2VtIGUg c2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBzZXUgZGVzdGluYXTDoXJp bywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBjb25maWRlbmNpYWwg ZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRlIGRlIGRlc3Rpbm8u IFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlvIGluZGljYWRvLCBmaWNh IG5vdGlmaWNhZG8gZGUgcXVlIGEgbGVpdHVyYSwgdXRpbGl6YcOnw6NvLCBkaXZ1bGdhw6fDo28g ZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9pYmlkYSBlbSB2aXJ0 dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVzdGEgbWVuc2FnZW0gcG9y IGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1lZGlhdGFtZW50ZSBwb3Ig ZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Ojbw0K --_000_100442EB9F964CDDB31FD248BFFFD832telefonicacom_ Content-Type: text/html; charset="utf-8" Content-ID: <2527BAD0E9FEA643AFEEABE449D6F00C@eurprd06.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGkgQm9iLA0KPGRpdiBjbGFzcz0i Ij48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SSB3b3VsZCBzdXBwb3J0IHlv dXIgcHJvcG9zYWwgd2l0aG91dCB0aGUgcXVvdGVzIGFuZCBhIOKAnGNhbuKAnSBiZWZvcmUgd2hh dCB0aGUgTlNGIGNhbiBoZWxwIHRvIGFjaGlldmUuIFRodXM6PC9kaXY+DQo8ZGl2IGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+QSBm dW5jdGlvbiB0aGF0IGRldGVjdHMgdW53YW50ZWQgYWN0aXZpdHkgYW5kIGJsb2Nrcy9taXRpZ2F0 ZXMgdGhlIGVmZmVjdCBvZiBzdWNoIHVud2FudGVkIGFjdGl2aXR5IGluIG9yZGVyIHRvIHN1cHBv cnQgYXZhaWxhYmlsaXR5IG9mIGEgbmV0d29yay4gSW4gYWRkaXRpb24sIHRoZSBOU0YgY2FuIGhl bHAgaW4gc3VwcG9ydGluZyBjb21tdW5pY2F0aW9uIHN0cmVhbSBpbnRlZ3JpdHkgYW5kIGNvbmZp ZGVudGlhbGl0eTwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj5JIGRvbuKAmXQgdGhpbmsgZGV0ZWN0aW5nIHVud2FudGVkIGFj dGl2aXR5IGlzIHRvbyBzZWxmLWFzc3VyZWQ6IHVud2FudGVkIGFjdGl2aXR5IGlzIHdoYXQgdGhl IHVzZXIgYW5kL29yIHByb3ZpZGVyIG9mIHRoZSBOU0YgaGFzIGRlZmluZWQgdGhleSBkbyBub3Qg d2FudC4gV2hhdGV2ZXIgdGhlIGFjdGl2aXR5IHRoYXQgbWF0Y2hlcyB3aXRoIHRoaXMgZGVmaW5p dGlvbiBpcyB1bndhbnRlZCBhbmQgdGhlIE5TRiB3aWxsIGRvDQogd2hhdGV2ZXIgdGhleSBjYW4g dG8gc3RvcCBpdC48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPkJlIGdvb2RlLDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+ DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi Pk9uIDExIERlYyAyMDE1LCBhdCAxMzowNCAsIFJvYmVydCBNb3Nrb3dpdHogJmx0OzxhIGhyZWY9 Im1haWx0bzpyZ20taWV0ZkBodHQtY29uc3VsdC5jb20iIGNsYXNzPSIiPnJnbS1pZXRmQGh0dC1j b25zdWx0LmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNo YW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+SSBoYXZlIGJlZW4gd29ya2luZyB3aXRoIFN1 ZSBhbmQgTGluZGEgb24gcmV2aWV3aW5nIGFuZCBjbGVhbmluZyB1cCB0aGlzIElELiAmbmJzcDtJ IGxvb2tlZCBhdDs8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpOZXR3b3JrIFNlY3VyaXR5 IEZ1bmN0aW9uIChOU0YpOiBBIGZ1bmN0aW9uIHdoaWNoIGVuc3VyZXMgaW50ZWdyaXR5LCBjb25m aWRlbnRpYWxpdHkgYW5kIGF2YWlsYWJpbGl0eSBvZiBuZXR3b3JrIGNvbW11bmljYXRpb25zOyBk ZXRlY3RzIHVud2FudGVkIGFjdGl2aXR5LCAmbmJzcDtibG9ja3Mgb3IgbWl0aWdhdGVzIHRoZSBl ZmZlY3Qgb2Ygc3VjaCB1bndhbnRlZCBhY3Rpdml0eSBvbiB0aGUgbmV0d29yay48YnIgY2xhc3M9 IiI+DQo8YnIgY2xhc3M9IiI+DQpBbmQgSSB0b29rIGV4Y2VwdGlvbiB3aXRoIGF0IGxlYXN0ICdl bnN1cmVzJy4gJm5ic3A7VGhpcyBpcyB0b28gc3Ryb25nIG9mIGEgc3RhdGVtZW50LiAmbmJzcDtO b3RoaW5nIHdlIGRvIHdpdGggdGhpcyB0ZWNobm9sb2d5IHdpbGwgJ2Vuc3VyZScgQ0lBLiBGaXJz dCB3aGF0IGlzICdDSUEnOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkNvbmZpZGVudGlh bGl0eSBieSByZXN0cmljdGluZyBhY2Nlc3MgdG8gdGhlIGludGVybmFsIGFzc2V0cy48YnIgY2xh c3M9IiI+DQpJbnRlZ3JpdHkgYnksICh3ZWxsIGdlZSwgd2hhdCBJUyBJbnRlZ3JpdHkpPyAmbmJz cDtJbnRlZ3JpdHkgYnkgZW5hYmxpbmcgdXNlcnMgdG8gdHJ1c3QgdXNpbmcgdGhlaXIgYXNzZXRz LjxiciBjbGFzcz0iIj4NCkF2YWlsYWJsaXR5IGJ5IGJsb2NraW5nIGF0dGFja3MgdGhhdCBtYWtl IGFzc2V0cyB1bnVzYWJsZS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpTbyBmaXJzdCwg ZG8gd2UgYWdyZWUgd2hhdCBDSUEgbWVhbnMgYW5kIHRoYXQgaXQgaXMgaW1wb3J0YW50PyAmbmJz cDtJZiBzbywgd2UgbWlnaHQgZ2V0IHNvbWV0aGluZyBsaWtlOjxiciBjbGFzcz0iIj4NCjxiciBj bGFzcz0iIj4NCkEgZnVuY3Rpb24gdGhhdCBkZXRlY3RzIHVud2FudGVkIGFjdGl2aXR5IGFuZCBi bG9ja3MvbWl0aWdhdGVzIHRoZSBlZmZlY3Qgb2Ygc3VjaCB1bndhbnRlZCBhY3Rpdml0eSBpbiBv cmRlciB0byBzdXBwb3J0IGF2YWlsYWJpbGl0eSBvZiBhIG5ldHdvcmsuICZuYnNwO0luIGFkZGl0 aW9uLCB0aGUgTlNGICZuYnNwOyZuYnNwO2hlbHBzIHN1cHBvcnQgY29tbXVuaWNhdGlvbiBzdHJl YW0g4oCcaW50ZWdyaXR5IGFuZCBjb25maWRlbnRpYWxpdHnigJ0uPGJyIGNsYXNzPSIiPg0KPGJy IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KRXZlbiB0aGlzIGlzIHRvbyBzZWxmLWFzc3VyZWQu ICZuYnNwO0FuIE5TRiBkZXRlY3RzIHVud2FudGVkIGFjdGl2aXR5PyBSZWFsbHk/ICZuYnNwO0l0 IGRldGVjdHMgd2hhdCB3ZSBoYXZlIHNvIGZhciBoYXZlIGNsYXNzaWZpZWQgYXMgdW53YW50ZWQg YWN0aXZpdHkuICZuYnNwO0kga25vdyB0aGF0IElQUyBOU0YgZGV2aWNlcyBhcmUgbWFya2V0ZWQg dG8gJ2xlYXJuJyBhbmQgYWRhcHQsIGJ1dCB3aXRob3V0IHNvcGhpc3RpY2F0ZWQgQUksIGV2ZW4g aGVyZSB0aGVyZSBhcmUNCiBsaW1pdHMuIFBlcmhhcHMgSSBhbSB0b28gcGVkYW50aWMsIGJ1dCB0 aGlzIGRvY3VtZW50IGluY2x1ZGVzICd1c2VyIGV4cGVjdGF0aW9ucycsIGFuZCBJIGRvbid0IHdh bnQgYW4gZXhwZWN0YXRpb24gb2YgJzYgc2lnbWFzIG9mIGRldGVjdGlvbicuPGJyIGNsYXNzPSIi Pg0KPGJyIGNsYXNzPSIiPg0KTXkgc2l4cGVuY2Ugd29ydGguPGJyIGNsYXNzPSIiPg0KPGJyIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX188YnIgY2xhc3M9IiI+DQpJMm5zZiBtYWlsaW5nIGxpc3Q8YnIgY2xhc3M9 IiI+DQo8YSBocmVmPSJtYWlsdG86STJuc2ZAaWV0Zi5vcmciIGNsYXNzPSIiPkkybnNmQGlldGYu b3JnPC9hPjxiciBjbGFzcz0iIj4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vaTJuc2Y8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJy IGNsYXNzPSIiPg0KPGRpdiBhcHBsZS1jb250ZW50LWVkaXRlZD0idHJ1ZSIgY2xhc3M9IiI+DQo8 ZGl2IHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBv cnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10 cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgd29yZC13cmFwOiBi cmVhay13b3JkOyAtd2Via2l0LW5ic3AtbW9kZTogc3BhY2U7IC13ZWJraXQtbGluZS1icmVhazog YWZ0ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCi0tPGJyIGNsYXNzPSIiPg0KJnF1b3Q7RXN0 YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmllcm5vJnF1b3Q7PGJyIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0KRHIgRGllZ28gUi4gTG9wZXo8YnIgY2xhc3M9IiI+DQpUZWxlZm9uaWNh IEkmIzQzO0Q8YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwOi8vcGVvcGxlLnRpZC5lcy9kaWVn by5sb3Blei8iIGNsYXNzPSIiPmh0dHA6Ly9wZW9wbGUudGlkLmVzL2RpZWdvLmxvcGV6LzwvYT48 YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQplLW1haWw6IGRpZWdvLnIubG9wZXpAdGVsZWZv bmljYS5jb208YnIgY2xhc3M9IiI+DQpUZWw6ICZuYnNwOyAmbmJzcDsmIzQzOzM0IDkxMyAxMjkg MDQxPGJyIGNsYXNzPSIiPg0KTW9iaWxlOiAmIzQzOzM0IDY4MiAwNTEgMDkxPGJyIGNsYXNzPSIi Pg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTwvZGl2Pg0KPC9kaXY+DQo8YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxicj4NCjxocj4NCjxmb250IGZhY2U9IkFyaWFsIiBjb2xvcj0i R3JheSIgc2l6ZT0iMSI+PGJyPg0KRXN0ZSBtZW5zYWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmln ZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0aW5hdGFyaW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9y bWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRlbmNpYWwgeSBlcyBwYXJhIHVzbyBleGNsdXNp dm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUgZGVzdGluby4gU2kgbm8gZXMgdXN0ZWQuIGVs IGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90aWZpY2FkbyBkZSBxdWUgbGENCiBsZWN0 dXJhLCB1dGlsaXphY2nDs24sIGRpdnVsZ2FjacOzbiB5L28gY29waWEgc2luIGF1dG9yaXphY2nD s24gcHVlZGUgZXN0YXIgcHJvaGliaWRhIGVuIHZpcnR1ZCBkZSBsYSBsZWdpc2xhY2nDs24gdmln ZW50ZS4gU2kgaGEgcmVjaWJpZG8gZXN0ZSBtZW5zYWplIHBvciBlcnJvciwgbGUgcm9nYW1vcyBx dWUgbm9zIGxvIGNvbXVuaXF1ZSBpbm1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtaXNtYSB2w61hIHkg cHJvY2VkYSBhIHN1IGRlc3RydWNjacOzbi48YnI+DQo8YnI+DQpUaGUgaW5mb3JtYXRpb24gY29u dGFpbmVkIGluIHRoaXMgdHJhbnNtaXNzaW9uIGlzIHByaXZpbGVnZWQgYW5kIGNvbmZpZGVudGlh bCBpbmZvcm1hdGlvbiBpbnRlbmRlZCBvbmx5IGZvciB0aGUgdXNlIG9mIHRoZSBpbmRpdmlkdWFs IG9yIGVudGl0eSBuYW1lZCBhYm92ZS4gSWYgdGhlIHJlYWRlciBvZiB0aGlzIG1lc3NhZ2UgaXMg bm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQg YW55IGRpc3NlbWluYXRpb24sDQogZGlzdHJpYnV0aW9uIG9yIGNvcHlpbmcgb2YgdGhpcyBjb21t dW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSBoYXZlIHJlY2VpdmVkIHRo aXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4gUGxlYXNlIGltbWVkaWF0 ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11 bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRlIGl0Ljxicj4NCjxicj4NCkVzdGEgbWVu c2FnZW0gZSBzZXVzIGFuZXhvcyBzZSBkaXJpZ2VtIGV4Y2x1c2l2YW1lbnRlIGFvIHNldSBkZXN0 aW5hdMOhcmlvLCBwb2RlIGNvbnRlciBpbmZvcm1hw6fDo28gcHJpdmlsZWdpYWRhIG91IGNvbmZp ZGVuY2lhbCBlIMOpIHBhcmEgdXNvIGV4Y2x1c2l2byBkYSBwZXNzb2Egb3UgZW50aWRhZGUgZGUg ZGVzdGluby4gU2UgbsOjbyDDqSB2b3NzYSBzZW5ob3JpYSBvIGRlc3RpbmF0w6FyaW8gaW5kaWNh ZG8sIGZpY2Egbm90aWZpY2FkbyBkZSBxdWUgYQ0KIGxlaXR1cmEsIHV0aWxpemHDp8OjbywgZGl2 dWxnYcOnw6NvIGUvb3UgY8OzcGlhIHNlbSBhdXRvcml6YcOnw6NvIHBvZGUgZXN0YXIgcHJvaWJp ZGEgZW0gdmlydHVkZSBkYSBsZWdpc2xhw6fDo28gdmlnZW50ZS4gU2UgcmVjZWJldSBlc3RhIG1l bnNhZ2VtIHBvciBlcnJvLCByb2dhbW9zLWxoZSBxdWUgbm9zIG8gY29tdW5pcXVlIGltZWRpYXRh bWVudGUgcG9yIGVzdGEgbWVzbWEgdmlhIGUgcHJvY2VkYSBhIHN1YSBkZXN0cnVpw6fDo288YnI+ DQo8L2ZvbnQ+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_100442EB9F964CDDB31FD248BFFFD832telefonicacom_-- From nobody Thu Dec 17 08:27:27 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A71B61B2F58 for ; Thu, 17 Dec 2015 08:27:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XApPxEVI9aNh for ; Thu, 17 Dec 2015 08:27:23 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 841371B2F13 for ; Thu, 17 Dec 2015 08:27:22 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CBS47152; Thu, 17 Dec 2015 16:27:20 +0000 (GMT) Received: from DFWEML704-CHM.china.huawei.com (10.193.5.141) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 17 Dec 2015 16:27:19 +0000 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml704-chm ([10.193.5.141]) with mapi id 14.03.0235.001; Thu, 17 Dec 2015 08:27:16 -0800 From: Linda Dunbar To: "i2nsf@ietf.org" Thread-Topic: WG Last Call for draft-ietf-netconf-restconf-09, draft-ietf-netconf-yang-patch-07 and draft-ietf-netconf-yang-library-03 Thread-Index: AdE3eTk+yj/4s/NrQu2LeR6gt3+K2gAAjXkgAASGCYAAVnUQQA== Date: Thu, 17 Dec 2015 16:27:16 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657DB39B7@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.107] Content-Type: multipart/mixed; boundary="_004_4A95BA014132FF49AE685FAB4B9F17F657DB39B7dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020202.5672E268.026D, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=0.0.0.0, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: b49b47a774d4e52dd42b35a0370a25be Archived-At: Subject: [I2nsf] FW: WG Last Call for draft-ietf-netconf-restconf-09, draft-ietf-netconf-yang-patch-07 and draft-ietf-netconf-yang-library-03 X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Dec 2015 16:27:26 -0000 --_004_4A95BA014132FF49AE685FAB4B9F17F657DB39B7dfweml701chm_ Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657DB39B7dfweml701chm_" --_000_4A95BA014132FF49AE685FAB4B9F17F657DB39B7dfweml701chm_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable As I2NSF will use NETCONF/Restconf/YANG, please provide comments directly = to the NETCONF WG if appropriate. Happy reading over the holidays! Linda From: WGChairs = > on behalf of "Ersue, Mehmet (Nokia - DE/Munich)" > Date: Tuesday, December 15, 2015 at 4:07 PM To: "brian@innovationslab.net" >, "terry.manderson@icann.or= g" >, "ben@nostrum.com" >, "alissa@cooperw.in" >, EXT Barry Leiba >, Stephen Farrell >, "Kathleen.Moriarty= .ietf@gmail.com" >, "akatlas+iesg@g= mail.com" >, "dbrungard@att.com" >, "Alvaro Retana (aretana)" >, "wgchairs@ietf.org" > Subject: FW: WG Last Call for draft-ietf-netconf-restconf-09, draft-ietf-ne= tconf-yang-patch-07 and draft-ietf-netconf-yang-library-03 Dear ADs and WG Chairs, please provide the WG Last Call below to your area or WG maillist if you th= ink RESTCONF protocol is relevant for the community you are leading. NETCONF WG would appreciate any comments coming from WGs who would like to = comment. Many Thanks! Cheers, Mehmet From: Ersue, Mehmet (Nokia - DE/Munich) Sent: Tuesday, December 15, 2015 9:59 PM To: netconf@ietf.org Cc: 'core@ietf.org' >; 'i2rs@ietf.org' >; '6lo@ietf.org' <6lo@ietf.org>; '6tisch@ietf.org' <6tisch@ietf.org> Subject: WG Last Call for draft-ietf-netconf-restconf-09, draft-ietf-netcon= f-yang-patch-07 and draft-ietf-netconf-yang-library-03 Dear NETCONF WG, we hereby issue a WG Last Call for the drafts below: http://tools.ietf.org/html/draft-ietf-netconf-restconf-09.txt http://tools.ietf.org/html/draft-ietf-netconf-yang-patch-07.txt http://tools.ietf.org/html/draft-ietf-netconf-yang-library-03.txt Please review and send your comments to the NETCONF WG mailing list by Janu= ary 22, 2015 EOB PT. The drafts on RESTCONF, YANG patch and YANG library are planned to publish = as standard track documents. As RESTCONF is a major protocol we seek a detailed and thorough review with= in NETCONF WG but also by the related WGs before publishing. Therefore the WGLC is planned to finalize on January 22th (covering the hol= iday time in between) and APP, INT and RTG area ADs will be informed as wel= l as Core, I2RS, 6lo, and 6tisch WGs are invited to review. Please take your time to review the documents and send your comments to the= NETCONF maillist by the deadline. Please state on NETCONF maillist also explicitly, whether you have read/rev= iewed and whether you support the publication. Furthermore please indicate if you plan to implement or have already implem= entations for RESTCONF and its supplementary drafts. Thank you for your review and kind help getting RESTCONF specifications sta= ble. Best Regards, Mehmet and Mahesh --_000_4A95BA014132FF49AE685FAB4B9F17F657DB39B7dfweml701chm_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

    As I2NSF will use NETCONF/Restconf/YANG,  please provide comments directly to the NETCONF WG if appropriate.

     <= /p>

    Happy reading over the holidays!

     

    Linda

     

    From: WGChairs <wgchairs-bounces@ietf.org> on behalf of "Ers= ue, Mehmet (Nokia - DE/Munich)" <mehmet.ersue@nokia.com>
    Date: Tuesday, December 15, 2015 at 4:07 PM
    To: "brian@innovati= onslab.net" <brian@= innovationslab.net>, "terry.manderson@icann.org" <terry.manderson@icann.org>, "ben@nostrum.com" <ben@nostrum.com>, "alissa@cooperw.in" <alissa@cooperw.in>, EXT Barry Leiba <barryleiba@computer.org>, Stephen Farrell <stephen.f= arrell@cs.tcd.ie>, "Kathleen.Moriarty.ietf@gmail.com" <Kathleen.Moriarty.ietf@gmail.com>, "akatlas+iesg@gmail= .com" <akatlas= 3;iesg@gmail.com>, "dbrung= ard@att.com" <dbrungard@at= t.com>, "Alvaro Retana (aretana)" <aretana@cisco.com>, "wg= chairs@ietf.org" <wgchairs= @ietf.org>
    Subject: FW: WG Last Call for draft-ietf-netconf-restconf-09, draft-= ietf-netconf-yang-patch-07 and draft-ietf-netconf-yang-library-03

     

    Dear ADs and WG Chairs,

     

    please provide the WG Las= t Call below to your area or WG maillist if you think RESTCONF protocol is = relevant for the community you are leading.

     

    NETCONF WG would apprecia= te any comments coming from WGs who would like to comment.

     

    Many Thanks!

     

    Cheers,
    Mehmet

     =

    From: Ersue, Mehmet (Nokia - DE/Munich)
    Sent: Tuesday, December 15, 2015 9:59 PM
    To: netconf@ietf.org
    Cc: 'core@ietf.org' <core@ietf.org>; 'i2rs@ietf.org' <i2rs@ietf.org>; '6lo@ietf.org' <6lo@ietf.org>; '6tisch@ietf.org' <6tisch@ietf.org>
    Subject: WG Last Call for draft-ietf-netconf-restconf-09, draft-ietf= -netconf-yang-patch-07 and draft-ietf-netconf-yang-library-03

     =

    Dear NETCONF WG,

     

    we hereby issue a WG Last= Call for the drafts below:

     

    http://tools.ietf.org/html/d= raft-ietf-netconf-restconf-09.txt

    http://tools.ietf.org/html= /draft-ietf-netconf-yang-patch-07.txt

    http://tools.ietf.org/ht= ml/draft-ietf-netconf-yang-library-03.txt

     

    Please review and send yo= ur comments to the NETCONF WG mailing list by January 22, 2015 EOB PT.

     

    The drafts on RESTCONF, Y= ANG patch and YANG library are planned to publish as standard track documen= ts.

     

    As RESTCONF is a major pr= otocol we seek a detailed and thorough review within NETCONF WG but also by= the related WGs before publishing.=

    Therefore the WGLC is pla= nned to finalize on January 22th (covering the holiday time in between) and= APP, INT and RTG area ADs will be informed as well as Core, I2RS, 6lo, and 6tisch WGs are invited to review.

     

    Please take your time to = review the documents and send your comments to the NETCONF maillist by the = deadline.

    Please state on NETCONF m= aillist also explicitly, whether you have read/reviewed and whether you sup= port the publication.

    Furthermore please indica= te if you plan to implement or have already implementations for RESTCONF and its supplementary drafts= .

     

    Thank you for your review= and kind help getting RESTCONF specifications stable.

     

    Best Regards,

    Mehmet and Mahesh<= span style=3D"color:black">

     

    --_000_4A95BA014132FF49AE685FAB4B9F17F657DB39B7dfweml701chm_-- --_004_4A95BA014132FF49AE685FAB4B9F17F657DB39B7dfweml701chm_ Content-Type: text/plain; name="ATT00001.txt" Content-Description: ATT00001.txt Content-Disposition: attachment; filename="ATT00001.txt"; size=124; creation-date="Tue, 15 Dec 2015 22:09:08 GMT"; modification-date="Tue, 15 Dec 2015 22:09:08 GMT" Content-ID: Content-Transfer-Encoding: base64 X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnNmYyBtYWls aW5nIGxpc3QNCnNmY0BpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9zZmMNCg== --_004_4A95BA014132FF49AE685FAB4B9F17F657DB39B7dfweml701chm_-- From nobody Sat Dec 19 11:30:47 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B8E81A9100 for ; Sat, 19 Dec 2015 11:30:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -96.354 X-Spam-Level: X-Spam-Status: No, score=-96.354 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DOS_OUTLOOK_TO_MX=2.845, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NNyyAIMS3umz for ; Sat, 19 Dec 2015 11:30:41 -0800 (PST) Received: from hickoryhill-consulting.com (hhc-web3.hickoryhill-consulting.com [64.9.205.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 32E8D1A90FF for ; Sat, 19 Dec 2015 11:30:41 -0800 (PST) X-Default-Received-SPF: pass (skip=loggedin (res=PASS)) x-ip-name=74.43.47.177; From: "Susan Hares" To: "'Anil Kumar S N \(VRP Network BL\)'" , "'Linda Dunbar'" , References: <327562D94EA7BF428CD805F338C31EF06C07EC8B@nkgeml512-mbx.china.huawei.com> <4A95BA014132FF49AE685FAB4B9F17F657DA6474@dfweml701-chm> <327562D94EA7BF428CD805F338C31EF06C07EFE5@nkgeml512-mbx.china.huawei.com> In-Reply-To: <327562D94EA7BF428CD805F338C31EF06C07EFE5@nkgeml512-mbx.china.huawei.com> Date: Sat, 19 Dec 2015 14:30:22 -0500 Message-ID: <000c01d13a93$b432d9d0$1c988d70$@ndzh.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_000D_01D13A69.CB6165B0" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQKWPF/8Z7KcSyRLXKDKN5r6nGdP1wKVa8pQAhmmqwedIzUnsA== Content-Language: en-us X-Authenticated-User: skh@ndzh.com Archived-At: Cc: 'Jayaraghavendran k' , i2nsf@ietf.org Subject: Re: [I2nsf] Comments on draft-dunbar-i2nsf-problem-statement-05 X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Dec 2015 19:30:46 -0000 This is a multipart message in MIME format. ------=_NextPart_000_000D_01D13A69.CB6165B0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Anil, Linda and all: I've put in most of your changes into the combined problem statement and use case. However, I can no longer find a copy or reference to: [I2NSF-Mobile]. Would you point me to the current document? Thank you, Sue Hares From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Anil Kumar S N (VRP Network BL) Sent: Sunday, November 22, 2015 11:04 PM To: Linda Dunbar; draft-dunbar-i2nsf-problem-statement-05@ietf.org Cc: Jayaraghavendran k; i2nsf@ietf.org Subject: Re: [I2nsf] Comments on draft-dunbar-i2nsf-problem-statement-05 Hi Linda, Reply is inline. Thanks & Regards Anil S N "Be liberal in what you accept, and conservative in what you send" - Jon Postel From: Linda Dunbar Sent: 21 November 2015 06:07 To: Anil Kumar S N (VRP Network BL); draft-dunbar-i2nsf-problem-statement-05@ietf.org Cc: Jayaraghavendran k; i2nsf@ietf.org Subject: RE: Comments on draft-dunbar-i2nsf-problem-statement-05 Anil, Thank you very much for the comments. Reply are inserted below: From: Anil Kumar S N (VRP Network BL) Sent: Thursday, November 19, 2015 8:23 PM To: draft-dunbar-i2nsf-problem-statement-05@ietf.org Cc: Linda Dunbar; Jayaraghavendran k; i2nsf@ietf.org Subject: Comments on draft-dunbar-i2nsf-problem-statement-05 Hi Authors, I was reading the draft for understanding and contributing towards I2NSF working group and found few comments : . Introduction section : I think all these use cases are merged as "draft-pastor-i2nsf-merged-use-cases-00" request you to update the same This document does not elaborate on specific use case. The reader should refer to [I2NSF-ACCESS], [I2NSF-DC] and [I2NSF-Mobile] for a more in-depth discussion on the I2NSF use cases. [Linda] you are correct. Actually all of them will be merged together with the problem statement. . Requirements Language, terms and acronyms section : We need to describe following abbreviations which are used in the documents as it the first document to be referred by any newcomer into I2NSF WG IPS, IDS, ACL, FWs, AAA, CA, VNFpool, Etc... [Linda] Good point. Has been added. . 3.1.1. Diverse types of Security Functions Section : Below statement is contradicting each other, I2NSF wants to standardize the interface to control the behavior of NSF but doesn't want to standardize the interface which carries the information of firewall filter and its application on specific flow. I Feel we could add more clarity on the scope of I2NSF with respect to what is under its perview and what is not in this document if at all we want to talk about "what is needed" in this document. there is no need to standardize on how a firewall filters are created or applied. What is needed is having an interface to control and monitor the behavior of NSFs. [Linda] What in the I2NSF scope is "Rule Set" to those "Firewall filter". How about this: "What is needed is having an interface to control and monitor the rule sets that NSFs use to treat packets traversing through." [[Anil >>]] Sounds good . 3.1.2. Diverse Interface to monitor the behavior of NSFs : Reparsed as below You Can't Monitor What You Can't See. So enabling a security function (e.g., firewall [I-D.ietf-opsawg-firewalls]) does not mean that a network is protected. As such, it is necessary to have a mechanism to monitor and provide execution status of NSFs to security and compliance management tools. There exist various network security monitoring vendor specific interfaces for forensics and troubleshooting . Adding new section : 3.1.9 Lack of mechanism for Key Management/Deterministic Generation and Provisioning for communicating protocols [Linda] Do you see it as challenge facing providers? Or the customers? Do you mean "Lack of Mechanism for security keys distribution to NSFs by different vendors"? There is a need for a framework/data model for a key management protocol that may be used to create and manage session [Linda] You need to provide more wording: Manage What Session? Is it IPSec session ? is VPN session? What do you think of this "There is a need for controller to distribute various keys to distributed NSFs." [[Anil >>]] Agreed, Will rephrase; Idea is that there are many key management methods and KDF (key derivation function) exist but there is a need for standardizing the interface to provision and manage it. Here any two communicating protocols could use same KDF to deterministically derive keys and to communicate. The reference to session should have been two communicating entities. Which will enhances the security by reducing life time of a key used and non repetitive of the keys for a very long time which is very much important for control plane packets. Derived keys may be extended to IPsec/VPN data packet. Since the lack of such management framework/interface limited service providers to use keys with very longer lifetime or a key chain with a set of key which were repeated in a cycle. We would like to address above issue with I2NSF framework. Please correct me if I am wrong. keys for message authentication and integrity. As of now there is no much focus on an abstraction for keying information that describes the interface between protocols, operators, and automated key management. [[Anil >>]] How about below text : 3.1.9 Lack of framework/standard interface to provisioning the usage of Key Derivation Function (KDF) and managing KDF A Key Derivation Function (KDF) or Key Derivation Algorithm is intended to be used in two ways: (1) to derive a long-term Master Secret from a short-lived shared secret (2) to derive secure channel session keys from a shared secret and a seed. There is a need for a framework to ensure secure exchange of initial secrete between managing entity and managed entity (NSF). There is a need for a framework/standard interface in provisioning two communicating protocols to use KDF as their key source for Specific period of time or for a set of interaction. There is also need for framework/standard interface in controlling and managing KDF used between two communicating protocols The Provisioning and Managing framework could be extended to data plane too. With Regards Anil S N "Be liberal in what you accept, and conservative in what you send" - Jon Postel ------=_NextPart_000_000D_01D13A69.CB6165B0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

    Anil, Linda and all:

     

    I’ve put in most = of your changes into the combined problem statement and use case.  = However, I can no longer find a copy or reference to: = [I2NSF-Mobile].

     

    Would you point me to = the current document?

     

    Thank = you,

     

    Sue Hares =

     

    From:= = I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Anil Kumar S N = (VRP Network BL)
    Sent: Sunday, November 22, 2015 11:04 = PM
    To: Linda Dunbar; = draft-dunbar-i2nsf-problem-statement-05@ietf.org
    Cc: = Jayaraghavendran k; i2nsf@ietf.org
    Subject: Re: [I2nsf] = Comments on = draft-dunbar-i2nsf-problem-statement-05

    =

     

    Hi Linda,

     

    Reply is = inline.

     

    Thanks & = Regards

    Anil S N

     

    “Be liberal in = what you accept, and conservative in what you send” - Jon = Postel

     

     

    From:= = Linda Dunbar
    Sent: 21 November 2015 06:07
    To: Anil = Kumar S N (VRP Network BL); draft-du= nbar-i2nsf-problem-statement-05@ietf.org
    Cc: = Jayaraghavendran k; i2nsf@ietf.org
    Subject: RE: = Comments on = draft-dunbar-i2nsf-problem-statement-05

    =

     

    Anil,

     

    Thank you very much for = the comments. Reply are inserted below:

     

     

    From:= = Anil Kumar S N (VRP Network BL)
    Sent: Thursday, November 19, = 2015 8:23 PM
    To: draft-du= nbar-i2nsf-problem-statement-05@ietf.org
    Cc: Linda Dunbar; = Jayaraghavendran k; i2nsf@ietf.org
    Subject: = Comments on = draft-dunbar-i2nsf-problem-statement-05

    =

     

    Hi = Authors,

     

              I = was reading the draft for understanding and contributing towards I2NSF = working group and found few comments :

     

    ·         = Introduction section :  I think all these use cases = are merged as “draft-pastor-i2nsf-merged-use-cases-00” = request you to update the same

     

     

    This = document does not elaborate on specific use case. The = reader

    should refer to [I2NSF-ACCESS], [I2NSF-DC] and = [I2NSF-Mobile] for a

    more = in-depth discussion on the I2NSF use = cases.        =

     

    [Linda] you are correct. = Actually all of them will be merged together with the problem statement. =

     

    ·         = Requirements Language, terms and acronyms section : We = need to describe following abbreviations which are used in the documents = as it the first document

    to be referred by any newcomer into I2NSF = WG

     

    IPS, = IDS, ACL, FWs, AAA, CA, VNFpool, Etc...

     

    [Linda] Good point. Has = been added.

     

     

    ·         = 3.1.1. Diverse types of Security Functions Section : =  Below statement is contradicting each other, I2NSF wants to = standardize the interface to control the behavior of NSF =

    but = doesn’t want to standardize the interface which carries the = information of firewall filter and its application on specific flow. I = Feel we could add more clarity on the scope of I2NSF with respect to =

    what = is under its perview and what is not in this document if at all we want = to talk about “what is needed” in this = document.

     

         there is no need to standardize = on how a

         firewall filters are created or = applied. What is needed is having

         an interface to control and = monitor the behavior of NSFs.

    [Linda]  What in = the I2NSF scope is “Rule Set” to those “Firewall = filter”.

    How about this: “What is needed is having = an interface to control and monitor the rule sets that NSFs use to treat = packets traversing through.”

    [[Anil >>]] = Sounds good

              =

    ·         = 3.1.2.  Diverse Interface to monitor the behavior = of NSFs :  Reparsed as below 

    You Can’t Monitor What You Can’t =
See. So enabling a security function 
    (e.g., firewall [I-D.ietf-opsawg-firewalls]) =
does not mean that a network is protected. =

    As such, it is necessary to have a mechanism =
to monitor and provide execution status of NSFs =
to
    security and compliance management tools. There exist =
various network security monitoring vendor specific interfaces =

    for =
forensics and troubleshooting 
     
     
    ·         =
Adding new section =
:
    3.1.9 Lack of mechanism for Key =
Management/Deterministic Generation and Provisioning for communicating =
protocols
     
    [Linda] Do you see it as challenge facing providers? Or the =
customers?  Do you mean  “Lack of Mechanism for security =
keys distribution to NSFs by different vendors”? =

     
     
    There is a need for a framework/data model =
for a key management protocol that may be used to create and manage =
session
     
    [Linda] You need to provide more wording: Manage What Session? Is it =
IPSec session ? is VPN session? 
    What do you think of this 
    “There is a need for controller to distribute various keys to =
distributed NSFs.” 
     
    [[Anil >>]] Agreed, Will rephrase; Idea is that there are many =
key management methods and KDF (key derivation function) exist =

    but there is a need for standardizing the interface to provision and =
manage it.  Here any two communicating protocols could use same KDF =

    to deterministically derive keys and  to communicate. The =
reference to session should have been two communicating =
entities.
    Which will enhances the security by reducing life time of a key used =
and non repetitive of the keys for a very long time which is very much =
important for control plane =
packets.
    Derived keys may be extended to IPsec/VPN  data =
packet.
    Since the lack of such management framework/interface limited service =
providers to use keys with very longer lifetime or a key chain with a =
set of key which were repeated in a =
cycle.
    We would like to address above issue with I2NSF framework. Please =
correct me if I am wrong.
     
    keys for message authentication and =
integrity. As of now there is no much focus on an abstraction for keying =
information that describes the interface
    between protocols, operators, and =
automated key management.
     
    [[Anil >>]] How about below text =
:
    3.1.9 Lack of framework/standard interface =
to provisioning the usage of Key Derivation Function (KDF) and managing =
KDF
     
    A Key Derivation Function (KDF) or Key =
Derivation Algorithm is intended to be used in two ways: =

    (1) to derive a long-term Master Secret =
from a short-lived shared secret 
    (2) to derive secure channel session keys =
from a shared secret and a seed.
     
    There is a need for a framework to ensure =
secure exchange of initial secrete between managing entity and managed =
entity (NSF). 
     
    There is a need for a framework/standard =
interface in provisioning two communicating protocols to use KDF as =
their key source for 
    Specific period of time or for a set of =
interaction. 
    There is also need for framework/standard =
interface in controlling and managing KDF used between two communicating =
protocols 
    The Provisioning and Managing framework =
could be extended to data plane too. 
     
    With Regards
    Anil S N
     

    “Be liberal in what you accept, and = conservative in what you send” - Jon = Postel

    ------=_NextPart_000_000D_01D13A69.CB6165B0-- From nobody Sat Dec 19 17:17:44 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C42461ACEA2 for ; Sat, 19 Dec 2015 17:17:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -95.754 X-Spam-Level: X-Spam-Status: No, score=-95.754 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DOS_OUTLOOK_TO_MX=2.845, HTML_MESSAGE=0.001, J_CHICKENPOX_37=0.6, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pRjXc_88pgfv for ; Sat, 19 Dec 2015 17:17:29 -0800 (PST) Received: from hickoryhill-consulting.com (hhc-web3.hickoryhill-consulting.com [64.9.205.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C92C21ACEA0 for ; Sat, 19 Dec 2015 17:17:28 -0800 (PST) X-Default-Received-SPF: pass (skip=forwardok (res=PASS)) x-ip-name=74.43.47.177; From: "Susan Hares" To: References: In-Reply-To: Date: Sat, 19 Dec 2015 20:17:05 -0500 Message-ID: <002701d13ac4$24025a30$6c070e90$@ndzh.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0028_01D13A9A.3B2DD8D0" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQEc9B0JocM47P/VL6/qCq5CXtnSCKA7nwxQ Content-Language: en-us X-Authenticated-User: skh@ndzh.com Archived-At: Cc: adrian@olddog.co.uk, 'Linda Dunbar' Subject: [I2nsf] FW: Merged I2NSF problem statement and Use Case - draft-hares X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Dec 2015 01:17:42 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0028_01D13A9A.3B2DD8D0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0029_01D13A9A.3B2DD8D0" ------=_NextPart_001_0029_01D13A9A.3B2DD8D0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sending this just to list. Sue From: Susan Hares [mailto:shares@ndzh.com] Sent: Saturday, December 19, 2015 8:11 PM To: 'i2nsf@ietf.org' Cc: 'antonio.pastorperales@telefonica.com'; 'ldunbar@huawei.com'; 'diego.r.lopez@telefonica.com'; 'myo.zarny@gs.com'; 'N.Leymann@telekom.de'; 'michaelq@prime-tel.com'; 'mohamed.boucadair@orange.com'; 'Christian.jacquenet@orange.com'; 'shaibalc@us-ignite.org'; 'adrian@olddog.co.uk'; 'Kathleen Moriarty' Subject: Merged I2NSF problem statement and Use Case - draft-hares I2NSF folks and my co-authors: I have merged all the changes you suggested into Linda's problem statement and combined this with the use cases. Please let me know if you have any concerns or changes to the resulting document. If anyone was left off the Contributors section, would you please let me know. This document is the combination of lots of people's hard work. I will upload it as draft-hares-merged-i2nsf-problem-use-cases-00.txt along with the XML on Sunday evening (12/20/2015) and then ask for WG adoption. I'll watch for comments in the next few weeks and revise the text. Does I2NSF have a github repository? If so, we can put the XML there to change it. Sue Hares ------=_NextPart_001_0029_01D13A9A.3B2DD8D0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

    Sending this just to list. =

     

    Sue =

    From:= = Susan Hares [mailto:shares@ndzh.com]
    Sent: Saturday, December = 19, 2015 8:11 PM
    To: 'i2nsf@ietf.org'
    Cc: = 'antonio.pastorperales@telefonica.com'; 'ldunbar@huawei.com'; = 'diego.r.lopez@telefonica.com'; 'myo.zarny@gs.com'; = 'N.Leymann@telekom.de'; 'michaelq@prime-tel.com'; = 'mohamed.boucadair@orange.com'; 'Christian.jacquenet@orange.com'; = 'shaibalc@us-ignite.org'; 'adrian@olddog.co.uk'; 'Kathleen = Moriarty'
    Subject: Merged I2NSF problem statement and Use Case = - draft-hares

     

    I2NSF folks = and my co-authors:

     

    I have = merged all the changes you suggested into Linda’s problem = statement and combined this with the use cases.  Please let me know = if you have any concerns or changes to the resulting document.  =  

     

    If anyone was left off the Contributors section, would = you please let me know.  This document is the combination of lots = of people’s hard work.  I will upload it as =  draft-hares-merged-i2nsf-problem-use-cases-00.txt along with the = XML on Sunday evening (12/20/2015) and then ask for WG adoption. =   I’ll watch for comments in the next few weeks and = revise the text.

     

    Does I2NSF = have a github repository?  If so, we can put the XML there to = change it.

     

    Sue Hares

     

    ------=_NextPart_001_0029_01D13A9A.3B2DD8D0-- ------=_NextPart_000_0028_01D13A9A.3B2DD8D0 Content-Type: text/plain; name="draft-hares-merged-i2nsf-problem-use-cases-00.txt" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="draft-hares-merged-i2nsf-problem-use-cases-00.txt" =0A= =0A= =0A= =0A= I2NSF BOF S. Hares=0A= Internet-Draft L. Dunbar=0A= Intended status: Standards Track Huawei=0A= Expires: June 21, 2016 A. Pastor=0A= D. Lopez=0A= Telefonica I+D=0A= M. Zarny=0A= Goldman Sachs=0A= N. Leymann=0A= Deutsche Telekom=0A= M. Georgiades=0A= Prime Tel=0A= M. Qi=0A= China Mobile=0A= M. Boucadair=0A= C. Jacquenet=0A= France Telecom=0A= S. Chakrabarty=0A= US Ignite=0A= December 19, 2015=0A= =0A= =0A= I2NSF Problem Statement and Use cases=0A= draft-hares-merged-i2nsf-problem-use-cases-00.txt=0A= =0A= Abstract=0A= =0A= This document describes the problem statement for Interface to=0A= Network Security Functions (I2NSF) and summary of the I2NSF use=0A= cases.=0A= =0A= Status of This Memo=0A= =0A= This Internet-Draft is submitted in full conformance with the=0A= provisions of BCP 78 and BCP 79.=0A= =0A= Internet-Drafts are working documents of the Internet Engineering=0A= Task Force (IETF). Note that other groups may also distribute=0A= working documents as Internet-Drafts. The list of current Internet-=0A= Drafts is at http://datatracker.ietf.org/drafts/current/.=0A= =0A= Internet-Drafts are draft documents valid for a maximum of six months=0A= and may be updated, replaced, or obsoleted by other documents at any=0A= time. It is inappropriate to use Internet-Drafts as reference=0A= material or to cite them other than as "work in progress."=0A= =0A= This Internet-Draft will expire on June 21, 2016.=0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 1]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Copyright Notice=0A= =0A= Copyright (c) 2015 IETF Trust and the persons identified as the=0A= document authors. All rights reserved.=0A= =0A= This document is subject to BCP 78 and the IETF Trust's Legal=0A= Provisions Relating to IETF Documents=0A= (http://trustee.ietf.org/license-info) in effect on the date of=0A= publication of this document. Please review these documents=0A= carefully, as they describe your rights and restrictions with respect=0A= to this document. Code Components extracted from this document must=0A= include Simplified BSD License text as described in Section 4.e of=0A= the Trust Legal Provisions and are provided without warranty as=0A= described in the Simplified BSD License.=0A= =0A= Table of Contents=0A= =0A= 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3=0A= 2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 4=0A= 3. Problem Space . . . . . . . . . . . . . . . . . . . . . . . . 5=0A= 3.1. Facing Security Service Providers . . . . . . . . . . . . 5=0A= 3.1.1. Diverse Types of Security Functions . . . . . . . . . 5=0A= 3.1.2. Diverse Interfaces to Control NSFS . . . . . . . . . 6=0A= 3.1.3. Diverse Interface to monitor the behavior of NSFs . . 7=0A= 3.1.4. More Distributed NSFs and vNSFs . . . . . . . . . . . 7=0A= 3.1.5. More Demand to Control NSFs Dynamically . . . . . . . 7=0A= 3.1.6. Demand for multi-tenancy to control and monitor NSFs 7=0A= 3.1.7. Lack of Characterization of NSFs and Capability=0A= Exchange . . . . . . . . . . . . . . . . . . . . . . 7=0A= 3.1.8. Lack of mechanism for NSFs to utilize external=0A= profiles . . . . . . . . . . . . . . . . . . . . . . 8=0A= 3.1.9. Lack of Lack of Mechanisms to accept external alerts=0A= to trigger automatic configuration changes . . . . . 8=0A= 3.1.10. Lack of mechanism for dynamic key distribution to=0A= NSFs . . . . . . . . . . . . . . . . . . . . . . . . 9=0A= 3.2. Challenges Facing Customers . . . . . . . . . . . . . . . 10=0A= 3.2.1. NSFs from Heterogeneous Administrative Domains . . . 10=0A= 3.2.2. Today's Control Requests are Vendor Specific . . . . 11=0A= 3.2.3. Difficulty to Monitor the Execution of Desired=0A= Policies . . . . . . . . . . . . . . . . . . . . . . 12=0A= 3.3. Difficulty to Validate Policies across Multiple Domains . 13=0A= 3.4. Lack of Standard Interface to Inject Feedback to NSF . . 13=0A= 3.5. Lack of Standard Interface for Capability Negotiation . . 13=0A= 4. Use Cases . . . . . . . . . . . . . . . . . . . . . . . . . . 14=0A= 4.1. General Use Cases . . . . . . . . . . . . . . . . . . . . 14=0A= 4.2. Access Networks . . . . . . . . . . . . . . . . . . . . . 15=0A= 4.3. Cloud Datacenter Scenario . . . . . . . . . . . . . . . . 17=0A= 4.3.1. On-Demand Virtual Firewall Deployment . . . . . . . . 17=0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 2]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= 4.3.2. Firewall Policy Deployment Automation . . . . . . . . 18=0A= 4.3.3. Client-Specific Security Policy in Cloud VPNs . . . . 18=0A= 4.3.4. Internal network monitoring . . . . . . . . . . . . . 19=0A= 5. Management Considerations . . . . . . . . . . . . . . . . . . 19=0A= 6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 19=0A= 7. Security Considerations . . . . . . . . . . . . . . . . . . . 19=0A= 8. Contributors . . . . . . . . . . . . . . . . . . . . . . . . 19=0A= 9. References . . . . . . . . . . . . . . . . . . . . . . . . . 19=0A= 9.1. Normative References . . . . . . . . . . . . . . . . . . 19=0A= 9.2. Informative References . . . . . . . . . . . . . . . . . 20=0A= Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 21=0A= =0A= 1. Introduction=0A= =0A= This document describes the problem statement for Interface to=0A= Network Security Functions (I2NSF) and summary of the I2NSF use=0A= cases. A summary of the I2NSF state of the art in the industries and=0A= IETF which is relevant to I2NSF work is contained in=0A= [I-D.hares-i2nsf-gap-analysis].=0A= =0A= The growing challenges and complexity in maintaining a secure=0A= infrastructure, complying with regulatory requirements, and=0A= controlling costs are enticing enterprises into consuming network=0A= security functions hosted by service providers. The hosted security=0A= service is especially attractive to small and medium size enterprises=0A= who suffer from a lack of security experts to continuously monitor,=0A= acquire new skills and propose immediate mitigations to ever=0A= increasing sets of security attacks.=0A= =0A= According to [Gartner-2013], the demand for hosted (or cloud-based)=0A= security services is growing. Small and medium-sized businesses=0A= (SMBs) are increasingly adopting cloud-based security services to=0A= replace on-premises security tools, while larger enterprises are=0A= deploying a mix of traditional and cloud-based security services.=0A= =0A= To meet the demand, more and more service providers are providing=0A= hosted security solutions to deliver cost-effective managed security=0A= services to enterprise customers. The hosted security services are=0A= primarily targeted at enterprises (especially small/medium ones), but=0A= could also be provided to any kind of mass-market customer. As the=0A= result, the Network security functions (NSFs) are provided and=0A= consumed in increasingly diverse environments. Users of NSFs may=0A= consume network security services hosted by one or more providers,=0A= which may be their own enterprise, service providers, or a=0A= combination of both. This document also briefly describes the=0A= following use cases summarized by=0A= [I-D.pastor-i2nsf-merged-use-cases]:=0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 3]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= o [I-D.pastor-i2nsf-access-usecases] (I2NSF-Access),=0A= =0A= o [I-D.zarny-i2nsf-data-center-use-cases](I2NSF-DC), and=0A= =0A= o [I-D.qi-i2nsf-access-network-usecase] (I2NSF-Mobile).=0A= =0A= 2. Terminology=0A= =0A= ACL: Access Control List=0A= =0A= B2B: Business-to-Business=0A= =0A= Bespoke: Something made to fit a particular person, client or=0A= company.=0A= =0A= Bespoke security management: Security management which is make to=0A= fit a particular customer.=0A= =0A= DC: Data Center=0A= =0A= FW: Firewall=0A= =0A= IDS: Intrusion Detection System=0A= =0A= IPS: Intrusion Protection System=0A= =0A= NSF: Network security function. An NSF is a function that that=0A= detects unwanted activity and blocks/mitigates the effect of such=0A= unwanted activity in order to support availability of a network.=0A= In addition, the NSF can help in supporting communication stream=0A= integrity and confidentiality.=0A= =0A= Flow-based NSF: A NSF which inspects network flows according to a=0A= policy intended for enforcing security properties. Flow based=0A= security also means that packets are inspected in the order they=0A= are received, and without modification to the packet due to the=0A= inspection process (MAC rewrites, TTL decrement action, or NAT=0A= inspection or changes).=0A= =0A= Virtual NSF: A NSF which is deployed as a distributed virtual=0A= device.=0A= =0A= VNFPool: Pool of Virtual Network Functions.=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 4]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= 3. Problem Space=0A= =0A= The following sub-section describe the problems and challenges facing=0A= customers and security service providers when some or all of the=0A= security functions are no longer physical hosted by the customer's=0A= administrative domain.=0A= =0A= Security service providers can be internal to the company or external=0A= security service providers. For example, an internal IT Security=0A= group within a large enterprise could act as a security service=0A= provider for the enterprise. In contrast, an enterprise could=0A= outsource all security services to an external security service=0A= provider in a global service provider. In document, the security=0A= service provider function whether it is internal or external, will be=0A= denoted as "service provider".=0A= =0A= The "Customer-Provider" relationship may be between any two parties.=0A= The parties can be in different firms or different domains of the=0A= same firm. Contractual agreements may be required in such contexts=0A= to formally document the customer's security requirements and the=0A= provider's guarantees to fulfill those requirements. Such agreements=0A= may detail protection levels, escalation procedure, alarms reporting,=0A= etc. There is currently no standard mechanism to capture those=0A= requirements.=0A= =0A= A service provider may be a customer of another service provider.=0A= =0A= 3.1. Facing Security Service Providers=0A= =0A= 3.1.1. Diverse Types of Security Functions=0A= =0A= There are many types of NSFs. NSFs by different vendors can have=0A= different features and have different interfaces. NSFs can be=0A= deployed in multiple locations in a given network, and perhaps have=0A= different roles.=0A= =0A= Below are a few examples of security functions and locations or=0A= contexts in which they are often deployed:=0A= =0A= External Intrusion and Attack Protection: Examples of this function=0A= are firewall/ACL authentication, IPS, IDS, and endpoint=0A= protection.=0A= =0A= Security Functions in a DMZ: Examples of this function are=0A= firewall/ACLs, IDS/IPS, authentication and authorization services,=0A= NAT, forwarding proxies, application, and AAA services. These=0A= functions may be physically on-premise in a server provider's=0A= network at the DMZ spots or at "virtual" DMZ.=0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 5]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Internal Security Analysis and Reporting: Examples of this function=0A= are security logs, event correlation, and forensic analysis.=0A= =0A= Internal Data and Content Protection: Examples of this function are=0A= encryption, authorization, and public/private key management for=0A= internal database.=0A= =0A= Given the diversity of security functions, the contexts in which=0A= these functions can be deployed, and the constant evolution of these=0A= functions, standardizing all aspects of security functions is=0A= challenging, and most probably not feasible. Fortunately, it is not=0A= necessary to standardize all aspects. For example, from an I2NSF=0A= perspective, there is no need to standardize on how a firewall=0A= filters are created or applied.=0A= =0A= What is needed is having a standardized interface to control and=0A= monitor the rule sets that NSFs use to treat packets traversing=0A= through. And standardizing interfaces will provide an impetuous for=0A= standardizing established security functions.=0A= =0A= 3.1.2. Diverse Interfaces to Control NSFS=0A= =0A= To provide effective and competitive solutions and services, Security=0A= Service Providers may need to utilize multiple security functions=0A= from various vendors to enforce the security policies desired by=0A= their customers.=0A= =0A= Since no widely accepted industry standard security interfaces exists=0A= today, management of NSFs (device and policy provisioning,=0A= monitoring, etc.) tends to be bespoke security management offered by=0A= product vendors. As a result, automation of such services, if it=0A= exists at all, is also bespoke. Thus, even in the traditional way of=0A= deploying security features, there is a gap to coordinate among=0A= implementations from distinct vendors. This is the main reason why=0A= mono-vendor security functions are often deployed and enable in a=0A= particular network segment.=0A= =0A= A challenge for monitoring is that an NSF cannot monitor what it=0A= cannot view. Therefore, enabling a security function (e.g., firewall=0A= [I-D.ietf-opsawg-firewalls]) does not mean that a network is=0A= protected. As such, it is necessary to have a mechanism to monitor=0A= and provide execution status of NSFs to security and compliance=0A= management tools. There exist various network security monitoring=0A= vendor specific interfaces for forensics and troubleshooting.=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 6]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= 3.1.3. Diverse Interface to monitor the behavior of NSFs=0A= =0A= Obviously, enabling a security function (e.g., firewall=0A= [I-D.ietf-opsawg-firewalls] does not mean that a network is=0A= protected. Therefore, it is necessary to have a mechanism to monitor=0A= the execution status of NSFs.=0A= =0A= 3.1.4. More Distributed NSFs and vNSFs=0A= =0A= The security functions which are invoked to enforce a security policy=0A= can be located in different equipment and network locations.=0A= =0A= The European Telecommunications Standards Institute (ETSI) Network=0A= Function Virtualization (NFV) initiative creates new management=0A= challenges for security policies to be enforced by distributed,=0A= virtual, and network security functions (vNSF).=0A= =0A= A vNSF has higher risk of failure, migrating, and state changes as=0A= their hosting VMs being created, moved, or decommissioned.=0A= =0A= 3.1.5. More Demand to Control NSFs Dynamically=0A= =0A= In the advent of SDN (see [I-D.jeong-i2nsf-sdn-security-services]),=0A= more clients, applications or application controllers need to=0A= dynamically update their communication policies that are enforced by=0A= NSFs. The Security Service Providers have to dynamically update=0A= control requests to NSFs upon receiving the requests from their=0A= clients=0A= =0A= 3.1.6. Demand for multi-tenancy to control and monitor NSFs=0A= =0A= Service providers may require having several operational units to=0A= control and monitor the NSFs, especially when NSFs become distributed=0A= and virtualized.=0A= =0A= 3.1.7. Lack of Characterization of NSFs and Capability Exchange=0A= =0A= To offer effective security services, service providers need to=0A= activate various security functions in NSFs or vNSFs manufactured by=0A= multiple vendors. Even within one product category (e.g., firewall),=0A= security functions provided by different vendors can have different=0A= features and capabilities. For example, filters that can be designed=0A= and activated by a firewall may or may not support IPv6 depending on=0A= the firewall technology.=0A= =0A= The service provider's management system (or controller) needs a way=0A= to retrieve the capabilities of service functions by different=0A= vendors so that it could build an effective security solution. These=0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 7]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= service function capabilities can be documented in a static manner=0A= (e.g. a file) or via an interface which access a repository of=0A= security function capabilities which the NSF vendors dynamically=0A= update.=0A= =0A= A dynamic capability registration is useful for automation because=0A= security functions may be subject to software and hardware updates.=0A= These updates may have implications on the policies enforced by the=0A= NSFs.=0A= =0A= Today, there is no standard method for vendors to describe the=0A= capabilities of their security functions. Without a common technical=0A= framework to describe the capabilities of security functions, service=0A= providers cannot automate the process of selecting NSFs by different=0A= vendors to accommodate customer's requirements.=0A= =0A= 3.1.8. Lack of mechanism for NSFs to utilize external profiles=0A= =0A= Many security functions depend on signature files or profiles to=0A= perform (e.g. IPS/IDS signatures, DOTS filters). Different policies=0A= might need different signatures or profiles. Today, most black=0A= database can be win-win strategy for all parties involved. There=0A= might be Open Source provided signature/profiles (e.g. by Snort or=0A= others) in the future.=0A= =0A= There is a need to have a standard envelop (i.e. the format) to allow=0A= NSFs to use external profiles.=0A= =0A= 3.1.9. Lack of Lack of Mechanisms to accept external alerts to trigger=0A= automatic configuration changes=0A= =0A= NSF can ask the I2NSF security controller to alter network policy.=0A= For example, a DDoS alert could trigger a change to routing system to=0A= send traffic to a traffic scrubbing service to mitigate the DDoS.=0A= =0A= The DDoS protection has the following two parts: a) the configuration=0A= of signaling of open threats and b) DDoS mitigation. DOTS controller=0A= manages the signaling part of DDoS. I2NSF controller(s) would manage=0A= the changing to the network policy. By monitoring the network alerts=0A= from DDoS, I2NSF can feed a alerts analytics engine that could=0A= recognize attacks and the I2NSF can implement the needed new=0A= policies.=0A= =0A= DDoS mitigation is enhanced if the provider's network security=0A= controller can monitor, analyze, and investigate the abnormal events=0A= and provide information to the client or change the network=0A= configuration (see section x) for details on the interfaces.=0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 8]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= [I-D.zhou-i2nsf-capability-interface-monitoring] provides details on=0A= how monitoring aspects of the flow-based Network Security Functions=0A= (NSFs) can use the I2NSF interfaces to receive traffic reports and=0A= enforce policy.=0A= =0A= 3.1.10. Lack of mechanism for dynamic key distribution to NSFs=0A= =0A= There is a need for controller to distribute various keys to=0A= distributed NSFs. To distribute various keys, the keys must be=0A= created and managed. While there is many key management methods and=0A= key derivation functions (KDF), there is a lack of standard interface=0A= to provision and manage keys.=0A= =0A= The keys may be used for message authentication and integrity in=0A= order to protect data flow. In addition, keys may be used to secure=0A= the protocol and messages in the core routing infrastructure.=0A= =0A= As of now there is no much focus on an abstraction for keying=0A= information that describes the interface between protocols,=0A= operators, and automated key management.=0A= =0A= The keys may be used for message authentication and integrity in=0A= order to protect data flow. In addition, keys may be used to secure=0A= the protocol and messages in the core routing infrastructure.=0A= =0A= The ability to utilize keys when routing protocols send or receive=0A= messages will be enhanced by having an abstract key table maintained=0A= by a security services. Conceptually, there must be an interface=0A= defined for routing/signaling protocols to make requests of automated=0A= key management when it is being used, to notify the protocols when=0A= keys become available in the key table.=0A= =0A= An abstract key service needs to have three things:=0A= =0A= 1. I2NSF need to design the key table abstraction, the interface=0A= between key management protocols and routing/other protocols, and=0A= possibly security protocols at other layers.=0A= =0A= 2. For each routing/other protocol, I2NSF need to define the mapping=0A= between how the protocol represents key material and the=0A= protocol-independent key table abstraction. (If protocols share=0A= common mechanisms for authentication (e.g. TCP Authentication=0A= Option), then the same mapping may be reused.)=0A= =0A= 3. Automated Key management must support both symmetric keys and=0A= group keys via the service provided by items 1 and 2.=0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 9]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= 3.1.10.1. Background on Core Routing Security=0A= =0A= A recommendation from a workshop held by the Internet Architecture=0A= Board (IAB) held a workshop on the topic of "Unwanted Internet=0A= Traffic" [RFC4948] suggest since a "simple risk analysis" suggests an=0A= "ideal attack target of minimal cost but maximal disruption is the=0A= core routing infrastructure", it is important to "tightening the=0A= security of the core routing infrastructure". One of the ways to=0A= tighten security of the core routing infrastructure is to tighten the=0A= security of protocol packets on the wire is by protecting the=0A= messages by use of keys.=0A= =0A= Conceptually, when routing protocols send or receive messages, they=0A= might need to look up the key to use in this abstract key table.=0A= Conceptually, there must be an interface defined for a protocols to=0A= make requests of automated key management when it is being used; when=0A= keys become available, they might be made available in the key table.=0A= =0A= 3.2. Challenges Facing Customers=0A= =0A= When customers invoke hosted security services, their security=0A= policies may be enforced by a collection of security functions hosted=0A= in different domains. Customers may not have the security skills to=0A= express sufficiently precise requirements or security policies.=0A= Usually these customers express the expectations of their security=0A= requirements or the intent of their security policies. These=0A= expectations can be considered customer level security expectations.=0A= Customers may also desire to express guidelines for security=0A= management. Examples of such guidelines are the following:=0A= =0A= o Which critical communications are to be preserved during critical=0A= events (DOTS),=0A= =0A= o Which hosts are to continue service even during severe security=0A= attacks (DOTS),=0A= =0A= o Reporting of attacks to CERT (MILE),=0A= =0A= o Managing network connectivity of systems out of compliance (SACM),=0A= =0A= 3.2.1. NSFs from Heterogeneous Administrative Domains=0A= =0A= Many medium and large enterprises have deployed various on-premises=0A= security functions which they want to continue to deploy. These=0A= enterprises want to combine local security functions with remote=0A= hosted security functions to achieve more efficient and immediate=0A= counter-measures to both Internet-originated attacks and enterprise=0A= network-originated attacks.=0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 10]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Some enterprises may only need the hosted security services for their=0A= remote branch offices where minimal security infrastructures/=0A= capabilities exist. The security solution will consist of NSFs on=0A= customer networks and NSFs on service provider networks.=0A= =0A= 3.2.2. Today's Control Requests are Vendor Specific=0A= =0A= Customers may consume NSFs by multiple service providers. Customers=0A= need to express their security requirements, guidelines, and=0A= expectations to the service providers. In turn, the service=0A= providers must translate this customer information into customer=0A= security policies and associated configuration sets for the set of=0A= security functions in their network. Without a standard technical=0A= characterizations or a standard interface, the service provide faces=0A= many challenges.=0A= =0A= Due the lack of standard technical characterizations and a standard=0A= interfaces, the following problems exists:=0A= =0A= No standard technical characterization and/or APIs : Even the most=0A= common security services there is no standard technical=0A= characterization or APIs. Most security services are accessible=0A= only through disparate, proprietary interfaces (e.g., portals or=0A= APIs) in whatever format vendors choose to offer. The service=0A= provider must the customer's input to these widely varying=0A= interfaces.=0A= =0A= No standard interface: Without standard interfaces it is complex=0A= for customers to update security policies or integrate the=0A= security functions in their enterprise with the security services=0A= provided by the security service providers. This complexity is=0A= induced by the diversity of the configuration models, policy=0A= models, and supported management interfaces. Without a standard=0A= interface, new innovatitive security products find a large barrier=0A= to entry into the market=0A= =0A= Managing by scripts de-jour: The current practices rely on the use=0A= of scripts which generate other scripts which the automatically=0A= run to upload or download configuration changes, log information=0A= and other things. These scripts have to be adjusted each time an=0A= implementation from a different vendor is enabled in a provider=0A= side.=0A= =0A= Lack of immediate Feedback: Customers may also require a mechanism=0A= to easily update/modify their security requirements with immediate=0A= effect in the underlying involved NSFs.=0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 11]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Lack of explicit invocation request: While security agreements are=0A= in place, security functions may be solicited without requiring an=0A= explicit invocation means. Nevertheless, some explicit invocation=0A= means may be required to interact with a service function.=0A= =0A= To see how standard interfaces could help achieve faster=0A= implementation time cycles, let us consider a customer who would like=0A= to dynamically allow an encrypted flow with specific port, src/dst=0A= addresses or protocol type through the firewall/IPS to enable an=0A= encrypted video conferencing call only during the time of the call.=0A= With no commonly accepted interface in place, the customer would have=0A= to learn about the particular provider's firewall/IPS interface and=0A= send the request in the provider's required format.=0A= =0A= +------------+=0A= | security |=0A= | MGT system |=0A= +----||------+=0A= || proprietary=0A= || or I2NSF standard=0A= Picture: ||=0A= Port 10 +--------+=0A= --------| FW/IPS |-------------=0A= Encrypted +--------+=0A= Video Flow=0A= =0A= Figure 2: Example of non-standard vs. standard interface=0A= =0A= In contrast, if a firewall/IPS interface standard exists, the=0A= customer would be able to send the request, without having to do the=0A= extensive preliminary legwork. A standard interface also helps=0A= service providers since they could now offer the same firewall/IPS=0A= interface to represent firewall/IPS services for utilizing products=0A= from many vendors. The result is that the service provider has now=0A= abstracted the firewall/IPS services. The standard interface also=0A= helps the firewall/IPS vendors to focus on their core security=0A= functions or extended features rather than the standard building=0A= blocks of a management interface.=0A= =0A= 3.2.3. Difficulty to Monitor the Execution of Desired Policies=0A= =0A= How a policy is translated into technology-specific actions is hidden=0A= from the customers. However, customers still need ways to monitor=0A= the delivered security service that results from the execution of=0A= their desired security requirements, guidelines and expectations.=0A= =0A= Today, there is no standard way for customers to get security service=0A= assurance of their specified security policies properly enforced by=0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 12]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= the security functions in the provider domain. The customer also=0A= lacks the ability to perform "what-if" scenarios to assess the=0A= efficiency of the delivered security service.=0A= =0A= 3.3. Difficulty to Validate Policies across Multiple Domains=0A= =0A= One key aspect of a hosted security service with security functions=0A= located at different premises is the ability to express, monitor and=0A= verify security policies that combine several distributed security=0A= functions. It is crucial to an effective service to be able to take=0A= these actions via a standard interface. This standard interface=0A= becomes more crucial to the hosted security service when NSFs are=0A= instantiated in Virtual Machines which are sometimes widely=0A= distributed in the network and sometimes are combined together in one=0A= device to perform a set of asks in a service.=0A= =0A= Without standard interfaces and security policy data models, the=0A= enforcement of a customer-driven security policy remains challenging=0A= because of the inherent complexity created by the combining the=0A= invocation of several vendor-specific security functions into a=0A= multi-vendor, heterogeneous environment. Each vendor specific=0A= function may require specific configuration procedures and=0A= operational tasks.=0A= =0A= Ensuring the consistent enforcement of the policies at various=0A= domains is also challenging. Standard data models are likely to=0A= contribute to ameliorating that issue.=0A= =0A= 3.4. Lack of Standard Interface to Inject Feedback to NSF=0A= =0A= Today, many security functions, such as IPS, IDS, DDoS and Antivirus,=0A= depend heavily on the associated profiles. They can perform more=0A= effective protection if they have the up-to-date profiles. As more=0A= sophisticated threats arise, enterprises, vendors, and service=0A= providers have to rely on each other to achieve optimal protection.=0A= Cyper Threat Alliance (CA, http://cyberthreatalliance.org/) is is one=0A= of those initiatives that aim at combining efforts conducted by=0A= multiple organizations.=0A= =0A= Today there is no standard interface to exchange security profiles=0A= between organizations.=0A= =0A= 3.5. Lack of Standard Interface for Capability Negotiation=0A= =0A= There could be situations when the NSFs selected cannot perform the=0A= policies requested by the Security Controller, due to resource=0A= constraints. To support the automatic control in the SDN-era, it is=0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 13]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= necessary to have a set of messages for proper negotiation between=0A= the Security Controller and the NSFs.=0A= =0A= 4. Use Cases=0A= =0A= Standard interfaces for monitoring and controlling the behavior of=0A= NSFs are essential building blocks for Security Service Providers and=0A= enterprises to automate the use of different NSFs from multiple=0A= vendors by their Security management entities. I2NSF may be invoked=0A= by any (authorized) client. Examples of authorized clients are=0A= upstream applications (controllers), orchestration systems, and=0A= security portals.=0A= =0A= 4.1. General Use Cases=0A= =0A= User request security services through specific clients (e.g. a=0A= customer application, the NSP BSS/OSS or management platform) and the=0A= appropriate NSP network entity will invoke the (v)NSFs according to=0A= the user service request. We will call this network entity the=0A= security controller. The interaction between the entities discussed=0A= above (client, security controller, NSF) is shown in the following=0A= diagram:=0A= =0A= +----------+=0A= +-------+ | | +-------+=0A= | | Interface 1 |Security | Interface 2 | NSF(s)|=0A= |Client <-------------> <------------------> |=0A= | | |Controller| | |=0A= +-------+ | | +-------+=0A= +----------+=0A= =0A= Figure 2: Interaction between Entities=0A= =0A= Interface 1 is used for receiving security requirements from client=0A= and translating them into commands that NSFs can understand and=0A= execute. The security controller also passes back NSF security=0A= reports (e.g. statistics) to the client which the control has=0A= gathered from NSFs. Interface 2 is used for interacting with NSFs=0A= according to commands, and collect status information about NSFs.=0A= =0A= Client devices or applications can require the security controller to=0A= add, delete or update rules in the security service function for=0A= their specific traffic.=0A= =0A= When users want to get the executing status of security service, they=0A= can request the information of NSFs from the client. The security=0A= controller will collect NSF information through Interface 2,=0A= consolidate them, and give feedback to client through Interface 1.=0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 14]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= This interface can be used to collect not only individual service=0A= information, but also aggregated data suitable for tasks like=0A= infrastructure security assessment.=0A= =0A= Customers may require validating NSF availability, provenance, and=0A= correct execution. This validation process, especially relevant for=0A= vNSFs, includes at least:=0A= =0A= Integrity of the NSF: by ensuring that the NSF is not compromised;=0A= =0A= Isolation: by ensuring the execution of the NSF is self-contained=0A= for privacy requirements in multi-tenancy scenarios.=0A= =0A= In order to achieve this, the security controller may collect=0A= security measurements and share them with an independent and trusted=0A= third party (via the interface 1) in order to allow for attestation=0A= of NSF functions using the third party added information.=0A= =0A= 4.2. Access Networks=0A= =0A= This scenario describes use cases for users (e.g. enterprise user,=0A= network administrator, and residential user) that request and manage=0A= security services hosted in the network service provider (NSP)=0A= infrastructure. Given that NSP customers are essentially users of=0A= their access networks, the scenario is essentially associated with=0A= their characteristics, as well as with the use of vNSFs.=0A= =0A= The Virtual CPE described in [NFVUC] use cases #5 and #7 requires a=0A= model of access virtualization that includes mobile and residential=0A= access where the operator may offload security services from the=0A= customer local environment (E.g. device or terminal) to the operator=0A= infrastructure supporting the access network.=0A= =0A= These use cases defines the operator interaction with vNSFs through=0A= automated interfaces, typically by B2B communications.=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 15]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Customer + Access + PoP/Datacenter=0A= | | +--------+=0A= | ,-----+--. |Network |=0A= | ,' | `-|Operator|=0A= +-------------+ | /+----+ | |Mgmt Sys|=0A= | Residential |-+------/-+vCPE+----+ +--------+=0A= +-------------+ | / +----+ | \ | :=0A= | / | \ | |=0A= +-------+ | ; +----+ | +----+ |=0A= | Cloud |---+---+----+ vPE+--+----+ NSF| |=0A= +-------+ | : +----+ | +----+ |=0A= | : | / |=0A= +--------+ | : +----+ | / ;=0A= | Mobile |-+-----\--+vEPC+----+ /=0A= +--------+ | \ +----+ | ,-'=0A= | `--. | _.-'=0A= | `----+----''=0A= + +=0A= =0A= =0A= Figure 3: NSF and actors=0A= =0A= =0A= The following are actions required for this access use case:=0A= =0A= vNSF Deployment: The deployment process consists of instantiating a=0A= NSF on a Virtualization Infrastructure (NFVI), within the NSP=0A= administrative domain(s) or with other external domain(s). This=0A= is a required step before a customer can subscribe to a security=0A= service supported in the vNSF.=0A= =0A= vNSF Customer Provisioning: Once a vNSF is deployed, any customer=0A= can subscribe to it. The provisioning lifecycle includes the=0A= following:=0A= =0A= * Customer enrollment and cancellation of the subscription to a=0A= vNSF;=0A= =0A= * Configuration of the vNSF, based on specific configurations, or=0A= derived from common security policies defined by the NSP.=0A= =0A= * Retrieve and list of the vNSF functionalities, extracted from a=0A= manifest or a descriptor. The NSP management systems can=0A= demand this information to offer detailed information through=0A= the commercial channels to the customer.=0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 16]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= 4.3. Cloud Datacenter Scenario=0A= =0A= In a datacenter, network security mechanisms such as firewalls may=0A= need to be added or removed dynamically for a number of reasons.=0A= These changes may be explicitly requested by the user, or triggered=0A= by a pre-agreed upon service level agreement (SLA) between the user=0A= and the provider of the service. For example, the service provider=0A= may be required to add more firewall capacity within a set timeframe=0A= whenever the bandwidth utilization hits a certain threshold for a=0A= specified period. This capacity expansion could result in adding new=0A= instances of firewalls on existing machines or provisioning a=0A= completely new firewall instance in a different machine.=0A= =0A= The on-demand, dynamic nature of deployment essentially requires that=0A= the network security "devices" be in software or virtual form=0A= factors, rather than in a physical appliance form. This requirement=0A= is a provider-side concern. Users of the firewall service are=0A= agnostic (as they should) as to whether or not the firewall service=0A= is run on a VM or any other form factor. Indeed, they may not even=0A= be aware that their traffic traverses firewalls.=0A= =0A= Furthermore, new firewall instances need to be placed in the "right=0A= zone" (domain). The issue applies not only to multi-tenant=0A= environments where getting the tenant in the right domain is of=0A= paramount importance, but also in environments owned and operated by=0A= a single organization with its own service segregation policies. For=0A= example, an enterprise may mandate that firewalls serving Internet=0A= traffic and business-to-business (B2B) traffic be separate. Another=0A= example is that IPS/IDS services for investment banking and non-=0A= banking traffic may be need to separated for regulatory reasons.=0A= =0A= 4.3.1. On-Demand Virtual Firewall Deployment=0A= =0A= A service provider operated cloud data center could serve tens of=0A= thousands of clients. Clients' compute servers are typically hosted=0A= on virtual machines (VMs), which could be deployed across different=0A= server racks located in different parts of the data center. Often it=0A= is not technically and/or financially feasible to deploy dedicated=0A= physical firewalls to suit each client's myriad security policy=0A= requirements. What is needed is the ability to dynamically deploy=0A= virtual firewalls for each client's set of servers based on=0A= established security policies and underlying network topologies.=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 17]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= ---+-----------------------------+-----=0A= | |=0A= +---+ +-+-+=0A= |vFW| |vFW|=0A= +---+ +-+-+=0A= | Client #1 | Client #2=0A= ---+-------+--- ---+-------+---=0A= +-+-+ +-+-+ +-+-+ +-+-+=0A= |vM | |vM | |vM | |vM |=0A= +---+ +---+ +---+ +---+=0A= =0A= Figure 4: NSF in Data Center=0A= =0A= 4.3.2. Firewall Policy Deployment Automation=0A= =0A= Firewall rules setting is often a time consuming, complex and error-=0A= prone process even within a single organization/enterprise framework.=0A= It becomes far more complex in provider-owned cloud networks that=0A= serve myriad customers.=0A= =0A= Firewall rules today are highly tied with ports and addresses of the=0A= traffic. This makes it very difficult for clients of cloud data=0A= center to construct rules for their own traffic as the clients only=0A= see the virtual networks and the virtual addresses. The customer-=0A= visible virtual networks and addresses may be different from the=0A= actual packets traversing the FWs.=0A= =0A= Even though most vendors support similar firewall features, the=0A= actual rule configuration key words are different from vendors to=0A= vendors, making it difficult for automation. Automation works best=0A= when it can leverage a common set of standards that will work across=0A= NSFs by multiple vendors. Without automation, it is virtually=0A= impossible for clients to dynamically specify their desired rules for=0A= their traffic.=0A= =0A= 4.3.3. Client-Specific Security Policy in Cloud VPNs=0A= =0A= Clients of service provider operated cloud data centers need not only=0A= secure virtual private networks (VPNs) but also virtual security=0A= functions that enforce the clients' security policies. The security=0A= policies may govern communication within the clients' own virtual=0A= networks as well as communication with external networks. For=0A= example, VPN service providers may need to provide firewall and other=0A= security services to their VPN clients. Today, it is generally not=0A= possible for clients to dynamically view (much less change) what,=0A= where and how security policies are implemented on their provider-=0A= operated clouds. Indeed, no standards-based framework that allows=0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 18]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= clients to retrieve/manage security policies in a consistent manner=0A= across different providers exists.=0A= =0A= 4.3.4. Internal network monitoring=0A= =0A= TBD: This falls under reputation services=0A= =0A= 5. Management Considerations=0A= =0A= Management of NSFs usually include configuration of devices,=0A= signaling and policy provisioning. I2NSF will only focus on the=0A= policy provisioning part.=0A= =0A= 6. IANA Considerations=0A= =0A= No IANA considerations exist for this document.=0A= =0A= 7. Security Considerations=0A= =0A= Having a secure access to control and monitor NSFs is crucial for=0A= hosted security service. The new NSF security controller introduces=0A= a new attack surface. It needs to be resilient to attack and=0A= recovery from attack needs to be quick and trivial (thus making=0A= attacking it 'uninteresting'). Therefore, proper secure=0A= communication channels have to be carefully specified for carrying=0A= the controlling and monitoring information between the NSFs and their=0A= management entity (or entities).=0A= =0A= 8. Contributors=0A= =0A= I2NSF is a group effort. The following people contributed actively=0A= to the initial use case text: Diego R. Lopez (Telefonica I+D),=0A= Xiaojun Zhuang (China Mobile), Minpeng Qi (China Mobile), Sumandra=0A= Majee (F5), Nic Leymann (Deutsche Telekom), Ed Lopez (Fortinet), and=0A= Robert Moskowitz (Huawei).=0A= =0A= 9. References=0A= =0A= 9.1. Normative References=0A= =0A= [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate=0A= Requirement Levels", BCP 14, RFC 2119,=0A= DOI 10.17487/RFC2119, March 1997,=0A= .=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 19]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= 9.2. Informative References=0A= =0A= [Gartner-2013]=0A= Messmer, E., "Gartner: Cloud-based security as a service=0A= set to take off", October 2013.=0A= =0A= [I-D.hares-i2nsf-gap-analysis]=0A= Hares, S., Zhang, D., Moskowitz, R., and H. Rafiee,=0A= "Analysis of Existing work for I2NSF", draft-hares-i2nsf-=0A= gap-analysis-00 (work in progress), July 2015.=0A= =0A= [I-D.ietf-netmod-acl-model]=0A= Bogdanovic, D., Koushik, K., Huang, L., and D. Blair,=0A= "Network Access Control List (ACL) YANG Data Model",=0A= draft-ietf-netmod-acl-model-06 (work in progress),=0A= December 2015.=0A= =0A= [I-D.ietf-opsawg-firewalls]=0A= Baker, F. and P. Hoffman, "On Firewalls in Internet=0A= Security", draft-ietf-opsawg-firewalls-01 (work in=0A= progress), October 2012.=0A= =0A= [I-D.jeong-i2nsf-sdn-security-services]=0A= Jeong, J., Kim, H., and P. Jung-Soo, "Requirements for=0A= Security Services based on Software-Defined Networking",=0A= draft-jeong-i2nsf-sdn-security-services-01 (work in=0A= progress), March 2015.=0A= =0A= [I-D.lopez-i2nsf-packet]=0A= Ed, E., "Packet-Based Paradigm For Interfaces To NSFs",=0A= draft-lopez-i2nsf-packet-00 (work in progress), March=0A= 2015.=0A= =0A= [I-D.pastor-i2nsf-access-usecases]=0A= Pastor, A. and D. Lopez, "Access Use Cases for an Open OAM=0A= Interface to Virtualized Security Services", draft-pastor-=0A= i2nsf-access-usecases-00 (work in progress), October 2014.=0A= =0A= [I-D.pastor-i2nsf-merged-use-cases]=0A= Pastor, A., Lopez, D., Wang, K., Zhuang, X., Qi, M.,=0A= Zarny, M., Majee, S., Leymann, N., Dunbar, L., and M.=0A= Georgiades, "Use Cases and Requirements for an Interface=0A= to Network Security Functions", draft-pastor-i2nsf-merged-=0A= use-cases-00 (work in progress), June 2015.=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 20]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= [I-D.qi-i2nsf-access-network-usecase]=0A= Wang, K. and X. Zhuang, "Integrated Security with Access=0A= Network Use Case", draft-qi-i2nsf-access-network-=0A= usecase-02 (work in progress), March 2015.=0A= =0A= [I-D.zarny-i2nsf-data-center-use-cases]=0A= Zarny, M., Leymann, N., and L. Dunbar, "I2NSF Data Center=0A= Use Cases", draft-zarny-i2nsf-data-center-use-cases-00=0A= (work in progress), October 2014.=0A= =0A= [I-D.zhou-i2nsf-capability-interface-monitoring]=0A= Zhou, C., Xia, L., Boucadair, M., and J. Xiong, "The=0A= Capability Interface for Monitoring Network Security=0A= Functions (NSF) in I2NSF", draft-zhou-i2nsf-capability-=0A= interface-monitoring-00 (work in progress), October 2015.=0A= =0A= [RFC4948] Andersson, L., Davies, E., and L. Zhang, "Report from the=0A= IAB workshop on Unwanted Traffic March 9-10, 2006",=0A= RFC 4948, DOI 10.17487/RFC4948, August 2007,=0A= .=0A= =0A= [RFC7277] Bjorklund, M., "A YANG Data Model for IP Management",=0A= RFC 7277, DOI 10.17487/RFC7277, June 2014,=0A= .=0A= =0A= Authors' Addresses=0A= =0A= Susan Hares=0A= Huawei=0A= 7453 Hickory Hill=0A= Saline, MI 48176=0A= USA=0A= =0A= Phone: +1-734-604-0332=0A= Email: shares@ndzh.com=0A= =0A= =0A= Linda Dunbar=0A= Huawei=0A= 5340 Legacy Drive, Suite 175=0A= Plano, TX 75024=0A= USA=0A= =0A= Phone: +1-734-604-0332=0A= Email: ldunbar@huawei.com=0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 21]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Antonio Pastor=0A= Telefonica I+D=0A= Don Ramon de la Cruz, 82=0A= Madrid 28006=0A= Spain=0A= =0A= Email: antonio.pastorperales@telefonica.com=0A= =0A= =0A= Diego R. Lopez=0A= Telefonica I+D=0A= Don Ramon de la Cruz, 82=0A= Madrid 28006=0A= Spain=0A= =0A= Phone: +34 913 129 041=0A= Email: diego.r.lopez@telefonica.com=0A= =0A= =0A= Myo Zarny=0A= Goldman Sachs=0A= 30 Hudson Street=0A= Jersey City, NJ 07302=0A= USA=0A= =0A= Email: myo.zarny@gs.com=0A= =0A= =0A= Nic Leymann=0A= Deutsche Telekom=0A= =0A= Email: N.Leymann@telekom.de=0A= =0A= =0A= Michael Georgiades=0A= Prime Tel=0A= =0A= Email: michaelq@prime-tel.com=0A= =0A= =0A= Minpeng Qi=0A= China Mobile=0A= 32 Xuanwumenxi Ave,Xicheng District=0A= Beijing 100053=0A= China=0A= =0A= Email: qiminpeng@chinamobile.com=0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 22]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Mohamed Boucadair=0A= France Telecom=0A= Rennes, 35000=0A= France=0A= =0A= Email: mohamed.boucadair@orange.com=0A= =0A= =0A= Christian Jacquenet=0A= France Telecom=0A= Rennes, 35000=0A= France=0A= =0A= Email: Christian.jacquenet@orange.com=0A= =0A= =0A= Shaibal Chakrabarty=0A= US Ignite=0A= 1776 Massachusetts Ave NW, Suite 601=0A= Washington, DC 20036=0A= USA=0A= =0A= Phone: (214) 708-6163=0A= Email: shaibalc@us-ignite.org=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 23]=0A= ------=_NextPart_000_0028_01D13A9A.3B2DD8D0 Content-Type: application/pdf; name="draft-hares-merged-i2nsf-problem-use-cases-00.txt.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="draft-hares-merged-i2nsf-problem-use-cases-00.txt.pdf" JVBERi0xLjQKJcfsj6IKNSAwIG9iago8PC9MZW5ndGggNiAwIFIvRmlsdGVyIC9GbGF0ZURlY29k ZT4+CnN0cmVhbQp4nK1WTVPbSBC9+1d05ZKlgmXLVCBwCxgnpIB11splkz2MRi1pYs2MmI+A99dv z0gQm6SKTYR8sMqefv369dfcwDRJYRo+/TeXo8lfR1DZ0RSq0c0ojX9C/8UlnGZ04A2kM8jKUWeT wuwAjg6OIZOjPy5m16sFnP65gN97Vgm8ZwbtXvZ1lB5AdkmQyqFR6MZzw0r3y4iXCcy9ypnZe9lh qQILsI45b09g5ZgqmCksZIbx9dNw7z27RRGwzu9aQUxP4INXCLN0H2bT9PB/83qbwJJZpyOvX47q 0TNP4FK3+O8wrAwbLLUSnMHFq/lz8LpK4G9m1GYg1jvdFJIpWDFe2+G8rkkt3BCgGoI1R+8srzHK ttZyIC+S6h1qUwlW4DPECEsjZOT2HHns+H0UQ7HOaqEYXOlcNDgUiwidas9ZwcTgHjpL4APjNx5p zgzDWhimeFcTfGhN0DA8q9naMJpebmgPhefTCi4qJdwQ7efIUeZoID2OE+81YYXhf/kTxG4bLI3O G5Rh1jqUqBzQzIVPFoEzG2u9n/RblkWY9eM6rIKxRFNhMRYzZctx24GNvcVxNB9Pp4m7C1mbHUaU t7l1NMvv85jVwkKhuY+eqbe4ETlacNS5PVjcBh2zUhuIC6dklEWnd8hdo7vVZg0r5N4It4GFV9wJ rSx86Tbfl70Ym/VSMrMBXUY3nQzEuKcUeSffGa/iMgqnI9krlHqb/KMFSL9Yn0vhHO0xoaD0TQNc K6IuY+3dClcHvzvcKdRvwkau5Of0bAlHbyLX+Hq8xSbkbcejBUoDhMiFqh6ktA/R9YfhXFVCIRo6 teM6Y3YNC22IGsl0npFKCYmpHQlcMweaUAxURvvWgmQbYI3VUAhKo8j9Q7H+SIA91sYmQTKEhmwD PUqTCVl9ONVD9WGRkuS+dq49mUwKRlkIdwA0iUBXJjSLJ7EM7aTHmTytUjTYoviNNaKIVcUotDsh vQzErLgDqZWrd6s/5CMIkCP4lghhsQ8G24Zqkd4IROdWNxgSn2963bbkCI11PyYcTX9S4yLWCw3d lgqgNYIF0XWoxR/pW/JVIgXK7yWXdJxsmuCarLiIKaOG6VxT9lQwexG7gkqRfFTUsTZ5sSPUz6r4 VlDVYrxCgVa7d6gg8+HraB0vg/tA1cWaZGe29NevJ25fn5esQkj/IcTzbPSRPv8BxyWIMWVuZHN0 cmVhbQplbmRvYmoKNiAwIG9iago4OTYKZW5kb2JqCjEyIDAgb2JqCjw8L0xlbmd0aCAxMyAwIFIv RmlsdGVyIC9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nJ1XXXfaOBB951fM26bnNCRAvrpvKSTb7Emy 2cJ2H7b7IOwxqLUlV5JJ6K/fO7IhhtAP1pwTB1u6unNn5kp8oeNuj47l09yTonP0/pxmvnNMs86X Ti++pOaWFPR2ggEX1OvTJOvUc3rUH9D5+QVNis7BjQnsDIfDkVNZoOa66d+Pr+nqSfugzYz+tu4z XRqVL732qzE04oSLKTvqH/dOX00+dQZvaHLbORjacun0bB7o3gad8KtfOv2z+AaTnl9+PEg+vopz 6eZqck0TV/lAyqQU5kwlO2+NJ52yCTrTnJLy8gZovcEKLbVJVWAAqSrMrfNdoss8p7iAJ8ee3YLT 7gaDyRwxrCfif19NP3ESKFh6O3wgCLMi8czrF0+3PFP5xuoPzi6010LzPecqSgWQOGvULOAxQ8Z+ PJiHUP56dBQEjrmrOWRd62ZHOSQyng+1ySwE0YY4y4SPNZFEqgKTzRqcsppiAtbCW5thQCsYRP+Q s/KMyBeaH2U6vqRbVBLlOKvyfPm6kXRJKfvE6SnT0lZuJZ+oAAmD00mIQT7qMJcnJdg1WAh3m8LQ pow/RWmNLEr8FJxKAhKYOVtsDqcCYjRQ2iR5haljXZR5nfG34xHd1vJQAI7wXVFNRakxR2p00m1J JKLVxRRT1k6ThIToqZRHKTAkJFsFelTOKROWWKFB2VhHIHfzatXWRE1zoYHg0VTPevcgCtrM2bSq 2VJ3zw/RYKPw+ng0YVdoY3M7W+6NJ4gnDbtBNxYyqBc0LlXC/wPrtMESNIn2WiXSC8hO5TREHaMN IVediRSd/VNYNZrgjfQCk5DVZcleFF4jX1emKc6fweq3sKLxZYjXSxFLypzNCbY33pUforMtrMEu LIEqrNHBulgzU56rhcYXcAa0b7DOt7BO8PDOoi5HWtptWkm3xPFSsIv1zF28trFO11hcRB/bCM7T aGlUAQdB//8Q60xirGEyBFFUedCHKG1lkqUAJw2wDFiFHRfZgXUOrFuVfI4NMlfREpz+unaydbhD VaqpzpHdFsLqunpK5srMeL8eesnmosWmYMHUvohBRh6IrQrg8JXFvrBBRuffJgMXyXSOAtqTzMUW mTctMqv73YpUJKOShMuw5kIqZ7f2l/Ylfgz7nmFXxpZoC8ibSJoyPatcrXUt4Abpl5R6x91v6JPW 9UOfZdtYlavgBruDT10N+zvKm5ajSNeiYvKcI+/GXIYweFt8z0sarN7xRmz96CiRV9yP3jE0tTM2 bCtPlylMVaKCVgv0EBTUZh3BS6zoxDZVSxwQVm32nr9U2DZ93Gk+sEmh2hh7JvaOhFq8eltYtaNk GIU+i/1117KSqyd43qpZRuy143SH4A8WxwO9d032+i3BXxL5oHIdzyFreJU46z3diSWU+bNSgjVo YZ20ansc0N/KpZt+eWPi6euaOZ3KQDySw2fDq411+n0sqc5n86B7nuH4Wdf8JpZw+gu2PcRR6Ufl 8y29Tta8TmJB/YYCcujM/XE3saSgLtHt0PaewyMO3vswpN5pC0vyOMxtldJIBSgkStEYd+W0/Qms tmkKmsT5hzlsdoQP2oUKEV+jEh/RnSjKMrfLeKzbjXXajweYd+gL/5oYx7m8u+XuJcA8/V4Zpn7v tfw6OKPt658HhQ2g/y8QryadP/H5D6wFdL5lbmRzdHJlYW0KZW5kb2JqCjEzIDAgb2JqCjEyNTEK ZW5kb2JqCjE3IDAgb2JqCjw8L0xlbmd0aCAxOCAwIFIvRmlsdGVyIC9GbGF0ZURlY29kZT4+CnN0 cmVhbQp4nJ1WXXcaNxB951fMW/A5LDGQ2E7fSGy37ml80pi2D8EPQqsF1bsSlrTG5Nf3jlasF+Lk NIYH9kO6unPnzgz3dDwc0TF/06+seq8/n9LS945p2bvvjeJLSj+yovczLDij0ZhmRa/ZM6LxhE5P z2hW9fpXJihnVMjOnSgCpc/V+Prmki4etQ/aLOkf6+5oakS59drv1tC5kqpaKEfj49Hbo9m/vck7 mv3R66fXb4aT4XhIdKmd2oiypE+21HKLbevSbitlAk3rYCsRtDU0PPjS6OzoVW80OUSc4NWHUmN3 drNWUhda0o2StdNhuztBGyyxdU5/f7r2B4hdrDd42MQvSoIGGw6zskYH6zjsQ05ddu8S1lvcfBRG LFWM6IM1XufKxaD8DxCewzphPtPr6UtQDrFOcdPq8iK8J6wz1tya4PQCCXNwwP9ndIj1DjefVaGc MlK9AKmLxWgjPLi2jl30oH4aeR9rHP1QvBANZZCwYOsVZHpF0zx3yvufj5PGI2CNT6L7R41Nnc1r yQlMp8xWqMXcyjoaL1deIj84KqwUrZ1dlKoiH0RojImoGq8XQioKdq+4rpP3W8Nc1kY2Xpn3Yy+Y H5EwOfm6qoTbki3iMU2bqL1KlKRArGA7fX5hZLN7JFzgQuVLbfLaw10gj0MS1tXF7JI2Ky1XhDid KtWDQBzBJrBIGG8kjCm0UTlg0tYvV9n5cCUgfabHxhfZUqwzkdrX7fBJ2aiioqWzG653uUKbUmbZ 8ABytS7VI+sBohUO4YN4oSDPSqk9EbUpnEAYSBJeDZrtW16+0WGFCJZ1KVA+W1ze12iKnBc/6ITM oThblpGL9QE0nCKs0pIfKU7f2mn2E7hYXg+d+VVqXgnH79JYtGlcAQ4SLbZ46R60jBZ54J7A+WIR 0ord3haqWQ2hled+C4W2JEJwQsYaAQ1fcXdnxSqV6xqu019Vl23C2qywti5QU1Q4W0HFUsg79kNL WD2ulUPcTXCYPbWtPQ5MTXmQkISMAiLsDfk7XZZNwhDS2nqQrZgIe63SQS9T1wOmelAuQWgjnRKe xfMKJ3ZZIDwQ8/tGmUppXc7rAfTlV9jXKJdh9E1uB9HFuaqYBBda0nLex7XkSZQtUBn5/GjPMO15 SWTPKicvcvc+kDVjWZHCGqRjU0mRzPs3H997LlCnOmFxmnK7jvO7w+GZU2MzYCSHyczdwZpsDXtG o7XLg7Ul3IqKLBUS55ZIY9eRwu26QB4HfFMnlX6MBe9ErjkNoonoh4QOCtQifhU6Eg9gB4QaleGL bxwdlWjuwGJP8wOXk7dl3dojVyUs7WLtZQpGbSxexfH+vdJojNUKQRKtzFbfraunbU+CYSOapUbG AuvKy0XYE3fe71RfrLfXqdYsvDA/GsAWoe0idQmA0ltatKLkzFKYLd2h2XJGKuF9hlPvIO2OMnfu OD9aP/i6DI27dyPimd4y76Mf7wzYnrfX1tCmYoPe92fOantuFQ/aWRP7ITj85TmH4MiwILrdx2n/ qX0r6VOXgyyE4ov+aH0xaBsRTxUAs0AITjuyG9MRfPCtpwYMJ1om1UKb5o8reC5sWA0PB3KTAAy1 giPtTucEUqDTN3OnZtuIWG1xbDZ1vu1OszUmi3VpnCFV8GOGbVncdvsLlp68jR7/jcfegBQTGFL3 c/G4Rs/09HsNbcajAf9tP6HDz5dP8DpNboF4Mev9ie9/V2rGGmVuZHN0cmVhbQplbmRvYmoKMTgg MCBvYmoKMTI4NgplbmRvYmoKMjIgMCBvYmoKPDwvTGVuZ3RoIDIzIDAgUi9GaWx0ZXIgL0ZsYXRl RGVjb2RlPj4Kc3RyZWFtCnicbVXBbts4EL3rK+a2CWC5kbLbtL05dox6kQZpI7SHpocxNbJYS6RC Una1X79DSrITJxRgCeTjmzdvhvQTXEwTuPDP8BZ19O7bFWxsdAGb6ClKwiIML1HDdcaAD5CkkBVR vyeB9BKurj5AVkdnK+XIKHLxwmDhYBir9O5hCTd/pHVSbeCHNluYKaw6K+2IgQUJqtdkIL1I/jnP fkeXHyG7jc54SQP8XMWLaYPWaRPLVNkiRiHI2ri1JNCS/QWPZyFOPAsLj+eT87+i9P0px39oVDdQ 5OgwFuQ1e564Jxp5FnPmAFQ58zxneJIvFXC6e85oVHIU8kWvZUWP51NPkE4BMjK1VLrSm27gnM1v P/lXYIK5Vs7oCm7ZqAFwnV57wHVrpfLBnI7H7xFBttFb8qgHXZMrvcU15gROQyEdIDRonBRthQYa MlarCYhKct6gDbMkl6NJPISuG1Td9IV5QwzgDFsjXcf8CjdUM0WI+3oa9qUUJXB9a9x6KadxXikT LRe3JvMy8mL+KTQHVwrmoVJD2ssfYWEpDe2xqobZ1eIhTHMfGrZJK24rR8L5r4fOOqpH4P0p8N7o N5FcyYC868t89KBoVYBzYWfKw3y2eJgGV6ILP6ep50GShVbtkTPKAXnDzlNys8G60mJr39XSyQ06 skxBQEXBW0AXYFtRDsp4vKaQioua8zHi6tu2abRhn3coK+Rm9ADmQBh6dnpkWinAPJde+SSE9AkJ VFBS1XjWgcx3F/dI3SopMORpnSGsj0ySBW3MmI7QqpA5V06iD/+yustK7+M1H5r8YPMsBB66R9km ODXIhYLx7LEQnKIXwjniqbuNrqToggqVM3GhDZDiX+F3HKrXGM1nwUmy014HBB3HNA5IrKyGmlDZ vqQNii2xKDQ0KuQwUgXXBu9L6o5MHmj4dpM7ysOFAnvpSt06qHUui9FHTsYz9PSQtzTMPHc2RPNg lh+ujMezL7M5s+9ZKtkJZNkt95cw/SFE0deTLbibZW8S8ZIoUW3I9hfVsTjfpXEtVm9XxnKUptKd bz3f9TlfWUauW2/Frt/4uu13UtBJjLvlvdZV4PcfvjsPcYeiL4cDZf3WJLkKez+zqZwuG4XVFJ6P mz8N3wkW/m0VQZpM/P/JezgdP+/5ooK/fzHlTRZ95ed/xnEkR2VuZHN0cmVhbQplbmRvYmoKMjMg MCBvYmoKODc2CmVuZG9iagoyNyAwIG9iago8PC9MZW5ndGggMjggMCBSL0ZpbHRlciAvRmxhdGVE ZWNvZGU+PgpzdHJlYW0KeJyFVl1v4zYQfPevWOTl7gDHiR3kcr23XD7QFNdDWhso0KIPtLSy2ZNI haTsuL++sxQlRU7T2kAciOTs7OzsUk90PpvTuXzTb1ZNzn69oo2fnNNm8jSZx0VKP1lFX1bY8Inm C1oVk/bMnBYXdHX1iVbV5P2DCewMh9Nbp4pA6fOw+La8p7tn7YM2G/rNuu90bVR58Np3e+iWM67W 7GhxPr/8sPprcvEDrb5O3l/MiB6dXZdc0bJWGX94N1l8jEs4tdoyFbYs7V6QfbM+9ZwFbQ3l7DOn 10wBW+oWwJMyOWVbVZZsNuypUBnOAXF+0SFmjQ+2YtfuBVrjdDjgH7fTWUTa6VyW91s25LGVrCMg ki0kFsAEpj9YNCYSAp5jMpZKi9CO6i3Sz1RJW+sD57Q+RKZd+Hc+Aam80gbKORX0jim3ldJmNhJh +TbJTBmCBjrWBcGCbaPYqlbmIMz5uV0aifB22qjGfTylqrrkKUQawB9WPZVEfuNsU9Neh602pKhU bsPEsr922guPpsxJZYEU9HkVNqF0wVFpF+kPCKDzYABjoI8Pkc4xfAKxTfC2cchFanUcyYsycjip 8b9UYj6b0q7j3rFILancZk0FMtNI2Y+FOT7S20Rshf0IEAjd0Wv7olJTCIoU1h2nnI0VB0HCk2Pc k9mrdjm5SRY7few2keNSRZNudU2VOohn1hz2DIuLT8LeUq1c0OxnI6MIYFoYvEa5Lgp2yJ0K7dB1 ID88ah3sj9pFoY9kM7S7idXMQoO01cYxi4q+o+X4qdEO6SKOb7JtLD6k6foFdYRNKhT50JfgqLOG 4iawNoD0+8CoUxDbN41yCkFalxRNWYj+AY3LIwRwXwqjgXTCEuo5B6VLgQ1pQpW849JPCYNKtfLL asZ546Sx0CyQznFtnYzNacLikM2i7pgmMAgSEVWRLEaLD8hBuZwqxpDD1KiEcKbqAMiWcEIZ0R5Z 5Pq1N5PyqpdQaqdgOvHpK/NLhIvZXAZFnK7DeFqmrZ3vfLdVNt9iujkIujrUHM3RH7vvJmji3uYu 07SK3uwO4JKREsiPTNPBcTs2uU3DcKt2PHLwC6+yEp1aI8i+F2uxD3FbcB+hdXvfgnVpD60pq6YM GrMRgz5rmyoNCyRoCJfjHvffNAap2W1V7TtSYzrOlnxUmy+Miy5mrsB2303hmP2/XTgIMZCwbnzP pbYRcvuthm1RzkMEt0Vg0+f0eUThrhuQuOpd48W0EuY6BJV9l8omd3+Oewd6uAF8T21ERO44F5uf 9+jas+ubr6QakDFBt9yn9PC4xJ/bZSsbyllbVCRJ1jZrivvGzdh7qK3F7c+//ydBYXRM8iVBH9mc RVpjrpGgPLJO/90+6a6Y6cD32/VqKmNqj2aVFgH/Z4xQgNV12Wcdhb3uG9K3fd/3sHDq00o92r1V YB5Yc1qjw+UejDkLirx39HNtgEmmJNVOSqhDvrYhDm48O9lpJ9P4RFZE4MtF1OVHqCTzC7d3OaOX n7vnWksn/dQYpsV8Ki91H+n488ejwuvA5Z9AvFtNfsH3H2KpdBtlbmRzdHJlYW0KZW5kb2JqCjI4 IDAgb2JqCjExNjMKZW5kb2JqCjMyIDAgb2JqCjw8L0xlbmd0aCAzMyAwIFIvRmlsdGVyIC9GbGF0 ZURlY29kZT4+CnN0cmVhbQp4nH1WwXLbNhC96yv2VntGViy5tdPe3Nhp3elk0lgzOSQ5QORSRE0S DABKZr6+bwGQIp1MqYNEEdh9+/btA7/S5WpNl/JJ31m9ePXhhvZucUn7xdfFOjyk9JXV9PsWC17T ekPbYhH3rGlzRTc3r2lbL84eGs+2YX9xZ1XhKV0Pm3ePb+n+WTuvmz19NPaJbhtV9U67YQ3dccb1 ji1tLte/nG//XVz9Stu/F2eyP0RVFT1y1lnt+9Nu1eT0gVtjJfJvWHv/rOq2YkemIF9iRdE1mdem Of9psb4aIuJSlskN8Sqzd0viAzeeMmMtV0r2LEP8wlhunM5wE7OuEGtz/R26O+VV2PDG4C9Eem+N 55D8f5EJlJfouMls3yYMnS+N1d8mkNpuV+nsVWv1QXmmJ+6pBro915IXgBEvRdIDvBzwdsrxHP0f GkUDD1OOX9YJGwA4MjOABD2yKJPSnr1DWDqWOitnwLHC8WkLZaqhHSJzW5me84g9hXFeASofTNUF EgIr2J6QT/LKylzZXH8T9aiqIuVa8Op+DJS0SzGyEou52WNbTF0b56m1Zqd2VU+NAVWsnN5VvCJ6 CxF1Deis+iVpjzCyIoVqoE7nlO3JmwkgnsKJMYhjn5dUWFMjbZR/itOCYlkMrgOhEGHIgwScv4wN VkpzJEWFtnxEpoEbXaGnLkg4swzIOSGxattKcz7v78dSxVIQH8vwq1SHwOM0VR5lUqiMBYR02ZpK OJv1tzaN9sgkLbRdJQOELnhJgRIddS5s94KJWpU9hcdWBWE1+wTfl9Z0+xJ03aIn8+6OMBwdNahF sw46Z6FR1y37znRuou/5ZsYt5sKVqOd7XUx4uVqtVxvkvwuS5zjCMSvgv0nVo6THlGdrRiRcFLF/ QVGZEVQ63Lsk5ehKju1BI+JydK0ZlY/xsXiEhEU3a9WPKkCcShRQd5XXbcU/KGfQgojsoKwWYjDK ubGhCG7AknSznGxuDVxDo8qcHSSV064fe8LaUtY5b2qAmWvoUTeIBJEegRSDo7KMWx9Ek2MHhmLo wynVpJEsxu/mRmFyhSmbeBZGOUjo81nOgZhgc4K3j9Q7FC2DnAAnKYbRZp+tPp8TPDcPtcNyduxa 8zQpfZaq4FnxiJ93mR/oE2Gih2TZgf7gv6ZWg0m5LisnzdUFvCLFiYUStI9ZXcqsqcqZAQvCbssu HTPin9IaDEeuJTQM+qjEelOs6Jmi6lPrMVWdZTcxDkV71caJNZgCcS9SoGYYNS1OJEWrKMygljyc w7N6t3IeaRcg1QrYMMHOiMX3J77NRdzwI88VKzIFOjCafWggNxhIlmLVwLXCUZ11lbIQuz/Kq4Dj vUCca+52dG+WeZ/0O+IUkhuRjBwy4uSDNx2D4fmZ3NKSg+ZjKBbsyaG+jPiSG74sClLk1X61fOm+ nx4u7laafXFhWqeO+4vhufsCEeaGw7lBNasm4RwrHU+mNr4ZwKyD1kRT45kzPWng1WgoYoGMRrta /kuFpkhhTAZrekYNATrm0XduHCo5V4byBteqtMJUD909TYc3pnIDS1HSo7+cOjZM1diVFGhQCM44 XeCVaWID0sXhVSpaJFwW7zHsSmPk9U0EsL78OTTtTxWEzjJKK5pe988t+Hb0V9cwbdZLeV+8ppfX p/eoh66/IOT9dvEPPv8BUCmfHmVuZHN0cmVhbQplbmRvYmoKMzMgMCBvYmoKMTI1NgplbmRvYmoK MzcgMCBvYmoKPDwvTGVuZ3RoIDM4IDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnic bVbBcts2EL3rK/YWe0ZSLbmx02Nqy1N3EjetNekh9gEilxISEGAAkLL69X0LkjJpm5oRKRHcffv2 7QN/0tl8QWfy6c5ZOfnln0vahskZbSc/J4t0k7pTVtLvayz4QIslrYtJ+8yClud0efmB1uXk5NZG 9pbj7NqrIlJ33C7v7m9o9aRD1HZL/zr/gz5aZQ5Bh34NXXPG5YY9Lc8W70/X3yfnv9H60+TkfL6Y n89xXzfsA1NKUaiMKToqndXReYo7pg3vVKPxwxWEfOH03WR5kUIg+l8b3KqDOUyJrdoYwaEocFZ7 HQ9U1DaL2ll6OOH5dj6lQnveK2MQZHHeB/l2O7uea47FzFVB7bezflV4pNxxIOsilaws8KiI+GBi L8VqASMRKu8iZ5FzFLTesefCeZ6SjliC1RmHoPxBKkMtjAglZztldSgH1XaxpGZ+QgUJeIgq1qGv ff5cvPD3K9J9RiaQGKLXmxoI0jpSNqemY0uCAtRrVgLtdzrbkUIEbRv3A08DDlugz3jIY+WMzg4j 0jLQsWEyLlOSVVvKdVGgdBuJf9a6KuVKcPRspaWSdj5qoUBb1d5VQvCaDWeuLGuru8V0HxFE+TxA IhBaRJFo52p9f/twSndt7BGym77pX7WPtTL6P9Vp4O7mK57RYFvjLzQi8wz00qI9lcqqLQvqjjN0 yBi2W9wHIS/I0PgXXIGBjq6cNgdQcOzDtIvStCCmIyreaMXDifTr4XRMzsfURagm0E5voSzyOvwQ ORRKm1pEVuqtVzKAbQoRDAv2BFyFETXQlva0c+3Afv0cUIBctTzkCOYaOaHcPPVBhwB00PVYeO+P wuNSkoKJK2ejd6aV3/XBqhIdNObQ0XBrk7BV3ogsgP/++g41B+Z2/L6zs9uZXtpQzEJuZz1DuPCN xgA9PpxOR7WUkj8zGvECSq8qc5QM4A9+U9ZCM/AZdCCJvEOVP+OkusqFuZaikQYHHU/z70dN70Kl 8WzVfN93977FTl+8a3Qu6dP4g63XiXvRdTR6zBCHmESWKK0rAPGwEt1Ix4TM45rCu7IF3kdpaRk3 7ULctu2X6LmsTdSzCNu0WbKmPrUs6A14YCF9MdWxmFIdEga4pRQmsALDzZUhTLNP3OEaPKY6xvbx RjKpSRLCy0PFmU7s7HdsWwY2okgezliHLJldP+uvtHqJsj+pLA3N1U55BZ/2vSd0vppCXKlKbbSR xq2e2gHq3dNhIbyNGN9Zco7jBPf6nPZXA4KexfZcuJLnRWiN8rJ1veUFuqsYnCQTF2+qsTdGDPxA cqmDlUEotrnzIr8VLmmv4w4hMLeCJa+zSGLSW4ct6OVG2E6VRHsDR1dJZ229u3fZ0g6Q9Hy81UUq YCZA2rKa9axifgDwBjXxkyoBW0CYKDylseo2lJyD3tpRb3vKEg51hJ70J0LGSXboUFeV85FuvzQX CFMBpkjS2cHGenwW2/XOOuO2h9e70ctGvguDzYHCIUQuQaTzA2fBviLdRs20V+OdEqPlGZLlJrnL iBERYJ/umfch3f020pEeXMsWXi0yVxtQUmt8g7u3tOlMeotofSmInN8vE6w/YGIyZ3AzM6fhsXqq tPTuzxryWS6m8t52QS+Pb19AB10+IuJqPfkbn/8B0o5q7GVuZHN0cmVhbQplbmRvYmoKMzggMCBv YmoKMTIzMwplbmRvYmoKNDIgMCBvYmoKPDwvTGVuZ3RoIDQzIDAgUi9GaWx0ZXIgL0ZsYXRlRGVj b2RlPj4Kc3RyZWFtCnicdVbBbts4EL37K+bWBEjVOEHbdG8t3GKzaLfdtYEeNnugpZHMViJdkrKj fv2+oUjLdro2AkMh+ebNmzdD/aDrYk7X8k2/ZTd78fdravzsmprZj9k8LlL6KTt6t8KGO5rf0Kqe jWfmdHNLr1/f0aqbXdybwM5weL5wqg6UPvc3fy4/0PtH7YM2DX217ju9NaodvPZ5Dy245G7Njm6u 5y8vV99mt29o9XF2gSXPbqdLpro3ZdDWUKm2aq1bHTR7PBhaM1W27DtG/Iq0IUU+qKBL6pQx7C6f zea3Ge7hgoumwJZat/xwSdbRTisCjBb6tUKo/UaXG1Jlyd5jp+Ot9TpYN5CtATayKnunw/A/tEaE sGGS5HdsKus8VYNRnS5V2w4Jpt9WKnCBp5tXmeHbvG+CHMChgYBOxVAQrvdc9y3VoK/6YLtxYc2l wspJwk+YesgyiGi+X3/jMlCw5G0d9soxdKhoo1wVH0Z2vkhkVxv2h39GkI3aMelu2yKpERokJOut xb9ECDagWKIs60EWEhJE8adJr2ylhivZgrjIz1ipoalAhToOG1vFXLOSoFyxL51GGiPslPBJIWwt 69r9QoaC6KsGch9Q49J2nXDncmOkQolo7VTHe7HsWcQnUZ7iX2XrJqytsztdsYumNTbkwo14WI12 i1AtyiLNIjqJcpWuawhjQoI6kgEuFepSEyp7D0R2zzz88qPXjqUnjpW+LebFHRL/qMrvEqpDvspo 30V1Yzhg9gGJ/WTiR2lo1Qo5aRefwn9SZviVryregph4wOvGqNCjlvGcdFnGQICTcm3RdNZ1uTHp /svyxf1iOUFAyMXn1VKQQMc/XGLTIgtycFqi1ulmE8gwHHcQ7QjqmEhxcF1nfaB1C00SCtRUa+U5 j5e9Ns/xR7EDuRnGvmshjHLRANrsbLvjqohd4viEDQA+Qxha2h6tkH1QTbReHLRJIqDkS2NdAN2E ZKUzkLuMN7FL3cvBsx7KzaNGAVDJ2KBqaiU2O27tFnF0wcWIBPFVALKYqW3t/qQ6B0v4X9jhzFhv joyVfz9lg2Wz8jZMQKplF+JKcLppzkZ1/OTphmloTa2bPs1AgW1i2ScBZNZKxZT/HlMbr56DUQEQ nG0Rc8wVJCBUiO0dbTQUJ/E/oMj8qDDe+AoiLhZ2OTIGUt9WmbNMj0hGUB3GiXSuH3zgbvT6OIWN HFB1jUwk+uEBM6Vfr+OZdNNhucNcafJokMBPKj3SQSUCj/fPRvlUTymi4CGzaFD/Gympr0ytYw1P kpW5I35s5SQerDg2bBwrFEhuhTUgYszEDQDSiNKZk7DZ98qohkc+E6pwEeiYT34xmM4+XIi/91Ha ESChReKicEzKxuezuhG9G9DGRm7puOtoy2iyw0C3XSRwlePDL7V0i8puVPJyAsPJ5YWQUgOVSp5A HJe2MTIhVQgw+ijQ5DjBlFsxjt/EhaXjDe/zZZDG1mldz/SVXmaDzOUC1XW+J+ItghmfE8wGP70F J7MLnaTN1ZjdTzG0kXelHfsjp6m1kWnQEu/k4khcZWcKixPjvBB2qRRlqyVNNEtug0n8hHDauig0 s7COT48ouozTioPS7eEN4vA2FiV69TLm9buK1wHj7mwLOv68f9xqme9/9CjYzfxKXiRf0fnnny9w Fd39C8T3q9lf+P4HltyXPmVuZHN0cmVhbQplbmRvYmoKNDMgMCBvYmoKMTI1NwplbmRvYmoKNDcg MCBvYmoKPDwvTGVuZ3RoIDQ4IDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnic5VZN c9s2EL3rV+yt9oykWPI0TnpzY3vqJpOkjWZyiHOAwKWImgRoAJTD/Pq+BSmKVNJfUGokjQTs231v P4Anuliu6EJe/beuZi/+vqJdmF3QbvY0W6VF6r90Rb9vsOEVrda0yWedzYrWl3R19Yo21ezs3kb2 luPixqs8Uv/cr99/uqPbbyZEY3f02flHuraqbIMJhz10w5qrLXtaX6x+Pd/8M7t8TZt3szMsfblf 3Cy/F65ZmLUN+UKrWm1NaWK7MOIwV5oXlbMmOg8HX6n2bm8yDpRxVKYM5Oz5L7PV5QGwcM903E8q 1KwjduUUC6a8dM+LrQqc0XuOzxLtJ9aNhz+6a6yOxtkAPEF6OAO18HBOWllqAieAju8QWqDoyIOe 2WMdwuRG43ftPHwqm/VQbHPnNVPtSqPbJf5dv0wBXy5Xy9XFkuid0o8SZMW6UNaEimBBWWtVBcRH bimDxN5sGwlRvEpwPfymYM8EwRVZBjUx1c5G78oSqmPzYMy0V964JgimRD8R77gtS/gIbPOfxvMk SIKpmhBpy3042rMSBPCnSlm14wxAnwtTJg27ULHQJl7djoptBPlYuGwsXCLO3uxVop0fUoTkvL25 ezifHwEVlb2GIQJA+eyYph4NQqTyCYJ1jC5xGCWlU7RnploQk/R3slYcgpioBo5tNLoLTMDE2y5V kpmWpPNZlwU4j6hGylRUqRQhyz2Ms8wIyvxHlzAKUp8DA8QlKE67smPQxRPgMy1qBzW8a1I3Gpt7 hdw1OgJiyvA69YRFtwwKWodE6gI8dSN9BQektrBXulMf/BEhkCf0jBR31ekQCwV6HDTqRZoDEQ1J AKn4zGwHAmHes3I1e4WGRUkJJ2jrqlRB0/r4v6VIGPbDULzAoDTfe9LPoDaADIIiEjiEBv1ImnAc 4ng2ZSnhs8Wo0aCwbalQ+zQujxlP4ke1RdNWCsLhzYe2hIHqWEtsgf3eYBZCqjcOgHVsVFm2h97s h4NgnzZkxrmgprT1ZF4Es8P5MaUF9pV6hGr81HDoxvlQJaNRMZolSSATpa63LGiSrLkgWRdN3k7y 1Ol5BBIb7SrEvMcZkzTokzeIctJNJ7r1kqRxnMKHvjL8PMsnwgm/9d5Wy8Mhmka3zGoWCabexn04 n7bVJMfyHNrsRJAjVynKg9pOcjTqyNHslad2IZht2R6TPYKJ1FmXqmV/MkDXoHWHrLLCQPm5s/kP vKUYErlK1fXpmBlTK7qxdewzHLmeUfwx9LQhjlFd/2HjmFFvgutFxjXaRbT5qc5LuQLc5+PuKpQf Y6FEcNU4ntkhFfLJ3Hk44+VODtI3H+l6sjRC+lDLH/151uU+qGoQ4jBwPEsVLx/OJ1pfAv16mJlv T85U6b7Q1HIloS0yQKGtcND67lpxOGynOu+Qsbpb3hvVhdNXdH//SkPDRAbnVVJ5LfmXqyJQ/oBM KCWOpMoljZ/bb7XBGv3ZINPr1VxuhC/p9PnyUeb3669AvN3M/sLrX62bg8tlbmRzdHJlYW0KZW5k b2JqCjQ4IDAgb2JqCjExMzIKZW5kb2JqCjUyIDAgb2JqCjw8L0xlbmd0aCA1MyAwIFIvRmlsdGVy IC9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nJVWTXPbNhC961fs6FJ7xlYtOZ/tyZadiTtx09rK5BDn AIGghIoAGACUrH/ftyBISa4mM5UOlkng7du3bxf4QRejMV3wN/+VZvDrw1tahMEFLQY/BuP0kvIf aeh6hgXvaDyhWTlo94xpcklv376jmRmc3NmovFXx/MaLMlL+3E3+fPxAt886RG0X9NX5FV1ZUW2D Dt0aulFSmbnyNLkYvz6d/TO4fE+zT4OTy9F4NAbBEdG1kKuFd40tyFmaOq/owTUJ81HJxuu4Pf1l MHmT9gHyirySzhhlCxE1tpTeGRK0AYGwdDUtVVXQfEtxqaijTldeLnVUMjZeAW582cFdO+ELejq5 u7p+Om337mEBnmGiq7UkV9Lwi90IYBY9MsAYZgZpSi2H9O3hw/TV+1fvvlNoFgsVIgVtpQLoMGhT V4q8DisSWalhtyzgUcYa6kKJikSMkIai8AskgOBGW23wQjqgzptIRjynB4UOvqmTGNAehDOQZDF9 FlPb0osQfZM0GJ6RjrwanJyPyAlJ0jDqxTIqy+t3MCGXgTmwGj+DRUE/W9Wt3Igt+LiMk8H/D17K x/U7j3OqvYtOuopq6KWgZK7aRrcA8AIvQfEP8zIqBAHteUETEumV2obRgd2mDtWrYyOqantGmyVY dFS7uAFs2L2enan0WvXIZxxte+A3w6mQVbAQEqucW1FTJ7qIzY+YieYEwFzMoYSQsX0n5pUaZe6H tLAdqZqGfQGrwQbszlLAd4UqtUWwEvTEHuW+KkasoL760SQTQgPRRGcEe5yjGjh1odBtsU2+dc1c sQCgWvyeHmcslg/v0J5gsRa6YsqtCDlx0DOi2Hvb5qoOM8zyX44m8NN0iSSV5UJ9EJLjTpEoQviQ w35lYrJ7CMS1Q05LtAmS6J0SlF9rmYuiff/ioDy1q7TUCGXElskqC+GkSgNFwKlgIlOjQageuWxs ehhyzEwLmRW6LFEaiFdAU20D59MT5RjWRVoKeIZF2HFd6Wq/SOq59vAUhgVPGQ3Aik2tpA5t8WB1 rlFgF/YoXTKdab6E5BcOhW07wTp0poDfyFC06bQNeqgVA72MyBvZcjb+d8uOBaYkB96ltAsk4dk5 TwIbMPw89O7YUaXWqtqh7W/rm+FAUVEFB9sH7n70U5fcogFyhV4IqRdeZLSzOWjePgue1Cn/0Mjl /l7h21KVsILbwI2/HYwLx27U2CIBrmWa1sY0Fj/bTEXLCskyLVgSuRZgAlt3Ww4MyUqtk85PJzef Z49Pp2fHA7L1engIiRHVqM70CaOLE/CPV8f9j0977vwk3oPiI4OReFrk1Qg6vX2YYdf93afbdlde f8/a8nIcl3yyMjvLbbTOAzxs0TUGcjfJP1CsrrTgU/Pp5PFqep/ReBzwjQH3jtCe+h8VxpxbKKtc E+iq4BOSJ2bkIXzTdlzmARKYQarQDS4LmNYVH6tobwDUOJFR2dSFhaort0VN1sJrBnX2HIUyvOJA qCPNv0l1SMNukw/Uvg7RZeiXXbBHYLfJzOE1HA7sn2OBdFyiBw3OtAzzctbt1gJP4Oqj+FTic1Z1 AySpoA1LIuLuxtAwoXOjRMDxm7bPHaL1d0DnNWqZjoeu9Ay0yyMj5VofWc9d+3qSdPwIu2Ie43oj qhHtf26fa83x/2ggxGR8xhfIN/Ti8+0v9Cwust+BeDsb/I3vv5CUpA1lbmRzdHJlYW0KZW5kb2Jq CjUzIDAgb2JqCjEyNzIKZW5kb2JqCjU3IDAgb2JqCjw8L0xlbmd0aCA1OCAwIFIvRmlsdGVyIC9G bGF0ZURlY29kZT4+CnN0cmVhbQp4nI1WwXLbNhC96yv2ZntGkS15mqS+pYkzdSfJpLGmOTQ9QOSK hA0CNABKUb6+b0FSpGQ1U+tgSly+3X1v34JPdDWb05V8uv9ZNbn88oqKMLmiYvI0maeb1P3LKvpt iYDXNF/Qcj1pn5nT4ppevXpNy2pyfmcje8vxxTuv1pG6v7vFp/v3dPtdh6htQV+df6Q3Vpld0KGP oXeccbViT4ur+S8Xy4fJ9a+0/DA5x617VzGxQNdeBw5UqR05a3ZkmXOKJVPpQsRl4KzxOu5w4Tc6 Q+jaeQnQ/uJsMr/uET1XLjKtvLJZSW69TrHbkj1Tpa2ulBmwtF17FaJvsth4DpdAEoxM1WqljY4a j7I0NyNaopahCGeaqJ2lrTaGMmfRb0Q2Ah0BDfRATYjo0KObuAU3gZTN+5i+E6q92+h8FDXD44uX qaPr2QIfZHe52p0Feuts9M7QF35qOEQAoq+/2OYg477mTKPfLvnbLnlLqtTYgOyUfLWjqjFR14af VRFmo0cPqG0lcWCkBlmhJX/gxKMkDfohZ5hS0QDMaMu4RtNdTXiUs6iEuiBQsTxdwJ0lKGKn44AO Yh+GFsB5hNDBKEgeS8zcnnFI63yVMuEaqfo7Hcy+7NoZnYnQIo0KwWVaycCBsLUuGt9CBI77iZMv 0PoYaN3YrG1M246bTlA09FXH0jWRFIWIRMqDSc5KqzNl+mEplVcZrKB/dAQh3Shei03WKuPpKdpI 7oQOqlJ2J3jGsC14PE9ix4YTgFHZo4zs84JOlJLI2YcejMW+rtAWtnbGuK2sA5S2Mlx1Hgo3B2V8 cv8nsyS+BA9vPt9hodwQ3W44sUsV9sJBHUKhq6ok1vGuiMn/mA97KmvH2gkNqEsNBT8i3wlk8Z/K cBU0eh2Q0hKLpXdNUVKuQw3gCOnACVYdR+V3I+bo2znPihluOx+VEekHKCng24VM1bYExgbT3c42 bZLxMfWlc4HFUFh47PfbauybkXU65yCkN8WZDG2N+Ww9Cayt2HdHG9QJKQeMoebZf8q5j7mRJ/rR f34bSaOIAtmwib4fqyl2y/ZLDJU1dS5Gf25d5xNo4ds9MGr5Z+4czh10G8vOVUcCP2Mvl+15KvRg gS3Loa900oQxhXmTDTi5hqJBgmDGJMrB5qkchAjTttndgNL/Ls4MTS2DA0w4XxVpB4+VOrV/Tkg6 xcLa4qt1G+SOqGvEtXeoWpagTqvAKF/gmFUewzyaVTkecELt2p2bfKr8I8eDWfkoRcqCAAMh87oG bM4vHlzj08Qs02R6L13U4sfkNC/z6FrzN4GPp0U2WYe1LTXO/oItp4Fw4v6jmwKiGowWGsUGMCNi fWPbYTNO5TJaudvadH0oDHaFLNcpGVeMj5sBSaRpk+NsskU7F2KuvpZSbZJrVygmf2jSiw4rKU/j qFYjKC2TJLK2udfeVRAh12J3oandBGImtgqLSFyGgH4kR4bA10PnfujOAV1VnMvZR+9x0K/waxLj 8DUCu8n1Jz3wKxYWdKiO1ZA5UEFDsda0lxhXvd797J2hNeG+iqFkRpNZ7HxLjUU/RpYSftk4s+H2 jUqakndVlPA7ljJ0wSmtzIzGf7ffa6QL9EdjmRbzqbySvqSjv78/w0I0n/8DxNvl5E98/gXOirpz ZW5kc3RyZWFtCmVuZG9iago1OCAwIG9iagoxMjM0CmVuZG9iago2MiAwIG9iago8PC9MZW5ndGgg NjMgMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJx1VsFy2zYQvesr9pZkIiuWPInT 3NKx3biTZNxGUx86PUDgUkJNAgwAymbHH9+3IEhKdkLNWDIJvH27+/aB3+l0saRT+eRvXc/e/HlO 2zA7pe3s+2yZHlL+0jX9usaC97Rc0bqc9XuWtDqj8/P3tK5nL69tZG85nlx4VUbK1/Xq67crunww IRq7pVvn7+ijVVUXTBjW0AVrrjfsaXW6fPtq/e/s7Bdaf569xKPPSt+RK4kfmspoE8nYvdMqGmfJ 8/eWQ/wgELc7UzEF1q03sSO19cw12xhIeX71YrY8GxBxGUtNpTTPpw1la7WABqpVRxtAuRSPC7o3 cefamMIZL1koC8SM9SNiNSsbFkRfec8+7rjiEBDL1fyj5RNW2jcQ6MMhfnRYjNoqHRMXUqDt90bz yHoBjNW7IcO1wwKmnbunEJUtlC96hBI5B9KurQoCq4aU3hlwpFIFPD4qk6mbKlWwTykakNedRipz qjhSK0A2mAJtU6TbEJGep/udo/sUoDJ3nFNDBkVnVW20qio0p6pATVliq33XSI1LuZOSCw1rUxpN jfMRRfP6TRFiBlJF4VFLJOE8Nd5Fp11FsWuY4s67drvDN9JB3e4R5c31zTcJzlZtoI6xbVPcPfg7 SaRkj7vSXOFIzoJn0aZuC2JKHzKU37JgkZFuhbIVhLpOe5TWnJDHgh+oLe0eK9W3Qe0PqlSx8pbU RuQmixvlo9FtpVK2Qta/CMfpTXHQ6YwU2BZpf54QoZDgJoxRXaXztYrHAhqu1ycH1+unU5Sux2mE 8M8k5fzwy29rCh3EVT97mMAfHyfww4f99kf8AefGG47Kdz9dAzH0PjPIPa+8MTq2nj/klcNdCEt8 7SC/Kfxw55GublN9Hw9rcJLXXY4CegbxV1LUFfR8XNIrswUVWn2AGSqZLZGTdfZkHNE9LOP5vGbY aysqjR6DOidTYuR+ooIRgcVzQxLdUeeeCBBOk4YjumeymY/WB5WmScAcuwyY5ughMixgL8riytTG oksQ8fYeNg//+/iDfDD9wSX3CaNaezMb1BkoGKtlornLZmXhDq7EjCZ6QdXHM56Bphgg6hmckFE8 LlQOFkT31EZTmf8kM8QuWh0HSqV3NXzYdrRHTZwXM1+nwoS2wjgF8FD9iD5lj1oF4Ts41iZEcW4u njvTwCWD/6RWGShV7DlG5icZlw6tJZdG3XhUzk8H4pDXeMoh+9S9QiyAlYwJTEFhq9RY9X4xMtq0 pipQpwyzqZy+CyJgJVVS23RQTLwP3ORssVqcIcELU5biZPAJUP3irImu7+blAzimMwZ4FxySK92k 05eHfnyS8wInAm52qfoeB2Wlss9Ckqx31lVu252M54fKmWL5zhQF26MpSB0+9GPpAsLIiT2fbqIE BseBZXkPUF2qc92TH1wbGAXEj31YM5rhIIukk142YQrKBzlPOGhakfMfcbJPp1eZOW1bI7EseoXO yMsE6/6ADk9fAQrVpdmHCIwIcmom8kjqn5JEUlsc6U/JHxVMhdCi6no4BkE2l/qQbpP7lmybPQ5E toilsWYjIny7Snif8FKGdBBTVYsjP798aIxI8ffWwiyXc3klfPfU9P++geTwJvoPEC/Xsz/w+R98 gnGSZW5kc3RyZWFtCmVuZG9iago2MyAwIG9iagoxMjIxCmVuZG9iago2NyAwIG9iago8PC9MZW5n dGggNjggMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJx9VstyGkcU3fMVt7yJVAVI iEhyslOEXCFly0qg7EWcRdPTMG3NdI/6gUS+Pud2z/CQcEAlqJnp+zj3nHN5ovPhiM753X7Kunf2 1zWtfO+cVr2n3ijdpPZD1vTbHA+8p9EFzZe9fGZEF2O6vn5P87p3MjVBOaPCYOLEMlD7ml7czz7Q 3Yv2QZsVfbXukW6MqDZe++4Zmiip6oVydHE+ujydf++Nf6H5x94JboVSkVcyOh02tIxGBm2NJ23S ncbZtS5wsLC10GZINMdVGX2wNa6KytvTn3qjcRetEvLRp5NioSsOGSw1yi2tq+ndcynCQC/fkZfK CKet59vCe+XTIYTiIGq51FIrIzdklylYoSq9Vk4Vu1K9cmst1RBnLq5S+vFwjPommk/HKqf+Iipd iKDowVYc05OQziLbJzyhm0rRJDXm29SfjaJHtUFNjZKB0wsqrQ9HMtOzDuUR6A7xsFLwYRGoQGFo wQSAqmqNnkm/gUq94Kb3faqt0cECYVO0paF/vdzsEjZdRwGokrT1QhseJZ4TFbL54PQi7lfeBtpW CrSmgYuQLkqNQzwMw/Cjd+C97RTXF1xmlb4G8dhNCtV73Gg5s9YCcPmAmoUrQCHwdSkwI2YN0ry9 04ZZKJSPTmrr1H4xDM4P0S+VIVAfE3VdHMwRKYJOkIPBX7QLEaE+CVkCHI9DWpZ8gDwSBs1Jn8Hv qsNmH7ZWAlDcM4sKte+d4hgt5gVKXSk86viINV01herA6wQAcFQmlX9MEhNHaIyTX8EsG8MRwHwu 44ADGwLDBcBDH2BO1tGOgsogN+TPzEt87tQ7KByGbN5EAztZESRLUVXKrGAruzmJiIG3qtSmzIQG EJDSC8eQTiX0F5v0SIaIjWknb23WrApQhgN1hEUlhXUD1p2GgI97EhO0jVKzgAf5VJ9KBYAwBaNs 9Gh5rZ013DK4d4fpt+GpC/9KClQL7vspaqZGV4K0ZqlX0eVaYYVSFdHlGbQBLEabbjNheaqHg7wz Hk3k7jkcPDkwYK9mkpx2a1CB1uyN8dBJsgEnz2DX3Z8Oepx1TNmjQuJopR/BbpCwLRhFtARPaq9h rJY7SDUKdgMfD031Z4T/CFvnQrdpph0hOcrUfGez/KBUseAHcQnCbBPObSE28DNhNkdm2icfWZGe pg+zPk0n+DeZ2Fmi+Q2kjEFG3z9EQjUYJkYu1hqt2SxTbBErs/IxqaWulM/bCpyEqXUSZIvZrZnW 53AgqEwEnaaxoVLgOseNzSDYQdohe3Fv/H4kb5uS92/2+lCyBhh+mHwfswZUDX9Ht5mG+JJlnLTf BulWrW9zWxAyt6eYwDYZDM8MXgbNgHpwItBuV/ywjXS7Qbdoncugm6rSwmBQ305ubyCUEJpfz87k Br8GcqGifWBo3ers2ykTDH87G0v8tJ7lrtlaAVi7c4Suabt6mEFA1Dp0DpIVUWYb2Jcr71tkEUb/ K/IGOlBLogqDDt6iBGOPGGBekiC/We39bukmc8CTBYxbwd9+lHE8vPx/aqMZuhVNt57v1comAKzp uJ1KlTZWBS9Ir7FtslWl7cT0SRvKq0olOMBEY8OWjK+teusBbEXK7/norOv0lvVroXyYXhFbmngb 3ZZHbDPBwStCEgBAjE2DsWSVRFg/apTZCGzVbbnZ5H4AK+uTZg9AqKvLVNXvMBHQFWtLVEPaf929 NJrN8I+Inx0Xoz7/tryiV6+/HwTmNBr/g4h3896feP8HIFqwomVuZHN0cmVhbQplbmRvYmoKNjgg MCBvYmoKMTMwOQplbmRvYmoKNzIgMCBvYmoKPDwvTGVuZ3RoIDczIDAgUi9GaWx0ZXIgL0ZsYXRl RGVjb2RlPj4Kc3RyZWFtCnicrVZNc9s2EL3rV+yt8lhWLDmJ00ynM43jtO50WrdSx4e6BwgERdQk QQOgZHX84/sWBL8Up72UmhElAni7+/btLh/pfL6gc/7Euywmr367pK2bnNN28jhZhEWKN1nQhzU2 vKPFktbppDmzoOUFXV6+o3Uxmd6UXtlS+bOPVqSe4nWz/Hn1ia6ftPO63NKdsQ/0XSnyg9Ou3UMf lVTFRllani/enKz/mlx8TeufJlMslVhyTtgDeUOZ2CkS5JQnk1LBC1vlKDWWKmsqAJRqa7wWXpuS NsrvlSpPvposLlo4nylaKVlb7Q90ZUpvTZ7jnCiTsAZn3Rwnlm/Diddzot+doivhlMNjhlh5bBY2 Ic0Bp0JGDwpTam8sR8loMoLzf0beKHivsc+kI4/YIgmrCNGoEr7ntKl1nvC5TW7kQ4PeOb1Sdqel oltrdjpR1rG16Jpijyqr4SzTJWpvCuFVsF8jDJCW6DRVFhsbw6k1BRV17nWVq4iyU2VigLs58EE9 sF2IEoQXfJpd9Vq5eZviQhwQI0jZmQfVOgQIUR7ofgpXMnDzt0ruT0jmGsdx8vpJFLDr2LF+R1wP rEScunLeKlGQqKpcy5BfB1jZZdDdn8zIWJkp7Gzy7w7Oq8LNBgS5NpLKWC/ycaoX8Oh7VSqLFBwn Hf8tWfVYA75HcU0uQHZmTb3NyFVK6lTLLoT7qZpv5yRGKZe1Q2JYdX00syi/W/qwWr36ZbUillTP d5ULDx0UoC9qNXoGDEjfas4zH0cF7rnIQoIOtNd5HpMSLNxPd/cnjeakNDbIzJuIFXVi28DaiEHM nWqgpMCXz1C8R4Z6jzp6+uwAYJ2ppmKEHFZnsNmKCep0IMd1+hEbs2OfGzpnL0HPWMhgBR65zOxL GAmYKVbNHuFFqESLrRXF+z7j9B/X6Vl3nY7yN14+HZ96fvHnZ4eiV+ONuN+0TQXN9bkrvLCjX1o2 mznwKYT/PAa7CmTRN2fD69uBE+OV0fLzl/wahdg3zhdC7A6NoP5Htr5wHaXrX5L8SW9rNNzl+4bS I0FeRzFGm8OEQGMojyQ0ZIvBpHdcPp0ouVq0DfUaO2uj25F4QvVaUToUdJwNBReGgaYLFHzC3UTE 9ixFSXXJXZ6HzrDTP8GoV7GuXigLQnczVAnHs2Aj5AMDdhsjilXcB7suBSOe57SEpnh+cBk1EdA+ 0zJrHjQmMItbhrYCzy3TwiGHCToW65C2rgUg9L32WdjfVvugI3VszOI0RVDSBxdrBxTuhU2bR4+o /fHgBlosg0Q1LdrY8fBgamPCQlwvcRga4yB1STIDXq7QagFXVwk3XVvzBItd53g0UFqXjbzgcN9l MVS7UQExpLiPnb/LoERuxY72AlGAkC3eekKzDKkPwmvIwPA8NhumyWE8dGK8PMB86MU9hUDo3wb6 rB+pK7o/4KeZCDE1rK8haDsTB0qY9RDO5DqJ7yZFk+OtRq9PlUqCXFkCTQY/B1owWW+WIbQf8JYA kYAckc9HZX79VCG5jn6sS9hezPjt8u1xL/jjFhOWFq//BOL1evIrPv8AwORWVGVuZHN0cmVhbQpl bmRvYmoKNzMgMCBvYmoKMTE3MAplbmRvYmoKNzcgMCBvYmoKPDwvTGVuZ3RoIDc4IDAgUi9GaWx0 ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnicdVVLc9s2EL7rV+xMDpVnZNWS6zhNT7HjtM50PG6j pocoBwhcSqhBQAZAyuqv77cgKYtOSs2YMrnYx/dYPdLZdEZn8unuuhr9+OclrePojNajx9Esv6Tu piu6WiDgDc3mtChH7ZkZzc/p8vINLarR+NYlDo7T6fugykTddTu/+/SBbp5MTMat6W8fHuidU3Yf Texj6D1rrlYcaH42uzhZ/DM6/5kWv4/GeLXYIM5I6lJpJq0crZjqyAUlT9pbyzqR84m8s3tEFqYx Ra0sRQ6N0Xzyw2h23mczrvShUsl4N6FVnUjZ6Emt14HXKiFnoZKiWJukVpYJwZRUfIhkzYNk6nIE FVOodaoDo4yug0l7UjFyjBW7NEXk/HVf87qOyVccIlVqT4Efa4NjjbIGxQQTAUg1yli1MhaZJrQN vmGnnOYJKVcMRtA+BBmZn1BYBpl2IPUZvZPzGr1MiOOWtVHWSmHLjXJJhuomaVAZQcZpWxccSSWy jNHeDvoXXtd5Ql9S2rD0+xbPV3tiFzE7RkgbnO3eEXoRPrSv0EdlQNUvXcHb6G3u8Nvz/DzQUR3J FdmWp9q7pIzjIRa4hKJtMI3SB2yFAtEMVbVN5jRlJPcUNb4E4+P0xXjkQwHtQU5Kbww3jOoGuEgP B3algSBqC5nGTniDbg6xFUCs+z7AH8WNCpKVK9qZtMEzESpvGX/AiIRATzHl8SQVGggFbVVAtuW4 MSo382yD2fJEBnxu3Fq/y1iolDimDHKXC2gKkmXttDyNME8P+XEZVRTQ/5FBjmD6aTqHyt5pERXd cdrBxbFLn7XXY0uQkQ5mxVJF3ApL5LbwHwywHPN0PQXtmAOkxWzkMBmg6Nr06KcyDlsjqORDtgH4 jUYAg6DzQYCQhSe8Y+gcUymn1r1VD4x0uyDSxgvKgp3M39fqXmffGYF0Ob77dL88+a7jgcSvBvZs ayOO9MHhQjMwanuE6dqxfXmglQ0oanHsivdC6xEEmscZsFU8HCxNi3QGiTRkpTSwlOWqkUhF2rG1 +S46k8TCAySQvT5U/gJvP5uQZFle398cuMvwfLn78Pmv669HNL66yAC/uux9hnEHzFW+YCu1ugGb Nrf5t11KGa7Drqk8lh2/pLUbr0uw23BrG/JbzjrI3vNlab0qvsNuiX0j8V2anheyXmNGdujIO7El CL4RJRaceZc1zwF6U1Y05Qc1/2ft19utD6l30pDTb3Buld4BWXCJTRaHg2Vvq+zQlrtMGGKCr9eb Ac6qxlSqlXG3EERE+63RWTJYrFfzK9m/Ve3wLLs+tzSf5Ry/Qaby4yA/f1M6vm6etpnYj7Vjms8m 8oP8ml5cX+7hMJpdfEXKm8XoD3z+A5MDtqJlbmRzdHJlYW0KZW5kb2JqCjc4IDAgb2JqCjEwMjcK ZW5kb2JqCjgyIDAgb2JqCjw8L0xlbmd0aCA4MyAwIFIvRmlsdGVyIC9GbGF0ZURlY29kZT4+CnN0 cmVhbQp4nJVWS3PbNhC+61fszXb1suSpncin1Jan7iSO6mjSQ9VpIHApoSUBGgBlq6Mf310SIqnH NCp40HCxz2+/XeoFLnsDuOQn/Mq01X++gYVrXcKi9dIaFJcQfmQKP01J4R0MhjCNW6XNAIZXcHPz DqZp6/xRe7QafffeithDOI/Dpy8PMH5Tziu9gN+M/Rs+aJGsnXJbHbhHiekcLQwvBz9eTP9qXb2H 6cfWOTTOXe68SUkHoF0IPkiJrvRRCiZm0r8XXkjkTC7OWoOrAy+NszkuaHfDaZOHE2w7pXK32yPx E/pXrnBzim3nrBZ8624+Z2iFN7ZpWyVTBqls++3yPQg2nxaphy9r17TdwDM6FREYSiSw6QZf/W57 dTcZbx0cr/d43H64KOPOZnU5o+/V298TlMYh+z3jdhW21LithNuCq+QPbDdwl5g8onKLnnSD5qoo OLwQITenxB39j7gHBY/2BA0ADmzbe0CPduM2sbvdt93AJzNXCVYNns3IbjWe3NXJhtP/XtyiLbvM Kk6ne3YCn78VI1AL/uydZBZMQ3fO/sukfSAg5SOroj4PapFbhCtClNeQ0BEISTPmQpTpEiE2SWJe eTkJUqVrZbQDiy+5shjRtQW/pGUlyn2TOwQpHDLlh9fb2Ct2f49ZYtYpTdwo+I4qCWTWFPaSvNMy dGBiUNp5wfNZ7Eaxv7LYp9Eg4KuyPheJ+kdwcvCoYyuct7n0XN3s/Onh6+PsogOvijLVlC6S7aRG UkSp0hSU9otaUVYmFUrPzt3sAqg6tgJDRhbwjXc4rYuGSo9LUa72xljU+DiPGcyRYCLwQG63tBQa XD530qo5gjd051DmVvl17cmhXSmJpJhlxnryFrJnOHuHAFffgIk1K+UIC8KtmLTPWnL4QovyK3HH qEMtX1dJ7eN7kKPyvbJvWcM/JCpGuZY0Y0rLJI/QcY51FRWBdilB54fGZwu1Jb2CCkxDii0xScqG EhW46pBLVsgYsiPfMK7w9lgco2Mm+45DVu7AnNgaMZFchlLFSjIHa2XXIRIciRShJbLQAFiTkkWa sofQQshMoqRCRjpWmrTm6y3tekeye0ZvFRL1uPSEmNjMEOJcF1NHDPfks8M0tDSI2+DHcEiFpraw I0t9p54UwBkbGkh5sIpYYIG4WxNNU8eo7+yXCFPOqJhvpYnDqdiCb+KYuhahF7Rdo93bpTX5Yrnj iYthkNBK/tzKpdAaE8eeiqtAAwbn/aAo5WdaN1wr8SHp7Wyt8VtGo+Xgl1wjDAcd/lt0vb/afp9Q cTC4/oM8jqetX+n5FzxGcNZlbmRzdHJlYW0KZW5kb2JqCjgzIDAgb2JqCjk4MQplbmRvYmoKODcg MCBvYmoKPDwvTGVuZ3RoIDg4IDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnicbVZN cxpHEL3zK7p0sVQFWKDEco5yZFWUshMnIvYhymHY7YWJd2fWM7NC+Nfn9Xws4BhVGQwz3a/7vX69 X+hyvqBL+cvvVTd5+ec1bfzkkjaTL5NF/JHyW9XRmxUOvKbFklbNJN1Z0PKKrq9f06qbnN+bwM5w mN061QTKr/vlbw939PZZ+6DNhj5Z95lujGr3Xvtyhm654m7NjpaXix8vVv9Orn6i1bvJ+Q/zqznR z60darpVQVUsOegB78ppe/FisnwVD0oiQ4rq8dCUAGUn2TxXg9NhTx1XW2W07zz5odqS8tRoxzvV tp46tUe4xVUJZ5hrCpbWTKqu8dk6ctzZJ3ys90Z1usK9PTX4XpEZInzb4Izy1vg5gkmY1ZY9k+Td cEwiAfm5b3WlA647/jKwDwi63lPYMg1esCNocHqzYcd1joTfFfWOZ2rjBNvQW4Pa3JOumFp+4pbi Lx3Kp8fzh3c3jxdIFnbMZoycYylTx696Z590nYDL/3M49PwOCPhZdX3L0+Ofxis5Uq5IykArY8fQ Luqs47G5VKleVcLAToetFp48Bwq648apjnOo3ZYNynAx3RoQd7oOWxqCbvVXFTTK3ergcbtiF5SW qhz7rW3rxEKO43uudKMBpmeIpJ4LCxDbiALtV8ZLvMoOuIwgQxtIgNW1iNTwLsfSxgdlKlCHDh3E gqtcFN2pCjXJCZeaI5Hlh4KnstLFwGAbgQ9dKbFjYqp104BtcJcDzk/UDR0h66zmDo2ZFgWSUWFA pwGu5r61+0g+e483HeWZifHolQonApcu/29EzmoWlv2ZkApc3jZhpySDoyftwqBa6XWXS2tUFazz U3IK4YQ5ZVI5/RYDjgkh1UPrsUy5V7jIsARu6bSP8k7imnn8i8bhmjO48xfU54tIxwYWSQJf0fXG WLBSQf9KSuY9QR/gGKMgX1gRWUSKeowN3413AOQGI1Qr+vheLiizJxtvSym5+Lk4T42BnKZ8MhAS GUo2ZXIBMTZROJBTWqZbNQ2A4h2S93xkRafE3w1OUspATb+vH3/sVX0L/6tJp5E/g4dsT2n/ag2f oT+17TBCjxfzpC3t/cCJLAmIAqyBfBC0w2zoWYDjjlyxgRasEfa8dBSlbTjEaZCs6WzBECFQSidN tU2O0isMvx3kZNdbF2uZ0noIpFpv5fpJHrszKEycy2KuVbLMwjt5JG9Fphs4fHYLcRvS6eooFs8w yU060FuxYfbJ70pxxfWUAMAm6Z2GhQuvMntInHg8uEEMjdrLAsyBCsUCeT148Qg/C3ZWPoOEN8s3 UGY5uBZ00pUgDnxjotZOUUkDY/b7Dw8v728fSlk+OqA2T9gl0QPgn5+jCSG5gXEUKeavS8ps30VA JX0yVPRpaBU0vj/ealmaspoXgPm7md1GU6KP2R/uikBvR0vK2W/+t0UOXFZxycv+przlkznLjSip rJxjA7ODR+JoDBV0C5XEp4X46UX03SGkzSX2ESdw3+e9vbWydTMwaKG422jnj+cf3/vHiykErvGw kNCgV8loRYqVs2BxNO6yfmI6OGL12VNrq1gdxHwwePQ4jG52VLF0s0Gl0OzBg6JL4cHFZNwo+CW4 aTRmrEoe34AcvYY4wGBCh7dax8xl1oodH1QrdA8aRqWkuti0F3hC2Tut6sNCiCNSxuzItaXTn0SI OtmP1Bgdl9Qa+zpE6zh+TkrAcqBxlYxoRG+nSOQRAT0q7K2Vl4ew4qnQuVq32m/5W7DiXyLHAa7s 2n3a52nNBYsTdiMTH5V0GaX0C4SBFcbiO3M6fr197uPu/HUwTMvFVB5PX9E3r78/qA3T4vofhHy7 mvyBv/8AZN3JymVuZHN0cmVhbQplbmRvYmoKODggMCBvYmoKMTM4MwplbmRvYmoKOTIgMCBvYmoK PDwvTGVuZ3RoIDkzIDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnicrVZNc9s2EL3r V+xMD4nHkmLJSez2lvpj6k6bcRtNfWh6gMilhJoEFACUzI5/fN9CIGlJUXopNWN6CGD37dv3lvxC Z+MJnckv3bNq8Ob3C1r4wRktBl8Gk7hI6ZZV9OMMGy5pMqVZMdiemdD0nC4uLmlWDV7fmcDOcBhd O1UEStfd9OOnW7p50j5os6AH6x7pg1Fl47Vv99A1Z1zN2dH0bPLuZPb34Px7mv0yeE39NRqNTkff urarJ68Gk/P9s7ie6VvXM47tHpBop0f3nyLb6cGZ5/Xtw/E8cfV/yZOquSo1m0DfTQ4y9WvT/cMv aJT73sm91a+gPY1o2/tX0B5F/bz+NeJu73R89ShLX2drZxVnp+8PBXCrF7VjevsDkehRG7pWQdEV i2gl39vx+Xg6lo2ON6os6d6WOmsgzVVpm0rY/FAHW6mgrUkAu72uLtmT5xA1DmHbIrAhRUFXTJk1 vq6wMsS/1arkJ1ImJ3bOul3Brpw1LH8z9p54jRgbHZZaQnkEKJmsWyij/4kw3kT0K6c9U+FUxRu4 a5zA3QWaM/IBWKEcVdZxlx4BkWStc3YjuzGcU1baOie4V0J4CksVUhzPbs1UNU4rbKs9OGDnxzs8 7xERbK4aUki41Itl2YAGpJBKaGVd8LF8lecOVbKQhXy8Q0TACCl0hn7MlqCzUo/YpwOt2TWUa1mr y0CFdUAuUo9RtkXkaGzCnkWCgCf2ILg6CwminERS7Qj1t+lISeXchzRl07HAcWmtXahV2TMlpbxc 6MqK2LljrDXTWns9L48E6jmpQOCcY6nsRHyFs1WiScKoLJ5eqeyRgRQFgBqRSARz+7DXoBuRUlja erGEErwQaXLroNl6JS2BuipdQiZF28mCVYBj/PCgNym18Ci0FuKsKEd65IZQTO5j7/ewtxmDbZnY PhhKd6Ntwl5nVec3cNmbj7Z8zdm3Et0sUR2OZ8pQCdc4tWA4BmqvsB22FHH4AIaVgBNxQ40oUiKh Hme9T6EwHBC6oQog9Er6tEUJBA9aCAwvYA0lKeSZetmJRVcrRIxtfqlQyDBvjKp0JnvJrzjTRZNk mLMH9XkvzxRru9r6oW+qzKvzcTvpR59iMEj4E2e106Fp5xesfhVt8cf9x7bIq94y4m6dcTcOyK5A X+gmgpgp2chDq3hubGiN0WvCS9Ze1BhJawTpxf35taT/fEJzIbD0ttvqE94ErahNJtSmLrEBExm/ dOWr7giGCUrUndX2QrWr0UsLC1mYKInaoAFbIW1n605wGQcJW4rTO9TThqEa3A/jED/J588LR8vL pGsjPykZvUNpwwHpW4iRXWgkPe2tKJPBAqTrZlGqP8WJytrqRKKnUoQUmcOtSBds0FkRHjrYUfTf Ml1r3qB/VZ0tYS68lrKlMgtGLzfo0LC3IPovSJd2c9ihOBC0MCBvUtRpTULcvYdSoF39SRV3Jgcz Q8DuPTyaK4893UtvqxbgtRsR+ft3UZg/qTjAWFbGO58DN08rsOvp5xrv2+lkKB+e7/e/K/68lzky ufwLEW9mg9/w+xd1rVOLZW5kc3RyZWFtCmVuZG9iago5MyAwIG9iagoxMTY2CmVuZG9iago5NyAw IG9iago8PC9MZW5ndGggOTggMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJxtVV1P 40YUfc+vuNoXgpp1cPgIQVUlICCyBbobIrXq0odhfB0P2J4wM05If33PtR1CKhyRGM/9OOfcM+NX OohiOpBP+6uLTn86pLnvHNC889qJ60Vqf3RBFzMEnFI8oFnaaXJiGhzScHhKs6LTnZSBXcnh69ip NFB7TQb3D9d09WZ8MOWc/rTuhc5Lla+98ZsYGrPm4okdDQ7i4/3Zc+dwRLPbThdLOjdcBk/BkuPg DC+5X6hSzZk868qZsKaFzY027MmUpEjbErUDsgiBJbv9vU58uKmntLPeU2LSlJ3ELJxdmoSdJxaQ PkL44KQOP4oOo6MIHGpmKiewWwmBwpYmWAdCCJaqs4vxGc0yUEpVnnuqSlQE4EUVVDC2BFa3NJq9 xB+j5F1NoRAAl4IX4XWgbwt+WLcpQULU9BVqr0FS51XCwjM186rJk6iE6xa9Hb7ezIFcpFdl0ii1 bjh7pOF5tJnRyuQ52RIdUqsrj1sKGbd4PkmkhXLhg1onUun8/vxzQve2WdQ7i43maOjQC+ol6Cyk pWx3iIIPmxl/WvRGLWtmjRUYwwX/2itoE5zNa9LttBoV0US7ShtME113pMosXJNsbdXODChmGWP2 K6mwXW5b5Bi0kbukaucrLqvDVQhKv5CvXKrqOpOA55zUCJ8Y/vCmtrf83wYDcFvDsbZLdhiHs8Vm +WP6a2WaBMK+WAqjx27IMLlCvWyt2SSKTCbQXoXJwcxc78a9x/2GnGNowT0Z7wJ0GjXbfG2LAlm6 sZnOZEvB4ZlacotDK+RXYk2/YG1SAxFlonju1lsgMNO7Zhs/bjcSNERO0XR5wj5jrv3XTK0mmbFx ba1iuz3wJ9N47KJjfY+DALy2vjwFx0vpa54q9NqMqDE97KBo7my1IE4BILTTTgHSrmqXs13kLXKp AHJKB7PkfL3jHmghcA0IySgqL8LgK/BbOKOx4bmlKarfQuJ/AXfGOVQXYWnyy/hxv9fi+sso+1yV 9HdWKbR/7F5mplR0Z59MzgijO1MuGCs/zCeLDxWkSZx6P0aemRF2fSyL90bTLa/lVMSzMVfBa0AW JC+2kIir5B3fNcQwOPDk8daUU4tjOqChf4E8QQJvKrVisyP5CDynXB+w7Z4YRXEkh0A9YThndxWF f06vLwdxPPqH6MKpBMc2yEQ9+vI7rwmHLlwvnhJZccojuN4FkzIRZ/LOJD5cU8YmcY1RbvHqyP2X Hl1cfqf4qCdFSFpulP9wjf+Y4M0XxcOj02G/RQblldMZxaPR8JOUX7MQFmf9/mq1ilyqv3Iizo6s m/fF2n08kyq/iUzxwVEN9gY7x/eIA6k82ql29bYAbk/fqpIBsidvxhP63/Xzu7wGoRlKXs06P/D5 D0H2bX5lbmRzdHJlYW0KZW5kb2JqCjk4IDAgb2JqCjEwMzcKZW5kb2JqCjEwMiAwIG9iago8PC9M ZW5ndGggMTAzIDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCniclVVdd9o4EH33r5jD yybnWF4DbdLuGwTIRyGhwG67bfqg2LKjYEtEkkvJr9+REYTEdru1z8E21lzPvXNn9Ahh0IbQnu4a 5d6fs1NItRdC6j167fIluEuUQ3+BC95BuwOLxNvGtKHThdPTd7DIvaNLYZgSzJCBookBd1x2rucj GP7g2nCRwiepltATNNtorndrYMAilt8xBZ2w/fZ48eB138Ni7B29DzoBQohEqpwa/p3BjCVMMREx ffyH1zkpVyHA13OqjGCKIED3G75qd3evDo4J0zpnyodh4EPLhfwFZ5ksYnJHNYtBs6hQ3GyAaqD4 pL7ziCHeKyTNDBgJhi4ZyCRp+XATGekYdIOXuV2SQXBPFdOEd4ROSEpXhDoJGnO9sAE+zDHTL/dU pD4M8HYi9VKuuXnyYYaPVMRwEcCMJpwxv5pma6+0TJ5rsLY1QEm3tcHcY1swcphiFeowaRKGcHtU wnABKyVTjNS3xz5cFdmmLGKNBJyZhKA/chkTGmUEryxr5N+XaUyFRPm3zD/IQt/zJd7gw0VRKjJ2 EgwC6GeUqzoFrpkpE+1F6BkNZ1IYJTMYoxbIoXc2vj2Gf3vX5zCghqK+mFOrBmcrUS0FEp7Uq1FF eeHzJonkStN1ShKu2JpmWbNF+ug+NPMoKEWYBnCBVsypQG/fCBjt4m1Wu96spjR3ht/boDYHEraf OVZBDi1w0AidGooPTIrUuUzHguwajrhea6Z7ZSPRYtYMPEcTuOoj8asCMedSIvMZeyww65wJo63J mxnjzfaLsG19KWAuE7PGNiADlnCB/zn3YNc0m+KXjH5DvAlV0X2TOzK5Yk/uQysaLZlp1GoYuyE3 LdeRfslwShWNeZrDyDa/tURCLf+FBBwEupli9cvNI6CkUAVq4LSi2kjloGnZo6RABTHfZidMyyAf esGu/cc2QaTruvxvzeDMQpRjjgq4WTH86U2qee1lsPP8H65MQTP+hGJVbLLvEJdzFauWRbNSB53y 5lfS4LaVstiCkv+rjb9TxY7PT+XA/FDuJtvh+RnvP3KsV1BT9i9UiU35Duv5gHtLuRGN2QbHC86X a3wYFOKOquchPAmqMOdMqpTT2O5kreei2OWv+9RWaV+LKhIWZzfJ94UZFSIyXIpKZV5IVsXai/iz fUywvWXb4ZtSaLcl49ZPs+AF4vDHCrloF9b2begJvDq+TmlqQW3phgvvI57/ASujmv1lbmRzdHJl YW0KZW5kb2JqCjEwMyAwIG9iago5MTkKZW5kb2JqCjEwNyAwIG9iago8PC9MZW5ndGggMTA4IDAg Ui9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnicpVXRUts4FH33V9zhpTBrO7bjxIHZ2WlI wpIuUErMlKX0QciKrdaWgiQ3Tb++V44DhYTpzK7z4ETSPfecoyPlAQI/hMB+2jetnM5VArl2Asid BydsJqF90QqOU1wwgDCCdO6sa0KIupAkA0grZ38qDFOCGW+syNxA+0yji9kJTL5zbbjI4aNUX2Eo SLnSXG/WwJhRVt0zBVEQ9g7SL073ENIzZx+nPk29sf/APR4JPfcIpUxrD7ssEcirNaNEs88Hb5yw u6n45flIRO7CPz4QkcGND7dF3YzsWa65IoZlMGO0VtysYMlNAcOmAeK9QLpYd4RrzWCELfdcyKxM 7zVq2xAtWS+I4G6/AeMCFkrmCuvuDlw4J4oWjQU+Vkf9Zxb8IEqs2lYZMcSjzPptLfAsrH7VhFtb iei+C2dsVREhXLjAH9aTMx/GtbgnynrS7NQYsWHUYG9L2KjXj/J/S8sLgm2c3frfUyPbEMS7HChk 3XaiZEHueYm75nHbbk4o8yopuJEKU/a6FQjhwgjF33CCduCXY1lTkhGu1g5ZU975OC2bnKQF22Y/ euwO0013mEsF548MHvOySdc2ykktqME2Gt1A4+8OrB3NHjyZu1PxNtQuD9D339v8MmhXJ6P4MB58 BjyiGVNaS7F2aUy+caZdmDzl5rZYH6UrtpDKwFzJCkxj107rp8NjsGx0IRcgBVyLJRH2/KUodc5p m/5DLwxcpBb099xtocgPLEEk9H6KV5MfJvEg6bS0XRjWea2NLU92VP9ZGLM46nSWy6Wv5tRjmfXK lyrvcDGXHRyzMH9tm5JESYKmHH9BAWUtsnVW9obw7/Di7/WROZcZK5sUTC9RiyA5q/AoNCp2GmK1 WNxtLevRd7VgzVH4b0osyK9KhrUppNJvYJhlNglsc8nNak0EnBLVjDxRPa3JkvF2URL3unDK6Vep Vvguy00xKblgaMcUIB6ESb8dv54Nn5l4WUjBjuCP0Eu6sdcPYi/odqNn/SYV4eUR6MIyeSuyH4VP ZYVLnv4LzrjISHthvc61140DvOlyQlcwVvwb0pvV3DAIk1675LIkQrqQ3qCyXhDF/5t1mTWk3hYN kZb4Ydisaqx1gRkgpf9sGyffFxzn2q0Obe7DPrx4Pl1ilHDWXmqT1PmAn592cQ6EZW5kc3RyZWFt CmVuZG9iagoxMDggMCBvYmoKODcyCmVuZG9iagoxMTIgMCBvYmoKPDwvTGVuZ3RoIDExMyAwIFIv RmlsdGVyIC9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nL1T207bQBB991ect4IIri/kAk8JccpFJArE VVGrPiz24Cx4d51dh2K+vmvHaZsG9bFryWvNmTnnzMizguf68OqnvRPhfLzrIzOOh8xZOX4Dor0S gfPYJgzgB4gfnU2NjyBEvz9ALJyDK1mSllQeR5o9lmjPVTBbfMLklZuSywxflH7GSLK8MtxscxBR QuKBNALP7x7GT054ivjGObDQSJZKcoU5M6XShx8cP9xCMeX0aMGE4eooslAdjJTEHRP2nRJyhrFe v3UwCFp4ylLNUyAYeF6vjS0KxqX9Dnpb5olgPD8D22i7RaNdkGY5mWH5S9ZNlLB1v81GnDKFOxc3 qqC3/2R2vlSSznAUnuDU6vnBKbwTf0e87Set7bnazWt3/+pjWil8ZVpWOywXKk8Fk1iwZGlaO6GH y3VqbAeLUhOVbfiatKEKY15WHcyuAa8fetu2Pi9G701bVMp9q0WHmdlzNOMJbqiy8nLHU0Tr0iRL aub73BTtEc/ctrJp2Sa5Ke22y5MloxwXpHTGWUpmR2OuuWgE3nW9qV0Nizrr2CrsT5PLguy/f8t3 aMdLLhmm6oHntJ1mgPs1kz/WguQrx+iFOveWvy6O7AJpnmwHfE78qd4nu5+e1w3baEP5nssVFxsT w6ROEY1oa7TXbZIvmSbTAZVguYs/z+S14BbD9VoSAr9Tb2kPf51vc5ZZNPhuGSexc2ufnwmnKsZl bmRzdHJlYW0KZW5kb2JqCjExMyAwIG9iago1NDAKZW5kb2JqCjExNyAwIG9iago8PC9MZW5ndGgg MTE4IDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnicrVLBUtswEL3rK96tyUziSjbY KScCCUOYwlBsJofSw8YI22DLRJIZ+PvKsd0SZrixOmi0763eW6224J4Ab1e/pxX7fhMhM4wjY1sm diD6La1wkjjCDMJH8sC6GgE/QBTNkFRstFJWaiXtdKHpwaKPlX8Vn2H5WhhbqAzrWj9hrqh8M4UZ OFjIVFYbqeFzcThOHlnwA8lPNnLQZZ1TJe9xUjcp3VOhx9+YCAb0TJNKJRJZyrSuHNQmb6RS0kwQ HHLO+1xHdAc/HGqXFRXlEapOwNsMAse142bS6y787+Q0120TpHBB6baRrtWv9vJPwnscJD5zE+dU bKh0JfSkaUPavu25uY2xylRhZS8qoijEJRlDad4Yaa3B/EXiaj1B3DgaQi566ppM7mZlazXB4hRu KDwIe+w2nu8Zv85rJY9wN/LFwd0YEZ9NQxEGe1b65kznOD1uzLTYWfNqnbVNhQc76jnp9qmkBZUe 3sfy9blwGC4aJeGLSftPQnyI39eUOTT4465cJuyXW38BJvPCfGVuZHN0cmVhbQplbmRvYmoKMTE4 IDAgb2JqCjM5OQplbmRvYmoKNCAwIG9iago8PC9UeXBlL1BhZ2UvTWVkaWFCb3ggWzAgMCA1OTUg ODQyXQovUm90YXRlIDAvUGFyZW50IDMgMCBSCi9SZXNvdXJjZXM8PC9Qcm9jU2V0Wy9QREYgL1Rl eHRdCi9FeHRHU3RhdGUgOSAwIFIKL0ZvbnQgMTAgMCBSCj4+Ci9Db250ZW50cyA1IDAgUgo+Pgpl bmRvYmoKMTEgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0 ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0 YXRlIDE0IDAgUgovRm9udCAxNSAwIFIKPj4KL0NvbnRlbnRzIDEyIDAgUgo+PgplbmRvYmoKMTYg MCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVu dCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDE5IDAg UgovRm9udCAyMCAwIFIKPj4KL0NvbnRlbnRzIDE3IDAgUgo+PgplbmRvYmoKMjEgMCBvYmoKPDwv VHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgov UmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDI0IDAgUgovRm9udCAy NSAwIFIKPj4KL0NvbnRlbnRzIDIyIDAgUgo+PgplbmRvYmoKMjYgMCBvYmoKPDwvVHlwZS9QYWdl L01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2Vz PDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDI5IDAgUgovRm9udCAzMCAwIFIKPj4K L0NvbnRlbnRzIDI3IDAgUgo+PgplbmRvYmoKMzEgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94 IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1Nl dFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDM0IDAgUgovRm9udCAzNSAwIFIKPj4KL0NvbnRlbnRz IDMyIDAgUgo+PgplbmRvYmoKMzYgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1 IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9U ZXh0XQovRXh0R1N0YXRlIDM5IDAgUgovRm9udCA0MCAwIFIKPj4KL0NvbnRlbnRzIDM3IDAgUgo+ PgplbmRvYmoKNDEgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1Jv dGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0 R1N0YXRlIDQ0IDAgUgovRm9udCA0NSAwIFIKPj4KL0NvbnRlbnRzIDQyIDAgUgo+PgplbmRvYmoK NDYgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1Bh cmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDQ5 IDAgUgovRm9udCA1MCAwIFIKPj4KL0NvbnRlbnRzIDQ3IDAgUgo+PgplbmRvYmoKNTEgMCBvYmoK PDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAg UgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDU0IDAgUgovRm9u dCA1NSAwIFIKPj4KL0NvbnRlbnRzIDUyIDAgUgo+PgplbmRvYmoKNTYgMCBvYmoKPDwvVHlwZS9Q YWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3Vy Y2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDU5IDAgUgovRm9udCA2MCAwIFIK Pj4KL0NvbnRlbnRzIDU3IDAgUgo+PgplbmRvYmoKNjEgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlh Qm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJv Y1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDY0IDAgUgovRm9udCA2NSAwIFIKPj4KL0NvbnRl bnRzIDYyIDAgUgo+PgplbmRvYmoKNjYgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAg NTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERG IC9UZXh0XQovRXh0R1N0YXRlIDY5IDAgUgovRm9udCA3MCAwIFIKPj4KL0NvbnRlbnRzIDY3IDAg Ugo+PgplbmRvYmoKNzEgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0K L1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQov RXh0R1N0YXRlIDc0IDAgUgovRm9udCA3NSAwIFIKPj4KL0NvbnRlbnRzIDcyIDAgUgo+PgplbmRv YmoKNzYgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAw L1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRl IDc5IDAgUgovRm9udCA4MCAwIFIKPj4KL0NvbnRlbnRzIDc3IDAgUgo+PgplbmRvYmoKODEgMCBv YmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAz IDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDg0IDAgUgov Rm9udCA4NSAwIFIKPj4KL0NvbnRlbnRzIDgyIDAgUgo+PgplbmRvYmoKODYgMCBvYmoKPDwvVHlw ZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVz b3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDg5IDAgUgovRm9udCA5MCAw IFIKPj4KL0NvbnRlbnRzIDg3IDAgUgo+PgplbmRvYmoKOTEgMCBvYmoKPDwvVHlwZS9QYWdlL01l ZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwv UHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDk0IDAgUgovRm9udCA5NSAwIFIKPj4KL0Nv bnRlbnRzIDkyIDAgUgo+PgplbmRvYmoKOTYgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFsw IDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsv UERGIC9UZXh0XQovRXh0R1N0YXRlIDk5IDAgUgovRm9udCAxMDAgMCBSCj4+Ci9Db250ZW50cyA5 NyAwIFIKPj4KZW5kb2JqCjEwMSAwIG9iago8PC9UeXBlL1BhZ2UvTWVkaWFCb3ggWzAgMCA1OTUg ODQyXQovUm90YXRlIDAvUGFyZW50IDMgMCBSCi9SZXNvdXJjZXM8PC9Qcm9jU2V0Wy9QREYgL1Rl eHRdCi9FeHRHU3RhdGUgMTA0IDAgUgovRm9udCAxMDUgMCBSCj4+Ci9Db250ZW50cyAxMDIgMCBS Cj4+CmVuZG9iagoxMDYgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0K L1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQov RXh0R1N0YXRlIDEwOSAwIFIKL0ZvbnQgMTEwIDAgUgo+PgovQ29udGVudHMgMTA3IDAgUgo+Pgpl bmRvYmoKMTExIDAgb2JqCjw8L1R5cGUvUGFnZS9NZWRpYUJveCBbMCAwIDU5NSA4NDJdCi9Sb3Rh dGUgMC9QYXJlbnQgMyAwIFIKL1Jlc291cmNlczw8L1Byb2NTZXRbL1BERiAvVGV4dF0KL0V4dEdT dGF0ZSAxMTQgMCBSCi9Gb250IDExNSAwIFIKPj4KL0NvbnRlbnRzIDExMiAwIFIKPj4KZW5kb2Jq CjExNiAwIG9iago8PC9UeXBlL1BhZ2UvTWVkaWFCb3ggWzAgMCA1OTUgODQyXQovUm90YXRlIDAv UGFyZW50IDMgMCBSCi9SZXNvdXJjZXM8PC9Qcm9jU2V0Wy9QREYgL1RleHRdCi9FeHRHU3RhdGUg MTE5IDAgUgovRm9udCAxMjAgMCBSCj4+Ci9Db250ZW50cyAxMTcgMCBSCj4+CmVuZG9iagozIDAg b2JqCjw8IC9UeXBlIC9QYWdlcyAvS2lkcyBbCjQgMCBSCjExIDAgUgoxNiAwIFIKMjEgMCBSCjI2 IDAgUgozMSAwIFIKMzYgMCBSCjQxIDAgUgo0NiAwIFIKNTEgMCBSCjU2IDAgUgo2MSAwIFIKNjYg MCBSCjcxIDAgUgo3NiAwIFIKODEgMCBSCjg2IDAgUgo5MSAwIFIKOTYgMCBSCjEwMSAwIFIKMTA2 IDAgUgoxMTEgMCBSCjExNiAwIFIKXSAvQ291bnQgMjMKPj4KZW5kb2JqCjEgMCBvYmoKPDwvVHlw ZSAvQ2F0YWxvZyAvUGFnZXMgMyAwIFIKL01ldGFkYXRhIDEyMSAwIFIKPj4KZW5kb2JqCjcgMCBv YmoKPDwvVHlwZS9FeHRHU3RhdGUKL09QTSAxPj5lbmRvYmoKOSAwIG9iago8PC9SNwo3IDAgUj4+ CmVuZG9iagoxMCAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagoxNCAwIG9iago8PC9SNwo3IDAg Uj4+CmVuZG9iagoxNSAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagoxOSAwIG9iago8PC9SNwo3 IDAgUj4+CmVuZG9iagoyMCAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagoyNCAwIG9iago8PC9S Nwo3IDAgUj4+CmVuZG9iagoyNSAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagoyOSAwIG9iago8 PC9SNwo3IDAgUj4+CmVuZG9iagozMCAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagozNCAwIG9i ago8PC9SNwo3IDAgUj4+CmVuZG9iagozNSAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagozOSAw IG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago0MCAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iago0 NCAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago0NSAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9i ago0OSAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago1MCAwIG9iago8PC9SOAo4IDAgUj4+CmVu ZG9iago1NCAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago1NSAwIG9iago8PC9SOAo4IDAgUj4+ CmVuZG9iago1OSAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago2MCAwIG9iago8PC9SOAo4IDAg Uj4+CmVuZG9iago2NCAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago2NSAwIG9iago8PC9SOAo4 IDAgUj4+CmVuZG9iago2OSAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago3MCAwIG9iago8PC9S OAo4IDAgUj4+CmVuZG9iago3NCAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago3NSAwIG9iago8 PC9SOAo4IDAgUj4+CmVuZG9iago3OSAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago4MCAwIG9i ago8PC9SOAo4IDAgUj4+CmVuZG9iago4NCAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago4NSAw IG9iago8PC9SOAo4IDAgUj4+CmVuZG9iago4OSAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago5 MCAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iago5NCAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9i ago5NSAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iago5OSAwIG9iago8PC9SNwo3IDAgUj4+CmVu ZG9iagoxMDAgMCBvYmoKPDwvUjgKOCAwIFI+PgplbmRvYmoKMTA0IDAgb2JqCjw8L1I3CjcgMCBS Pj4KZW5kb2JqCjEwNSAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagoxMDkgMCBvYmoKPDwvUjcK NyAwIFI+PgplbmRvYmoKMTEwIDAgb2JqCjw8L1I4CjggMCBSPj4KZW5kb2JqCjExNCAwIG9iago8 PC9SNwo3IDAgUj4+CmVuZG9iagoxMTUgMCBvYmoKPDwvUjgKOCAwIFI+PgplbmRvYmoKMTE5IDAg b2JqCjw8L1I3CjcgMCBSPj4KZW5kb2JqCjEyMCAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iago4 IDAgb2JqCjw8L0Jhc2VGb250L0NvdXJpZXIvVHlwZS9Gb250Ci9TdWJ0eXBlL1R5cGUxPj4KZW5k b2JqCjEyMSAwIG9iago8PC9UeXBlL01ldGFkYXRhCi9TdWJ0eXBlL1hNTC9MZW5ndGggMTM1ND4+ c3RyZWFtCjw/eHBhY2tldCBiZWdpbj0n77u/JyBpZD0nVzVNME1wQ2VoaUh6cmVTek5UY3prYzlk Jz8+Cjw/YWRvYmUteGFwLWZpbHRlcnMgZXNjPSJDUkxGIj8+Cjx4OnhtcG1ldGEgeG1sbnM6eD0n YWRvYmU6bnM6bWV0YS8nIHg6eG1wdGs9J1hNUCB0b29sa2l0IDIuOS4xLTEzLCBmcmFtZXdvcmsg MS42Jz4KPHJkZjpSREYgeG1sbnM6cmRmPSdodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJk Zi1zeW50YXgtbnMjJyB4bWxuczppWD0naHR0cDovL25zLmFkb2JlLmNvbS9pWC8xLjAvJz4KPHJk ZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9J3V1aWQ6MDllYzZjODEtZGVkMS0xMWYwLTAwMDAtOTQw Y2UwZjk2Y2Y5JyB4bWxuczpwZGY9J2h0dHA6Ly9ucy5hZG9iZS5jb20vcGRmLzEuMy8nIHBkZjpQ cm9kdWNlcj0nR1BMIEdob3N0c2NyaXB0IDkuMDYnLz4KPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJv dXQ9J3V1aWQ6MDllYzZjODEtZGVkMS0xMWYwLTAwMDAtOTQwY2UwZjk2Y2Y5JyB4bWxuczp4bXA9 J2h0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC8nPjx4bXA6TW9kaWZ5RGF0ZT4yMDE1LTEyLTE5 VDE2OjU2OjIzLTA4OjAwPC94bXA6TW9kaWZ5RGF0ZT4KPHhtcDpDcmVhdGVEYXRlPjIwMTUtMTIt MTlUMTY6NTY6MjMtMDg6MDA8L3htcDpDcmVhdGVEYXRlPgo8eG1wOkNyZWF0b3JUb29sPkdOVSBF bnNjcmlwdCAxLjYuNS45MDwveG1wOkNyZWF0b3JUb29sPjwvcmRmOkRlc2NyaXB0aW9uPgo8cmRm OkRlc2NyaXB0aW9uIHJkZjphYm91dD0ndXVpZDowOWVjNmM4MS1kZWQxLTExZjAtMDAwMC05NDBj ZTBmOTZjZjknIHhtbG5zOnhhcE1NPSdodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vJyB4 YXBNTTpEb2N1bWVudElEPSd1dWlkOjA5ZWM2YzgxLWRlZDEtMTFmMC0wMDAwLTk0MGNlMGY5NmNm OScvPgo8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0ndXVpZDowOWVjNmM4MS1kZWQxLTExZjAt MDAwMC05NDBjZTBmOTZjZjknIHhtbG5zOmRjPSdodHRwOi8vcHVybC5vcmcvZGMvZWxlbWVudHMv MS4xLycgZGM6Zm9ybWF0PSdhcHBsaWNhdGlvbi9wZGYnPjxkYzp0aXRsZT48cmRmOkFsdD48cmRm OmxpIHhtbDpsYW5nPSd4LWRlZmF1bHQnPkVuc2NyaXB0IE91dHB1dDwvcmRmOmxpPjwvcmRmOkFs dD48L2RjOnRpdGxlPjwvcmRmOkRlc2NyaXB0aW9uPgo8L3JkZjpSREY+CjwveDp4bXBtZXRhPgog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCjw/eHBhY2tldCBlbmQ9J3cnPz4KZW5kc3Ry ZWFtCmVuZG9iagoyIDAgb2JqCjw8L1Byb2R1Y2VyKEdQTCBHaG9zdHNjcmlwdCA5LjA2KQovQ3Jl YXRpb25EYXRlKEQ6MjAxNTEyMTkxNjU2MjMtMDgnMDAnKQovTW9kRGF0ZShEOjIwMTUxMjE5MTY1 NjIzLTA4JzAwJykKL1RpdGxlKEVuc2NyaXB0IE91dHB1dCkKL0NyZWF0b3IoR05VIEVuc2NyaXB0 IDEuNi41LjkwKT4+ZW5kb2JqCnhyZWYKMCAxMjIKMDAwMDAwMDAwMCA2NTUzNSBmIAowMDAwMDMw OTk0IDAwMDAwIG4gCjAwMDAwMzM5ODMgMDAwMDAgbiAKMDAwMDAzMDc3NiAwMDAwMCBuIAowMDAw MDI3MDM2IDAwMDAwIG4gCjAwMDAwMDAwMTUgMDAwMDAgbiAKMDAwMDAwMDk4MSAwMDAwMCBuIAow MDAwMDMxMDYwIDAwMDAwIG4gCjAwMDAwMzI0ODkgMDAwMDAgbiAKMDAwMDAzMTEwMSAwMDAwMCBu IAowMDAwMDMxMTMwIDAwMDAwIG4gCjAwMDAwMjcxOTUgMDAwMDAgbiAKMDAwMDAwMTAwMCAwMDAw MCBuIAowMDAwMDAyMzIzIDAwMDAwIG4gCjAwMDAwMzExNjAgMDAwMDAgbiAKMDAwMDAzMTE5MCAw MDAwMCBuIAowMDAwMDI3MzU3IDAwMDAwIG4gCjAwMDAwMDIzNDQgMDAwMDAgbiAKMDAwMDAwMzcw MiAwMDAwMCBuIAowMDAwMDMxMjIwIDAwMDAwIG4gCjAwMDAwMzEyNTAgMDAwMDAgbiAKMDAwMDAy NzUxOSAwMDAwMCBuIAowMDAwMDAzNzIzIDAwMDAwIG4gCjAwMDAwMDQ2NzEgMDAwMDAgbiAKMDAw MDAzMTI4MCAwMDAwMCBuIAowMDAwMDMxMzEwIDAwMDAwIG4gCjAwMDAwMjc2ODEgMDAwMDAgbiAK MDAwMDAwNDY5MSAwMDAwMCBuIAowMDAwMDA1OTI2IDAwMDAwIG4gCjAwMDAwMzEzNDAgMDAwMDAg biAKMDAwMDAzMTM3MCAwMDAwMCBuIAowMDAwMDI3ODQzIDAwMDAwIG4gCjAwMDAwMDU5NDcgMDAw MDAgbiAKMDAwMDAwNzI3NSAwMDAwMCBuIAowMDAwMDMxNDAwIDAwMDAwIG4gCjAwMDAwMzE0MzAg MDAwMDAgbiAKMDAwMDAyODAwNSAwMDAwMCBuIAowMDAwMDA3Mjk2IDAwMDAwIG4gCjAwMDAwMDg2 MDEgMDAwMDAgbiAKMDAwMDAzMTQ2MCAwMDAwMCBuIAowMDAwMDMxNDkwIDAwMDAwIG4gCjAwMDAw MjgxNjcgMDAwMDAgbiAKMDAwMDAwODYyMiAwMDAwMCBuIAowMDAwMDA5OTUxIDAwMDAwIG4gCjAw MDAwMzE1MjAgMDAwMDAgbiAKMDAwMDAzMTU1MCAwMDAwMCBuIAowMDAwMDI4MzI5IDAwMDAwIG4g CjAwMDAwMDk5NzIgMDAwMDAgbiAKMDAwMDAxMTE3NiAwMDAwMCBuIAowMDAwMDMxNTgwIDAwMDAw IG4gCjAwMDAwMzE2MTAgMDAwMDAgbiAKMDAwMDAyODQ5MSAwMDAwMCBuIAowMDAwMDExMTk3IDAw MDAwIG4gCjAwMDAwMTI1NDEgMDAwMDAgbiAKMDAwMDAzMTY0MCAwMDAwMCBuIAowMDAwMDMxNjcw IDAwMDAwIG4gCjAwMDAwMjg2NTMgMDAwMDAgbiAKMDAwMDAxMjU2MiAwMDAwMCBuIAowMDAwMDEz ODY4IDAwMDAwIG4gCjAwMDAwMzE3MDAgMDAwMDAgbiAKMDAwMDAzMTczMCAwMDAwMCBuIAowMDAw MDI4ODE1IDAwMDAwIG4gCjAwMDAwMTM4ODkgMDAwMDAgbiAKMDAwMDAxNTE4MiAwMDAwMCBuIAow MDAwMDMxNzYwIDAwMDAwIG4gCjAwMDAwMzE3OTAgMDAwMDAgbiAKMDAwMDAyODk3NyAwMDAwMCBu IAowMDAwMDE1MjAzIDAwMDAwIG4gCjAwMDAwMTY1ODQgMDAwMDAgbiAKMDAwMDAzMTgyMCAwMDAw MCBuIAowMDAwMDMxODUwIDAwMDAwIG4gCjAwMDAwMjkxMzkgMDAwMDAgbiAKMDAwMDAxNjYwNSAw MDAwMCBuIAowMDAwMDE3ODQ3IDAwMDAwIG4gCjAwMDAwMzE4ODAgMDAwMDAgbiAKMDAwMDAzMTkx MCAwMDAwMCBuIAowMDAwMDI5MzAxIDAwMDAwIG4gCjAwMDAwMTc4NjggMDAwMDAgbiAKMDAwMDAx ODk2NyAwMDAwMCBuIAowMDAwMDMxOTQwIDAwMDAwIG4gCjAwMDAwMzE5NzAgMDAwMDAgbiAKMDAw MDAyOTQ2MyAwMDAwMCBuIAowMDAwMDE4OTg4IDAwMDAwIG4gCjAwMDAwMjAwNDEgMDAwMDAgbiAK MDAwMDAzMjAwMCAwMDAwMCBuIAowMDAwMDMyMDMwIDAwMDAwIG4gCjAwMDAwMjk2MjUgMDAwMDAg biAKMDAwMDAyMDA2MSAwMDAwMCBuIAowMDAwMDIxNTE2IDAwMDAwIG4gCjAwMDAwMzIwNjAgMDAw MDAgbiAKMDAwMDAzMjA5MCAwMDAwMCBuIAowMDAwMDI5Nzg3IDAwMDAwIG4gCjAwMDAwMjE1Mzcg MDAwMDAgbiAKMDAwMDAyMjc3NSAwMDAwMCBuIAowMDAwMDMyMTIwIDAwMDAwIG4gCjAwMDAwMzIx NTAgMDAwMDAgbiAKMDAwMDAyOTk0OSAwMDAwMCBuIAowMDAwMDIyNzk2IDAwMDAwIG4gCjAwMDAw MjM5MDUgMDAwMDAgbiAKMDAwMDAzMjE4MCAwMDAwMCBuIAowMDAwMDMyMjEwIDAwMDAwIG4gCjAw MDAwMzAxMTIgMDAwMDAgbiAKMDAwMDAyMzkyNiAwMDAwMCBuIAowMDAwMDI0OTE5IDAwMDAwIG4g CjAwMDAwMzIyNDEgMDAwMDAgbiAKMDAwMDAzMjI3MiAwMDAwMCBuIAowMDAwMDMwMjc4IDAwMDAw IG4gCjAwMDAwMjQ5NDAgMDAwMDAgbiAKMDAwMDAyNTg4NiAwMDAwMCBuIAowMDAwMDMyMzAzIDAw MDAwIG4gCjAwMDAwMzIzMzQgMDAwMDAgbiAKMDAwMDAzMDQ0NCAwMDAwMCBuIAowMDAwMDI1OTA3 IDAwMDAwIG4gCjAwMDAwMjY1MjEgMDAwMDAgbiAKMDAwMDAzMjM2NSAwMDAwMCBuIAowMDAwMDMy Mzk2IDAwMDAwIG4gCjAwMDAwMzA2MTAgMDAwMDAgbiAKMDAwMDAyNjU0MiAwMDAwMCBuIAowMDAw MDI3MDE1IDAwMDAwIG4gCjAwMDAwMzI0MjcgMDAwMDAgbiAKMDAwMDAzMjQ1OCAwMDAwMCBuIAow MDAwMDMyNTUxIDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgMTIyIC9Sb290IDEgMCBSIC9JbmZv IDIgMCBSCi9JRCBbPEEzODI1OTgzMEUxMDhBMkY2MDk4QjNFNDg1MDVCNUQwPjxBMzgyNTk4MzBF MTA4QTJGNjA5OEIzRTQ4NTA1QjVEMD5dCj4+CnN0YXJ0eHJlZgozNDE2MgolJUVPRgo= ------=_NextPart_000_0028_01D13A9A.3B2DD8D0-- From nobody Sat Dec 19 23:39:35 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1FE71B2A60 for ; Sat, 19 Dec 2015 23:39:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.701 X-Spam-Level: X-Spam-Status: No, score=0.701 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kgtk-TxVEIDW for ; Sat, 19 Dec 2015 23:39:30 -0800 (PST) Received: from mail-lf0-x231.google.com (mail-lf0-x231.google.com [IPv6:2a00:1450:4010:c07::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 292CE1B2A5F for ; Sat, 19 Dec 2015 23:39:30 -0800 (PST) Received: by mail-lf0-x231.google.com with SMTP id p203so95952285lfa.0 for ; Sat, 19 Dec 2015 23:39:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=OYK9qAsXDIPVaSYpalFQxYPGmu8cd5OdUW1C2lHi5EE=; b=HNhKekrY/xSEu3oN/o3g6e+chdwhAf/lHT98Ud7Ox9MhvKugXJo+zLgfE78o05WjQx O0AuPtAkfgWu09+1ZlArIsR0DhgG0nUxNqidjBsjhnUSFEEN53rGSxaZ2/wxzEX5Jr8O Zhn4AG7+Lx2CSYDrxrOEDKeNrIJ603EOvYYlFxjsbnM78bhi9P1G1xqTGhE5XuiKDHu2 h8J5Ky5+il2szsHboCbFHNVF5/X1rP95KhbPYSJggbEP9xjN9pLb0zQtCN+9nwpOzNvo RSBax/19K7nl0y06cNxfTChSX9IQczuQok/HbG74iQXSv9FA6N1LlV7GE42JqtsPcLgn UT8g== MIME-Version: 1.0 X-Received: by 10.25.156.73 with SMTP id f70mr4420402lfe.70.1450597168300; Sat, 19 Dec 2015 23:39:28 -0800 (PST) Received: by 10.25.143.206 with HTTP; Sat, 19 Dec 2015 23:39:28 -0800 (PST) Date: Sat, 19 Dec 2015 23:39:28 -0800 Message-ID: From: John Strassner To: i2nsf@ietf.org Content-Type: multipart/alternative; boundary=001a114017c6edce7905274f78ac Archived-At: Subject: [I2nsf] Post 3: Differentiating between Groups and Roles X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Dec 2015 07:39:34 -0000 --001a114017c6edce7905274f78ac Content-Type: text/plain; charset=UTF-8 During IETF94, I expressed discomfort with the "Subject-Object-Action-Function" paradigm. This note defines and differentiates between the concepts of groups and roles. 1. Motivation There are several places in draft-merged-i2nsf-framework-04 that treat groups and roles as the same. I feel that this is incorrect. For example: "However, the notion of Groups (or roles), ..." "Composite Groups or Roles (I2NSF-Role)...This is a group of..." There are also places where role is used (correctly imho) but which contradict the implied equivalence of groups and roles, such as: "to reflect the different roles that each vNSF is designated for" 2. Definitions The mathematical treatment of groups is important, as it more clearly differentiates groups from roles. 2.1. Group A group is a set of elements. Mathematically, a group G is defined with an operation O. When O is applied to any two elements of the group, a and b, the result is a third element c, that is part of G. More specifically, G and O must satisfy the following four axioms: - Closure: For all a, b in G, a O b is also in G - Associativity: For all a, b, c in G, (a O b) O c = a O (b O c) - Identity: There exists an element e in G such that e O a = a O e = a - Inverse: For any element a in G, there exists an element b in G, such that a O b = b O a = e (the identity element) 2.2. Role In software engineering, a role is defined as a responsibility that an object has. Since a responsibility may be complex, the responsibility is represented as an object. This has the additional advantage of making it reusable. For example, in a business, it is common to group people into a number of different roles. A role may be restricted by context (e.g., by time, location, or other factors). An object may be able to combine roles (technically called a role combination), such as an EmployeeRole AND a SupportDeskRole AND a ManagerRole. If this is done, then it is important to ensure that the responsibilities of the roles in the role-combination do not conflict with each other (e.g., if an Employee submits a travel document for reimbursement, then that same Employee MUST NOT be able to sign the same document; more formally, this is called separation of privileges, and the Principle of Least Privilege is often a cornerstone of security implementations [2]). 2.3. Role-Object Pattern This is a fundamental design pattern, and is described more thoroughly in [1]. Its purpose is to adapt an object O to the needs of different clients through a set of transparently attached role objects R. In this approach, each role object R represents a role that O has to play in that particular client's context. The key feature in this simple design pattern is the use of **context**. For example, a user may have multiple roles (i.e., responsibilities) assigned, such as an engineer and a manager. Each role may have different permissions, and in general, roles may or may not be allowed to be used concurrently. This pattern models context-specific functionality of an object O as a set of role objects R that can be dynamically attached to, and removed from, the object O. This allows the combination of O and R to be viewed as an **aggregate object** that represents **one** logical object (even though it consists of multiple separate objects). In UML, this is represented as an **aggregation**. Visually, the pattern looks like this: +--------+ HasRoles +------+ | Object |<>---------->| Role | +--------+1..1 0..n+------+ where the HasRoles relationship is an aggregation. Its multiplicity means that an Object may have zero or more Roles, but each Role is defines for that particular object. In this design, the Role class is subclassed to define the different types of Roles that this object can play. The aggregation then enables zero or more of these roles to be selected based on context. 3. Why Group Is NOT The Same As Role Looking at the definitions above, a Group is "just" a set. Furthermore, there are specific properties of a Group that guarantee a set of behaviors that characterize group operation. In stark contrast, a Role has nothing to do with sets. A role represents a single responsibility that the object has. Roles are, of course, related to the object that aggregates them, but the concepts of closure, identity, and inverse are not applicable. More importantly, the concept of associativity is NOT true, as this can lead to privilege violation. 4. Using Groups and Roles Since these are different concepts, they can be easily combined. Consider the following UML diagram: +----------------------+ | PersonOrOrganization | +----------+-----------+ / \ I I +--------+-------------------+ I I I I +-------+------+ HasPeople +------+-------+ | |<>----------->| | | Organization | | Person | | | | | +---+------+---+ +--+--------+--+ I / \ / \ I I \ / \ / I I | | I Org | | Person Subclasses | | Subclasses | | \ / \ / +-----+---+ +-----+------+ | OrgRole | | PersonRole | +---------+ +------------+ The above figure shows: 1) An organization with a set of subclasses 2) A Person with its own set of subclasses 3) An Organization with an aggregation of OrgRole subclasses 4) A person with an aggregation of PersonRole subclasses 5) An aggregation, enabling an Organization to aggregate People Hence, any of the Organization subclasses can have its own Role or Role Combination, and any of the Person classes can have their own separate Role or Role Combination. 5. References [1] Riehle, D., "Composite Design Patterns", Proceedings of the 1997 Conference on Object-Oriented Programming Systems, Languages and Applications (OOPSLA '97), ACM Press, 1997. Page 218-228 [2] http://csrc.nist.gov/groups/SNS/rbac/standards.html regards, John --001a114017c6edce7905274f78ac Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
    During IETF94, I expressed discomfort with the "= Subject-Object-Action-Function" paradigm. This note defines and differ= entiates between the concepts of groups and roles.

    1.=C2=A0 Motivation

    There are several places in d= raft-merged-i2nsf-framework-04 that treat groups and roles as the same. I f= eel that this is incorrect. For example:

    =C2= =A0=C2=A0 "However, the notion of Groups (or roles), ..."
    =C2= =A0=C2=A0 "Composite Groups or Roles (I2NSF-Role)...This is a group of= ..."

    There are also places where role is used (correctly imho) b= ut which contradict the implied equivalence of groups and roles, such as:
    =C2=A0=C2=A0 "to reflect the different roles that each vNSF is d= esignated for"

    2.=C2=A0 Definitions
    The mathematical treatment of groups is important, as it more c= learly differentiates groups from roles.

    2.1.=C2= =A0 Group

    A group is a set of elements.

    Ma= thematically, a group G is defined with an operation O. When O is applied t= o any two elements of the group, a and b, the result is a third element c, = that is part of G. More specifically, G and O must satisfy the following fo= ur axioms:

    =C2=A0=C2=A0 - Closure:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 =C2=A0For all a, b in G, a O b is also in G
    =C2=A0=C2=A0 - Associati= vity: For all a, b, c in G, (a O b) O c =3D a O (b O c)
    =C2=A0=C2=A0 - I= dentity:=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0 =C2=A0There exists an element e in = G such that e O a =3D a O e =3D a
    =C2=A0=C2=A0 - Inverse:=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0For any element a in G, there exi= sts an element b in G,
    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 such that a O b =3D b O a =3D e (the iden= tity element)

    2.2.=C2=A0 Role

    =
    In software engineering, a role is defined as a responsibility that an= object has. Since a responsibility may be complex, the responsibility is r= epresented as an object. This has the additional advantage of making it reu= sable.

    For example, in a business, it is common to= group people into a number of different roles. A role may be restricted by= context (e.g., by time, location, or other factors). An object may be able= to combine roles (technically called a role combination), such as an Emplo= yeeRole AND a SupportDeskRole AND a ManagerRole. If this is done, then it i= s important to ensure that the responsibilities of the roles in the role-co= mbination do not conflict with each other (e.g., if an Employee submits a t= ravel document for reimbursement, then that same Employee MUST NOT be able = to sign the same document; more formally, this is called separation of priv= ileges, and the Principle of Least Privilege is often a cornerstone of secu= rity implementations [2]).

    2.3.=C2=A0 Role-Object = Pattern

    This is a fundamental design pattern, and = is described more thoroughly in [1]. Its purpose is to adapt an object O to= the needs of different clients through a set of transparently attached rol= e objects R. In this approach, each role object R represents a role that O = has to play in that particular client's context.

    The key feature in this simple design pattern is the use of **context**.= For example, a user may have multiple roles (i.e., responsibilities) assig= ned, such as an engineer and a manager. Each role may have different permis= sions, and in general, roles may or may not be allowed to be used=C2=A0conc= urrently. This pattern models context-specific functionality of an object O= as a set of role objects R that can be dynamically attached to, and remove= d from, the object O. This allows the combination of O and R to be viewed a= s an **aggregate object** that represents **one** logical object (even thou= gh it consists of multiple separate objects). In UML, this is represented a= s an **aggregation**.

    Visually, the pattern looks = like this:

    =C2=A0 +--------+=C2=A0=C2=A0 HasRoles=C2=A0 +----= --+
    =C2=A0 | Object |<>---------->| Role |
    =C2=A0 +--------+1..1=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= 0..n+------+

    <= div>where the HasRoles relationsh= ip is an aggregation. Its multiplicity means that an Object may have zero o= r more Roles, but each Role is defines for that particular object. In this = design, the Role class is subclassed to define the different types of Roles= that this object can play. The aggregation then enables zero or more of th= ese roles to be selected based on context.

    = 3.=C2=A0 Why Group Is NOT The Same As Role

    Looking= at the definitions above, a Group is "just" a set. Furthermore, = there are specific properties of a Group that guarantee a set of behaviors = that characterize group operation.

    In stark contra= st, a Role has nothing to do with sets. A role represents a single responsi= bility that the object has. Roles are, of course, related to the object tha= t aggregates them, but the concepts of closure, identity, and inverse are n= ot applicable. More importantly, the concept of associativity is NOT true, = as this can lead to privilege violation.

    4. Using = Groups and Roles

    Since these are different concept= s, they can be easily combined. Consider the following UML diagram:

    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0+------= ----------------+
    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0| Pers= onOrOrganization |
    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0+----= ------+-----------+
    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 / \
    =C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 I
    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 I
    =C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 +--------+-------------------+=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 I=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 I
    = =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0I=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= I
    =C2=A0 +-------+------+=C2=A0=C2=A0 HasPeople=C2=A0 +------+-------+<= br>=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 =C2=A0|<>----------->|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |
    =C2=A0 | Organization |= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0|=C2=A0=C2=A0=C2=A0 Person=C2=A0=C2=A0=C2=A0 |
    =C2=A0 |=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 =C2=A0|
    =C2=A0 +---+------+---+=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 +--+--------+--+
    =C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 I=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0/ \=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0/ \=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 I
    =C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 I=C2=A0=C2=A0=C2=A0=C2=A0 \ /=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0 \ /=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 I
    =C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0I=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0I
    = =C2=A0=C2=A0=C2=A0=C2=A0 Org=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0 Person
    =C2=A0 Subclas= ses=C2=A0|=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0 Sub= classes
    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|
    =C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 \ /=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 \ /
    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 +-----= +---+=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 +-----+--= ----+
    =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | OrgRole |=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0| PersonRole |
    =C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 +---------+=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0 +------------+

    The above figure shows:

    =C2=A0=C2=A0 1= ) An organization with a set of subclasses
    =C2=A0=C2=A0 2) A Pers= on with its own set of subclasses
    =C2=A0=C2=A0 3) An Organization= with an aggregation of OrgRole subclasses
    =C2=A0=C2=A0 4) A pers= on with an aggregation of PersonRole subclasses
    =C2=A0=C2=A0 5) A= n aggregation, enabling an Organization to aggregate People
    <= br clear=3D"all">Hence, any of the Organization subclasses can have its own= Role or Role Combination, and any of the Person classes can have their own= separate Role or Role Combination.


    5. Referen= ces

    [1]=C2=A0 Riehle, D., "Composite Design P= atterns", Proceedings=C2=A0 of the 1997=C2=A0
    =C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0Conference on Object-Oriented Programming Systems, = Languages and
    =C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0Applications (OOPSLA= '97), ACM Press, 1997. Page 218-228


    regards,
    John
    --001a114017c6edce7905274f78ac-- From nobody Sun Dec 20 06:59:48 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1A291B2E02 for ; Sun, 20 Dec 2015 06:59:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -96.354 X-Spam-Level: X-Spam-Status: No, score=-96.354 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DOS_OUTLOOK_TO_MX=2.845, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WxYXTP7KShl3 for ; Sun, 20 Dec 2015 06:59:44 -0800 (PST) Received: from hickoryhill-consulting.com (hhc-web3.hickoryhill-consulting.com [64.9.205.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6AA1F1B2DFF for ; Sun, 20 Dec 2015 06:59:44 -0800 (PST) X-Default-Received-SPF: pass (skip=loggedin (res=PASS)) x-ip-name=74.43.47.177; From: "Susan Hares" To: Date: Sun, 20 Dec 2015 09:59:19 -0500 Message-ID: <003101d13b37$0170e130$0452a390$@ndzh.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0032_01D13B0D.189DE670" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdE7MSyxjjCZjg61REiRUTMbA3u1Mw== Content-Language: en-us X-Authenticated-User: skh@ndzh.com Archived-At: Cc: adrian@olddog.co.uk, 'Kathleen Moriarty' , 'Linda Dunbar' Subject: [I2nsf] Things WG asked the problem-statement Use Case to cover X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Dec 2015 14:59:47 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0032_01D13B0D.189DE670 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi all: Based on the number of vacation responses I received when I sent email last night, I suspect that many of you are on vacation or starting your vacation early in the week. I wish all a joyous, safe, and peaceful Christmas and New Year. Based on the fact many of you are on vacation, I uploaded a merge of the problem statements and the use cases in draft-hares-i2nsf-merged-problem-use-cases. This combination of problem and use cases provides a good summary of the terrific work people have done. In contrast, gap analysis provides substantial background. The authors ask the I2NSF WG to adopt this document. As part of the adoption process, the authors would like the WG to consider whether the authors covered the following issues suggested at IETF below: 1. New standardized APIs (e.g. RESTful APIs) and capabilities are needed (Ed Lopez) 2. Standardized Capabilities and Interface should enable Policy Validation (LuYung Fang) and Policy verification (John Strassner), Policy combinations (Diego Lopez), Policy comparison with customer's security intent (or customer security expectations). 3. Standardized Capabilities and Interfaces should enable security orchestration. (Dobbins) Should add additional detail to cover the following things: 1. For Cloud Providers, there are virtual security functions within my cloud, there are also virtual security function services that cloud providers provide to their client. Virtual Security Functions vs cloud provider: I hope we cover both including cloud-based security service. I.e. security for cloud and security provided by cloud (LuYuan Fang) 2. Sensitive data going into hosted environments connected to the Internet (not public clouds) (Kathleen Moriarty) 3. Use of Stateful filters (Dean Bogdanovic), details on what use case requires these filters (Jamal), and what happens when stateful filters cannot be supported (Jamal). 4. Security policy that covers Symmetric vs asynchronous nature of the data. Sue Hares and co-authors. ------=_NextPart_000_0032_01D13B0D.189DE670 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

    Hi all: =

     

    Based on the number of vacation responses I received = when I sent email last night, I suspect that many of you are on vacation = or starting your vacation early in the week.  

    I wish all a joyous, safe, and peaceful Christmas and = New Year.

     

    Based on the fact many of you are on vacation, I = uploaded a merge of the problem statements and the use cases in = draft-hares-i2nsf-merged-problem-use-cases.  This combination of = problem and use cases provides a good summary of the terrific work = people have done.  In contrast, gap analysis provides substantial = background.  

     

    The authors = ask the I2NSF WG to adopt this document.  

     

    As part of = the adoption process, the authors would like the WG to consider whether = the authors covered the following issues suggested at IETF below: =  

     

    1.       New = standardized APIs (e.g. RESTful APIs) and capabilities are needed  =  

    (Ed Lopez) =

     

    2.       = Standardized Capabilities and Interface should = enable Policy Validation (LuYung Fang) and Policy verification (John = Strassner), Policy combinations (Diego Lopez), Policy comparison with = customer’s security intent (or customer security = expectations).   

     

    3.       = Standardized Capabilities and Interfaces should = enable security orchestration. (Dobbins)

     

    Should add = additional detail to cover the following things:

      

    1.       For = Cloud Providers, there are virtual security functions within my cloud, = there are also virtual security function services that cloud providers = provide to their client. Virtual Security Functions vs cloud provider: I = hope we cover both including cloud-based security service. I.e. security = for cloud and security provided by cloud (LuYuan Fang)

    2.       = Sensitive  data going into hosted = environments connected to the Internet (not public clouds) (Kathleen = Moriarty)

     

    3.       Use = of Stateful filters (Dean Bogdanovic),  details on what use case = requires these filters (Jamal), and  what happens when stateful = filters cannot be supported (Jamal). 

     

    4.       = Security policy that covers Symmetric vs = asynchronous nature of the data.

     

    Sue Hares = and co-authors.

    ------=_NextPart_000_0032_01D13B0D.189DE670-- From nobody Sun Dec 20 07:44:32 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 264341B2E42 for ; Sun, 20 Dec 2015 07:44:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -99.055 X-Spam-Level: X-Spam-Status: No, score=-99.055 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=2.845, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HSxtt4FKA7p6 for ; Sun, 20 Dec 2015 07:44:30 -0800 (PST) Received: from hickoryhill-consulting.com (hhc-web3.hickoryhill-consulting.com [64.9.205.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4B101B2E41 for ; Sun, 20 Dec 2015 07:44:29 -0800 (PST) X-Default-Received-SPF: pass (skip=loggedin (res=PASS)) x-ip-name=74.43.47.177; From: "Susan Hares" To: References: <20151220153007.26763.51265.idtracker@ietfa.amsl.com> In-Reply-To: <20151220153007.26763.51265.idtracker@ietfa.amsl.com> Date: Sun, 20 Dec 2015 10:44:08 -0500 Message-ID: <001201d13b3d$443346b0$cc99d410$@ndzh.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQH5yy6f7UD2g5WvTVaZS/6V1FY1KZ6C4ELg Content-Language: en-us X-Authenticated-User: skh@ndzh.com Archived-At: Cc: 'Robert Moskowitz' , 'Linda Dunbar' Subject: [I2nsf] FW: New Version Notification for draft-hares-i2nsf-gap-analysis-01.txt X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Dec 2015 15:44:31 -0000 I2NSF WG and chairs:=20 We have posted an updated copy of the gap analysis for I2NSF = (https://datatracker.ietf.org/doc/draft-hares-i2nsf-gap-analysis/) . = This document covers IETF WG (summary in section 2, details in section = 5), ETSI (section 3), OPNFV (section 4), Open Stack (section 5), and CSA = (section 6).=20 The authors have received feedback that this document provides good = background material. We request the chairs do a WG adoption call for = this document.=20 During the WG adoption discussions, we would like feedback on the = document as a background document. Is there a section we should add? = Should we delete any sections? The ETSI, OPNFV, Open Stack, and CSA = sections capture the work as of June 2015. Our intent is to update = these sections to current standards. Is this valuable to the I2NSF WG = to have a living document that provides background for people who enter = this work?=20 Sue Hares, Bob Moskowitz, Linda Dunbar, Dacheng Zhang, and Hosnieh = Rafiee -----Original Message----- From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org]=20 Sent: Sunday, December 20, 2015 10:30 AM To: Bob Moskowitz; Susan Hares; Dacheng Zhang; Robert Moskowitz; = Hosnieh; Hosnieh Rafiee Subject: New Version Notification for = draft-hares-i2nsf-gap-analysis-01.txt A new version of I-D, draft-hares-i2nsf-gap-analysis-01.txt has been successfully submitted by Susan Hares and posted to the IETF = repository. Name: draft-hares-i2nsf-gap-analysis Revision: 01 Title: Analysis of Existing work for I2NSF Document date: 2015-12-20 Group: Individual Submission Pages: 44 URL: = https://www.ietf.org/internet-drafts/draft-hares-i2nsf-gap-analysis-01.tx= t Status: = https://datatracker.ietf.org/doc/draft-hares-i2nsf-gap-analysis/ Htmlized: = https://tools.ietf.org/html/draft-hares-i2nsf-gap-analysis-01 Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-hares-i2nsf-gap-analysis-01 Abstract: This document analyzes the status of the arts in industries and the existing IETF work/protocols that are relevant to the Interface to Network Security Function (I2NSF). The I2NSF focus is to define data models and interfaces in order to control and monitor the physical and virtual aspects of network security functions. = =20 Please note that it may take a couple of minutes from the time of = submission until the htmlized version and diff are available at = tools.ietf.org. The IETF Secretariat From nobody Mon Dec 21 07:06:33 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B0A111ACE9D for ; Sat, 19 Dec 2015 17:11:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -95.754 X-Spam-Level: X-Spam-Status: No, score=-95.754 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DOS_OUTLOOK_TO_MX=2.845, HTML_MESSAGE=0.001, J_CHICKENPOX_37=0.6, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x1cWnepEvhQL for ; Sat, 19 Dec 2015 17:11:39 -0800 (PST) Received: from hickoryhill-consulting.com (hhc-web3.hickoryhill-consulting.com [64.9.205.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 653151ACE9C for ; Sat, 19 Dec 2015 17:11:38 -0800 (PST) X-Default-Received-SPF: pass (skip=loggedin (res=PASS)) x-ip-name=74.43.47.177; From: "Susan Hares" To: Date: Sat, 19 Dec 2015 20:10:42 -0500 Message-ID: <000f01d13ac3$3fcfed00$bf6fc700$@ndzh.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0010_01D13A99.56FCF240" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdE6wqg7R0wiIKDASrmJ0etjnqhjeQ== Content-Language: en-us X-Authenticated-User: skh@ndzh.com Archived-At: X-Mailman-Approved-At: Mon, 21 Dec 2015 07:06:32 -0800 Cc: ldunbar@huawei.com, diego.r.lopez@telefonica.com, antonio.pastorperales@telefonica.com, shaibalc@us-ignite.org, 'Kathleen Moriarty' , N.Leymann@telekom.de, myo.zarny@gs.com, Christian.jacquenet@orange.com, michaelq@prime-tel.com, adrian@olddog.co.uk, mohamed.boucadair@orange.com Subject: [I2nsf] Merged I2NSF problem statement and Use Case - draft-hares X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Dec 2015 01:11:51 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0010_01D13A99.56FCF240 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0011_01D13A99.56FCF240" ------=_NextPart_001_0011_01D13A99.56FCF240 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I2NSF folks and my co-authors: I have merged all the changes you suggested into Linda's problem statement and combined this with the use cases. Please let me know if you have any concerns or changes to the resulting document. If anyone was left off the Contributors section, would you please let me know. This document is the combination of lots of people's hard work. I will upload it as draft-hares-merged-i2nsf-problem-use-cases-00.txt along with the XML on Sunday evening (12/20/2015) and then ask for WG adoption. I'll watch for comments in the next few weeks and revise the text. Does I2NSF have a github repository? If so, we can put the XML there to change it. Sue Hares ------=_NextPart_001_0011_01D13A99.56FCF240 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

    I2NSF = folks and my co-authors:

     

    I have = merged all the changes you suggested into Linda’s problem = statement and combined this with the use cases.  Please let me know = if you have any concerns or changes to the resulting document.  =  

     

    If anyone was left off the Contributors section, would = you please let me know.  This document is the combination of lots = of people’s hard work.  I will upload it as =  draft-hares-merged-i2nsf-problem-use-cases-00.txt along with the = XML on Sunday evening (12/20/2015) and then ask for WG adoption. =   I’ll watch for comments in the next few weeks and = revise the text.

     

    Does I2NSF = have a github repository?  If so, we can put the XML there to = change it.

     

    Sue Hares

     

    ------=_NextPart_001_0011_01D13A99.56FCF240-- ------=_NextPart_000_0010_01D13A99.56FCF240 Content-Type: text/plain; name="draft-hares-merged-i2nsf-problem-use-cases-00.txt" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="draft-hares-merged-i2nsf-problem-use-cases-00.txt" =0A= =0A= =0A= =0A= I2NSF BOF S. Hares=0A= Internet-Draft L. Dunbar=0A= Intended status: Standards Track Huawei=0A= Expires: June 21, 2016 A. Pastor=0A= D. Lopez=0A= Telefonica I+D=0A= M. Zarny=0A= Goldman Sachs=0A= N. Leymann=0A= Deutsche Telekom=0A= M. Georgiades=0A= Prime Tel=0A= M. Qi=0A= China Mobile=0A= M. Boucadair=0A= C. Jacquenet=0A= France Telecom=0A= S. Chakrabarty=0A= US Ignite=0A= December 19, 2015=0A= =0A= =0A= I2NSF Problem Statement and Use cases=0A= draft-hares-merged-i2nsf-problem-use-cases-00.txt=0A= =0A= Abstract=0A= =0A= This document describes the problem statement for Interface to=0A= Network Security Functions (I2NSF) and summary of the I2NSF use=0A= cases.=0A= =0A= Status of This Memo=0A= =0A= This Internet-Draft is submitted in full conformance with the=0A= provisions of BCP 78 and BCP 79.=0A= =0A= Internet-Drafts are working documents of the Internet Engineering=0A= Task Force (IETF). Note that other groups may also distribute=0A= working documents as Internet-Drafts. The list of current Internet-=0A= Drafts is at http://datatracker.ietf.org/drafts/current/.=0A= =0A= Internet-Drafts are draft documents valid for a maximum of six months=0A= and may be updated, replaced, or obsoleted by other documents at any=0A= time. It is inappropriate to use Internet-Drafts as reference=0A= material or to cite them other than as "work in progress."=0A= =0A= This Internet-Draft will expire on June 21, 2016.=0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 1]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Copyright Notice=0A= =0A= Copyright (c) 2015 IETF Trust and the persons identified as the=0A= document authors. All rights reserved.=0A= =0A= This document is subject to BCP 78 and the IETF Trust's Legal=0A= Provisions Relating to IETF Documents=0A= (http://trustee.ietf.org/license-info) in effect on the date of=0A= publication of this document. Please review these documents=0A= carefully, as they describe your rights and restrictions with respect=0A= to this document. Code Components extracted from this document must=0A= include Simplified BSD License text as described in Section 4.e of=0A= the Trust Legal Provisions and are provided without warranty as=0A= described in the Simplified BSD License.=0A= =0A= Table of Contents=0A= =0A= 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3=0A= 2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 4=0A= 3. Problem Space . . . . . . . . . . . . . . . . . . . . . . . . 5=0A= 3.1. Facing Security Service Providers . . . . . . . . . . . . 5=0A= 3.1.1. Diverse Types of Security Functions . . . . . . . . . 5=0A= 3.1.2. Diverse Interfaces to Control NSFS . . . . . . . . . 6=0A= 3.1.3. Diverse Interface to monitor the behavior of NSFs . . 7=0A= 3.1.4. More Distributed NSFs and vNSFs . . . . . . . . . . . 7=0A= 3.1.5. More Demand to Control NSFs Dynamically . . . . . . . 7=0A= 3.1.6. Demand for multi-tenancy to control and monitor NSFs 7=0A= 3.1.7. Lack of Characterization of NSFs and Capability=0A= Exchange . . . . . . . . . . . . . . . . . . . . . . 7=0A= 3.1.8. Lack of mechanism for NSFs to utilize external=0A= profiles . . . . . . . . . . . . . . . . . . . . . . 8=0A= 3.1.9. Lack of Lack of Mechanisms to accept external alerts=0A= to trigger automatic configuration changes . . . . . 8=0A= 3.1.10. Lack of mechanism for dynamic key distribution to=0A= NSFs . . . . . . . . . . . . . . . . . . . . . . . . 9=0A= 3.2. Challenges Facing Customers . . . . . . . . . . . . . . . 10=0A= 3.2.1. NSFs from Heterogeneous Administrative Domains . . . 10=0A= 3.2.2. Today's Control Requests are Vendor Specific . . . . 11=0A= 3.2.3. Difficulty to Monitor the Execution of Desired=0A= Policies . . . . . . . . . . . . . . . . . . . . . . 12=0A= 3.3. Difficulty to Validate Policies across Multiple Domains . 13=0A= 3.4. Lack of Standard Interface to Inject Feedback to NSF . . 13=0A= 3.5. Lack of Standard Interface for Capability Negotiation . . 13=0A= 4. Use Cases . . . . . . . . . . . . . . . . . . . . . . . . . . 14=0A= 4.1. General Use Cases . . . . . . . . . . . . . . . . . . . . 14=0A= 4.2. Access Networks . . . . . . . . . . . . . . . . . . . . . 15=0A= 4.3. Cloud Datacenter Scenario . . . . . . . . . . . . . . . . 17=0A= 4.3.1. On-Demand Virtual Firewall Deployment . . . . . . . . 17=0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 2]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= 4.3.2. Firewall Policy Deployment Automation . . . . . . . . 18=0A= 4.3.3. Client-Specific Security Policy in Cloud VPNs . . . . 18=0A= 4.3.4. Internal network monitoring . . . . . . . . . . . . . 19=0A= 5. Management Considerations . . . . . . . . . . . . . . . . . . 19=0A= 6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 19=0A= 7. Security Considerations . . . . . . . . . . . . . . . . . . . 19=0A= 8. Contributors . . . . . . . . . . . . . . . . . . . . . . . . 19=0A= 9. References . . . . . . . . . . . . . . . . . . . . . . . . . 19=0A= 9.1. Normative References . . . . . . . . . . . . . . . . . . 19=0A= 9.2. Informative References . . . . . . . . . . . . . . . . . 20=0A= Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 21=0A= =0A= 1. Introduction=0A= =0A= This document describes the problem statement for Interface to=0A= Network Security Functions (I2NSF) and summary of the I2NSF use=0A= cases. A summary of the I2NSF state of the art in the industries and=0A= IETF which is relevant to I2NSF work is contained in=0A= [I-D.hares-i2nsf-gap-analysis].=0A= =0A= The growing challenges and complexity in maintaining a secure=0A= infrastructure, complying with regulatory requirements, and=0A= controlling costs are enticing enterprises into consuming network=0A= security functions hosted by service providers. The hosted security=0A= service is especially attractive to small and medium size enterprises=0A= who suffer from a lack of security experts to continuously monitor,=0A= acquire new skills and propose immediate mitigations to ever=0A= increasing sets of security attacks.=0A= =0A= According to [Gartner-2013], the demand for hosted (or cloud-based)=0A= security services is growing. Small and medium-sized businesses=0A= (SMBs) are increasingly adopting cloud-based security services to=0A= replace on-premises security tools, while larger enterprises are=0A= deploying a mix of traditional and cloud-based security services.=0A= =0A= To meet the demand, more and more service providers are providing=0A= hosted security solutions to deliver cost-effective managed security=0A= services to enterprise customers. The hosted security services are=0A= primarily targeted at enterprises (especially small/medium ones), but=0A= could also be provided to any kind of mass-market customer. As the=0A= result, the Network security functions (NSFs) are provided and=0A= consumed in increasingly diverse environments. Users of NSFs may=0A= consume network security services hosted by one or more providers,=0A= which may be their own enterprise, service providers, or a=0A= combination of both. This document also briefly describes the=0A= following use cases summarized by=0A= [I-D.pastor-i2nsf-merged-use-cases]:=0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 3]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= o [I-D.pastor-i2nsf-access-usecases] (I2NSF-Access),=0A= =0A= o [I-D.zarny-i2nsf-data-center-use-cases](I2NSF-DC), and=0A= =0A= o [I-D.qi-i2nsf-access-network-usecase] (I2NSF-Mobile).=0A= =0A= 2. Terminology=0A= =0A= ACL: Access Control List=0A= =0A= B2B: Business-to-Business=0A= =0A= Bespoke: Something made to fit a particular person, client or=0A= company.=0A= =0A= Bespoke security management: Security management which is make to=0A= fit a particular customer.=0A= =0A= DC: Data Center=0A= =0A= FW: Firewall=0A= =0A= IDS: Intrusion Detection System=0A= =0A= IPS: Intrusion Protection System=0A= =0A= NSF: Network security function. An NSF is a function that that=0A= detects unwanted activity and blocks/mitigates the effect of such=0A= unwanted activity in order to support availability of a network.=0A= In addition, the NSF can help in supporting communication stream=0A= integrity and confidentiality.=0A= =0A= Flow-based NSF: A NSF which inspects network flows according to a=0A= policy intended for enforcing security properties. Flow based=0A= security also means that packets are inspected in the order they=0A= are received, and without modification to the packet due to the=0A= inspection process (MAC rewrites, TTL decrement action, or NAT=0A= inspection or changes).=0A= =0A= Virtual NSF: A NSF which is deployed as a distributed virtual=0A= device.=0A= =0A= VNFPool: Pool of Virtual Network Functions.=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 4]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= 3. Problem Space=0A= =0A= The following sub-section describe the problems and challenges facing=0A= customers and security service providers when some or all of the=0A= security functions are no longer physical hosted by the customer's=0A= administrative domain.=0A= =0A= Security service providers can be internal to the company or external=0A= security service providers. For example, an internal IT Security=0A= group within a large enterprise could act as a security service=0A= provider for the enterprise. In contrast, an enterprise could=0A= outsource all security services to an external security service=0A= provider in a global service provider. In document, the security=0A= service provider function whether it is internal or external, will be=0A= denoted as "service provider".=0A= =0A= The "Customer-Provider" relationship may be between any two parties.=0A= The parties can be in different firms or different domains of the=0A= same firm. Contractual agreements may be required in such contexts=0A= to formally document the customer's security requirements and the=0A= provider's guarantees to fulfill those requirements. Such agreements=0A= may detail protection levels, escalation procedure, alarms reporting,=0A= etc. There is currently no standard mechanism to capture those=0A= requirements.=0A= =0A= A service provider may be a customer of another service provider.=0A= =0A= 3.1. Facing Security Service Providers=0A= =0A= 3.1.1. Diverse Types of Security Functions=0A= =0A= There are many types of NSFs. NSFs by different vendors can have=0A= different features and have different interfaces. NSFs can be=0A= deployed in multiple locations in a given network, and perhaps have=0A= different roles.=0A= =0A= Below are a few examples of security functions and locations or=0A= contexts in which they are often deployed:=0A= =0A= External Intrusion and Attack Protection: Examples of this function=0A= are firewall/ACL authentication, IPS, IDS, and endpoint=0A= protection.=0A= =0A= Security Functions in a DMZ: Examples of this function are=0A= firewall/ACLs, IDS/IPS, authentication and authorization services,=0A= NAT, forwarding proxies, application, and AAA services. These=0A= functions may be physically on-premise in a server provider's=0A= network at the DMZ spots or at "virtual" DMZ.=0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 5]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Internal Security Analysis and Reporting: Examples of this function=0A= are security logs, event correlation, and forensic analysis.=0A= =0A= Internal Data and Content Protection: Examples of this function are=0A= encryption, authorization, and public/private key management for=0A= internal database.=0A= =0A= Given the diversity of security functions, the contexts in which=0A= these functions can be deployed, and the constant evolution of these=0A= functions, standardizing all aspects of security functions is=0A= challenging, and most probably not feasible. Fortunately, it is not=0A= necessary to standardize all aspects. For example, from an I2NSF=0A= perspective, there is no need to standardize on how a firewall=0A= filters are created or applied.=0A= =0A= What is needed is having a standardized interface to control and=0A= monitor the rule sets that NSFs use to treat packets traversing=0A= through. And standardizing interfaces will provide an impetuous for=0A= standardizing established security functions.=0A= =0A= 3.1.2. Diverse Interfaces to Control NSFS=0A= =0A= To provide effective and competitive solutions and services, Security=0A= Service Providers may need to utilize multiple security functions=0A= from various vendors to enforce the security policies desired by=0A= their customers.=0A= =0A= Since no widely accepted industry standard security interfaces exists=0A= today, management of NSFs (device and policy provisioning,=0A= monitoring, etc.) tends to be bespoke security management offered by=0A= product vendors. As a result, automation of such services, if it=0A= exists at all, is also bespoke. Thus, even in the traditional way of=0A= deploying security features, there is a gap to coordinate among=0A= implementations from distinct vendors. This is the main reason why=0A= mono-vendor security functions are often deployed and enable in a=0A= particular network segment.=0A= =0A= A challenge for monitoring is that an NSF cannot monitor what it=0A= cannot view. Therefore, enabling a security function (e.g., firewall=0A= [I-D.ietf-opsawg-firewalls]) does not mean that a network is=0A= protected. As such, it is necessary to have a mechanism to monitor=0A= and provide execution status of NSFs to security and compliance=0A= management tools. There exist various network security monitoring=0A= vendor specific interfaces for forensics and troubleshooting.=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 6]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= 3.1.3. Diverse Interface to monitor the behavior of NSFs=0A= =0A= Obviously, enabling a security function (e.g., firewall=0A= [I-D.ietf-opsawg-firewalls] does not mean that a network is=0A= protected. Therefore, it is necessary to have a mechanism to monitor=0A= the execution status of NSFs.=0A= =0A= 3.1.4. More Distributed NSFs and vNSFs=0A= =0A= The security functions which are invoked to enforce a security policy=0A= can be located in different equipment and network locations.=0A= =0A= The European Telecommunications Standards Institute (ETSI) Network=0A= Function Virtualization (NFV) initiative creates new management=0A= challenges for security policies to be enforced by distributed,=0A= virtual, and network security functions (vNSF).=0A= =0A= A vNSF has higher risk of failure, migrating, and state changes as=0A= their hosting VMs being created, moved, or decommissioned.=0A= =0A= 3.1.5. More Demand to Control NSFs Dynamically=0A= =0A= In the advent of SDN (see [I-D.jeong-i2nsf-sdn-security-services]),=0A= more clients, applications or application controllers need to=0A= dynamically update their communication policies that are enforced by=0A= NSFs. The Security Service Providers have to dynamically update=0A= control requests to NSFs upon receiving the requests from their=0A= clients=0A= =0A= 3.1.6. Demand for multi-tenancy to control and monitor NSFs=0A= =0A= Service providers may require having several operational units to=0A= control and monitor the NSFs, especially when NSFs become distributed=0A= and virtualized.=0A= =0A= 3.1.7. Lack of Characterization of NSFs and Capability Exchange=0A= =0A= To offer effective security services, service providers need to=0A= activate various security functions in NSFs or vNSFs manufactured by=0A= multiple vendors. Even within one product category (e.g., firewall),=0A= security functions provided by different vendors can have different=0A= features and capabilities. For example, filters that can be designed=0A= and activated by a firewall may or may not support IPv6 depending on=0A= the firewall technology.=0A= =0A= The service provider's management system (or controller) needs a way=0A= to retrieve the capabilities of service functions by different=0A= vendors so that it could build an effective security solution. These=0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 7]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= service function capabilities can be documented in a static manner=0A= (e.g. a file) or via an interface which access a repository of=0A= security function capabilities which the NSF vendors dynamically=0A= update.=0A= =0A= A dynamic capability registration is useful for automation because=0A= security functions may be subject to software and hardware updates.=0A= These updates may have implications on the policies enforced by the=0A= NSFs.=0A= =0A= Today, there is no standard method for vendors to describe the=0A= capabilities of their security functions. Without a common technical=0A= framework to describe the capabilities of security functions, service=0A= providers cannot automate the process of selecting NSFs by different=0A= vendors to accommodate customer's requirements.=0A= =0A= 3.1.8. Lack of mechanism for NSFs to utilize external profiles=0A= =0A= Many security functions depend on signature files or profiles to=0A= perform (e.g. IPS/IDS signatures, DOTS filters). Different policies=0A= might need different signatures or profiles. Today, most black=0A= database can be win-win strategy for all parties involved. There=0A= might be Open Source provided signature/profiles (e.g. by Snort or=0A= others) in the future.=0A= =0A= There is a need to have a standard envelop (i.e. the format) to allow=0A= NSFs to use external profiles.=0A= =0A= 3.1.9. Lack of Lack of Mechanisms to accept external alerts to trigger=0A= automatic configuration changes=0A= =0A= NSF can ask the I2NSF security controller to alter network policy.=0A= For example, a DDoS alert could trigger a change to routing system to=0A= send traffic to a traffic scrubbing service to mitigate the DDoS.=0A= =0A= The DDoS protection has the following two parts: a) the configuration=0A= of signaling of open threats and b) DDoS mitigation. DOTS controller=0A= manages the signaling part of DDoS. I2NSF controller(s) would manage=0A= the changing to the network policy. By monitoring the network alerts=0A= from DDoS, I2NSF can feed a alerts analytics engine that could=0A= recognize attacks and the I2NSF can implement the needed new=0A= policies.=0A= =0A= DDoS mitigation is enhanced if the provider's network security=0A= controller can monitor, analyze, and investigate the abnormal events=0A= and provide information to the client or change the network=0A= configuration (see section x) for details on the interfaces.=0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 8]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= [I-D.zhou-i2nsf-capability-interface-monitoring] provides details on=0A= how monitoring aspects of the flow-based Network Security Functions=0A= (NSFs) can use the I2NSF interfaces to receive traffic reports and=0A= enforce policy.=0A= =0A= 3.1.10. Lack of mechanism for dynamic key distribution to NSFs=0A= =0A= There is a need for controller to distribute various keys to=0A= distributed NSFs. To distribute various keys, the keys must be=0A= created and managed. While there is many key management methods and=0A= key derivation functions (KDF), there is a lack of standard interface=0A= to provision and manage keys.=0A= =0A= The keys may be used for message authentication and integrity in=0A= order to protect data flow. In addition, keys may be used to secure=0A= the protocol and messages in the core routing infrastructure.=0A= =0A= As of now there is no much focus on an abstraction for keying=0A= information that describes the interface between protocols,=0A= operators, and automated key management.=0A= =0A= The keys may be used for message authentication and integrity in=0A= order to protect data flow. In addition, keys may be used to secure=0A= the protocol and messages in the core routing infrastructure.=0A= =0A= The ability to utilize keys when routing protocols send or receive=0A= messages will be enhanced by having an abstract key table maintained=0A= by a security services. Conceptually, there must be an interface=0A= defined for routing/signaling protocols to make requests of automated=0A= key management when it is being used, to notify the protocols when=0A= keys become available in the key table.=0A= =0A= An abstract key service needs to have three things:=0A= =0A= 1. I2NSF need to design the key table abstraction, the interface=0A= between key management protocols and routing/other protocols, and=0A= possibly security protocols at other layers.=0A= =0A= 2. For each routing/other protocol, I2NSF need to define the mapping=0A= between how the protocol represents key material and the=0A= protocol-independent key table abstraction. (If protocols share=0A= common mechanisms for authentication (e.g. TCP Authentication=0A= Option), then the same mapping may be reused.)=0A= =0A= 3. Automated Key management must support both symmetric keys and=0A= group keys via the service provided by items 1 and 2.=0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 9]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= 3.1.10.1. Background on Core Routing Security=0A= =0A= A recommendation from a workshop held by the Internet Architecture=0A= Board (IAB) held a workshop on the topic of "Unwanted Internet=0A= Traffic" [RFC4948] suggest since a "simple risk analysis" suggests an=0A= "ideal attack target of minimal cost but maximal disruption is the=0A= core routing infrastructure", it is important to "tightening the=0A= security of the core routing infrastructure". One of the ways to=0A= tighten security of the core routing infrastructure is to tighten the=0A= security of protocol packets on the wire is by protecting the=0A= messages by use of keys.=0A= =0A= Conceptually, when routing protocols send or receive messages, they=0A= might need to look up the key to use in this abstract key table.=0A= Conceptually, there must be an interface defined for a protocols to=0A= make requests of automated key management when it is being used; when=0A= keys become available, they might be made available in the key table.=0A= =0A= 3.2. Challenges Facing Customers=0A= =0A= When customers invoke hosted security services, their security=0A= policies may be enforced by a collection of security functions hosted=0A= in different domains. Customers may not have the security skills to=0A= express sufficiently precise requirements or security policies.=0A= Usually these customers express the expectations of their security=0A= requirements or the intent of their security policies. These=0A= expectations can be considered customer level security expectations.=0A= Customers may also desire to express guidelines for security=0A= management. Examples of such guidelines are the following:=0A= =0A= o Which critical communications are to be preserved during critical=0A= events (DOTS),=0A= =0A= o Which hosts are to continue service even during severe security=0A= attacks (DOTS),=0A= =0A= o Reporting of attacks to CERT (MILE),=0A= =0A= o Managing network connectivity of systems out of compliance (SACM),=0A= =0A= 3.2.1. NSFs from Heterogeneous Administrative Domains=0A= =0A= Many medium and large enterprises have deployed various on-premises=0A= security functions which they want to continue to deploy. These=0A= enterprises want to combine local security functions with remote=0A= hosted security functions to achieve more efficient and immediate=0A= counter-measures to both Internet-originated attacks and enterprise=0A= network-originated attacks.=0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 10]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Some enterprises may only need the hosted security services for their=0A= remote branch offices where minimal security infrastructures/=0A= capabilities exist. The security solution will consist of NSFs on=0A= customer networks and NSFs on service provider networks.=0A= =0A= 3.2.2. Today's Control Requests are Vendor Specific=0A= =0A= Customers may consume NSFs by multiple service providers. Customers=0A= need to express their security requirements, guidelines, and=0A= expectations to the service providers. In turn, the service=0A= providers must translate this customer information into customer=0A= security policies and associated configuration sets for the set of=0A= security functions in their network. Without a standard technical=0A= characterizations or a standard interface, the service provide faces=0A= many challenges.=0A= =0A= Due the lack of standard technical characterizations and a standard=0A= interfaces, the following problems exists:=0A= =0A= No standard technical characterization and/or APIs : Even the most=0A= common security services there is no standard technical=0A= characterization or APIs. Most security services are accessible=0A= only through disparate, proprietary interfaces (e.g., portals or=0A= APIs) in whatever format vendors choose to offer. The service=0A= provider must the customer's input to these widely varying=0A= interfaces.=0A= =0A= No standard interface: Without standard interfaces it is complex=0A= for customers to update security policies or integrate the=0A= security functions in their enterprise with the security services=0A= provided by the security service providers. This complexity is=0A= induced by the diversity of the configuration models, policy=0A= models, and supported management interfaces. Without a standard=0A= interface, new innovatitive security products find a large barrier=0A= to entry into the market=0A= =0A= Managing by scripts de-jour: The current practices rely on the use=0A= of scripts which generate other scripts which the automatically=0A= run to upload or download configuration changes, log information=0A= and other things. These scripts have to be adjusted each time an=0A= implementation from a different vendor is enabled in a provider=0A= side.=0A= =0A= Lack of immediate Feedback: Customers may also require a mechanism=0A= to easily update/modify their security requirements with immediate=0A= effect in the underlying involved NSFs.=0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 11]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Lack of explicit invocation request: While security agreements are=0A= in place, security functions may be solicited without requiring an=0A= explicit invocation means. Nevertheless, some explicit invocation=0A= means may be required to interact with a service function.=0A= =0A= To see how standard interfaces could help achieve faster=0A= implementation time cycles, let us consider a customer who would like=0A= to dynamically allow an encrypted flow with specific port, src/dst=0A= addresses or protocol type through the firewall/IPS to enable an=0A= encrypted video conferencing call only during the time of the call.=0A= With no commonly accepted interface in place, the customer would have=0A= to learn about the particular provider's firewall/IPS interface and=0A= send the request in the provider's required format.=0A= =0A= +------------+=0A= | security |=0A= | MGT system |=0A= +----||------+=0A= || proprietary=0A= || or I2NSF standard=0A= Picture: ||=0A= Port 10 +--------+=0A= --------| FW/IPS |-------------=0A= Encrypted +--------+=0A= Video Flow=0A= =0A= Figure 2: Example of non-standard vs. standard interface=0A= =0A= In contrast, if a firewall/IPS interface standard exists, the=0A= customer would be able to send the request, without having to do the=0A= extensive preliminary legwork. A standard interface also helps=0A= service providers since they could now offer the same firewall/IPS=0A= interface to represent firewall/IPS services for utilizing products=0A= from many vendors. The result is that the service provider has now=0A= abstracted the firewall/IPS services. The standard interface also=0A= helps the firewall/IPS vendors to focus on their core security=0A= functions or extended features rather than the standard building=0A= blocks of a management interface.=0A= =0A= 3.2.3. Difficulty to Monitor the Execution of Desired Policies=0A= =0A= How a policy is translated into technology-specific actions is hidden=0A= from the customers. However, customers still need ways to monitor=0A= the delivered security service that results from the execution of=0A= their desired security requirements, guidelines and expectations.=0A= =0A= Today, there is no standard way for customers to get security service=0A= assurance of their specified security policies properly enforced by=0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 12]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= the security functions in the provider domain. The customer also=0A= lacks the ability to perform "what-if" scenarios to assess the=0A= efficiency of the delivered security service.=0A= =0A= 3.3. Difficulty to Validate Policies across Multiple Domains=0A= =0A= One key aspect of a hosted security service with security functions=0A= located at different premises is the ability to express, monitor and=0A= verify security policies that combine several distributed security=0A= functions. It is crucial to an effective service to be able to take=0A= these actions via a standard interface. This standard interface=0A= becomes more crucial to the hosted security service when NSFs are=0A= instantiated in Virtual Machines which are sometimes widely=0A= distributed in the network and sometimes are combined together in one=0A= device to perform a set of asks in a service.=0A= =0A= Without standard interfaces and security policy data models, the=0A= enforcement of a customer-driven security policy remains challenging=0A= because of the inherent complexity created by the combining the=0A= invocation of several vendor-specific security functions into a=0A= multi-vendor, heterogeneous environment. Each vendor specific=0A= function may require specific configuration procedures and=0A= operational tasks.=0A= =0A= Ensuring the consistent enforcement of the policies at various=0A= domains is also challenging. Standard data models are likely to=0A= contribute to ameliorating that issue.=0A= =0A= 3.4. Lack of Standard Interface to Inject Feedback to NSF=0A= =0A= Today, many security functions, such as IPS, IDS, DDoS and Antivirus,=0A= depend heavily on the associated profiles. They can perform more=0A= effective protection if they have the up-to-date profiles. As more=0A= sophisticated threats arise, enterprises, vendors, and service=0A= providers have to rely on each other to achieve optimal protection.=0A= Cyper Threat Alliance (CA, http://cyberthreatalliance.org/) is is one=0A= of those initiatives that aim at combining efforts conducted by=0A= multiple organizations.=0A= =0A= Today there is no standard interface to exchange security profiles=0A= between organizations.=0A= =0A= 3.5. Lack of Standard Interface for Capability Negotiation=0A= =0A= There could be situations when the NSFs selected cannot perform the=0A= policies requested by the Security Controller, due to resource=0A= constraints. To support the automatic control in the SDN-era, it is=0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 13]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= necessary to have a set of messages for proper negotiation between=0A= the Security Controller and the NSFs.=0A= =0A= 4. Use Cases=0A= =0A= Standard interfaces for monitoring and controlling the behavior of=0A= NSFs are essential building blocks for Security Service Providers and=0A= enterprises to automate the use of different NSFs from multiple=0A= vendors by their Security management entities. I2NSF may be invoked=0A= by any (authorized) client. Examples of authorized clients are=0A= upstream applications (controllers), orchestration systems, and=0A= security portals.=0A= =0A= 4.1. General Use Cases=0A= =0A= User request security services through specific clients (e.g. a=0A= customer application, the NSP BSS/OSS or management platform) and the=0A= appropriate NSP network entity will invoke the (v)NSFs according to=0A= the user service request. We will call this network entity the=0A= security controller. The interaction between the entities discussed=0A= above (client, security controller, NSF) is shown in the following=0A= diagram:=0A= =0A= +----------+=0A= +-------+ | | +-------+=0A= | | Interface 1 |Security | Interface 2 | NSF(s)|=0A= |Client <-------------> <------------------> |=0A= | | |Controller| | |=0A= +-------+ | | +-------+=0A= +----------+=0A= =0A= Figure 2: Interaction between Entities=0A= =0A= Interface 1 is used for receiving security requirements from client=0A= and translating them into commands that NSFs can understand and=0A= execute. The security controller also passes back NSF security=0A= reports (e.g. statistics) to the client which the control has=0A= gathered from NSFs. Interface 2 is used for interacting with NSFs=0A= according to commands, and collect status information about NSFs.=0A= =0A= Client devices or applications can require the security controller to=0A= add, delete or update rules in the security service function for=0A= their specific traffic.=0A= =0A= When users want to get the executing status of security service, they=0A= can request the information of NSFs from the client. The security=0A= controller will collect NSF information through Interface 2,=0A= consolidate them, and give feedback to client through Interface 1.=0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 14]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= This interface can be used to collect not only individual service=0A= information, but also aggregated data suitable for tasks like=0A= infrastructure security assessment.=0A= =0A= Customers may require validating NSF availability, provenance, and=0A= correct execution. This validation process, especially relevant for=0A= vNSFs, includes at least:=0A= =0A= Integrity of the NSF: by ensuring that the NSF is not compromised;=0A= =0A= Isolation: by ensuring the execution of the NSF is self-contained=0A= for privacy requirements in multi-tenancy scenarios.=0A= =0A= In order to achieve this, the security controller may collect=0A= security measurements and share them with an independent and trusted=0A= third party (via the interface 1) in order to allow for attestation=0A= of NSF functions using the third party added information.=0A= =0A= 4.2. Access Networks=0A= =0A= This scenario describes use cases for users (e.g. enterprise user,=0A= network administrator, and residential user) that request and manage=0A= security services hosted in the network service provider (NSP)=0A= infrastructure. Given that NSP customers are essentially users of=0A= their access networks, the scenario is essentially associated with=0A= their characteristics, as well as with the use of vNSFs.=0A= =0A= The Virtual CPE described in [NFVUC] use cases #5 and #7 requires a=0A= model of access virtualization that includes mobile and residential=0A= access where the operator may offload security services from the=0A= customer local environment (E.g. device or terminal) to the operator=0A= infrastructure supporting the access network.=0A= =0A= These use cases defines the operator interaction with vNSFs through=0A= automated interfaces, typically by B2B communications.=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 15]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Customer + Access + PoP/Datacenter=0A= | | +--------+=0A= | ,-----+--. |Network |=0A= | ,' | `-|Operator|=0A= +-------------+ | /+----+ | |Mgmt Sys|=0A= | Residential |-+------/-+vCPE+----+ +--------+=0A= +-------------+ | / +----+ | \ | :=0A= | / | \ | |=0A= +-------+ | ; +----+ | +----+ |=0A= | Cloud |---+---+----+ vPE+--+----+ NSF| |=0A= +-------+ | : +----+ | +----+ |=0A= | : | / |=0A= +--------+ | : +----+ | / ;=0A= | Mobile |-+-----\--+vEPC+----+ /=0A= +--------+ | \ +----+ | ,-'=0A= | `--. | _.-'=0A= | `----+----''=0A= + +=0A= =0A= =0A= Figure 3: NSF and actors=0A= =0A= =0A= The following are actions required for this access use case:=0A= =0A= vNSF Deployment: The deployment process consists of instantiating a=0A= NSF on a Virtualization Infrastructure (NFVI), within the NSP=0A= administrative domain(s) or with other external domain(s). This=0A= is a required step before a customer can subscribe to a security=0A= service supported in the vNSF.=0A= =0A= vNSF Customer Provisioning: Once a vNSF is deployed, any customer=0A= can subscribe to it. The provisioning lifecycle includes the=0A= following:=0A= =0A= * Customer enrollment and cancellation of the subscription to a=0A= vNSF;=0A= =0A= * Configuration of the vNSF, based on specific configurations, or=0A= derived from common security policies defined by the NSP.=0A= =0A= * Retrieve and list of the vNSF functionalities, extracted from a=0A= manifest or a descriptor. The NSP management systems can=0A= demand this information to offer detailed information through=0A= the commercial channels to the customer.=0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 16]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= 4.3. Cloud Datacenter Scenario=0A= =0A= In a datacenter, network security mechanisms such as firewalls may=0A= need to be added or removed dynamically for a number of reasons.=0A= These changes may be explicitly requested by the user, or triggered=0A= by a pre-agreed upon service level agreement (SLA) between the user=0A= and the provider of the service. For example, the service provider=0A= may be required to add more firewall capacity within a set timeframe=0A= whenever the bandwidth utilization hits a certain threshold for a=0A= specified period. This capacity expansion could result in adding new=0A= instances of firewalls on existing machines or provisioning a=0A= completely new firewall instance in a different machine.=0A= =0A= The on-demand, dynamic nature of deployment essentially requires that=0A= the network security "devices" be in software or virtual form=0A= factors, rather than in a physical appliance form. This requirement=0A= is a provider-side concern. Users of the firewall service are=0A= agnostic (as they should) as to whether or not the firewall service=0A= is run on a VM or any other form factor. Indeed, they may not even=0A= be aware that their traffic traverses firewalls.=0A= =0A= Furthermore, new firewall instances need to be placed in the "right=0A= zone" (domain). The issue applies not only to multi-tenant=0A= environments where getting the tenant in the right domain is of=0A= paramount importance, but also in environments owned and operated by=0A= a single organization with its own service segregation policies. For=0A= example, an enterprise may mandate that firewalls serving Internet=0A= traffic and business-to-business (B2B) traffic be separate. Another=0A= example is that IPS/IDS services for investment banking and non-=0A= banking traffic may be need to separated for regulatory reasons.=0A= =0A= 4.3.1. On-Demand Virtual Firewall Deployment=0A= =0A= A service provider operated cloud data center could serve tens of=0A= thousands of clients. Clients' compute servers are typically hosted=0A= on virtual machines (VMs), which could be deployed across different=0A= server racks located in different parts of the data center. Often it=0A= is not technically and/or financially feasible to deploy dedicated=0A= physical firewalls to suit each client's myriad security policy=0A= requirements. What is needed is the ability to dynamically deploy=0A= virtual firewalls for each client's set of servers based on=0A= established security policies and underlying network topologies.=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 17]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= ---+-----------------------------+-----=0A= | |=0A= +---+ +-+-+=0A= |vFW| |vFW|=0A= +---+ +-+-+=0A= | Client #1 | Client #2=0A= ---+-------+--- ---+-------+---=0A= +-+-+ +-+-+ +-+-+ +-+-+=0A= |vM | |vM | |vM | |vM |=0A= +---+ +---+ +---+ +---+=0A= =0A= Figure 4: NSF in Data Center=0A= =0A= 4.3.2. Firewall Policy Deployment Automation=0A= =0A= Firewall rules setting is often a time consuming, complex and error-=0A= prone process even within a single organization/enterprise framework.=0A= It becomes far more complex in provider-owned cloud networks that=0A= serve myriad customers.=0A= =0A= Firewall rules today are highly tied with ports and addresses of the=0A= traffic. This makes it very difficult for clients of cloud data=0A= center to construct rules for their own traffic as the clients only=0A= see the virtual networks and the virtual addresses. The customer-=0A= visible virtual networks and addresses may be different from the=0A= actual packets traversing the FWs.=0A= =0A= Even though most vendors support similar firewall features, the=0A= actual rule configuration key words are different from vendors to=0A= vendors, making it difficult for automation. Automation works best=0A= when it can leverage a common set of standards that will work across=0A= NSFs by multiple vendors. Without automation, it is virtually=0A= impossible for clients to dynamically specify their desired rules for=0A= their traffic.=0A= =0A= 4.3.3. Client-Specific Security Policy in Cloud VPNs=0A= =0A= Clients of service provider operated cloud data centers need not only=0A= secure virtual private networks (VPNs) but also virtual security=0A= functions that enforce the clients' security policies. The security=0A= policies may govern communication within the clients' own virtual=0A= networks as well as communication with external networks. For=0A= example, VPN service providers may need to provide firewall and other=0A= security services to their VPN clients. Today, it is generally not=0A= possible for clients to dynamically view (much less change) what,=0A= where and how security policies are implemented on their provider-=0A= operated clouds. Indeed, no standards-based framework that allows=0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 18]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= clients to retrieve/manage security policies in a consistent manner=0A= across different providers exists.=0A= =0A= 4.3.4. Internal network monitoring=0A= =0A= TBD: This falls under reputation services=0A= =0A= 5. Management Considerations=0A= =0A= Management of NSFs usually include configuration of devices,=0A= signaling and policy provisioning. I2NSF will only focus on the=0A= policy provisioning part.=0A= =0A= 6. IANA Considerations=0A= =0A= No IANA considerations exist for this document.=0A= =0A= 7. Security Considerations=0A= =0A= Having a secure access to control and monitor NSFs is crucial for=0A= hosted security service. The new NSF security controller introduces=0A= a new attack surface. It needs to be resilient to attack and=0A= recovery from attack needs to be quick and trivial (thus making=0A= attacking it 'uninteresting'). Therefore, proper secure=0A= communication channels have to be carefully specified for carrying=0A= the controlling and monitoring information between the NSFs and their=0A= management entity (or entities).=0A= =0A= 8. Contributors=0A= =0A= I2NSF is a group effort. The following people contributed actively=0A= to the initial use case text: Diego R. Lopez (Telefonica I+D),=0A= Xiaojun Zhuang (China Mobile), Minpeng Qi (China Mobile), Sumandra=0A= Majee (F5), Nic Leymann (Deutsche Telekom), Ed Lopez (Fortinet), and=0A= Robert Moskowitz (Huawei).=0A= =0A= 9. References=0A= =0A= 9.1. Normative References=0A= =0A= [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate=0A= Requirement Levels", BCP 14, RFC 2119,=0A= DOI 10.17487/RFC2119, March 1997,=0A= .=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 19]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= 9.2. Informative References=0A= =0A= [Gartner-2013]=0A= Messmer, E., "Gartner: Cloud-based security as a service=0A= set to take off", October 2013.=0A= =0A= [I-D.hares-i2nsf-gap-analysis]=0A= Hares, S., Zhang, D., Moskowitz, R., and H. Rafiee,=0A= "Analysis of Existing work for I2NSF", draft-hares-i2nsf-=0A= gap-analysis-00 (work in progress), July 2015.=0A= =0A= [I-D.ietf-netmod-acl-model]=0A= Bogdanovic, D., Koushik, K., Huang, L., and D. Blair,=0A= "Network Access Control List (ACL) YANG Data Model",=0A= draft-ietf-netmod-acl-model-06 (work in progress),=0A= December 2015.=0A= =0A= [I-D.ietf-opsawg-firewalls]=0A= Baker, F. and P. Hoffman, "On Firewalls in Internet=0A= Security", draft-ietf-opsawg-firewalls-01 (work in=0A= progress), October 2012.=0A= =0A= [I-D.jeong-i2nsf-sdn-security-services]=0A= Jeong, J., Kim, H., and P. Jung-Soo, "Requirements for=0A= Security Services based on Software-Defined Networking",=0A= draft-jeong-i2nsf-sdn-security-services-01 (work in=0A= progress), March 2015.=0A= =0A= [I-D.lopez-i2nsf-packet]=0A= Ed, E., "Packet-Based Paradigm For Interfaces To NSFs",=0A= draft-lopez-i2nsf-packet-00 (work in progress), March=0A= 2015.=0A= =0A= [I-D.pastor-i2nsf-access-usecases]=0A= Pastor, A. and D. Lopez, "Access Use Cases for an Open OAM=0A= Interface to Virtualized Security Services", draft-pastor-=0A= i2nsf-access-usecases-00 (work in progress), October 2014.=0A= =0A= [I-D.pastor-i2nsf-merged-use-cases]=0A= Pastor, A., Lopez, D., Wang, K., Zhuang, X., Qi, M.,=0A= Zarny, M., Majee, S., Leymann, N., Dunbar, L., and M.=0A= Georgiades, "Use Cases and Requirements for an Interface=0A= to Network Security Functions", draft-pastor-i2nsf-merged-=0A= use-cases-00 (work in progress), June 2015.=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 20]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= [I-D.qi-i2nsf-access-network-usecase]=0A= Wang, K. and X. Zhuang, "Integrated Security with Access=0A= Network Use Case", draft-qi-i2nsf-access-network-=0A= usecase-02 (work in progress), March 2015.=0A= =0A= [I-D.zarny-i2nsf-data-center-use-cases]=0A= Zarny, M., Leymann, N., and L. Dunbar, "I2NSF Data Center=0A= Use Cases", draft-zarny-i2nsf-data-center-use-cases-00=0A= (work in progress), October 2014.=0A= =0A= [I-D.zhou-i2nsf-capability-interface-monitoring]=0A= Zhou, C., Xia, L., Boucadair, M., and J. Xiong, "The=0A= Capability Interface for Monitoring Network Security=0A= Functions (NSF) in I2NSF", draft-zhou-i2nsf-capability-=0A= interface-monitoring-00 (work in progress), October 2015.=0A= =0A= [RFC4948] Andersson, L., Davies, E., and L. Zhang, "Report from the=0A= IAB workshop on Unwanted Traffic March 9-10, 2006",=0A= RFC 4948, DOI 10.17487/RFC4948, August 2007,=0A= .=0A= =0A= [RFC7277] Bjorklund, M., "A YANG Data Model for IP Management",=0A= RFC 7277, DOI 10.17487/RFC7277, June 2014,=0A= .=0A= =0A= Authors' Addresses=0A= =0A= Susan Hares=0A= Huawei=0A= 7453 Hickory Hill=0A= Saline, MI 48176=0A= USA=0A= =0A= Phone: +1-734-604-0332=0A= Email: shares@ndzh.com=0A= =0A= =0A= Linda Dunbar=0A= Huawei=0A= 5340 Legacy Drive, Suite 175=0A= Plano, TX 75024=0A= USA=0A= =0A= Phone: +1-734-604-0332=0A= Email: ldunbar@huawei.com=0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 21]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Antonio Pastor=0A= Telefonica I+D=0A= Don Ramon de la Cruz, 82=0A= Madrid 28006=0A= Spain=0A= =0A= Email: antonio.pastorperales@telefonica.com=0A= =0A= =0A= Diego R. Lopez=0A= Telefonica I+D=0A= Don Ramon de la Cruz, 82=0A= Madrid 28006=0A= Spain=0A= =0A= Phone: +34 913 129 041=0A= Email: diego.r.lopez@telefonica.com=0A= =0A= =0A= Myo Zarny=0A= Goldman Sachs=0A= 30 Hudson Street=0A= Jersey City, NJ 07302=0A= USA=0A= =0A= Email: myo.zarny@gs.com=0A= =0A= =0A= Nic Leymann=0A= Deutsche Telekom=0A= =0A= Email: N.Leymann@telekom.de=0A= =0A= =0A= Michael Georgiades=0A= Prime Tel=0A= =0A= Email: michaelq@prime-tel.com=0A= =0A= =0A= Minpeng Qi=0A= China Mobile=0A= 32 Xuanwumenxi Ave,Xicheng District=0A= Beijing 100053=0A= China=0A= =0A= Email: qiminpeng@chinamobile.com=0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 22]=0A= =0C=0A= Internet-Draft I2NSF Existing Work Analysis December 2015=0A= =0A= =0A= Mohamed Boucadair=0A= France Telecom=0A= Rennes, 35000=0A= France=0A= =0A= Email: mohamed.boucadair@orange.com=0A= =0A= =0A= Christian Jacquenet=0A= France Telecom=0A= Rennes, 35000=0A= France=0A= =0A= Email: Christian.jacquenet@orange.com=0A= =0A= =0A= Shaibal Chakrabarty=0A= US Ignite=0A= 1776 Massachusetts Ave NW, Suite 601=0A= Washington, DC 20036=0A= USA=0A= =0A= Phone: (214) 708-6163=0A= Email: shaibalc@us-ignite.org=0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= =0A= Hares, et al. Expires June 21, 2016 [Page 23]=0A= ------=_NextPart_000_0010_01D13A99.56FCF240 Content-Type: application/pdf; name="draft-hares-merged-i2nsf-problem-use-cases-00.txt.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="draft-hares-merged-i2nsf-problem-use-cases-00.txt.pdf" JVBERi0xLjQKJcfsj6IKNSAwIG9iago8PC9MZW5ndGggNiAwIFIvRmlsdGVyIC9GbGF0ZURlY29k ZT4+CnN0cmVhbQp4nK1WTVPbSBC9+1d05ZKlgmXLVCBwCxgnpIB11splkz2MRi1pYs2MmI+A99dv z0gQm6SKTYR8sMqefv369dfcwDRJYRo+/TeXo8lfR1DZ0RSq0c0ojX9C/8UlnGZ04A2kM8jKUWeT wuwAjg6OIZOjPy5m16sFnP65gN97Vgm8ZwbtXvZ1lB5AdkmQyqFR6MZzw0r3y4iXCcy9ypnZe9lh qQILsI45b09g5ZgqmCksZIbx9dNw7z27RRGwzu9aQUxP4INXCLN0H2bT9PB/83qbwJJZpyOvX47q 0TNP4FK3+O8wrAwbLLUSnMHFq/lz8LpK4G9m1GYg1jvdFJIpWDFe2+G8rkkt3BCgGoI1R+8srzHK ttZyIC+S6h1qUwlW4DPECEsjZOT2HHns+H0UQ7HOaqEYXOlcNDgUiwidas9ZwcTgHjpL4APjNx5p zgzDWhimeFcTfGhN0DA8q9naMJpebmgPhefTCi4qJdwQ7efIUeZoID2OE+81YYXhf/kTxG4bLI3O G5Rh1jqUqBzQzIVPFoEzG2u9n/RblkWY9eM6rIKxRFNhMRYzZctx24GNvcVxNB9Pp4m7C1mbHUaU t7l1NMvv85jVwkKhuY+eqbe4ETlacNS5PVjcBh2zUhuIC6dklEWnd8hdo7vVZg0r5N4It4GFV9wJ rSx86Tbfl70Ym/VSMrMBXUY3nQzEuKcUeSffGa/iMgqnI9krlHqb/KMFSL9Yn0vhHO0xoaD0TQNc K6IuY+3dClcHvzvcKdRvwkau5Of0bAlHbyLX+Hq8xSbkbcejBUoDhMiFqh6ktA/R9YfhXFVCIRo6 teM6Y3YNC22IGsl0npFKCYmpHQlcMweaUAxURvvWgmQbYI3VUAhKo8j9Q7H+SIA91sYmQTKEhmwD PUqTCVl9ONVD9WGRkuS+dq49mUwKRlkIdwA0iUBXJjSLJ7EM7aTHmTytUjTYoviNNaKIVcUotDsh vQzErLgDqZWrd6s/5CMIkCP4lghhsQ8G24Zqkd4IROdWNxgSn2963bbkCI11PyYcTX9S4yLWCw3d lgqgNYIF0XWoxR/pW/JVIgXK7yWXdJxsmuCarLiIKaOG6VxT9lQwexG7gkqRfFTUsTZ5sSPUz6r4 VlDVYrxCgVa7d6gg8+HraB0vg/tA1cWaZGe29NevJ25fn5esQkj/IcTzbPSRPv8BxyWIMWVuZHN0 cmVhbQplbmRvYmoKNiAwIG9iago4OTYKZW5kb2JqCjEyIDAgb2JqCjw8L0xlbmd0aCAxMyAwIFIv RmlsdGVyIC9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nJ1XXXfaOBB951fM26bnNCRAvrpvKSTb7Emy 2cJ2H7b7IOwxqLUlV5JJ6K/fO7IhhtAP1pwTB1u6unNn5kp8oeNuj47l09yTonP0/pxmvnNMs86X Ti++pOaWFPR2ggEX1OvTJOvUc3rUH9D5+QVNis7BjQnsDIfDkVNZoOa66d+Pr+nqSfugzYz+tu4z XRqVL732qzE04oSLKTvqH/dOX00+dQZvaHLbORjacun0bB7o3gad8KtfOv2z+AaTnl9+PEg+vopz 6eZqck0TV/lAyqQU5kwlO2+NJ52yCTrTnJLy8gZovcEKLbVJVWAAqSrMrfNdoss8p7iAJ8ee3YLT 7gaDyRwxrCfif19NP3ESKFh6O3wgCLMi8czrF0+3PFP5xuoPzi6010LzPecqSgWQOGvULOAxQ8Z+ PJiHUP56dBQEjrmrOWRd62ZHOSQyng+1ySwE0YY4y4SPNZFEqgKTzRqcsppiAtbCW5thQCsYRP+Q s/KMyBeaH2U6vqRbVBLlOKvyfPm6kXRJKfvE6SnT0lZuJZ+oAAmD00mIQT7qMJcnJdg1WAh3m8LQ pow/RWmNLEr8FJxKAhKYOVtsDqcCYjRQ2iR5haljXZR5nfG34xHd1vJQAI7wXVFNRakxR2p00m1J JKLVxRRT1k6ThIToqZRHKTAkJFsFelTOKROWWKFB2VhHIHfzatXWRE1zoYHg0VTPevcgCtrM2bSq 2VJ3zw/RYKPw+ng0YVdoY3M7W+6NJ4gnDbtBNxYyqBc0LlXC/wPrtMESNIn2WiXSC8hO5TREHaMN IVediRSd/VNYNZrgjfQCk5DVZcleFF4jX1emKc6fweq3sKLxZYjXSxFLypzNCbY33pUforMtrMEu LIEqrNHBulgzU56rhcYXcAa0b7DOt7BO8PDOoi5HWtptWkm3xPFSsIv1zF28trFO11hcRB/bCM7T aGlUAQdB//8Q60xirGEyBFFUedCHKG1lkqUAJw2wDFiFHRfZgXUOrFuVfI4NMlfREpz+unaydbhD VaqpzpHdFsLqunpK5srMeL8eesnmosWmYMHUvohBRh6IrQrg8JXFvrBBRuffJgMXyXSOAtqTzMUW mTctMqv73YpUJKOShMuw5kIqZ7f2l/Ylfgz7nmFXxpZoC8ibSJoyPatcrXUt4Abpl5R6x91v6JPW 9UOfZdtYlavgBruDT10N+zvKm5ajSNeiYvKcI+/GXIYweFt8z0sarN7xRmz96CiRV9yP3jE0tTM2 bCtPlylMVaKCVgv0EBTUZh3BS6zoxDZVSxwQVm32nr9U2DZ93Gk+sEmh2hh7JvaOhFq8eltYtaNk GIU+i/1117KSqyd43qpZRuy143SH4A8WxwO9d032+i3BXxL5oHIdzyFreJU46z3diSWU+bNSgjVo YZ20ansc0N/KpZt+eWPi6euaOZ3KQDySw2fDq411+n0sqc5n86B7nuH4Wdf8JpZw+gu2PcRR6Ufl 8y29Tta8TmJB/YYCcujM/XE3saSgLtHt0PaewyMO3vswpN5pC0vyOMxtldJIBSgkStEYd+W0/Qms tmkKmsT5hzlsdoQP2oUKEV+jEh/RnSjKMrfLeKzbjXXajweYd+gL/5oYx7m8u+XuJcA8/V4Zpn7v tfw6OKPt658HhQ2g/y8QryadP/H5D6wFdL5lbmRzdHJlYW0KZW5kb2JqCjEzIDAgb2JqCjEyNTEK ZW5kb2JqCjE3IDAgb2JqCjw8L0xlbmd0aCAxOCAwIFIvRmlsdGVyIC9GbGF0ZURlY29kZT4+CnN0 cmVhbQp4nJ1WXXcaNxB951fMW/A5LDGQ2E7fSGy37ml80pi2D8EPQqsF1bsSlrTG5Nf3jlasF+Lk NIYH9kO6unPnzgz3dDwc0TF/06+seq8/n9LS945p2bvvjeJLSj+yovczLDij0ZhmRa/ZM6LxhE5P z2hW9fpXJihnVMjOnSgCpc/V+Prmki4etQ/aLOkf6+5oakS59drv1tC5kqpaKEfj49Hbo9m/vck7 mv3R66fXb4aT4XhIdKmd2oiypE+21HKLbevSbitlAk3rYCsRtDU0PPjS6OzoVW80OUSc4NWHUmN3 drNWUhda0o2StdNhuztBGyyxdU5/f7r2B4hdrDd42MQvSoIGGw6zskYH6zjsQ05ddu8S1lvcfBRG LFWM6IM1XufKxaD8DxCewzphPtPr6UtQDrFOcdPq8iK8J6wz1tya4PQCCXNwwP9ndIj1DjefVaGc MlK9AKmLxWgjPLi2jl30oH4aeR9rHP1QvBANZZCwYOsVZHpF0zx3yvufj5PGI2CNT6L7R41Nnc1r yQlMp8xWqMXcyjoaL1deIj84KqwUrZ1dlKoiH0RojImoGq8XQioKdq+4rpP3W8Nc1kY2Xpn3Yy+Y H5EwOfm6qoTbki3iMU2bqL1KlKRArGA7fX5hZLN7JFzgQuVLbfLaw10gj0MS1tXF7JI2Ky1XhDid KtWDQBzBJrBIGG8kjCm0UTlg0tYvV9n5cCUgfabHxhfZUqwzkdrX7fBJ2aiioqWzG653uUKbUmbZ 8ABytS7VI+sBohUO4YN4oSDPSqk9EbUpnEAYSBJeDZrtW16+0WGFCJZ1KVA+W1ze12iKnBc/6ITM oThblpGL9QE0nCKs0pIfKU7f2mn2E7hYXg+d+VVqXgnH79JYtGlcAQ4SLbZ46R60jBZ54J7A+WIR 0ord3haqWQ2hled+C4W2JEJwQsYaAQ1fcXdnxSqV6xqu019Vl23C2qywti5QU1Q4W0HFUsg79kNL WD2ulUPcTXCYPbWtPQ5MTXmQkISMAiLsDfk7XZZNwhDS2nqQrZgIe63SQS9T1wOmelAuQWgjnRKe xfMKJ3ZZIDwQ8/tGmUppXc7rAfTlV9jXKJdh9E1uB9HFuaqYBBda0nLex7XkSZQtUBn5/GjPMO15 SWTPKicvcvc+kDVjWZHCGqRjU0mRzPs3H997LlCnOmFxmnK7jvO7w+GZU2MzYCSHyczdwZpsDXtG o7XLg7Ul3IqKLBUS55ZIY9eRwu26QB4HfFMnlX6MBe9ErjkNoonoh4QOCtQifhU6Eg9gB4QaleGL bxwdlWjuwGJP8wOXk7dl3dojVyUs7WLtZQpGbSxexfH+vdJojNUKQRKtzFbfraunbU+CYSOapUbG AuvKy0XYE3fe71RfrLfXqdYsvDA/GsAWoe0idQmA0ltatKLkzFKYLd2h2XJGKuF9hlPvIO2OMnfu OD9aP/i6DI27dyPimd4y76Mf7wzYnrfX1tCmYoPe92fOantuFQ/aWRP7ITj85TmH4MiwILrdx2n/ qX0r6VOXgyyE4ov+aH0xaBsRTxUAs0AITjuyG9MRfPCtpwYMJ1om1UKb5o8reC5sWA0PB3KTAAy1 giPtTucEUqDTN3OnZtuIWG1xbDZ1vu1OszUmi3VpnCFV8GOGbVncdvsLlp68jR7/jcfegBQTGFL3 c/G4Rs/09HsNbcajAf9tP6HDz5dP8DpNboF4Mev9ie9/V2rGGmVuZHN0cmVhbQplbmRvYmoKMTgg MCBvYmoKMTI4NgplbmRvYmoKMjIgMCBvYmoKPDwvTGVuZ3RoIDIzIDAgUi9GaWx0ZXIgL0ZsYXRl RGVjb2RlPj4Kc3RyZWFtCnicbVXBbts4EL3rK+a2CWC5kbLbtL05dox6kQZpI7SHpocxNbJYS6RC Una1X79DSrITJxRgCeTjmzdvhvQTXEwTuPDP8BZ19O7bFWxsdAGb6ClKwiIML1HDdcaAD5CkkBVR vyeB9BKurj5AVkdnK+XIKHLxwmDhYBir9O5hCTd/pHVSbeCHNluYKaw6K+2IgQUJqtdkIL1I/jnP fkeXHyG7jc54SQP8XMWLaYPWaRPLVNkiRiHI2ri1JNCS/QWPZyFOPAsLj+eT87+i9P0px39oVDdQ 5OgwFuQ1e564Jxp5FnPmAFQ58zxneJIvFXC6e85oVHIU8kWvZUWP51NPkE4BMjK1VLrSm27gnM1v P/lXYIK5Vs7oCm7ZqAFwnV57wHVrpfLBnI7H7xFBttFb8qgHXZMrvcU15gROQyEdIDRonBRthQYa MlarCYhKct6gDbMkl6NJPISuG1Td9IV5QwzgDFsjXcf8CjdUM0WI+3oa9qUUJXB9a9x6KadxXikT LRe3JvMy8mL+KTQHVwrmoVJD2ssfYWEpDe2xqobZ1eIhTHMfGrZJK24rR8L5r4fOOqpH4P0p8N7o N5FcyYC868t89KBoVYBzYWfKw3y2eJgGV6ILP6ep50GShVbtkTPKAXnDzlNys8G60mJr39XSyQ06 skxBQEXBW0AXYFtRDsp4vKaQioua8zHi6tu2abRhn3coK+Rm9ADmQBh6dnpkWinAPJde+SSE9AkJ VFBS1XjWgcx3F/dI3SopMORpnSGsj0ySBW3MmI7QqpA5V06iD/+yustK7+M1H5r8YPMsBB66R9km ODXIhYLx7LEQnKIXwjniqbuNrqToggqVM3GhDZDiX+F3HKrXGM1nwUmy014HBB3HNA5IrKyGmlDZ vqQNii2xKDQ0KuQwUgXXBu9L6o5MHmj4dpM7ysOFAnvpSt06qHUui9FHTsYz9PSQtzTMPHc2RPNg lh+ujMezL7M5s+9ZKtkJZNkt95cw/SFE0deTLbibZW8S8ZIoUW3I9hfVsTjfpXEtVm9XxnKUptKd bz3f9TlfWUauW2/Frt/4uu13UtBJjLvlvdZV4PcfvjsPcYeiL4cDZf3WJLkKez+zqZwuG4XVFJ6P mz8N3wkW/m0VQZpM/P/JezgdP+/5ooK/fzHlTRZ95ed/xnEkR2VuZHN0cmVhbQplbmRvYmoKMjMg MCBvYmoKODc2CmVuZG9iagoyNyAwIG9iago8PC9MZW5ndGggMjggMCBSL0ZpbHRlciAvRmxhdGVE ZWNvZGU+PgpzdHJlYW0KeJyFVl1v4zYQfPevWOTl7gDHiR3kcr23XD7QFNdDWhso0KIPtLSy2ZNI haTsuL++sxQlRU7T2kAciOTs7OzsUk90PpvTuXzTb1ZNzn69oo2fnNNm8jSZx0VKP1lFX1bY8Inm C1oVk/bMnBYXdHX1iVbV5P2DCewMh9Nbp4pA6fOw+La8p7tn7YM2G/rNuu90bVR58Np3e+iWM67W 7GhxPr/8sPprcvEDrb5O3l/MiB6dXZdc0bJWGX94N1l8jEs4tdoyFbYs7V6QfbM+9ZwFbQ3l7DOn 10wBW+oWwJMyOWVbVZZsNuypUBnOAXF+0SFmjQ+2YtfuBVrjdDjgH7fTWUTa6VyW91s25LGVrCMg ki0kFsAEpj9YNCYSAp5jMpZKi9CO6i3Sz1RJW+sD57Q+RKZd+Hc+Aam80gbKORX0jim3ldJmNhJh +TbJTBmCBjrWBcGCbaPYqlbmIMz5uV0aifB22qjGfTylqrrkKUQawB9WPZVEfuNsU9Neh602pKhU bsPEsr922guPpsxJZYEU9HkVNqF0wVFpF+kPCKDzYABjoI8Pkc4xfAKxTfC2cchFanUcyYsycjip 8b9UYj6b0q7j3rFILancZk0FMtNI2Y+FOT7S20Rshf0IEAjd0Wv7olJTCIoU1h2nnI0VB0HCk2Pc k9mrdjm5SRY7few2keNSRZNudU2VOohn1hz2DIuLT8LeUq1c0OxnI6MIYFoYvEa5Lgp2yJ0K7dB1 ID88ah3sj9pFoY9kM7S7idXMQoO01cYxi4q+o+X4qdEO6SKOb7JtLD6k6foFdYRNKhT50JfgqLOG 4iawNoD0+8CoUxDbN41yCkFalxRNWYj+AY3LIwRwXwqjgXTCEuo5B6VLgQ1pQpW849JPCYNKtfLL asZ546Sx0CyQznFtnYzNacLikM2i7pgmMAgSEVWRLEaLD8hBuZwqxpDD1KiEcKbqAMiWcEIZ0R5Z 5Pq1N5PyqpdQaqdgOvHpK/NLhIvZXAZFnK7DeFqmrZ3vfLdVNt9iujkIujrUHM3RH7vvJmji3uYu 07SK3uwO4JKREsiPTNPBcTs2uU3DcKt2PHLwC6+yEp1aI8i+F2uxD3FbcB+hdXvfgnVpD60pq6YM GrMRgz5rmyoNCyRoCJfjHvffNAap2W1V7TtSYzrOlnxUmy+Miy5mrsB2303hmP2/XTgIMZCwbnzP pbYRcvuthm1RzkMEt0Vg0+f0eUThrhuQuOpd48W0EuY6BJV9l8omd3+Oewd6uAF8T21ERO44F5uf 9+jas+ubr6QakDFBt9yn9PC4xJ/bZSsbyllbVCRJ1jZrivvGzdh7qK3F7c+//ydBYXRM8iVBH9mc RVpjrpGgPLJO/90+6a6Y6cD32/VqKmNqj2aVFgH/Z4xQgNV12Wcdhb3uG9K3fd/3sHDq00o92r1V YB5Yc1qjw+UejDkLirx39HNtgEmmJNVOSqhDvrYhDm48O9lpJ9P4RFZE4MtF1OVHqCTzC7d3OaOX n7vnWksn/dQYpsV8Ki91H+n488ejwuvA5Z9AvFtNfsH3H2KpdBtlbmRzdHJlYW0KZW5kb2JqCjI4 IDAgb2JqCjExNjMKZW5kb2JqCjMyIDAgb2JqCjw8L0xlbmd0aCAzMyAwIFIvRmlsdGVyIC9GbGF0 ZURlY29kZT4+CnN0cmVhbQp4nH1WwXLbNhC96yv2VntGViy5tdPe3Nhp3elk0lgzOSQ5QORSRE0S DABKZr6+bwGQIp1MqYNEEdh9+/btA7/S5WpNl/JJ31m9ePXhhvZucUn7xdfFOjyk9JXV9PsWC17T ekPbYhH3rGlzRTc3r2lbL84eGs+2YX9xZ1XhKV0Pm3ePb+n+WTuvmz19NPaJbhtV9U67YQ3dccb1 ji1tLte/nG//XVz9Stu/F2eyP0RVFT1y1lnt+9Nu1eT0gVtjJfJvWHv/rOq2YkemIF9iRdE1mdem Of9psb4aIuJSlskN8Sqzd0viAzeeMmMtV0r2LEP8wlhunM5wE7OuEGtz/R26O+VV2PDG4C9Eem+N 55D8f5EJlJfouMls3yYMnS+N1d8mkNpuV+nsVWv1QXmmJ+6pBro915IXgBEvRdIDvBzwdsrxHP0f GkUDD1OOX9YJGwA4MjOABD2yKJPSnr1DWDqWOitnwLHC8WkLZaqhHSJzW5me84g9hXFeASofTNUF EgIr2J6QT/LKylzZXH8T9aiqIuVa8Op+DJS0SzGyEou52WNbTF0b56m1Zqd2VU+NAVWsnN5VvCJ6 CxF1Deis+iVpjzCyIoVqoE7nlO3JmwkgnsKJMYhjn5dUWFMjbZR/itOCYlkMrgOhEGHIgwScv4wN VkpzJEWFtnxEpoEbXaGnLkg4swzIOSGxattKcz7v78dSxVIQH8vwq1SHwOM0VR5lUqiMBYR02ZpK OJv1tzaN9sgkLbRdJQOELnhJgRIddS5s94KJWpU9hcdWBWE1+wTfl9Z0+xJ03aIn8+6OMBwdNahF sw46Z6FR1y37znRuou/5ZsYt5sKVqOd7XUx4uVqtVxvkvwuS5zjCMSvgv0nVo6THlGdrRiRcFLF/ QVGZEVQ63Lsk5ehKju1BI+JydK0ZlY/xsXiEhEU3a9WPKkCcShRQd5XXbcU/KGfQgojsoKwWYjDK ubGhCG7AknSznGxuDVxDo8qcHSSV064fe8LaUtY5b2qAmWvoUTeIBJEegRSDo7KMWx9Ek2MHhmLo wynVpJEsxu/mRmFyhSmbeBZGOUjo81nOgZhgc4K3j9Q7FC2DnAAnKYbRZp+tPp8TPDcPtcNyduxa 8zQpfZaq4FnxiJ93mR/oE2Gih2TZgf7gv6ZWg0m5LisnzdUFvCLFiYUStI9ZXcqsqcqZAQvCbssu HTPin9IaDEeuJTQM+qjEelOs6Jmi6lPrMVWdZTcxDkV71caJNZgCcS9SoGYYNS1OJEWrKMygljyc w7N6t3IeaRcg1QrYMMHOiMX3J77NRdzwI88VKzIFOjCafWggNxhIlmLVwLXCUZ11lbIQuz/Kq4Dj vUCca+52dG+WeZ/0O+IUkhuRjBwy4uSDNx2D4fmZ3NKSg+ZjKBbsyaG+jPiSG74sClLk1X61fOm+ nx4u7laafXFhWqeO+4vhufsCEeaGw7lBNasm4RwrHU+mNr4ZwKyD1kRT45kzPWng1WgoYoGMRrta /kuFpkhhTAZrekYNATrm0XduHCo5V4byBteqtMJUD909TYc3pnIDS1HSo7+cOjZM1diVFGhQCM44 XeCVaWID0sXhVSpaJFwW7zHsSmPk9U0EsL78OTTtTxWEzjJKK5pe988t+Hb0V9cwbdZLeV+8ppfX p/eoh66/IOT9dvEPPv8BUCmfHmVuZHN0cmVhbQplbmRvYmoKMzMgMCBvYmoKMTI1NgplbmRvYmoK MzcgMCBvYmoKPDwvTGVuZ3RoIDM4IDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnic bVbBcts2EL3rK/YWe0ZSLbmx02Nqy1N3EjetNekh9gEilxISEGAAkLL69X0LkjJpm5oRKRHcffv2 7QN/0tl8QWfy6c5ZOfnln0vahskZbSc/J4t0k7pTVtLvayz4QIslrYtJ+8yClud0efmB1uXk5NZG 9pbj7NqrIlJ33C7v7m9o9aRD1HZL/zr/gz5aZQ5Bh34NXXPG5YY9Lc8W70/X3yfnv9H60+TkfL6Y n89xXzfsA1NKUaiMKToqndXReYo7pg3vVKPxwxWEfOH03WR5kUIg+l8b3KqDOUyJrdoYwaEocFZ7 HQ9U1DaL2ll6OOH5dj6lQnveK2MQZHHeB/l2O7uea47FzFVB7bezflV4pNxxIOsilaws8KiI+GBi L8VqASMRKu8iZ5FzFLTesefCeZ6SjliC1RmHoPxBKkMtjAglZztldSgH1XaxpGZ+QgUJeIgq1qGv ff5cvPD3K9J9RiaQGKLXmxoI0jpSNqemY0uCAtRrVgLtdzrbkUIEbRv3A08DDlugz3jIY+WMzg4j 0jLQsWEyLlOSVVvKdVGgdBuJf9a6KuVKcPRspaWSdj5qoUBb1d5VQvCaDWeuLGuru8V0HxFE+TxA IhBaRJFo52p9f/twSndt7BGym77pX7WPtTL6P9Vp4O7mK57RYFvjLzQi8wz00qI9lcqqLQvqjjN0 yBi2W9wHIS/I0PgXXIGBjq6cNgdQcOzDtIvStCCmIyreaMXDifTr4XRMzsfURagm0E5voSzyOvwQ ORRKm1pEVuqtVzKAbQoRDAv2BFyFETXQlva0c+3Afv0cUIBctTzkCOYaOaHcPPVBhwB00PVYeO+P wuNSkoKJK2ejd6aV3/XBqhIdNObQ0XBrk7BV3ogsgP/++g41B+Z2/L6zs9uZXtpQzEJuZz1DuPCN xgA9PpxOR7WUkj8zGvECSq8qc5QM4A9+U9ZCM/AZdCCJvEOVP+OkusqFuZaikQYHHU/z70dN70Kl 8WzVfN93977FTl+8a3Qu6dP4g63XiXvRdTR6zBCHmESWKK0rAPGwEt1Ix4TM45rCu7IF3kdpaRk3 7ULctu2X6LmsTdSzCNu0WbKmPrUs6A14YCF9MdWxmFIdEga4pRQmsALDzZUhTLNP3OEaPKY6xvbx RjKpSRLCy0PFmU7s7HdsWwY2okgezliHLJldP+uvtHqJsj+pLA3N1U55BZ/2vSd0vppCXKlKbbSR xq2e2gHq3dNhIbyNGN9Zco7jBPf6nPZXA4KexfZcuJLnRWiN8rJ1veUFuqsYnCQTF2+qsTdGDPxA cqmDlUEotrnzIr8VLmmv4w4hMLeCJa+zSGLSW4ct6OVG2E6VRHsDR1dJZ229u3fZ0g6Q9Hy81UUq YCZA2rKa9axifgDwBjXxkyoBW0CYKDylseo2lJyD3tpRb3vKEg51hJ70J0LGSXboUFeV85FuvzQX CFMBpkjS2cHGenwW2/XOOuO2h9e70ctGvguDzYHCIUQuQaTzA2fBviLdRs20V+OdEqPlGZLlJrnL iBERYJ/umfch3f020pEeXMsWXi0yVxtQUmt8g7u3tOlMeotofSmInN8vE6w/YGIyZ3AzM6fhsXqq tPTuzxryWS6m8t52QS+Pb19AB10+IuJqPfkbn/8B0o5q7GVuZHN0cmVhbQplbmRvYmoKMzggMCBv YmoKMTIzMwplbmRvYmoKNDIgMCBvYmoKPDwvTGVuZ3RoIDQzIDAgUi9GaWx0ZXIgL0ZsYXRlRGVj b2RlPj4Kc3RyZWFtCnicdVbBbts4EL37K+bWBEjVOEHbdG8t3GKzaLfdtYEeNnugpZHMViJdkrKj fv2+oUjLdro2AkMh+ebNmzdD/aDrYk7X8k2/ZTd78fdravzsmprZj9k8LlL6KTt6t8KGO5rf0Kqe jWfmdHNLr1/f0aqbXdybwM5weL5wqg6UPvc3fy4/0PtH7YM2DX217ju9NaodvPZ5Dy245G7Njm6u 5y8vV99mt29o9XF2gSXPbqdLpro3ZdDWUKm2aq1bHTR7PBhaM1W27DtG/Iq0IUU+qKBL6pQx7C6f zea3Ge7hgoumwJZat/xwSdbRTisCjBb6tUKo/UaXG1Jlyd5jp+Ot9TpYN5CtATayKnunw/A/tEaE sGGS5HdsKus8VYNRnS5V2w4Jpt9WKnCBp5tXmeHbvG+CHMChgYBOxVAQrvdc9y3VoK/6YLtxYc2l wspJwk+YesgyiGi+X3/jMlCw5G0d9soxdKhoo1wVH0Z2vkhkVxv2h39GkI3aMelu2yKpERokJOut xb9ECDagWKIs60EWEhJE8adJr2ylhivZgrjIz1ipoalAhToOG1vFXLOSoFyxL51GGiPslPBJIWwt 69r9QoaC6KsGch9Q49J2nXDncmOkQolo7VTHe7HsWcQnUZ7iX2XrJqytsztdsYumNTbkwo14WI12 i1AtyiLNIjqJcpWuawhjQoI6kgEuFepSEyp7D0R2zzz88qPXjqUnjpW+LebFHRL/qMrvEqpDvspo 30V1Yzhg9gGJ/WTiR2lo1Qo5aRefwn9SZviVryregph4wOvGqNCjlvGcdFnGQICTcm3RdNZ1uTHp /svyxf1iOUFAyMXn1VKQQMc/XGLTIgtycFqi1ulmE8gwHHcQ7QjqmEhxcF1nfaB1C00SCtRUa+U5 j5e9Ns/xR7EDuRnGvmshjHLRANrsbLvjqohd4viEDQA+Qxha2h6tkH1QTbReHLRJIqDkS2NdAN2E ZKUzkLuMN7FL3cvBsx7KzaNGAVDJ2KBqaiU2O27tFnF0wcWIBPFVALKYqW3t/qQ6B0v4X9jhzFhv joyVfz9lg2Wz8jZMQKplF+JKcLppzkZ1/OTphmloTa2bPs1AgW1i2ScBZNZKxZT/HlMbr56DUQEQ nG0Rc8wVJCBUiO0dbTQUJ/E/oMj8qDDe+AoiLhZ2OTIGUt9WmbNMj0hGUB3GiXSuH3zgbvT6OIWN HFB1jUwk+uEBM6Vfr+OZdNNhucNcafJokMBPKj3SQSUCj/fPRvlUTymi4CGzaFD/Gympr0ytYw1P kpW5I35s5SQerDg2bBwrFEhuhTUgYszEDQDSiNKZk7DZ98qohkc+E6pwEeiYT34xmM4+XIi/91Ha ESChReKicEzKxuezuhG9G9DGRm7puOtoy2iyw0C3XSRwlePDL7V0i8puVPJyAsPJ5YWQUgOVSp5A HJe2MTIhVQgw+ijQ5DjBlFsxjt/EhaXjDe/zZZDG1mldz/SVXmaDzOUC1XW+J+ItghmfE8wGP70F J7MLnaTN1ZjdTzG0kXelHfsjp6m1kWnQEu/k4khcZWcKixPjvBB2qRRlqyVNNEtug0n8hHDauig0 s7COT48ouozTioPS7eEN4vA2FiV69TLm9buK1wHj7mwLOv68f9xqme9/9CjYzfxKXiRf0fnnny9w Fd39C8T3q9lf+P4HltyXPmVuZHN0cmVhbQplbmRvYmoKNDMgMCBvYmoKMTI1NwplbmRvYmoKNDcg MCBvYmoKPDwvTGVuZ3RoIDQ4IDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnic5VZN c9s2EL3rV+yt9oykWPI0TnpzY3vqJpOkjWZyiHOAwKWImgRoAJTD/Pq+BSmKVNJfUGokjQTs231v P4Anuliu6EJe/beuZi/+vqJdmF3QbvY0W6VF6r90Rb9vsOEVrda0yWedzYrWl3R19Yo21ezs3kb2 luPixqs8Uv/cr99/uqPbbyZEY3f02flHuraqbIMJhz10w5qrLXtaX6x+Pd/8M7t8TZt3szMsfblf 3Cy/F65ZmLUN+UKrWm1NaWK7MOIwV5oXlbMmOg8HX6n2bm8yDpRxVKYM5Oz5L7PV5QGwcM903E8q 1KwjduUUC6a8dM+LrQqc0XuOzxLtJ9aNhz+6a6yOxtkAPEF6OAO18HBOWllqAieAju8QWqDoyIOe 2WMdwuRG43ftPHwqm/VQbHPnNVPtSqPbJf5dv0wBXy5Xy9XFkuid0o8SZMW6UNaEimBBWWtVBcRH bimDxN5sGwlRvEpwPfymYM8EwRVZBjUx1c5G78oSqmPzYMy0V964JgimRD8R77gtS/gIbPOfxvMk SIKpmhBpy3042rMSBPCnSlm14wxAnwtTJg27ULHQJl7djoptBPlYuGwsXCLO3uxVop0fUoTkvL25 ezifHwEVlb2GIQJA+eyYph4NQqTyCYJ1jC5xGCWlU7RnploQk/R3slYcgpioBo5tNLoLTMDE2y5V kpmWpPNZlwU4j6hGylRUqRQhyz2Ms8wIyvxHlzAKUp8DA8QlKE67smPQxRPgMy1qBzW8a1I3Gpt7 hdw1OgJiyvA69YRFtwwKWodE6gI8dSN9BQektrBXulMf/BEhkCf0jBR31ekQCwV6HDTqRZoDEQ1J AKn4zGwHAmHes3I1e4WGRUkJJ2jrqlRB0/r4v6VIGPbDULzAoDTfe9LPoDaADIIiEjiEBv1ImnAc 4ng2ZSnhs8Wo0aCwbalQ+zQujxlP4ke1RdNWCsLhzYe2hIHqWEtsgf3eYBZCqjcOgHVsVFm2h97s h4NgnzZkxrmgprT1ZF4Es8P5MaUF9pV6hGr81HDoxvlQJaNRMZolSSATpa63LGiSrLkgWRdN3k7y 1Ol5BBIb7SrEvMcZkzTokzeIctJNJ7r1kqRxnMKHvjL8PMsnwgm/9d5Wy8Mhmka3zGoWCabexn04 n7bVJMfyHNrsRJAjVynKg9pOcjTqyNHslad2IZht2R6TPYKJ1FmXqmV/MkDXoHWHrLLCQPm5s/kP vKUYErlK1fXpmBlTK7qxdewzHLmeUfwx9LQhjlFd/2HjmFFvgutFxjXaRbT5qc5LuQLc5+PuKpQf Y6FEcNU4ntkhFfLJ3Hk44+VODtI3H+l6sjRC+lDLH/151uU+qGoQ4jBwPEsVLx/OJ1pfAv16mJlv T85U6b7Q1HIloS0yQKGtcND67lpxOGynOu+Qsbpb3hvVhdNXdH//SkPDRAbnVVJ5LfmXqyJQ/oBM KCWOpMoljZ/bb7XBGv3ZINPr1VxuhC/p9PnyUeb3669AvN3M/sLrX62bg8tlbmRzdHJlYW0KZW5k b2JqCjQ4IDAgb2JqCjExMzIKZW5kb2JqCjUyIDAgb2JqCjw8L0xlbmd0aCA1MyAwIFIvRmlsdGVy IC9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nJVWTXPbNhC961fs6FJ7xlYtOZ/tyZadiTtx09rK5BDn AIGghIoAGACUrH/ftyBISa4mM5UOlkng7du3bxf4QRejMV3wN/+VZvDrw1tahMEFLQY/BuP0kvIf aeh6hgXvaDyhWTlo94xpcklv376jmRmc3NmovFXx/MaLMlL+3E3+fPxAt886RG0X9NX5FV1ZUW2D Dt0aulFSmbnyNLkYvz6d/TO4fE+zT4OTy9F4NAbBEdG1kKuFd40tyFmaOq/owTUJ81HJxuu4Pf1l MHmT9gHyirySzhhlCxE1tpTeGRK0AYGwdDUtVVXQfEtxqaijTldeLnVUMjZeAW582cFdO+ELejq5 u7p+Om337mEBnmGiq7UkV9Lwi90IYBY9MsAYZgZpSi2H9O3hw/TV+1fvvlNoFgsVIgVtpQLoMGhT V4q8DisSWalhtyzgUcYa6kKJikSMkIai8AskgOBGW23wQjqgzptIRjynB4UOvqmTGNAehDOQZDF9 FlPb0osQfZM0GJ6RjrwanJyPyAlJ0jDqxTIqy+t3MCGXgTmwGj+DRUE/W9Wt3Igt+LiMk8H/D17K x/U7j3OqvYtOuopq6KWgZK7aRrcA8AIvQfEP8zIqBAHteUETEumV2obRgd2mDtWrYyOqantGmyVY dFS7uAFs2L2enan0WvXIZxxte+A3w6mQVbAQEqucW1FTJ7qIzY+YieYEwFzMoYSQsX0n5pUaZe6H tLAdqZqGfQGrwQbszlLAd4UqtUWwEvTEHuW+KkasoL760SQTQgPRRGcEe5yjGjh1odBtsU2+dc1c sQCgWvyeHmcslg/v0J5gsRa6YsqtCDlx0DOi2Hvb5qoOM8zyX44m8NN0iSSV5UJ9EJLjTpEoQviQ w35lYrJ7CMS1Q05LtAmS6J0SlF9rmYuiff/ioDy1q7TUCGXElskqC+GkSgNFwKlgIlOjQageuWxs ehhyzEwLmRW6LFEaiFdAU20D59MT5RjWRVoKeIZF2HFd6Wq/SOq59vAUhgVPGQ3Aik2tpA5t8WB1 rlFgF/YoXTKdab6E5BcOhW07wTp0poDfyFC06bQNeqgVA72MyBvZcjb+d8uOBaYkB96ltAsk4dk5 TwIbMPw89O7YUaXWqtqh7W/rm+FAUVEFB9sH7n70U5fcogFyhV4IqRdeZLSzOWjePgue1Cn/0Mjl /l7h21KVsILbwI2/HYwLx27U2CIBrmWa1sY0Fj/bTEXLCskyLVgSuRZgAlt3Ww4MyUqtk85PJzef Z49Pp2fHA7L1engIiRHVqM70CaOLE/CPV8f9j0977vwk3oPiI4OReFrk1Qg6vX2YYdf93afbdlde f8/a8nIcl3yyMjvLbbTOAzxs0TUGcjfJP1CsrrTgU/Pp5PFqep/ReBzwjQH3jtCe+h8VxpxbKKtc E+iq4BOSJ2bkIXzTdlzmARKYQarQDS4LmNYVH6tobwDUOJFR2dSFhaort0VN1sJrBnX2HIUyvOJA qCPNv0l1SMNukw/Uvg7RZeiXXbBHYLfJzOE1HA7sn2OBdFyiBw3OtAzzctbt1gJP4Oqj+FTic1Z1 AySpoA1LIuLuxtAwoXOjRMDxm7bPHaL1d0DnNWqZjoeu9Ay0yyMj5VofWc9d+3qSdPwIu2Ie43oj qhHtf26fa83x/2ggxGR8xhfIN/Ti8+0v9Cwust+BeDsb/I3vv5CUpA1lbmRzdHJlYW0KZW5kb2Jq CjUzIDAgb2JqCjEyNzIKZW5kb2JqCjU3IDAgb2JqCjw8L0xlbmd0aCA1OCAwIFIvRmlsdGVyIC9G bGF0ZURlY29kZT4+CnN0cmVhbQp4nI1WwXLbNhC96yv2ZntGkS15mqS+pYkzdSfJpLGmOTQ9QOSK hA0CNABKUb6+b0FSpGQ1U+tgSly+3X1v34JPdDWb05V8uv9ZNbn88oqKMLmiYvI0maeb1P3LKvpt iYDXNF/Qcj1pn5nT4ppevXpNy2pyfmcje8vxxTuv1pG6v7vFp/v3dPtdh6htQV+df6Q3Vpld0KGP oXeccbViT4ur+S8Xy4fJ9a+0/DA5x617VzGxQNdeBw5UqR05a3ZkmXOKJVPpQsRl4KzxOu5w4Tc6 Q+jaeQnQ/uJsMr/uET1XLjKtvLJZSW69TrHbkj1Tpa2ulBmwtF17FaJvsth4DpdAEoxM1WqljY4a j7I0NyNaopahCGeaqJ2lrTaGMmfRb0Q2Ah0BDfRATYjo0KObuAU3gZTN+5i+E6q92+h8FDXD44uX qaPr2QIfZHe52p0Feuts9M7QF35qOEQAoq+/2OYg477mTKPfLvnbLnlLqtTYgOyUfLWjqjFR14af VRFmo0cPqG0lcWCkBlmhJX/gxKMkDfohZ5hS0QDMaMu4RtNdTXiUs6iEuiBQsTxdwJ0lKGKn44AO Yh+GFsB5hNDBKEgeS8zcnnFI63yVMuEaqfo7Hcy+7NoZnYnQIo0KwWVaycCBsLUuGt9CBI77iZMv 0PoYaN3YrG1M246bTlA09FXH0jWRFIWIRMqDSc5KqzNl+mEplVcZrKB/dAQh3Shei03WKuPpKdpI 7oQOqlJ2J3jGsC14PE9ix4YTgFHZo4zs84JOlJLI2YcejMW+rtAWtnbGuK2sA5S2Mlx1Hgo3B2V8 cv8nsyS+BA9vPt9hodwQ3W44sUsV9sJBHUKhq6ok1vGuiMn/mA97KmvH2gkNqEsNBT8i3wlk8Z/K cBU0eh2Q0hKLpXdNUVKuQw3gCOnACVYdR+V3I+bo2znPihluOx+VEekHKCng24VM1bYExgbT3c42 bZLxMfWlc4HFUFh47PfbauybkXU65yCkN8WZDG2N+Ww9Cayt2HdHG9QJKQeMoebZf8q5j7mRJ/rR f34bSaOIAtmwib4fqyl2y/ZLDJU1dS5Gf25d5xNo4ds9MGr5Z+4czh10G8vOVUcCP2Mvl+15KvRg gS3Loa900oQxhXmTDTi5hqJBgmDGJMrB5qkchAjTttndgNL/Ls4MTS2DA0w4XxVpB4+VOrV/Tkg6 xcLa4qt1G+SOqGvEtXeoWpagTqvAKF/gmFUewzyaVTkecELt2p2bfKr8I8eDWfkoRcqCAAMh87oG bM4vHlzj08Qs02R6L13U4sfkNC/z6FrzN4GPp0U2WYe1LTXO/oItp4Fw4v6jmwKiGowWGsUGMCNi fWPbYTNO5TJaudvadH0oDHaFLNcpGVeMj5sBSaRpk+NsskU7F2KuvpZSbZJrVygmf2jSiw4rKU/j qFYjKC2TJLK2udfeVRAh12J3oandBGImtgqLSFyGgH4kR4bA10PnfujOAV1VnMvZR+9x0K/waxLj 8DUCu8n1Jz3wKxYWdKiO1ZA5UEFDsda0lxhXvd797J2hNeG+iqFkRpNZ7HxLjUU/RpYSftk4s+H2 jUqakndVlPA7ljJ0wSmtzIzGf7ffa6QL9EdjmRbzqbySvqSjv78/w0I0n/8DxNvl5E98/gXOirpz ZW5kc3RyZWFtCmVuZG9iago1OCAwIG9iagoxMjM0CmVuZG9iago2MiAwIG9iago8PC9MZW5ndGgg NjMgMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJx1VsFy2zYQvesr9pZkIiuWPInT 3NKx3biTZNxGUx86PUDgUkJNAgwAymbHH9+3IEhKdkLNWDIJvH27+/aB3+l0saRT+eRvXc/e/HlO 2zA7pe3s+2yZHlL+0jX9usaC97Rc0bqc9XuWtDqj8/P3tK5nL69tZG85nlx4VUbK1/Xq67crunww IRq7pVvn7+ijVVUXTBjW0AVrrjfsaXW6fPtq/e/s7Bdaf569xKPPSt+RK4kfmspoE8nYvdMqGmfJ 8/eWQ/wgELc7UzEF1q03sSO19cw12xhIeX71YrY8GxBxGUtNpTTPpw1la7WABqpVRxtAuRSPC7o3 cefamMIZL1koC8SM9SNiNSsbFkRfec8+7rjiEBDL1fyj5RNW2jcQ6MMhfnRYjNoqHRMXUqDt90bz yHoBjNW7IcO1wwKmnbunEJUtlC96hBI5B9KurQoCq4aU3hlwpFIFPD4qk6mbKlWwTykakNedRipz qjhSK0A2mAJtU6TbEJGep/udo/sUoDJ3nFNDBkVnVW20qio0p6pATVliq33XSI1LuZOSCw1rUxpN jfMRRfP6TRFiBlJF4VFLJOE8Nd5Fp11FsWuY4s67drvDN9JB3e4R5c31zTcJzlZtoI6xbVPcPfg7 SaRkj7vSXOFIzoJn0aZuC2JKHzKU37JgkZFuhbIVhLpOe5TWnJDHgh+oLe0eK9W3Qe0PqlSx8pbU RuQmixvlo9FtpVK2Qta/CMfpTXHQ6YwU2BZpf54QoZDgJoxRXaXztYrHAhqu1ycH1+unU5Sux2mE 8M8k5fzwy29rCh3EVT97mMAfHyfww4f99kf8AefGG47Kdz9dAzH0PjPIPa+8MTq2nj/klcNdCEt8 7SC/Kfxw55GublN9Hw9rcJLXXY4CegbxV1LUFfR8XNIrswUVWn2AGSqZLZGTdfZkHNE9LOP5vGbY aysqjR6DOidTYuR+ooIRgcVzQxLdUeeeCBBOk4YjumeymY/WB5WmScAcuwyY5ughMixgL8riytTG oksQ8fYeNg//+/iDfDD9wSX3CaNaezMb1BkoGKtlornLZmXhDq7EjCZ6QdXHM56Bphgg6hmckFE8 LlQOFkT31EZTmf8kM8QuWh0HSqV3NXzYdrRHTZwXM1+nwoS2wjgF8FD9iD5lj1oF4Ts41iZEcW4u njvTwCWD/6RWGShV7DlG5icZlw6tJZdG3XhUzk8H4pDXeMoh+9S9QiyAlYwJTEFhq9RY9X4xMtq0 pipQpwyzqZy+CyJgJVVS23RQTLwP3ORssVqcIcELU5biZPAJUP3irImu7+blAzimMwZ4FxySK92k 05eHfnyS8wInAm52qfoeB2Wlss9Ckqx31lVu252M54fKmWL5zhQF26MpSB0+9GPpAsLIiT2fbqIE BseBZXkPUF2qc92TH1wbGAXEj31YM5rhIIukk142YQrKBzlPOGhakfMfcbJPp1eZOW1bI7EseoXO yMsE6/6ADk9fAQrVpdmHCIwIcmom8kjqn5JEUlsc6U/JHxVMhdCi6no4BkE2l/qQbpP7lmybPQ5E toilsWYjIny7Snif8FKGdBBTVYsjP798aIxI8ffWwiyXc3klfPfU9P++geTwJvoPEC/Xsz/w+R98 gnGSZW5kc3RyZWFtCmVuZG9iago2MyAwIG9iagoxMjIxCmVuZG9iago2NyAwIG9iago8PC9MZW5n dGggNjggMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJx9VstyGkcU3fMVt7yJVAVI iEhyslOEXCFly0qg7EWcRdPTMG3NdI/6gUS+Pud2z/CQcEAlqJnp+zj3nHN5ovPhiM753X7Kunf2 1zWtfO+cVr2n3ijdpPZD1vTbHA+8p9EFzZe9fGZEF2O6vn5P87p3MjVBOaPCYOLEMlD7ml7czz7Q 3Yv2QZsVfbXukW6MqDZe++4Zmiip6oVydHE+ujydf++Nf6H5x94JboVSkVcyOh02tIxGBm2NJ23S ncbZtS5wsLC10GZINMdVGX2wNa6KytvTn3qjcRetEvLRp5NioSsOGSw1yi2tq+ndcynCQC/fkZfK CKet59vCe+XTIYTiIGq51FIrIzdklylYoSq9Vk4Vu1K9cmst1RBnLq5S+vFwjPommk/HKqf+Iipd iKDowVYc05OQziLbJzyhm0rRJDXm29SfjaJHtUFNjZKB0wsqrQ9HMtOzDuUR6A7xsFLwYRGoQGFo wQSAqmqNnkm/gUq94Kb3faqt0cECYVO0paF/vdzsEjZdRwGokrT1QhseJZ4TFbL54PQi7lfeBtpW CrSmgYuQLkqNQzwMw/Cjd+C97RTXF1xmlb4G8dhNCtV73Gg5s9YCcPmAmoUrQCHwdSkwI2YN0ry9 04ZZKJSPTmrr1H4xDM4P0S+VIVAfE3VdHMwRKYJOkIPBX7QLEaE+CVkCHI9DWpZ8gDwSBs1Jn8Hv qsNmH7ZWAlDcM4sKte+d4hgt5gVKXSk86viINV01herA6wQAcFQmlX9MEhNHaIyTX8EsG8MRwHwu 44ADGwLDBcBDH2BO1tGOgsogN+TPzEt87tQ7KByGbN5EAztZESRLUVXKrGAruzmJiIG3qtSmzIQG EJDSC8eQTiX0F5v0SIaIjWknb23WrApQhgN1hEUlhXUD1p2GgI97EhO0jVKzgAf5VJ9KBYAwBaNs 9Gh5rZ013DK4d4fpt+GpC/9KClQL7vspaqZGV4K0ZqlX0eVaYYVSFdHlGbQBLEabbjNheaqHg7wz Hk3k7jkcPDkwYK9mkpx2a1CB1uyN8dBJsgEnz2DX3Z8Oepx1TNmjQuJopR/BbpCwLRhFtARPaq9h rJY7SDUKdgMfD031Z4T/CFvnQrdpph0hOcrUfGez/KBUseAHcQnCbBPObSE28DNhNkdm2icfWZGe pg+zPk0n+DeZ2Fmi+Q2kjEFG3z9EQjUYJkYu1hqt2SxTbBErs/IxqaWulM/bCpyEqXUSZIvZrZnW 53AgqEwEnaaxoVLgOseNzSDYQdohe3Fv/H4kb5uS92/2+lCyBhh+mHwfswZUDX9Ht5mG+JJlnLTf BulWrW9zWxAyt6eYwDYZDM8MXgbNgHpwItBuV/ywjXS7Qbdoncugm6rSwmBQ305ubyCUEJpfz87k Br8GcqGifWBo3ers2ykTDH87G0v8tJ7lrtlaAVi7c4Suabt6mEFA1Dp0DpIVUWYb2Jcr71tkEUb/ K/IGOlBLogqDDt6iBGOPGGBekiC/We39bukmc8CTBYxbwd9+lHE8vPx/aqMZuhVNt57v1comAKzp uJ1KlTZWBS9Ir7FtslWl7cT0SRvKq0olOMBEY8OWjK+teusBbEXK7/norOv0lvVroXyYXhFbmngb 3ZZHbDPBwStCEgBAjE2DsWSVRFg/apTZCGzVbbnZ5H4AK+uTZg9AqKvLVNXvMBHQFWtLVEPaf929 NJrN8I+Inx0Xoz7/tryiV6+/HwTmNBr/g4h3896feP8HIFqwomVuZHN0cmVhbQplbmRvYmoKNjgg MCBvYmoKMTMwOQplbmRvYmoKNzIgMCBvYmoKPDwvTGVuZ3RoIDczIDAgUi9GaWx0ZXIgL0ZsYXRl RGVjb2RlPj4Kc3RyZWFtCnicrVZNc9s2EL3rV+yt8lhWLDmJ00ynM43jtO50WrdSx4e6BwgERdQk QQOgZHX84/sWBL8Up72UmhElAni7+/btLh/pfL6gc/7Euywmr367pK2bnNN28jhZhEWKN1nQhzU2 vKPFktbppDmzoOUFXV6+o3Uxmd6UXtlS+bOPVqSe4nWz/Hn1ia6ftPO63NKdsQ/0XSnyg9Ou3UMf lVTFRllani/enKz/mlx8TeufJlMslVhyTtgDeUOZ2CkS5JQnk1LBC1vlKDWWKmsqAJRqa7wWXpuS NsrvlSpPvposLlo4nylaKVlb7Q90ZUpvTZ7jnCiTsAZn3Rwnlm/Diddzot+doivhlMNjhlh5bBY2 Ic0Bp0JGDwpTam8sR8loMoLzf0beKHivsc+kI4/YIgmrCNGoEr7ntKl1nvC5TW7kQ4PeOb1Sdqel oltrdjpR1rG16Jpijyqr4SzTJWpvCuFVsF8jDJCW6DRVFhsbw6k1BRV17nWVq4iyU2VigLs58EE9 sF2IEoQXfJpd9Vq5eZviQhwQI0jZmQfVOgQIUR7ofgpXMnDzt0ruT0jmGsdx8vpJFLDr2LF+R1wP rEScunLeKlGQqKpcy5BfB1jZZdDdn8zIWJkp7Gzy7w7Oq8LNBgS5NpLKWC/ycaoX8Oh7VSqLFBwn Hf8tWfVYA75HcU0uQHZmTb3NyFVK6lTLLoT7qZpv5yRGKZe1Q2JYdX00syi/W/qwWr36ZbUillTP d5ULDx0UoC9qNXoGDEjfas4zH0cF7rnIQoIOtNd5HpMSLNxPd/cnjeakNDbIzJuIFXVi28DaiEHM nWqgpMCXz1C8R4Z6jzp6+uwAYJ2ppmKEHFZnsNmKCep0IMd1+hEbs2OfGzpnL0HPWMhgBR65zOxL GAmYKVbNHuFFqESLrRXF+z7j9B/X6Vl3nY7yN14+HZ96fvHnZ4eiV+ONuN+0TQXN9bkrvLCjX1o2 mznwKYT/PAa7CmTRN2fD69uBE+OV0fLzl/wahdg3zhdC7A6NoP5Htr5wHaXrX5L8SW9rNNzl+4bS I0FeRzFGm8OEQGMojyQ0ZIvBpHdcPp0ouVq0DfUaO2uj25F4QvVaUToUdJwNBReGgaYLFHzC3UTE 9ixFSXXJXZ6HzrDTP8GoV7GuXigLQnczVAnHs2Aj5AMDdhsjilXcB7suBSOe57SEpnh+cBk1EdA+ 0zJrHjQmMItbhrYCzy3TwiGHCToW65C2rgUg9L32WdjfVvugI3VszOI0RVDSBxdrBxTuhU2bR4+o /fHgBlosg0Q1LdrY8fBgamPCQlwvcRga4yB1STIDXq7QagFXVwk3XVvzBItd53g0UFqXjbzgcN9l MVS7UQExpLiPnb/LoERuxY72AlGAkC3eekKzDKkPwmvIwPA8NhumyWE8dGK8PMB86MU9hUDo3wb6 rB+pK7o/4KeZCDE1rK8haDsTB0qY9RDO5DqJ7yZFk+OtRq9PlUqCXFkCTQY/B1owWW+WIbQf8JYA kYAckc9HZX79VCG5jn6sS9hezPjt8u1xL/jjFhOWFq//BOL1evIrPv8AwORWVGVuZHN0cmVhbQpl bmRvYmoKNzMgMCBvYmoKMTE3MAplbmRvYmoKNzcgMCBvYmoKPDwvTGVuZ3RoIDc4IDAgUi9GaWx0 ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnicdVVLc9s2EL7rV+xMDpVnZNWS6zhNT7HjtM50PG6j pocoBwhcSqhBQAZAyuqv77cgKYtOSs2YMrnYx/dYPdLZdEZn8unuuhr9+OclrePojNajx9Esv6Tu piu6WiDgDc3mtChH7ZkZzc/p8vINLarR+NYlDo7T6fugykTddTu/+/SBbp5MTMat6W8fHuidU3Yf Texj6D1rrlYcaH42uzhZ/DM6/5kWv4/GeLXYIM5I6lJpJq0crZjqyAUlT9pbyzqR84m8s3tEFqYx Ra0sRQ6N0Xzyw2h23mczrvShUsl4N6FVnUjZ6Emt14HXKiFnoZKiWJukVpYJwZRUfIhkzYNk6nIE FVOodaoDo4yug0l7UjFyjBW7NEXk/HVf87qOyVccIlVqT4Efa4NjjbIGxQQTAUg1yli1MhaZJrQN vmGnnOYJKVcMRtA+BBmZn1BYBpl2IPUZvZPzGr1MiOOWtVHWSmHLjXJJhuomaVAZQcZpWxccSSWy jNHeDvoXXtd5Ql9S2rD0+xbPV3tiFzE7RkgbnO3eEXoRPrSv0EdlQNUvXcHb6G3u8Nvz/DzQUR3J FdmWp9q7pIzjIRa4hKJtMI3SB2yFAtEMVbVN5jRlJPcUNb4E4+P0xXjkQwHtQU5Kbww3jOoGuEgP B3algSBqC5nGTniDbg6xFUCs+z7AH8WNCpKVK9qZtMEzESpvGX/AiIRATzHl8SQVGggFbVVAtuW4 MSo382yD2fJEBnxu3Fq/y1iolDimDHKXC2gKkmXttDyNME8P+XEZVRTQ/5FBjmD6aTqHyt5pERXd cdrBxbFLn7XXY0uQkQ5mxVJF3ApL5LbwHwywHPN0PQXtmAOkxWzkMBmg6Nr06KcyDlsjqORDtgH4 jUYAg6DzQYCQhSe8Y+gcUymn1r1VD4x0uyDSxgvKgp3M39fqXmffGYF0Ob77dL88+a7jgcSvBvZs ayOO9MHhQjMwanuE6dqxfXmglQ0oanHsivdC6xEEmscZsFU8HCxNi3QGiTRkpTSwlOWqkUhF2rG1 +S46k8TCAySQvT5U/gJvP5uQZFle398cuMvwfLn78Pmv669HNL66yAC/uux9hnEHzFW+YCu1ugGb Nrf5t11KGa7Drqk8lh2/pLUbr0uw23BrG/JbzjrI3vNlab0qvsNuiX0j8V2anheyXmNGdujIO7El CL4RJRaceZc1zwF6U1Y05Qc1/2ft19utD6l30pDTb3Buld4BWXCJTRaHg2Vvq+zQlrtMGGKCr9eb Ac6qxlSqlXG3EERE+63RWTJYrFfzK9m/Ve3wLLs+tzSf5Ry/Qaby4yA/f1M6vm6etpnYj7Vjms8m 8oP8ml5cX+7hMJpdfEXKm8XoD3z+A5MDtqJlbmRzdHJlYW0KZW5kb2JqCjc4IDAgb2JqCjEwMjcK ZW5kb2JqCjgyIDAgb2JqCjw8L0xlbmd0aCA4MyAwIFIvRmlsdGVyIC9GbGF0ZURlY29kZT4+CnN0 cmVhbQp4nJVWS3PbNhC+61fszXb1suSpncin1Jan7iSO6mjSQ9VpIHApoSUBGgBlq6Mf310SIqnH NCp40HCxz2+/XeoFLnsDuOQn/Mq01X++gYVrXcKi9dIaFJcQfmQKP01J4R0MhjCNW6XNAIZXcHPz DqZp6/xRe7QafffeithDOI/Dpy8PMH5Tziu9gN+M/Rs+aJGsnXJbHbhHiekcLQwvBz9eTP9qXb2H 6cfWOTTOXe68SUkHoF0IPkiJrvRRCiZm0r8XXkjkTC7OWoOrAy+NszkuaHfDaZOHE2w7pXK32yPx E/pXrnBzim3nrBZ8624+Z2iFN7ZpWyVTBqls++3yPQg2nxaphy9r17TdwDM6FREYSiSw6QZf/W57 dTcZbx0cr/d43H64KOPOZnU5o+/V298TlMYh+z3jdhW21LithNuCq+QPbDdwl5g8onKLnnSD5qoo OLwQITenxB39j7gHBY/2BA0ADmzbe0CPduM2sbvdt93AJzNXCVYNns3IbjWe3NXJhtP/XtyiLbvM Kk6ne3YCn78VI1AL/uydZBZMQ3fO/sukfSAg5SOroj4PapFbhCtClNeQ0BEISTPmQpTpEiE2SWJe eTkJUqVrZbQDiy+5shjRtQW/pGUlyn2TOwQpHDLlh9fb2Ct2f49ZYtYpTdwo+I4qCWTWFPaSvNMy dGBiUNp5wfNZ7Eaxv7LYp9Eg4KuyPheJ+kdwcvCoYyuct7n0XN3s/Onh6+PsogOvijLVlC6S7aRG UkSp0hSU9otaUVYmFUrPzt3sAqg6tgJDRhbwjXc4rYuGSo9LUa72xljU+DiPGcyRYCLwQG63tBQa XD530qo5gjd051DmVvl17cmhXSmJpJhlxnryFrJnOHuHAFffgIk1K+UIC8KtmLTPWnL4QovyK3HH qEMtX1dJ7eN7kKPyvbJvWcM/JCpGuZY0Y0rLJI/QcY51FRWBdilB54fGZwu1Jb2CCkxDii0xScqG EhW46pBLVsgYsiPfMK7w9lgco2Mm+45DVu7AnNgaMZFchlLFSjIHa2XXIRIciRShJbLQAFiTkkWa sofQQshMoqRCRjpWmrTm6y3tekeye0ZvFRL1uPSEmNjMEOJcF1NHDPfks8M0tDSI2+DHcEiFpraw I0t9p54UwBkbGkh5sIpYYIG4WxNNU8eo7+yXCFPOqJhvpYnDqdiCb+KYuhahF7Rdo93bpTX5Yrnj iYthkNBK/tzKpdAaE8eeiqtAAwbn/aAo5WdaN1wr8SHp7Wyt8VtGo+Xgl1wjDAcd/lt0vb/afp9Q cTC4/oM8jqetX+n5FzxGcNZlbmRzdHJlYW0KZW5kb2JqCjgzIDAgb2JqCjk4MQplbmRvYmoKODcg MCBvYmoKPDwvTGVuZ3RoIDg4IDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnicbVZN cxpHEL3zK7p0sVQFWKDEco5yZFWUshMnIvYhymHY7YWJd2fWM7NC+Nfn9Xws4BhVGQwz3a/7vX69 X+hyvqBL+cvvVTd5+ec1bfzkkjaTL5NF/JHyW9XRmxUOvKbFklbNJN1Z0PKKrq9f06qbnN+bwM5w mN061QTKr/vlbw939PZZ+6DNhj5Z95lujGr3Xvtyhm654m7NjpaXix8vVv9Orn6i1bvJ+Q/zqznR z60darpVQVUsOegB78ppe/FisnwVD0oiQ4rq8dCUAGUn2TxXg9NhTx1XW2W07zz5odqS8tRoxzvV tp46tUe4xVUJZ5hrCpbWTKqu8dk6ctzZJ3ys90Z1usK9PTX4XpEZInzb4Izy1vg5gkmY1ZY9k+Td cEwiAfm5b3WlA647/jKwDwi63lPYMg1esCNocHqzYcd1joTfFfWOZ2rjBNvQW4Pa3JOumFp+4pbi Lx3Kp8fzh3c3jxdIFnbMZoycYylTx696Z590nYDL/3M49PwOCPhZdX3L0+Ofxis5Uq5IykArY8fQ Luqs47G5VKleVcLAToetFp48Bwq648apjnOo3ZYNynAx3RoQd7oOWxqCbvVXFTTK3ergcbtiF5SW qhz7rW3rxEKO43uudKMBpmeIpJ4LCxDbiALtV8ZLvMoOuIwgQxtIgNW1iNTwLsfSxgdlKlCHDh3E gqtcFN2pCjXJCZeaI5Hlh4KnstLFwGAbgQ9dKbFjYqp104BtcJcDzk/UDR0h66zmDo2ZFgWSUWFA pwGu5r61+0g+e483HeWZifHolQonApcu/29EzmoWlv2ZkApc3jZhpySDoyftwqBa6XWXS2tUFazz U3IK4YQ5ZVI5/RYDjgkh1UPrsUy5V7jIsARu6bSP8k7imnn8i8bhmjO48xfU54tIxwYWSQJf0fXG WLBSQf9KSuY9QR/gGKMgX1gRWUSKeowN3413AOQGI1Qr+vheLiizJxtvSym5+Lk4T42BnKZ8MhAS GUo2ZXIBMTZROJBTWqZbNQ2A4h2S93xkRafE3w1OUspATb+vH3/sVX0L/6tJp5E/g4dsT2n/ag2f oT+17TBCjxfzpC3t/cCJLAmIAqyBfBC0w2zoWYDjjlyxgRasEfa8dBSlbTjEaZCs6WzBECFQSidN tU2O0isMvx3kZNdbF2uZ0noIpFpv5fpJHrszKEycy2KuVbLMwjt5JG9Fphs4fHYLcRvS6eooFs8w yU060FuxYfbJ70pxxfWUAMAm6Z2GhQuvMntInHg8uEEMjdrLAsyBCsUCeT148Qg/C3ZWPoOEN8s3 UGY5uBZ00pUgDnxjotZOUUkDY/b7Dw8v728fSlk+OqA2T9gl0QPgn5+jCSG5gXEUKeavS8ps30VA JX0yVPRpaBU0vj/ealmaspoXgPm7md1GU6KP2R/uikBvR0vK2W/+t0UOXFZxycv+przlkznLjSip rJxjA7ODR+JoDBV0C5XEp4X46UX03SGkzSX2ESdw3+e9vbWydTMwaKG422jnj+cf3/vHiykErvGw kNCgV8loRYqVs2BxNO6yfmI6OGL12VNrq1gdxHwwePQ4jG52VLF0s0Gl0OzBg6JL4cHFZNwo+CW4 aTRmrEoe34AcvYY4wGBCh7dax8xl1oodH1QrdA8aRqWkuti0F3hC2Tut6sNCiCNSxuzItaXTn0SI OtmP1Bgdl9Qa+zpE6zh+TkrAcqBxlYxoRG+nSOQRAT0q7K2Vl4ew4qnQuVq32m/5W7DiXyLHAa7s 2n3a52nNBYsTdiMTH5V0GaX0C4SBFcbiO3M6fr197uPu/HUwTMvFVB5PX9E3r78/qA3T4vofhHy7 mvyBv/8AZN3JymVuZHN0cmVhbQplbmRvYmoKODggMCBvYmoKMTM4MwplbmRvYmoKOTIgMCBvYmoK PDwvTGVuZ3RoIDkzIDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnicrVZNc9s2EL3r V+xMD4nHkmLJSez2lvpj6k6bcRtNfWh6gMilhJoEFACUzI5/fN9CIGlJUXopNWN6CGD37dv3lvxC Z+MJnckv3bNq8Ob3C1r4wRktBl8Gk7hI6ZZV9OMMGy5pMqVZMdiemdD0nC4uLmlWDV7fmcDOcBhd O1UEStfd9OOnW7p50j5os6AH6x7pg1Fl47Vv99A1Z1zN2dH0bPLuZPb34Px7mv0yeE39NRqNTkff urarJ68Gk/P9s7ie6VvXM47tHpBop0f3nyLb6cGZ5/Xtw/E8cfV/yZOquSo1m0DfTQ4y9WvT/cMv aJT73sm91a+gPY1o2/tX0B5F/bz+NeJu73R89ShLX2drZxVnp+8PBXCrF7VjevsDkehRG7pWQdEV i2gl39vx+Xg6lo2ON6os6d6WOmsgzVVpm0rY/FAHW6mgrUkAu72uLtmT5xA1DmHbIrAhRUFXTJk1 vq6wMsS/1arkJ1ImJ3bOul3Brpw1LH8z9p54jRgbHZZaQnkEKJmsWyij/4kw3kT0K6c9U+FUxRu4 a5zA3QWaM/IBWKEcVdZxlx4BkWStc3YjuzGcU1baOie4V0J4CksVUhzPbs1UNU4rbKs9OGDnxzs8 7xERbK4aUki41Itl2YAGpJBKaGVd8LF8lecOVbKQhXy8Q0TACCl0hn7MlqCzUo/YpwOt2TWUa1mr y0CFdUAuUo9RtkXkaGzCnkWCgCf2ILg6CwminERS7Qj1t+lISeXchzRl07HAcWmtXahV2TMlpbxc 6MqK2LljrDXTWns9L48E6jmpQOCcY6nsRHyFs1WiScKoLJ5eqeyRgRQFgBqRSARz+7DXoBuRUlja erGEErwQaXLroNl6JS2BuipdQiZF28mCVYBj/PCgNym18Ci0FuKsKEd65IZQTO5j7/ewtxmDbZnY PhhKd6Ntwl5nVec3cNmbj7Z8zdm3Et0sUR2OZ8pQCdc4tWA4BmqvsB22FHH4AIaVgBNxQ40oUiKh Hme9T6EwHBC6oQog9Er6tEUJBA9aCAwvYA0lKeSZetmJRVcrRIxtfqlQyDBvjKp0JnvJrzjTRZNk mLMH9XkvzxRru9r6oW+qzKvzcTvpR59iMEj4E2e106Fp5xesfhVt8cf9x7bIq94y4m6dcTcOyK5A X+gmgpgp2chDq3hubGiN0WvCS9Ze1BhJawTpxf35taT/fEJzIbD0ttvqE94ErahNJtSmLrEBExm/ dOWr7giGCUrUndX2QrWr0UsLC1mYKInaoAFbIW1n605wGQcJW4rTO9TThqEa3A/jED/J588LR8vL pGsjPykZvUNpwwHpW4iRXWgkPe2tKJPBAqTrZlGqP8WJytrqRKKnUoQUmcOtSBds0FkRHjrYUfTf Ml1r3qB/VZ0tYS68lrKlMgtGLzfo0LC3IPovSJd2c9ihOBC0MCBvUtRpTULcvYdSoF39SRV3Jgcz Q8DuPTyaK4893UtvqxbgtRsR+ft3UZg/qTjAWFbGO58DN08rsOvp5xrv2+lkKB+e7/e/K/68lzky ufwLEW9mg9/w+xd1rVOLZW5kc3RyZWFtCmVuZG9iago5MyAwIG9iagoxMTY2CmVuZG9iago5NyAw IG9iago8PC9MZW5ndGggOTggMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJxtVV1P 40YUfc+vuNoXgpp1cPgIQVUlICCyBbobIrXq0odhfB0P2J4wM05If33PtR1CKhyRGM/9OOfcM+NX OohiOpBP+6uLTn86pLnvHNC889qJ60Vqf3RBFzMEnFI8oFnaaXJiGhzScHhKs6LTnZSBXcnh69ip NFB7TQb3D9d09WZ8MOWc/rTuhc5Lla+98ZsYGrPm4okdDQ7i4/3Zc+dwRLPbThdLOjdcBk/BkuPg DC+5X6hSzZk868qZsKaFzY027MmUpEjbErUDsgiBJbv9vU58uKmntLPeU2LSlJ3ELJxdmoSdJxaQ PkL44KQOP4oOo6MIHGpmKiewWwmBwpYmWAdCCJaqs4vxGc0yUEpVnnuqSlQE4EUVVDC2BFa3NJq9 xB+j5F1NoRAAl4IX4XWgbwt+WLcpQULU9BVqr0FS51XCwjM186rJk6iE6xa9Hb7ezIFcpFdl0ii1 bjh7pOF5tJnRyuQ52RIdUqsrj1sKGbd4PkmkhXLhg1onUun8/vxzQve2WdQ7i43maOjQC+ol6Cyk pWx3iIIPmxl/WvRGLWtmjRUYwwX/2itoE5zNa9LttBoV0US7ShtME113pMosXJNsbdXODChmGWP2 K6mwXW5b5Bi0kbukaucrLqvDVQhKv5CvXKrqOpOA55zUCJ8Y/vCmtrf83wYDcFvDsbZLdhiHs8Vm +WP6a2WaBMK+WAqjx27IMLlCvWyt2SSKTCbQXoXJwcxc78a9x/2GnGNowT0Z7wJ0GjXbfG2LAlm6 sZnOZEvB4ZlacotDK+RXYk2/YG1SAxFlonju1lsgMNO7Zhs/bjcSNERO0XR5wj5jrv3XTK0mmbFx ba1iuz3wJ9N47KJjfY+DALy2vjwFx0vpa54q9NqMqDE97KBo7my1IE4BILTTTgHSrmqXs13kLXKp AHJKB7PkfL3jHmghcA0IySgqL8LgK/BbOKOx4bmlKarfQuJ/AXfGOVQXYWnyy/hxv9fi+sso+1yV 9HdWKbR/7F5mplR0Z59MzgijO1MuGCs/zCeLDxWkSZx6P0aemRF2fSyL90bTLa/lVMSzMVfBa0AW JC+2kIir5B3fNcQwOPDk8daUU4tjOqChf4E8QQJvKrVisyP5CDynXB+w7Z4YRXEkh0A9YThndxWF f06vLwdxPPqH6MKpBMc2yEQ9+vI7rwmHLlwvnhJZccojuN4FkzIRZ/LOJD5cU8YmcY1RbvHqyP2X Hl1cfqf4qCdFSFpulP9wjf+Y4M0XxcOj02G/RQblldMZxaPR8JOUX7MQFmf9/mq1ilyqv3Iizo6s m/fF2n08kyq/iUzxwVEN9gY7x/eIA6k82ql29bYAbk/fqpIBsidvxhP63/Xzu7wGoRlKXs06P/D5 D0H2bX5lbmRzdHJlYW0KZW5kb2JqCjk4IDAgb2JqCjEwMzcKZW5kb2JqCjEwMiAwIG9iago8PC9M ZW5ndGggMTAzIDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCniclVVdd9o4EH33r5jD yybnWF4DbdLuGwTIRyGhwG67bfqg2LKjYEtEkkvJr9+REYTEdru1z8E21lzPvXNn9Ahh0IbQnu4a 5d6fs1NItRdC6j167fIluEuUQ3+BC95BuwOLxNvGtKHThdPTd7DIvaNLYZgSzJCBookBd1x2rucj GP7g2nCRwiepltATNNtorndrYMAilt8xBZ2w/fZ48eB138Ni7B29DzoBQohEqpwa/p3BjCVMMREx ffyH1zkpVyHA13OqjGCKIED3G75qd3evDo4J0zpnyodh4EPLhfwFZ5ksYnJHNYtBs6hQ3GyAaqD4 pL7ziCHeKyTNDBgJhi4ZyCRp+XATGekYdIOXuV2SQXBPFdOEd4ROSEpXhDoJGnO9sAE+zDHTL/dU pD4M8HYi9VKuuXnyYYaPVMRwEcCMJpwxv5pma6+0TJ5rsLY1QEm3tcHcY1swcphiFeowaRKGcHtU wnABKyVTjNS3xz5cFdmmLGKNBJyZhKA/chkTGmUEryxr5N+XaUyFRPm3zD/IQt/zJd7gw0VRKjJ2 EgwC6GeUqzoFrpkpE+1F6BkNZ1IYJTMYoxbIoXc2vj2Gf3vX5zCghqK+mFOrBmcrUS0FEp7Uq1FF eeHzJonkStN1ShKu2JpmWbNF+ug+NPMoKEWYBnCBVsypQG/fCBjt4m1Wu96spjR3ht/boDYHEraf OVZBDi1w0AidGooPTIrUuUzHguwajrhea6Z7ZSPRYtYMPEcTuOoj8asCMedSIvMZeyww65wJo63J mxnjzfaLsG19KWAuE7PGNiADlnCB/zn3YNc0m+KXjH5DvAlV0X2TOzK5Yk/uQysaLZlp1GoYuyE3 LdeRfslwShWNeZrDyDa/tURCLf+FBBwEupli9cvNI6CkUAVq4LSi2kjloGnZo6RABTHfZidMyyAf esGu/cc2QaTruvxvzeDMQpRjjgq4WTH86U2qee1lsPP8H65MQTP+hGJVbLLvEJdzFauWRbNSB53y 5lfS4LaVstiCkv+rjb9TxY7PT+XA/FDuJtvh+RnvP3KsV1BT9i9UiU35Duv5gHtLuRGN2QbHC86X a3wYFOKOquchPAmqMOdMqpTT2O5kreei2OWv+9RWaV+LKhIWZzfJ94UZFSIyXIpKZV5IVsXai/iz fUywvWXb4ZtSaLcl49ZPs+AF4vDHCrloF9b2begJvDq+TmlqQW3phgvvI57/ASujmv1lbmRzdHJl YW0KZW5kb2JqCjEwMyAwIG9iago5MTkKZW5kb2JqCjEwNyAwIG9iago8PC9MZW5ndGggMTA4IDAg Ui9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnicpVXRUts4FH33V9zhpTBrO7bjxIHZ2WlI wpIuUErMlKX0QciKrdaWgiQ3Tb++V44DhYTpzK7z4ETSPfecoyPlAQI/hMB+2jetnM5VArl2Asid BydsJqF90QqOU1wwgDCCdO6sa0KIupAkA0grZ38qDFOCGW+syNxA+0yji9kJTL5zbbjI4aNUX2Eo SLnSXG/WwJhRVt0zBVEQ9g7SL073ENIzZx+nPk29sf/APR4JPfcIpUxrD7ssEcirNaNEs88Hb5yw u6n45flIRO7CPz4QkcGND7dF3YzsWa65IoZlMGO0VtysYMlNAcOmAeK9QLpYd4RrzWCELfdcyKxM 7zVq2xAtWS+I4G6/AeMCFkrmCuvuDlw4J4oWjQU+Vkf9Zxb8IEqs2lYZMcSjzPptLfAsrH7VhFtb iei+C2dsVREhXLjAH9aTMx/GtbgnynrS7NQYsWHUYG9L2KjXj/J/S8sLgm2c3frfUyPbEMS7HChk 3XaiZEHueYm75nHbbk4o8yopuJEKU/a6FQjhwgjF33CCduCXY1lTkhGu1g5ZU975OC2bnKQF22Y/ euwO0013mEsF548MHvOySdc2ykktqME2Gt1A4+8OrB3NHjyZu1PxNtQuD9D339v8MmhXJ6P4MB58 BjyiGVNaS7F2aUy+caZdmDzl5rZYH6UrtpDKwFzJCkxj107rp8NjsGx0IRcgBVyLJRH2/KUodc5p m/5DLwxcpBb099xtocgPLEEk9H6KV5MfJvEg6bS0XRjWea2NLU92VP9ZGLM46nSWy6Wv5tRjmfXK lyrvcDGXHRyzMH9tm5JESYKmHH9BAWUtsnVW9obw7/Di7/WROZcZK5sUTC9RiyA5q/AoNCp2GmK1 WNxtLevRd7VgzVH4b0osyK9KhrUppNJvYJhlNglsc8nNak0EnBLVjDxRPa3JkvF2URL3unDK6Vep Vvguy00xKblgaMcUIB6ESb8dv54Nn5l4WUjBjuCP0Eu6sdcPYi/odqNn/SYV4eUR6MIyeSuyH4VP ZYVLnv4LzrjISHthvc61140DvOlyQlcwVvwb0pvV3DAIk1675LIkQrqQ3qCyXhDF/5t1mTWk3hYN kZb4Ydisaqx1gRkgpf9sGyffFxzn2q0Obe7DPrx4Pl1ilHDWXmqT1PmAn592cQ6EZW5kc3RyZWFt CmVuZG9iagoxMDggMCBvYmoKODcyCmVuZG9iagoxMTIgMCBvYmoKPDwvTGVuZ3RoIDExMyAwIFIv RmlsdGVyIC9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nL1T207bQBB991ect4IIri/kAk8JccpFJArE VVGrPiz24Cx4d51dh2K+vmvHaZsG9bFryWvNmTnnzMizguf68OqnvRPhfLzrIzOOh8xZOX4Dor0S gfPYJgzgB4gfnU2NjyBEvz9ALJyDK1mSllQeR5o9lmjPVTBbfMLklZuSywxflH7GSLK8MtxscxBR QuKBNALP7x7GT054ivjGObDQSJZKcoU5M6XShx8cP9xCMeX0aMGE4eooslAdjJTEHRP2nRJyhrFe v3UwCFp4ylLNUyAYeF6vjS0KxqX9Dnpb5olgPD8D22i7RaNdkGY5mWH5S9ZNlLB1v81GnDKFOxc3 qqC3/2R2vlSSznAUnuDU6vnBKbwTf0e87Set7bnazWt3/+pjWil8ZVpWOywXKk8Fk1iwZGlaO6GH y3VqbAeLUhOVbfiatKEKY15WHcyuAa8fetu2Pi9G701bVMp9q0WHmdlzNOMJbqiy8nLHU0Tr0iRL aub73BTtEc/ctrJp2Sa5Ke22y5MloxwXpHTGWUpmR2OuuWgE3nW9qV0Nizrr2CrsT5PLguy/f8t3 aMdLLhmm6oHntJ1mgPs1kz/WguQrx+iFOveWvy6O7AJpnmwHfE78qd4nu5+e1w3baEP5nssVFxsT w6ROEY1oa7TXbZIvmSbTAZVguYs/z+S14BbD9VoSAr9Tb2kPf51vc5ZZNPhuGSexc2ufnwmnKsZl bmRzdHJlYW0KZW5kb2JqCjExMyAwIG9iago1NDAKZW5kb2JqCjExNyAwIG9iago8PC9MZW5ndGgg MTE4IDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnicrVLBUtswEL3rK96tyUziSjbY KScCCUOYwlBsJofSw8YI22DLRJIZ+PvKsd0SZrixOmi0763eW6224J4Ab1e/pxX7fhMhM4wjY1sm diD6La1wkjjCDMJH8sC6GgE/QBTNkFRstFJWaiXtdKHpwaKPlX8Vn2H5WhhbqAzrWj9hrqh8M4UZ OFjIVFYbqeFzcThOHlnwA8lPNnLQZZ1TJe9xUjcp3VOhx9+YCAb0TJNKJRJZyrSuHNQmb6RS0kwQ HHLO+1xHdAc/HGqXFRXlEapOwNsMAse142bS6y787+Q0120TpHBB6baRrtWv9vJPwnscJD5zE+dU bKh0JfSkaUPavu25uY2xylRhZS8qoijEJRlDad4Yaa3B/EXiaj1B3DgaQi566ppM7mZlazXB4hRu KDwIe+w2nu8Zv85rJY9wN/LFwd0YEZ9NQxEGe1b65kznOD1uzLTYWfNqnbVNhQc76jnp9qmkBZUe 3sfy9blwGC4aJeGLSftPQnyI39eUOTT4465cJuyXW38BJvPCfGVuZHN0cmVhbQplbmRvYmoKMTE4 IDAgb2JqCjM5OQplbmRvYmoKNCAwIG9iago8PC9UeXBlL1BhZ2UvTWVkaWFCb3ggWzAgMCA1OTUg ODQyXQovUm90YXRlIDAvUGFyZW50IDMgMCBSCi9SZXNvdXJjZXM8PC9Qcm9jU2V0Wy9QREYgL1Rl eHRdCi9FeHRHU3RhdGUgOSAwIFIKL0ZvbnQgMTAgMCBSCj4+Ci9Db250ZW50cyA1IDAgUgo+Pgpl bmRvYmoKMTEgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0 ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0 YXRlIDE0IDAgUgovRm9udCAxNSAwIFIKPj4KL0NvbnRlbnRzIDEyIDAgUgo+PgplbmRvYmoKMTYg MCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVu dCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDE5IDAg UgovRm9udCAyMCAwIFIKPj4KL0NvbnRlbnRzIDE3IDAgUgo+PgplbmRvYmoKMjEgMCBvYmoKPDwv VHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgov UmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDI0IDAgUgovRm9udCAy NSAwIFIKPj4KL0NvbnRlbnRzIDIyIDAgUgo+PgplbmRvYmoKMjYgMCBvYmoKPDwvVHlwZS9QYWdl L01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2Vz PDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDI5IDAgUgovRm9udCAzMCAwIFIKPj4K L0NvbnRlbnRzIDI3IDAgUgo+PgplbmRvYmoKMzEgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94 IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1Nl dFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDM0IDAgUgovRm9udCAzNSAwIFIKPj4KL0NvbnRlbnRz IDMyIDAgUgo+PgplbmRvYmoKMzYgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1 IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9U ZXh0XQovRXh0R1N0YXRlIDM5IDAgUgovRm9udCA0MCAwIFIKPj4KL0NvbnRlbnRzIDM3IDAgUgo+ PgplbmRvYmoKNDEgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1Jv dGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0 R1N0YXRlIDQ0IDAgUgovRm9udCA0NSAwIFIKPj4KL0NvbnRlbnRzIDQyIDAgUgo+PgplbmRvYmoK NDYgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1Bh cmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDQ5 IDAgUgovRm9udCA1MCAwIFIKPj4KL0NvbnRlbnRzIDQ3IDAgUgo+PgplbmRvYmoKNTEgMCBvYmoK PDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAg UgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDU0IDAgUgovRm9u dCA1NSAwIFIKPj4KL0NvbnRlbnRzIDUyIDAgUgo+PgplbmRvYmoKNTYgMCBvYmoKPDwvVHlwZS9Q YWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3Vy Y2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDU5IDAgUgovRm9udCA2MCAwIFIK Pj4KL0NvbnRlbnRzIDU3IDAgUgo+PgplbmRvYmoKNjEgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlh Qm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJv Y1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDY0IDAgUgovRm9udCA2NSAwIFIKPj4KL0NvbnRl bnRzIDYyIDAgUgo+PgplbmRvYmoKNjYgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAg NTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERG IC9UZXh0XQovRXh0R1N0YXRlIDY5IDAgUgovRm9udCA3MCAwIFIKPj4KL0NvbnRlbnRzIDY3IDAg Ugo+PgplbmRvYmoKNzEgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0K L1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQov RXh0R1N0YXRlIDc0IDAgUgovRm9udCA3NSAwIFIKPj4KL0NvbnRlbnRzIDcyIDAgUgo+PgplbmRv YmoKNzYgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAw L1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRl IDc5IDAgUgovRm9udCA4MCAwIFIKPj4KL0NvbnRlbnRzIDc3IDAgUgo+PgplbmRvYmoKODEgMCBv YmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAz IDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDg0IDAgUgov Rm9udCA4NSAwIFIKPj4KL0NvbnRlbnRzIDgyIDAgUgo+PgplbmRvYmoKODYgMCBvYmoKPDwvVHlw ZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVz b3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDg5IDAgUgovRm9udCA5MCAw IFIKPj4KL0NvbnRlbnRzIDg3IDAgUgo+PgplbmRvYmoKOTEgMCBvYmoKPDwvVHlwZS9QYWdlL01l ZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwv UHJvY1NldFsvUERGIC9UZXh0XQovRXh0R1N0YXRlIDk0IDAgUgovRm9udCA5NSAwIFIKPj4KL0Nv bnRlbnRzIDkyIDAgUgo+PgplbmRvYmoKOTYgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFsw IDAgNTk1IDg0Ml0KL1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsv UERGIC9UZXh0XQovRXh0R1N0YXRlIDk5IDAgUgovRm9udCAxMDAgMCBSCj4+Ci9Db250ZW50cyA5 NyAwIFIKPj4KZW5kb2JqCjEwMSAwIG9iago8PC9UeXBlL1BhZ2UvTWVkaWFCb3ggWzAgMCA1OTUg ODQyXQovUm90YXRlIDAvUGFyZW50IDMgMCBSCi9SZXNvdXJjZXM8PC9Qcm9jU2V0Wy9QREYgL1Rl eHRdCi9FeHRHU3RhdGUgMTA0IDAgUgovRm9udCAxMDUgMCBSCj4+Ci9Db250ZW50cyAxMDIgMCBS Cj4+CmVuZG9iagoxMDYgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0K L1JvdGF0ZSAwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQov RXh0R1N0YXRlIDEwOSAwIFIKL0ZvbnQgMTEwIDAgUgo+PgovQ29udGVudHMgMTA3IDAgUgo+Pgpl bmRvYmoKMTExIDAgb2JqCjw8L1R5cGUvUGFnZS9NZWRpYUJveCBbMCAwIDU5NSA4NDJdCi9Sb3Rh dGUgMC9QYXJlbnQgMyAwIFIKL1Jlc291cmNlczw8L1Byb2NTZXRbL1BERiAvVGV4dF0KL0V4dEdT dGF0ZSAxMTQgMCBSCi9Gb250IDExNSAwIFIKPj4KL0NvbnRlbnRzIDExMiAwIFIKPj4KZW5kb2Jq CjExNiAwIG9iago8PC9UeXBlL1BhZ2UvTWVkaWFCb3ggWzAgMCA1OTUgODQyXQovUm90YXRlIDAv UGFyZW50IDMgMCBSCi9SZXNvdXJjZXM8PC9Qcm9jU2V0Wy9QREYgL1RleHRdCi9FeHRHU3RhdGUg MTE5IDAgUgovRm9udCAxMjAgMCBSCj4+Ci9Db250ZW50cyAxMTcgMCBSCj4+CmVuZG9iagozIDAg b2JqCjw8IC9UeXBlIC9QYWdlcyAvS2lkcyBbCjQgMCBSCjExIDAgUgoxNiAwIFIKMjEgMCBSCjI2 IDAgUgozMSAwIFIKMzYgMCBSCjQxIDAgUgo0NiAwIFIKNTEgMCBSCjU2IDAgUgo2MSAwIFIKNjYg MCBSCjcxIDAgUgo3NiAwIFIKODEgMCBSCjg2IDAgUgo5MSAwIFIKOTYgMCBSCjEwMSAwIFIKMTA2 IDAgUgoxMTEgMCBSCjExNiAwIFIKXSAvQ291bnQgMjMKPj4KZW5kb2JqCjEgMCBvYmoKPDwvVHlw ZSAvQ2F0YWxvZyAvUGFnZXMgMyAwIFIKL01ldGFkYXRhIDEyMSAwIFIKPj4KZW5kb2JqCjcgMCBv YmoKPDwvVHlwZS9FeHRHU3RhdGUKL09QTSAxPj5lbmRvYmoKOSAwIG9iago8PC9SNwo3IDAgUj4+ CmVuZG9iagoxMCAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagoxNCAwIG9iago8PC9SNwo3IDAg Uj4+CmVuZG9iagoxNSAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagoxOSAwIG9iago8PC9SNwo3 IDAgUj4+CmVuZG9iagoyMCAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagoyNCAwIG9iago8PC9S Nwo3IDAgUj4+CmVuZG9iagoyNSAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagoyOSAwIG9iago8 PC9SNwo3IDAgUj4+CmVuZG9iagozMCAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagozNCAwIG9i ago8PC9SNwo3IDAgUj4+CmVuZG9iagozNSAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagozOSAw IG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago0MCAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iago0 NCAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago0NSAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9i ago0OSAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago1MCAwIG9iago8PC9SOAo4IDAgUj4+CmVu ZG9iago1NCAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago1NSAwIG9iago8PC9SOAo4IDAgUj4+ CmVuZG9iago1OSAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago2MCAwIG9iago8PC9SOAo4IDAg Uj4+CmVuZG9iago2NCAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago2NSAwIG9iago8PC9SOAo4 IDAgUj4+CmVuZG9iago2OSAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago3MCAwIG9iago8PC9S OAo4IDAgUj4+CmVuZG9iago3NCAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago3NSAwIG9iago8 PC9SOAo4IDAgUj4+CmVuZG9iago3OSAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago4MCAwIG9i ago8PC9SOAo4IDAgUj4+CmVuZG9iago4NCAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago4NSAw IG9iago8PC9SOAo4IDAgUj4+CmVuZG9iago4OSAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9iago5 MCAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iago5NCAwIG9iago8PC9SNwo3IDAgUj4+CmVuZG9i ago5NSAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iago5OSAwIG9iago8PC9SNwo3IDAgUj4+CmVu ZG9iagoxMDAgMCBvYmoKPDwvUjgKOCAwIFI+PgplbmRvYmoKMTA0IDAgb2JqCjw8L1I3CjcgMCBS Pj4KZW5kb2JqCjEwNSAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iagoxMDkgMCBvYmoKPDwvUjcK NyAwIFI+PgplbmRvYmoKMTEwIDAgb2JqCjw8L1I4CjggMCBSPj4KZW5kb2JqCjExNCAwIG9iago8 PC9SNwo3IDAgUj4+CmVuZG9iagoxMTUgMCBvYmoKPDwvUjgKOCAwIFI+PgplbmRvYmoKMTE5IDAg b2JqCjw8L1I3CjcgMCBSPj4KZW5kb2JqCjEyMCAwIG9iago8PC9SOAo4IDAgUj4+CmVuZG9iago4 IDAgb2JqCjw8L0Jhc2VGb250L0NvdXJpZXIvVHlwZS9Gb250Ci9TdWJ0eXBlL1R5cGUxPj4KZW5k b2JqCjEyMSAwIG9iago8PC9UeXBlL01ldGFkYXRhCi9TdWJ0eXBlL1hNTC9MZW5ndGggMTM1ND4+ c3RyZWFtCjw/eHBhY2tldCBiZWdpbj0n77u/JyBpZD0nVzVNME1wQ2VoaUh6cmVTek5UY3prYzlk Jz8+Cjw/YWRvYmUteGFwLWZpbHRlcnMgZXNjPSJDUkxGIj8+Cjx4OnhtcG1ldGEgeG1sbnM6eD0n YWRvYmU6bnM6bWV0YS8nIHg6eG1wdGs9J1hNUCB0b29sa2l0IDIuOS4xLTEzLCBmcmFtZXdvcmsg MS42Jz4KPHJkZjpSREYgeG1sbnM6cmRmPSdodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJk Zi1zeW50YXgtbnMjJyB4bWxuczppWD0naHR0cDovL25zLmFkb2JlLmNvbS9pWC8xLjAvJz4KPHJk ZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9J3V1aWQ6MDllYzZjODEtZGVkMS0xMWYwLTAwMDAtOTQw Y2UwZjk2Y2Y5JyB4bWxuczpwZGY9J2h0dHA6Ly9ucy5hZG9iZS5jb20vcGRmLzEuMy8nIHBkZjpQ cm9kdWNlcj0nR1BMIEdob3N0c2NyaXB0IDkuMDYnLz4KPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJv dXQ9J3V1aWQ6MDllYzZjODEtZGVkMS0xMWYwLTAwMDAtOTQwY2UwZjk2Y2Y5JyB4bWxuczp4bXA9 J2h0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC8nPjx4bXA6TW9kaWZ5RGF0ZT4yMDE1LTEyLTE5 VDE2OjU2OjIzLTA4OjAwPC94bXA6TW9kaWZ5RGF0ZT4KPHhtcDpDcmVhdGVEYXRlPjIwMTUtMTIt MTlUMTY6NTY6MjMtMDg6MDA8L3htcDpDcmVhdGVEYXRlPgo8eG1wOkNyZWF0b3JUb29sPkdOVSBF bnNjcmlwdCAxLjYuNS45MDwveG1wOkNyZWF0b3JUb29sPjwvcmRmOkRlc2NyaXB0aW9uPgo8cmRm OkRlc2NyaXB0aW9uIHJkZjphYm91dD0ndXVpZDowOWVjNmM4MS1kZWQxLTExZjAtMDAwMC05NDBj ZTBmOTZjZjknIHhtbG5zOnhhcE1NPSdodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vJyB4 YXBNTTpEb2N1bWVudElEPSd1dWlkOjA5ZWM2YzgxLWRlZDEtMTFmMC0wMDAwLTk0MGNlMGY5NmNm OScvPgo8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0ndXVpZDowOWVjNmM4MS1kZWQxLTExZjAt MDAwMC05NDBjZTBmOTZjZjknIHhtbG5zOmRjPSdodHRwOi8vcHVybC5vcmcvZGMvZWxlbWVudHMv MS4xLycgZGM6Zm9ybWF0PSdhcHBsaWNhdGlvbi9wZGYnPjxkYzp0aXRsZT48cmRmOkFsdD48cmRm OmxpIHhtbDpsYW5nPSd4LWRlZmF1bHQnPkVuc2NyaXB0IE91dHB1dDwvcmRmOmxpPjwvcmRmOkFs dD48L2RjOnRpdGxlPjwvcmRmOkRlc2NyaXB0aW9uPgo8L3JkZjpSREY+CjwveDp4bXBtZXRhPgog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCjw/eHBhY2tldCBlbmQ9J3cnPz4KZW5kc3Ry ZWFtCmVuZG9iagoyIDAgb2JqCjw8L1Byb2R1Y2VyKEdQTCBHaG9zdHNjcmlwdCA5LjA2KQovQ3Jl YXRpb25EYXRlKEQ6MjAxNTEyMTkxNjU2MjMtMDgnMDAnKQovTW9kRGF0ZShEOjIwMTUxMjE5MTY1 NjIzLTA4JzAwJykKL1RpdGxlKEVuc2NyaXB0IE91dHB1dCkKL0NyZWF0b3IoR05VIEVuc2NyaXB0 IDEuNi41LjkwKT4+ZW5kb2JqCnhyZWYKMCAxMjIKMDAwMDAwMDAwMCA2NTUzNSBmIAowMDAwMDMw OTk0IDAwMDAwIG4gCjAwMDAwMzM5ODMgMDAwMDAgbiAKMDAwMDAzMDc3NiAwMDAwMCBuIAowMDAw MDI3MDM2IDAwMDAwIG4gCjAwMDAwMDAwMTUgMDAwMDAgbiAKMDAwMDAwMDk4MSAwMDAwMCBuIAow MDAwMDMxMDYwIDAwMDAwIG4gCjAwMDAwMzI0ODkgMDAwMDAgbiAKMDAwMDAzMTEwMSAwMDAwMCBu IAowMDAwMDMxMTMwIDAwMDAwIG4gCjAwMDAwMjcxOTUgMDAwMDAgbiAKMDAwMDAwMTAwMCAwMDAw MCBuIAowMDAwMDAyMzIzIDAwMDAwIG4gCjAwMDAwMzExNjAgMDAwMDAgbiAKMDAwMDAzMTE5MCAw MDAwMCBuIAowMDAwMDI3MzU3IDAwMDAwIG4gCjAwMDAwMDIzNDQgMDAwMDAgbiAKMDAwMDAwMzcw MiAwMDAwMCBuIAowMDAwMDMxMjIwIDAwMDAwIG4gCjAwMDAwMzEyNTAgMDAwMDAgbiAKMDAwMDAy NzUxOSAwMDAwMCBuIAowMDAwMDAzNzIzIDAwMDAwIG4gCjAwMDAwMDQ2NzEgMDAwMDAgbiAKMDAw MDAzMTI4MCAwMDAwMCBuIAowMDAwMDMxMzEwIDAwMDAwIG4gCjAwMDAwMjc2ODEgMDAwMDAgbiAK MDAwMDAwNDY5MSAwMDAwMCBuIAowMDAwMDA1OTI2IDAwMDAwIG4gCjAwMDAwMzEzNDAgMDAwMDAg biAKMDAwMDAzMTM3MCAwMDAwMCBuIAowMDAwMDI3ODQzIDAwMDAwIG4gCjAwMDAwMDU5NDcgMDAw MDAgbiAKMDAwMDAwNzI3NSAwMDAwMCBuIAowMDAwMDMxNDAwIDAwMDAwIG4gCjAwMDAwMzE0MzAg MDAwMDAgbiAKMDAwMDAyODAwNSAwMDAwMCBuIAowMDAwMDA3Mjk2IDAwMDAwIG4gCjAwMDAwMDg2 MDEgMDAwMDAgbiAKMDAwMDAzMTQ2MCAwMDAwMCBuIAowMDAwMDMxNDkwIDAwMDAwIG4gCjAwMDAw MjgxNjcgMDAwMDAgbiAKMDAwMDAwODYyMiAwMDAwMCBuIAowMDAwMDA5OTUxIDAwMDAwIG4gCjAw MDAwMzE1MjAgMDAwMDAgbiAKMDAwMDAzMTU1MCAwMDAwMCBuIAowMDAwMDI4MzI5IDAwMDAwIG4g CjAwMDAwMDk5NzIgMDAwMDAgbiAKMDAwMDAxMTE3NiAwMDAwMCBuIAowMDAwMDMxNTgwIDAwMDAw IG4gCjAwMDAwMzE2MTAgMDAwMDAgbiAKMDAwMDAyODQ5MSAwMDAwMCBuIAowMDAwMDExMTk3IDAw MDAwIG4gCjAwMDAwMTI1NDEgMDAwMDAgbiAKMDAwMDAzMTY0MCAwMDAwMCBuIAowMDAwMDMxNjcw IDAwMDAwIG4gCjAwMDAwMjg2NTMgMDAwMDAgbiAKMDAwMDAxMjU2MiAwMDAwMCBuIAowMDAwMDEz ODY4IDAwMDAwIG4gCjAwMDAwMzE3MDAgMDAwMDAgbiAKMDAwMDAzMTczMCAwMDAwMCBuIAowMDAw MDI4ODE1IDAwMDAwIG4gCjAwMDAwMTM4ODkgMDAwMDAgbiAKMDAwMDAxNTE4MiAwMDAwMCBuIAow MDAwMDMxNzYwIDAwMDAwIG4gCjAwMDAwMzE3OTAgMDAwMDAgbiAKMDAwMDAyODk3NyAwMDAwMCBu IAowMDAwMDE1MjAzIDAwMDAwIG4gCjAwMDAwMTY1ODQgMDAwMDAgbiAKMDAwMDAzMTgyMCAwMDAw MCBuIAowMDAwMDMxODUwIDAwMDAwIG4gCjAwMDAwMjkxMzkgMDAwMDAgbiAKMDAwMDAxNjYwNSAw MDAwMCBuIAowMDAwMDE3ODQ3IDAwMDAwIG4gCjAwMDAwMzE4ODAgMDAwMDAgbiAKMDAwMDAzMTkx MCAwMDAwMCBuIAowMDAwMDI5MzAxIDAwMDAwIG4gCjAwMDAwMTc4NjggMDAwMDAgbiAKMDAwMDAx ODk2NyAwMDAwMCBuIAowMDAwMDMxOTQwIDAwMDAwIG4gCjAwMDAwMzE5NzAgMDAwMDAgbiAKMDAw MDAyOTQ2MyAwMDAwMCBuIAowMDAwMDE4OTg4IDAwMDAwIG4gCjAwMDAwMjAwNDEgMDAwMDAgbiAK MDAwMDAzMjAwMCAwMDAwMCBuIAowMDAwMDMyMDMwIDAwMDAwIG4gCjAwMDAwMjk2MjUgMDAwMDAg biAKMDAwMDAyMDA2MSAwMDAwMCBuIAowMDAwMDIxNTE2IDAwMDAwIG4gCjAwMDAwMzIwNjAgMDAw MDAgbiAKMDAwMDAzMjA5MCAwMDAwMCBuIAowMDAwMDI5Nzg3IDAwMDAwIG4gCjAwMDAwMjE1Mzcg MDAwMDAgbiAKMDAwMDAyMjc3NSAwMDAwMCBuIAowMDAwMDMyMTIwIDAwMDAwIG4gCjAwMDAwMzIx NTAgMDAwMDAgbiAKMDAwMDAyOTk0OSAwMDAwMCBuIAowMDAwMDIyNzk2IDAwMDAwIG4gCjAwMDAw MjM5MDUgMDAwMDAgbiAKMDAwMDAzMjE4MCAwMDAwMCBuIAowMDAwMDMyMjEwIDAwMDAwIG4gCjAw MDAwMzAxMTIgMDAwMDAgbiAKMDAwMDAyMzkyNiAwMDAwMCBuIAowMDAwMDI0OTE5IDAwMDAwIG4g CjAwMDAwMzIyNDEgMDAwMDAgbiAKMDAwMDAzMjI3MiAwMDAwMCBuIAowMDAwMDMwMjc4IDAwMDAw IG4gCjAwMDAwMjQ5NDAgMDAwMDAgbiAKMDAwMDAyNTg4NiAwMDAwMCBuIAowMDAwMDMyMzAzIDAw MDAwIG4gCjAwMDAwMzIzMzQgMDAwMDAgbiAKMDAwMDAzMDQ0NCAwMDAwMCBuIAowMDAwMDI1OTA3 IDAwMDAwIG4gCjAwMDAwMjY1MjEgMDAwMDAgbiAKMDAwMDAzMjM2NSAwMDAwMCBuIAowMDAwMDMy Mzk2IDAwMDAwIG4gCjAwMDAwMzA2MTAgMDAwMDAgbiAKMDAwMDAyNjU0MiAwMDAwMCBuIAowMDAw MDI3MDE1IDAwMDAwIG4gCjAwMDAwMzI0MjcgMDAwMDAgbiAKMDAwMDAzMjQ1OCAwMDAwMCBuIAow MDAwMDMyNTUxIDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgMTIyIC9Sb290IDEgMCBSIC9JbmZv IDIgMCBSCi9JRCBbPEEzODI1OTgzMEUxMDhBMkY2MDk4QjNFNDg1MDVCNUQwPjxBMzgyNTk4MzBF MTA4QTJGNjA5OEIzRTQ4NTA1QjVEMD5dCj4+CnN0YXJ0eHJlZgozNDE2MgolJUVPRgo= ------=_NextPart_000_0010_01D13A99.56FCF240-- From nobody Mon Dec 21 08:00:11 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 882981A90A1 for ; Mon, 21 Dec 2015 08:00:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.112 X-Spam-Level: X-Spam-Status: No, score=-5.112 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ly61EWT-D0XH for ; Mon, 21 Dec 2015 08:00:06 -0800 (PST) Received: from mxe02.gs.com (mxe02.gs.com [199.99.47.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48F1A1A9097 for ; Mon, 21 Dec 2015 08:00:06 -0800 (PST) Received: from pps.filterd (gsppabdp01sd.idz.gs.com [127.0.0.1]) by gsppabdp01sd.idz.gs.com (8.15.0.59/8.15.0.59) with SMTP id tBLFthUx027419; Mon, 21 Dec 2015 10:59:57 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gs.com; h=from : to : cc : date : subject : message-id : references : in-reply-to : content-type : mime-version; s=gs201505; bh=YvR1QoLO8GE5g7OEEJGq1TCqcEJbx2EZt1z5k4ylOhg=; b=N2fUJel5t85iPQrqHTkJXLmKzi1mVqVvu6KXVM0DAfjp7+VEb6tfTPEraPPyrxd/8RLX FcwX+wWmEAdVhYS5hwhM9a2KC50ESYOf8lKe2NCS0z/aEuJt2t1mAJ5pUvL7avBnAXf+ FTuHe4gGILo426bas0TOb1Iicn9GDYrRi5mSBB3gWdoh1nguv7damoxAbe0+rPPw4ULy eHRFszOsXEL75uwiypKS1kBCyniRcCPVBqVjXqkCEXoq10yO9UTAaO6nhKtRZVfeZWGE bmUwU2DUoxvYEArVykrQXQQ2rcfCren419/9FSy2dg74pdWttB8BtMo/gzTi9LjCTasf Eg== Received: from gsppabdp04nd.inz.gs.com ([10.204.43.243]) by gsppabdp01sd.idz.gs.com with ESMTP id 1yw1uq53cs-1; Mon, 21 Dec 2015 10:59:57 -0500 Received: from pps.filterd (gsppabdp04nd.inz.gs.com [127.0.0.1]) by gsppabdp04nd.inz.gs.com (8.15.0.59/8.15.0.59) with SMTP id tBLF1Hmd031974; Mon, 21 Dec 2015 10:59:57 -0500 Received: from gshcbdp01ex.firmwide.corp.gs.com (gshcbdp01ex.firmwide.corp.gs.com [10.135.172.4]) by gsppabdp04nd.inz.gs.com with ESMTP id 1yw443tvqp-1; Mon, 21 Dec 2015 10:59:56 -0500 Received: from GSCMAMP19EX.firmwide.corp.gs.com ([139.172.38.36]) by gshcbdp01ex.firmwide.corp.gs.com ([10.135.172.4]) with mapi; Mon, 21 Dec 2015 10:59:56 -0500 From: "Zarny, Myo" To: "'Susan Hares'" , "'i2nsf@ietf.org'" Date: Mon, 21 Dec 2015 10:59:55 -0500 Thread-Topic: [I2nsf] FW: Merged I2NSF problem statement and Use Case - draft-hares Thread-Index: AQEc9B0JocM47P/VL6/qCq5CXtnSCKA7nwxQgAJ/wrA= Message-ID: References: <002701d13ac4$24025a30$6c070e90$@ndzh.com> In-Reply-To: <002701d13ac4$24025a30$6c070e90$@ndzh.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-retentionstamp: Firmwide Content-Type: multipart/alternative; boundary="_000_A3233753A4B65F43BCA1B64DA99A9C230809569C2FGSCMAMP19EXfi_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2015-12-21_10:, , signatures=0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2015-12-21_10:, , signatures=0 Archived-At: Cc: "'adrian@olddog.co.uk'" , 'Linda Dunbar' Subject: Re: [I2nsf] FW: Merged I2NSF problem statement and Use Case - draft-hares X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Dec 2015 16:00:10 -0000 --_000_A3233753A4B65F43BCA1B64DA99A9C230809569C2FGSCMAMP19EXfi_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Sue, Thanks very much for putting this together. It's quite challenging to put v= arious threads together in a sensible order, which you've successfully done= . And far easier to nitpick, which I'll do here. A few comments: =B7 Section 3.1.9 can be better worded. o Right now, it's describing not just the requirements for DOTS controlle= r interfaces but also what to do about them. The text should describe why w= e need standard interfaces for: =A7 DOTS controllers to which external entities (such as NSFs or users) ca= n signal the need for DDOS mitigation, revoke mitigation policies, etc. =A7 Network entities that will execute (implement/withdraw/get stats, etc.= ) DDOS mitigation functions o It describes the mysterious "I2NSF Controller" which I think the origin= al author meant some network security controller. IMHO, I2NSF covers the in= terfaces for DOTS controllers and NSFs (and anything in between.) This draf= t shouldn't prescribe how mitigation policies may be carried out. (Policies= may be executed through an intermediary like a "network security controlle= r" or by calling the NSFs themselves.) =B7 A similar issue with Section 3.1.10. It speaks of a controller = distributing keys in the very first sentence. The need, as it does describe= later in the paragraph, is a standard interface to provision and distribut= e the keys. Let's not muddy waters by declaring who may invoke the said int= erfaces. We should at least add "for example, a controller" or something li= ke that. =B7 Section 3.3 describes the general need for standard interfaces = that could interpret [security] policies. Now, my understanding is that the= current I2NSF charter doesn't really deal with policy interpretation beyon= d the most basic. But it can probably stand as is now since it's describing= the requirements. =B7 Overall, we need to do a sweep of copy-editing (for typos, gram= mar, etc.) My two cents... From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Susan Hares Sent: 19 December 2015 8:17 PM To: i2nsf@ietf.org Cc: adrian@olddog.co.uk; 'Linda Dunbar' Subject: [I2nsf] FW: Merged I2NSF problem statement and Use Case - draft-ha= res Sending this just to list. Sue From: Susan Hares [mailto:shares@ndzh.com] Sent: Saturday, December 19, 2015 8:11 PM To: 'i2nsf@ietf.org' Cc: 'antonio.pastorperales@telefonica.com'; 'ldunbar@huawei.com'; 'diego.r.= lopez@telefonica.com'; 'myo.zarny@gs.com'; 'N.Leymann@telekom.de'; 'michael= q@prime-tel.com'; 'mohamed.boucadair@orange.com'; 'Christian.jacquenet@oran= ge.com'; 'shaibalc@us-ignite.org'; 'adrian@olddog.co.uk'; 'Kathleen Moriart= y' Subject: Merged I2NSF problem statement and Use Case - draft-hares I2NSF folks and my co-authors: I have merged all the changes you suggested into Linda's problem statement = and combined this with the use cases. Please let me know if you have any c= oncerns or changes to the resulting document. If anyone was left off the Contributors section, would you please let me kn= ow. This document is the combination of lots of people's hard work. I wil= l upload it as draft-hares-merged-i2nsf-problem-use-cases-00.txt along wit= h the XML on Sunday evening (12/20/2015) and then ask for WG adoption. I'= ll watch for comments in the next few weeks and revise the text. Does I2NSF have a github repository? If so, we can put the XML there to ch= ange it. Sue Hares --_000_A3233753A4B65F43BCA1B64DA99A9C230809569C2FGSCMAMP19EXfi_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

    Hi Sue,

     

    Thanks very much for putting this together. It’= ;s quite challenging to put various threads together in a sensible order, w= hich you’ve successfully done. And far easier to nitpick, which IR= 17;ll do here.

     

    A few comments:

    =B7  &nbs= p;      Section 3.1.9 can be better worded.

    o   <= span style=3D'color:#1F497D'>Right now, it’s describing not just the = requirements for DOTS controller interfaces but also what to do about them.= The text should describe why we need standard interfaces for:

    =A7  <= span style=3D'color:#1F497D'>DOTS controllers to which external entities (s= uch as NSFs or users) can signal the need for DDOS mitigation, revoke mitig= ation policies, etc.

    =A7 = Network entit= ies that will execute (implement/withdraw/get stats, etc.) DDOS mitigation = functions

    o   It describes the= mysterious “I2NSF Controller” which I think the original autho= r meant some network security controller. IMHO, I2NSF covers the interfaces= for DOTS controllers and NSFs (and anything in between.) This draft should= n’t prescribe how mitigation policies may be carried out. (Policies m= ay be executed through an intermediary like a “network security contr= oller” or by calling the NSFs themselves.)

    =B7         A similar issue with Section 3.1.10. It= speaks of a controller distributing keys in the very first sentence. The n= eed, as it does describe later in the paragraph, is a standard interface to= provision and distribute the keys. Let’s not muddy waters by declari= ng who may invoke the said interfaces. We should at least add “for ex= ample, a controller” or something like that.

    =B7         Overall, we need to do a sweep = of copy-editing (for typos, grammar, etc.)

     

    My two cents…<= /span>

     

     = ;

    = From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Susan Ha= res
    Sent: 19 December 2015 8:17 PM
    To: i2nsf@ietf.orgCc: adrian@olddog.co.uk; 'Linda Dunbar'
    Subject: [I2nsf]= FW: Merged I2NSF problem statement and Use Case - draft-hares

    &= nbsp;

    Sending this just to list.

     

    Sue

    From: Susan Hares [mailto:shares@ndzh.com]
    Sent: Saturday, Dec= ember 19, 2015 8:11 PM
    To: 'i2nsf@ietf.org'
    Cc: 'antoni= o.pastorperales@telefonica.com'; 'ldunbar@huawei.com'; 'diego.r.lopez@telef= onica.com'; 'myo.zarny@gs.com'; 'N.Leymann@telekom.de'; 'michaelq@prime-tel= .com'; 'mohamed.boucadair@orange.com'; 'Christian.jacquenet@orange.com'; 's= haibalc@us-ignite.org'; 'adrian@olddog.co.uk'; 'Kathleen Moriarty'
    Su= bject: Merged I2NSF problem statement and Use Case - draft-hares

    =  

    I2NSF = folks and my co-authors:

     

    I have merged all the changes you suggested into Linda’s probl= em statement and combined this with the use cases.  Please let me know= if you have any concerns or changes to the resulting document.   = ;

     =

    If anyone was lef= t off the Contributors section, would you please let me know.  This do= cument is the combination of lots of people’s hard work.  I will= upload it as  draft-hares-merged-i2nsf-problem-use-cases-00.txt along= with the XML on Sunday evening (12/20/2015) and then ask for WG adoption. =   I’ll watch for comments in the next few weeks and revise = the text.

     

    Does I2N= SF have a github repository?  If so, we can put the XML there to chang= e it.

    &= nbsp;

    Sue Hares

     

    = --_000_A3233753A4B65F43BCA1B64DA99A9C230809569C2FGSCMAMP19EXfi_-- From nobody Mon Dec 21 08:17:01 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C9A61A909E for ; Mon, 21 Dec 2015 08:16:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -99.054 X-Spam-Level: X-Spam-Status: No, score=-99.054 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=2.845, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bQOPlzYvkJn7 for ; Mon, 21 Dec 2015 08:16:52 -0800 (PST) Received: from hickoryhill-consulting.com (hhc-web3.hickoryhill-consulting.com [64.9.205.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D59D71A909C for ; Mon, 21 Dec 2015 08:16:51 -0800 (PST) X-Default-Received-SPF: pass (skip=loggedin (res=PASS)) x-ip-name=74.43.47.177; From: "Susan Hares" To: "'Zarny, Myo'" , References: <002701d13ac4$24025a30$6c070e90$@ndzh.com> In-Reply-To: Date: Mon, 21 Dec 2015 11:16:21 -0500 Message-ID: <00a901d13c0a$f1f06c60$d5d14520$@ndzh.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00AA_01D13BE1.091EF840" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQMPnHmelZuXAp4G2vd1mUXoIavDtgK+NI+jnELqCgA= Content-Language: en-us X-Authenticated-User: skh@ndzh.com Archived-At: Cc: adrian@olddog.co.uk, 'Linda Dunbar' Subject: Re: [I2nsf] FW: Merged I2NSF problem statement and Use Case - draft-hares X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Dec 2015 16:16:59 -0000 This is a multipart message in MIME format. ------=_NextPart_000_00AA_01D13BE1.091EF840 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Myo: =20 Thank you for the comments. I will work on a revision for sections = 3.1.9 and 3.1.10 plus copy editing. I=92ll send a revision of 3.1.9 and = 3.1.10 to the list later today. I=92ll also read through the text again looking = for copy editing errors.=20 =20 Sue=20 =20 From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Zarny, Myo Sent: Monday, December 21, 2015 11:00 AM To: 'Susan Hares'; 'i2nsf@ietf.org' Cc: 'adrian@olddog.co.uk'; 'Linda Dunbar' Subject: Re: [I2nsf] FW: Merged I2NSF problem statement and Use Case - draft-hares =20 Hi Sue, =20 Thanks very much for putting this together. It=92s quite challenging to = put various threads together in a sensible order, which you=92ve = successfully done. And far easier to nitpick, which I=92ll do here. =20 A few comments: =B7 Section 3.1.9 can be better worded. o Right now, it=92s describing not just the requirements for DOTS = controller interfaces but also what to do about them. The text should describe why = we need standard interfaces for: =A7 DOTS controllers to which external entities (such as NSFs or users) = can signal the need for DDOS mitigation, revoke mitigation policies, etc. =A7 Network entities that will execute (implement/withdraw/get stats, = etc.) DDOS mitigation functions o It describes the mysterious =93I2NSF Controller=94 which I think the original author meant some network security controller. IMHO, I2NSF = covers the interfaces for DOTS controllers and NSFs (and anything in between.) = This draft shouldn=92t prescribe how mitigation policies may be carried out. (Policies may be executed through an intermediary like a =93network = security controller=94 or by calling the NSFs themselves.) =B7 A similar issue with Section 3.1.10. It speaks of a = controller distributing keys in the very first sentence. The need, as it does = describe later in the paragraph, is a standard interface to provision and = distribute the keys. Let=92s not muddy waters by declaring who may invoke the said interfaces. We should at least add =93for example, a controller=94 or = something like that. =B7 Section 3.3 describes the general need for standard = interfaces that could interpret [security] policies. Now, my understanding is that = the current I2NSF charter doesn=92t really deal with policy interpretation = beyond the most basic. But it can probably stand as is now since it=92s = describing the requirements. =B7 Overall, we need to do a sweep of copy-editing (for typos, grammar, etc.) =20 My two cents=85 =20 =20 From: I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Susan Hares Sent: 19 December 2015 8:17 PM To: i2nsf@ietf.org Cc: adrian@olddog.co.uk; 'Linda Dunbar' Subject: [I2nsf] FW: Merged I2NSF problem statement and Use Case - draft-hares =20 Sending this just to list.=20 =20 Sue=20 From: Susan Hares [mailto:shares@ndzh.com]=20 Sent: Saturday, December 19, 2015 8:11 PM To: 'i2nsf@ietf.org' Cc: 'antonio.pastorperales@telefonica.com'; 'ldunbar@huawei.com'; 'diego.r.lopez@telefonica.com'; 'myo.zarny@gs.com'; = 'N.Leymann@telekom.de'; 'michaelq@prime-tel.com'; 'mohamed.boucadair@orange.com'; 'Christian.jacquenet@orange.com'; 'shaibalc@us-ignite.org'; 'adrian@olddog.co.uk'; 'Kathleen Moriarty' Subject: Merged I2NSF problem statement and Use Case - draft-hares =20 I2NSF folks and my co-authors:=20 =20 I have merged all the changes you suggested into Linda=92s problem = statement and combined this with the use cases. Please let me know if you have = any concerns or changes to the resulting document. =20 =20 If anyone was left off the Contributors section, would you please let me know. This document is the combination of lots of people=92s hard work. = I will upload it as draft-hares-merged-i2nsf-problem-use-cases-00.txt = along with the XML on Sunday evening (12/20/2015) and then ask for WG = adoption. I=92ll watch for comments in the next few weeks and revise the text.=20 =20 Does I2NSF have a github repository? If so, we can put the XML there to change it.=20 =20 Sue Hares=20 =20 ------=_NextPart_000_00AA_01D13BE1.091EF840 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

    Myo:

     

    Thank you for the = comments.=A0 I will work on a revision for sections 3.1.9 and 3.1.10 = plus copy editing.=A0 I’ll send a revision of 3.1.9 and 3.1.10 to = the list later today. =A0I’ll also read through the text again = looking for copy editing errors.

     

    Sue =

     

    From:= = I2nsf [mailto:i2nsf-bounces@ietf.org] On Behalf Of Zarny, = Myo
    Sent: Monday, December 21, 2015 11:00 AM
    To: = 'Susan Hares'; 'i2nsf@ietf.org'
    Cc: 'adrian@olddog.co.uk'; = 'Linda Dunbar'
    Subject: Re: [I2nsf] FW: Merged I2NSF problem = statement and Use Case - draft-hares

     

    Hi Sue,

     

    Thanks very much for = putting this together. It’s quite challenging to put various = threads together in a sensible order, which you’ve successfully = done. And far easier to nitpick, which I’ll do = here.

     

    A few = comments:

    =B7         = Section = 3.1.9 can be better worded.

    o   = Right now, = it’s describing not just the requirements for DOTS controller = interfaces but also what to do about them. The text should describe why = we need standard interfaces for:

    =A7  DOTS controllers to which external entities = (such as NSFs or users) can signal the need for DDOS mitigation, revoke = mitigation policies, etc.

    =A7  Network entities that will execute = (implement/withdraw/get stats, etc.) DDOS mitigation = functions

    o   = It = describes the mysterious “I2NSF Controller” which I think = the original author meant some network security controller. IMHO, I2NSF = covers the interfaces for DOTS controllers and NSFs (and anything in = between.) This draft shouldn’t prescribe how mitigation policies = may be carried out. (Policies may be executed through an intermediary = like a “network security controller” or by calling the NSFs = themselves.)

    =B7         = A similar = issue with Section 3.1.10. It speaks of a controller distributing keys = in the very first sentence. The need, as it does describe later in the = paragraph, is a standard interface to provision and distribute the keys. = Let’s not muddy waters by declaring who may invoke the said = interfaces. We should at least add “for example, a = controller” or something like that.

    =B7         = Section 3.3 = describes the general need for standard interfaces that could interpret = [security] policies. Now, my understanding is that the current I2NSF = charter doesn’t really deal with policy interpretation beyond the = most basic. But it can probably stand as is now since it’s = describing the requirements.

    =B7         = Overall, we = need to do a sweep of copy-editing (for typos, grammar, = etc.)

     

    My two = cents…

     

     

    From:= = I2nsf [mailto:i2nsf-bounces@ietf.org]= On Behalf Of Susan Hares
    Sent: 19 December 2015 8:17 = PM
    To: i2nsf@ietf.org
    Cc: adrian@olddog.co.uk; 'Linda = Dunbar'
    Subject: [I2nsf] FW: Merged I2NSF problem statement = and Use Case - draft-hares

     

    Sending this just to list. =

     

    Sue =

    From:= = Susan Hares [mailto:shares@ndzh.com] =
    Sent: Saturday, December 19, 2015 8:11 PM
    To: = 'i2nsf@ietf.org'
    Cc: 'antonio.pastorperales@telefonica.com'; = 'ldunbar@huawei.com'; 'diego.r.lopez@telefonica.com'; = 'myo.zarny@gs.com'; 'N.Leymann@telekom.de'; 'michaelq@prime-tel.com'; = 'mohamed.boucadair@orange.com'; 'Christian.jacquenet@orange.com'; = 'shaibalc@us-ignite.org'; 'adrian@olddog.co.uk'; 'Kathleen = Moriarty'
    Subject: Merged I2NSF problem statement and Use Case = - draft-hares

     

    I2NSF folks and my co-authors: =

     

    I have merged all the changes you suggested = into Linda’s problem statement and combined this with the use = cases.  Please let me know if you have any concerns or changes to = the resulting document.   

     

    If anyone was left off the Contributors = section, would you please let me know.  This document is the = combination of lots of people’s hard work.  I will upload it = as  draft-hares-merged-i2nsf-problem-use-cases-00.txt along with = the XML on Sunday evening (12/20/2015) and then ask for WG adoption. =   I’ll watch for comments in the next few weeks and = revise the text.

     

    Does I2NSF have a github repository?  If = so, we can put the XML there to change it.

     

    Sue Hares

     

    ------=_NextPart_000_00AA_01D13BE1.091EF840-- From nobody Mon Dec 21 14:26:00 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1E9A1ACDEE for ; Mon, 21 Dec 2015 14:25:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.979 X-Spam-Level: X-Spam-Status: No, score=-1.979 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_FREEMAIL_DOC_PDF=0.01, T_FREEMAIL_RVW_ATTCH=0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Og5gvYQJMK0B for ; Mon, 21 Dec 2015 14:25:11 -0800 (PST) Received: from mail-io0-x22c.google.com (mail-io0-x22c.google.com [IPv6:2607:f8b0:4001:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F12F41ACDED for ; Mon, 21 Dec 2015 14:25:10 -0800 (PST) Received: by mail-io0-x22c.google.com with SMTP id 186so171223630iow.0 for ; Mon, 21 Dec 2015 14:25:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=4euUGvI7VONSlmudsRRT47gpOGfvBPR9xtobfxvQfQY=; b=UxeEZ5vJwMxkLwIV4FW6E4qcs6PItBMel0V1hKzfTCuuhPwGcW8SKxKcM6GeGyDj3n GKTnDfp5Mcp0ezXhnQ5FrdboR9OvCscAWFdMSvF4K2SEVuap0BnzqYBDy0Qv26ddqY5J C4NSzV1JX9jiPAwqKkDHXl10TcBCWYpzXe8B7BRfN4QXvZiWStfaGwC62zusKWcKBQ+x wi33KsmVwfSdpOiNtfAbW7ZsfsDJON7wN7R3DVcFvIie3cHvtz3efjlHQPflf1Aitf6/ 6Mvdt3lEGLDJe8MyrZzWz6z4F9IXBpdiDxPO3YGKjECovq1ILIJ4BxsJwT+pnG38oOsL OCwg== MIME-Version: 1.0 X-Received: by 10.107.162.21 with SMTP id l21mr20665689ioe.123.1450736710088; Mon, 21 Dec 2015 14:25:10 -0800 (PST) Received: by 10.107.140.142 with HTTP; Mon, 21 Dec 2015 14:25:09 -0800 (PST) Date: Mon, 21 Dec 2015 17:25:09 -0500 Message-ID: From: Myo Zarny To: i2nsf@ietf.org, shares@ndzh.com, rgm@labs.htt-consult.com, Linda Dunbar Content-Type: multipart/mixed; boundary=001a11409d3e44a2f705276ff667 Archived-At: X-Mailman-Approved-At: Mon, 21 Dec 2015 14:25:59 -0800 Subject: [I2nsf] Feedback for draft-hares-i2nsf-gap-analysis-01.txt X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Dec 2015 22:25:14 -0000 --001a11409d3e44a2f705276ff667 Content-Type: multipart/alternative; boundary=001a11409d3e44a2f105276ff665 --001a11409d3e44a2f105276ff665 Content-Type: text/plain; charset=UTF-8 Hi Sue, It's a very comprehensive document. Tremendous work. Thank you. Please see attached my feedback. It's marked up in a Word document for ease of consumption. I do have a few quibbles certain definitions, as mentioned in the doc. In particular, I don't agree with I2NSF requiring network controllers or orchestrators as written in Section 7.6. While I personally agree that it's preferable, I2NSF doesn't call only for such an architecture--certainly, not in a gap analysis document. The rest are just copy-edits. -- Regards, Myo --001a11409d3e44a2f105276ff665 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
    Hi Sue,

    It's a very comprehensive d= ocument. Tremendous work. Thank you.

    Please see atta= ched my feedback. It's marked up in a Word document for ease of consump= tion.

    I do have a few quibbles certain definitions= , as mentioned in the doc. In particular, I don't agree with I2NSF requ= iring network controllers or orchestrators as written in Section 7.6. While= I personally agree that it's preferable, I2NSF doesn't call only f= or such an architecture--certainly, not in a gap analysis document.

    The rest are just copy-edits.
    <= br>
    --
    Regards,
    Myo
    --001a11409d3e44a2f105276ff665-- --001a11409d3e44a2f705276ff667 Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document; name="I2NSF-gap-analysis-mz-feedback.docx" Content-Disposition: attachment; filename="I2NSF-gap-analysis-mz-feedback.docx" Content-Transfer-Encoding: base64 X-Attachment-Id: f_iigirg9l0 UEsDBBQABgAIAAAAIQDyW/zvjQEAADkHAAATAAgCW0NvbnRlbnRfVHlwZXNdLnhtbCCiBAIooAAC AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0 lU1Lw0AQhu+C/yHsVZptPYhI0x78OGrBCl7XzaRd3C92p1//3knSBpG2Kba5BJKZ932fHZLJcLw2 OllCiMrZjA3SPkvASpcrO8vYx/Sld8+SiMLmQjsLGdtAZOPR9dVwuvEQE1LbmLE5on/gPMo5GBFT 58FSpXDBCKTbMONeyG8xA37b799x6SyCxR6WHmw0fIJCLDQmz2t6XJME0JElj3VjmZUx4b1WUiDV +dLmf1J624SUlFVPnCsfb6iB8b0JZeVwwFb3RqMJKodkIgK+CkNdfOVCznMnF4aU6XGbPZyuKJSE Rl+6+eAkxEgzNzptKkYou+PfxyEXEZ35NJorBDMJzsfB2TiNaekHARU0Mzw4i4gbDfHyk6h92+MB kQRdAGydWxFW8PXeGcUv81YQ6Uxp0gHFzvlkhOpTyyHvDmWX0IpUUPhUfGm4PEtj3QrhwfkuCGrf 1nik1Qz19fwtUdkci6TOaiHR2xD+cebdLi/VPX/SJmoSyfrs88H2zdqTzasf3+gHAAD//wMAUEsD BBQABgAIAAAAIQAekRq37wAAAE4CAAALAAgCX3JlbHMvLnJlbHMgogQCKKAAAgAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArJLBasMwDEDvg/2D 0b1R2sEYo04vY9DbGNkHCFtJTBPb2GrX/v082NgCXelhR8vS05PQenOcRnXglF3wGpZVDYq9Cdb5 XsNb+7x4AJWFvKUxeNZw4gyb5vZm/cojSSnKg4tZFYrPGgaR+IiYzcAT5SpE9uWnC2kiKc/UYySz o55xVdf3mH4zoJkx1dZqSFt7B6o9Rb6GHbrOGX4KZj+xlzMtkI/C3rJdxFTqk7gyjWop9SwabDAv JZyRYqwKGvC80ep6o7+nxYmFLAmhCYkv+3xmXBJa/ueK5hk/Nu8hWbRf4W8bnF1B8wEAAP//AwBQ SwMEFAAGAAgAAAAhAKNfeHNIAQAAOgUAABwACAF3b3JkL19yZWxzL2RvY3VtZW50LnhtbC5yZWxz IKIEASigAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArJRPTwIxEMXvJn6HTe9uWVT8ExYu asJVMfFaurPLxm2n6QwK394CCotgL+5xZtL3fvPSdjhemib5AE812lxkaU8kYDUWta1y8Tp9urgV CbGyhWrQQi5WQGI8Oj8bPkOjOByiee0oCSqWcjFndvdSkp6DUZSiAxsmJXqjOJS+kk7pd1WB7Pd6 A+nbGmJ0oJlMilz4SRH8pysHR9qm1h4JS041GollWeu1apYdqkoH6BoIIspXwLnY1mnAEvK04+Uf jie22do+oF4YsHxiKUnAHLKkPcBPJ4Zw0yVCiZanatYOYdeKQfQ7zYFXDbRT2NQx+6xLe70gRvMW 3HYEabrvyprBZDGawT+vYZiu2ehxyWALKPYcvycxiutOM/k2PkaJIVx1ifAJs5ejB9JqxkDuugTh cLb1Pjbltrm7FfLgxxt9AQAA//8DAFBLAwQUAAYACAAAACEAxgnkwYhzAQDCmy0AEQAAAHdvcmQv ZG9jdW1lbnQueG1s7J1rb+NIkq6/H+D8h4TOh60CfOH9Utj2gtduD7qqfUqeacwMBos0lbK4RZEa krLL/es3g5JMyeVLurrbkuxXDXTZdEpMJRkP34iMjPzP//o6LdiVqJu8Kn8Y6EfagIkyq0Z5efnD 4K/n6aE3YE3LyxEvqlL8MLgRzeC/Tv7v//nP6w+jKptPRdky+RFl8+F6lv0wmLTt7MPxcZNNxJQ3 R9M8q6umGrdHWTU9rsbjPBPH11U9OjY0Xet+mtVVJppGni/i5RVvBsuPm377adVMlPKP46qe8lb+ Wl8eT3n9ZT47lJ8+421+kRd5eyM/W3NWH1P9MJjX5YflRxzedoje8mHRoeU/q3fUKuddvCVejkB3 xuNaFLIPVdlM8ln/Nb730+QfJ6sPuXrsS1xNi1W765lu/b5rENf8Wv7Tf6BK90eLN02LRc8f/0Rd U7gi9BG371DpwuY5Vz2Z8rzsT/xdQ7M2uLr9vA8w7n7A7PL3XZwf62o+6z8t/32fdlp+uf0ssuxn fNbyIq9/teb3dWY44TNpgdPsw+llWdX8opA9kpeMyVFndFsPTiRxLqrRDf07k4etDzNe89PRDwPb iZJE1yW56GgrvrZ01F2+5NEPkm6jzz8MNM2z3TSxbg+d1fccjMWYz4v227+crR3qenFW0z8tv2iW /8qGV7z4YVCIcUvvmlVyWHzdGRw/1kD3TOPxFoZreY+3MB3HeryFZXva4y1sy3+ip46lP9FT1zSe 6KlnWE/0VA7YEz3VNc19alA133+ir7rua090Vjdkd59oYrrWU921HLvr7nF/tzQznsn7Xjbh41bQ fUjNi5ws0bBuf/k8J0Pg87ZanKJe3HN1WpVtQ29uslxyIKrmdS5q9klc0zsFb9qgyfkPg/N8Kho6 zD5XU17SHydB2Xz7lqzZPNSdLauKql59Ja17Lf7Q/LY6atweiag/a8eOl709vrUU+qhv7W5Pv5a8 lCenxqdhyn79kX3na3jEfuK1aLobY/HRi/G6B3K+H6WelQwAOUCubwLIAXJ/NuRKeelK0R5KJT9u n4bat6+f5vxa5AqQc+0kCcJYOm+AHCAHyAFyLwm5ciRGFOtq580HNuxiXvWoYec1z748hbj4iP1j wstLBcg5mmWavg3IAXKAHCD3gpBLvs5y6W1+YH+Zl4IZxgEzNN1RQJYWp6HrGnA+gSwgC8h6OWTR 9EJ3IeUlmkl0ifpKDE6eEmOPvX46Yh+r5kt1nbe/qZDP1N3Y88wByAfy9U1APpBvv8j30/k5i6qy kfTJldxUy4r9SEviAcgH8vVNQD6Qb980H+tk32c+zoVQIJ+rRaERRtEA5AP5+iYgH8i3R+SLRSam F7KbhtbF+WwF8pmxHZlaikw6kA/k213y3W+8uhUlZuT5AxgvjLdvAuPdB+O1nNTWjBTGC+OF8cLn 2D2fIyh5cdPkDavGLPmaNxRFZtdV/YWNZT+6RHiVoLLmpqmVIJEAmAPmgLmdw9yIUtwPJ7Qm5zA3 ymZ8eMlnh3zJvkNNP2q/tgqc09zEMiLfHIBz4FzfBJzbB1/Mdr0kjCwkaMN4YbwQKS8nUk6Ci6at eaaiMHQ/9v1EDwaAFCDVNwGk9iLaK10DzQsQ7YXxwnihMHYgDHI+yRt2W9CtC3j8JvvbTgTbECPU lSm1+czLSzFsed3Kk+UU8lhe7jcxYotVwhQLpxGSg9A8NkxJOXpgkKhrhqM5kbExRMP2phCrLkXL TxJjUYsyE5sdXJ1n9df1E6368tquyUlesrwczaVYzmV3uBxeeRkURLOZRpph+d4Az91HWuC5i+cu nrsv8BSRz12xmko9Tc7Tbj71eFZXbSVPTE9fLp/FtWC1KMQVlw/mtuoeOF1JnrH8NHlAAXuWb3mh ndoDYA/Y65sAe8DelrD3SbRd7shQZPLU7Q1L52VGtZPZuy6V5P0RuSRikVfCxtIvaZh0UCT+RmIs rzob8ZYrkE+zXd/WMA8L8oF8IN8ukG9ajUSx8FnzlYqTbCtZVY9kRyThMvlF66romkyrMm9lh0j0 zSY3TZ7xQgF7eqBbYWoT4IA9YA/YA/a2jD2C2VVet3MuwdbMRNZ20dNyqQOblQ4cL3Vgc6SAOcNL YzO1CUfAHDAHzO3VckXHNS264DBeGG/fBMYLjfInzx4Obydvu1nvj2KqEkS3Ez8Ng4i4Al6BV+DV PokNU4uixPP1AYwXxts3gfFCbGwz4e7O1jrySDO/mOZtKyg6zMbzoqBwcLfRZZfblbcTxVQnS9OM yAwRAgbxQDwQbweIN6urq5y2me5crzA6Y67XxYW7H32VgK9l66GuOekAUAPU+iaA2l74YIFtmEGI LEQYL4wXimQHFMmm+9V0qdY0HU0XfLUW6naRz6oxS8pLecVFrbaNgpsGRupqkCygHqgH6u1C5Ik3 X1ha1Zlg72jVCeVaf6pasVhuUknW1eyyruazhk35DeNFU7FRTmvtLuatSujJ8JMoDW1CE5AH5AF5 QN6WkfetqON3g+/NcsVJIUlHki+b1zUthb9tpQA+zXQNz8c2qQAfwAfw7QL4lo5tLoHXsknbzj4c H9PSOaoy9kXUR7lox0dVfXncFT5tjpfUO1YJxtuRZtuJZgxAO9CubwLa7UMw3rZSywlCZF/DeGG8 kCo7GozvVMma1yY/Mh91G05wNuVf8+l8Sr5ak3+llbLtpFGQLWYaxKFlRwOQD+Trm4B8IN8W18ZS pP1CsPlMemdidMBqMStkS/mTPHd10VSFoKTQi5tlgH4tkkXlGm9UolN2EqVphLL2AB/AB/DtAPha 2b0jqfy6zPe85LNZXc3qnNNcZMXmTZ90cSsKG0nGZaVTBeS5mh6lZoplP0AekAfk7QDyphJuknAF yTqq9ZR3eRdiupR17YSXBLlBVxUlLylp/lK+vzkaKODO0CPXDhzsCQLcAXf7FpF33cRyzJCMDMYL 44XxQqtsWavct0T5Oi8KJr7O8lqwqmR/mZeCGcYBMzTdOVIJQqWxnmo20uFBOVBu3ySKZqap4VvY PgXGC+OFRHk5iXISVbObOr+ctLRSJVeK/TpJnDqJFw4AK8CqbwJY7YXSiAItjFMyUxgvjBfGC6Wx 5WBIr0DeZe8p3GEvtmw7r+cNZeB0W1CymagbKnCUj0TZ5uNcjGg2R61imxYHlh1F5gDMA/P6JmAe mLcl5vX7Qc/bSVXTEtmgKFiHQUrE6VqOVMK+ru25jhcj7Au2gW375ow5TpSamkdGBuOF8cJ4IUy2 LEy6melbdbIom/0/Iuv2x14rLNuVbbt10v6jYT+LS6X9E03bs/XQwdJ2EA/EA/F2gHhnffHsz6Lg LV1oCbuObvFqLZgC2azE9Ww/jgcgG8jWNwHZQLYtke3dsixRSxpNiL4kUZFnomzEYV6Oq/e0FkKM x6TxqrITdrRQllVjleBToEe2Y5kDMA/M65uAeWDelpg3m19IunHa6HpRXnzNnT2SYq+Q30SwWlzl 8htI2Mlfbhf8KwDPiAzHcjzstADgAXgA3g4AL+O1oN3sbg6W+RA3bCSarM4vBLuRvVnNKVLUTr6v rfOM4NgsdryTR2ZS+SmQzzadyNQDfwDygXx9E5BvL1bAeqGf2ikKFMF4Ybz7Zry6rseRF2NtGIwX xrtvxmsmQRImFgrHwHhhvAgYvFzA4OQnLp37AyZaxosjtv5KuiITzWaJiY0W9PrnGb8UTP+XSmxA i1zN1OFeAHKA3N7FBuIoMU0PgT0YL4wXCuUFFcqdAljrr1Pj0zBlP/IZ4yUvbpq82RQnscjE9EL2 ipaLKigUJ/AjnVACyAFyfRNAbi9KVuhuaDmxOYDxwnj7JjDevXAvdNsLAxvFomC8MF64Fy/nXjy8 N0r1TVpoVI2E/N90VpXdzk+SUjXPaFuocV1NN5uz6bxRSZhyzdQwYh9blgN8AB/AtwPgy8usmEvQ DfPprFiU0AqHMft5sRqIEaIoh3SVPjqilUFD0aWLMutIcUmQEUVRasfYGArYA/aAvV3QexOxrCXY FalYX/BNSfG0G/KMDo0k8Sgpvpq37JrXNS/bG8lDBeZZcZqaGnLjwTwwD8zbBeZtaDgC4P2a70gB braeBoFjYOoMcAPc9i36rruRlfg61ivDeGG8UCYvp0xOzvlFQSEjFsl+K1ZXcD0j8ewUK51AK9Bq 36SGEcaOaydkpjBeGC+MF1LjRaRGIbvzWZQjUYsRLVkKa8G/LG6EB8Mj+hGj7XfrajRfTG+xo2f+ x5ipEjuJJRHjAMlPYCKYCCbuQGCY2Ef0+3XCu/Lui4UWfzz5dM0IvdQC+UA+kA/k2xHyGRJfw7aW om9ed8GpLrNzVeX9KRXImKUSxDIMK04dultAPpAP5AP5doB8psTXuaini5wnCZW8zBd1QNU0n8oi Wy30A2m02NsH5AP5QL6dIN+CfeTxfhb/nue16Cq9dyjMS3n6y5vHVZ8a+UwvjVPNxcQlyAfygXw7 RD7yeJ+r9p5DPk1LUy1wkWAG8oF8IN8OkI+I123euFE9Sp17RD5HgXy2aWlxZIN8IB/IB/LthOYz Ok/3vObjcZ6xNC/kNX6e5lMhnxvYuhuE5gDkA/n6JiAfyLdFb5fYR/T75Uoept0dn8E9VfIZRhzr bowZDpAP5AP5doh85PV+zEejQhxeVF9vpZ8S+XwF8ulO4vq6BfKBfCAfyLdD5KPMlqHI5OnbG/Zr VX9RYN5zyGdFYWRFEeJ8IB/IB/LtAPmIeMn58JR9Sv/2/JVrHfl0lTUcThL7qe8SoUA+kA/kA/m2 rvkWuXwd/W4DfX88+czQMmMfRWxBPpAP5NsV8nWZLbcbowW3G6Opkk9l9Zppa27qYfUayAfygXy7 QD6L5nTPyNVV49x95FPKZI5jzUzteADygXx9E5AP5Nua5rMWGS0d/T5WVcnO6up/RPZkpYJnks/X Q8/ViFAgH8gH8oF8O0A+8nY3/NyxPOc9KHyIfK4K+TRdkiHExi0gH8gH8u0A+WzSezNRDluefenz WtK8Fte8KJQ0nwr5dM+KpbUQoUA+kA/kA/m2rvnszfUb1ZgFZ6ed7Lvl4I91NZ895P0y3VMgn2tE qW0l6QDkA/n6JiAfyLdF8pG3u06+leBraEdmLgEo/5KJ30c+3UkD2w1BPpAP5AP5doR8lM3cZ7Xc Fmx5gHTfkk9p9VqsWamBDZpBPpAP5NsF8jkSXdEwWHi2gkVFNR89s2KBEvkcPU40LUgGIB/I1zcB +UC+rWk+p4vzEf2+s1aLmuaLoijVHexbD/KBfCDfTpBvwb4V/W5nNdZDfO+GnA/fP0Q+Q1Mgnxvb tm93hAL5QD6QD+TbEfJ1K9hGomyJekGWiaZhH3nJL7ttOdi70+Dj+/u1IDN0BfLZrmNZRhgPQD6Q r28C8oF8WyYfzXLEvOXs50oy76wWV0TBqmTv4p/PHmDeinyGAvnMyNFNLUTFApAP5AP5doh8tH73 V3HBmqW3+07+8v5R4vXkU6nV4rq+HUY+6vOBfCAfyLdD5KO1HMmU50Uf6Xsn6Pf3D8X3evKp1Gqx HFfzPA+aD+QD+UC+HSIfZbfcMi9oGtE0XYBPRfOpVCxwHFP33QhVqkA+kA/k2yHyuTTDUbb1vKHg XixakXVhPhXyqexApLu+67kWNB/IB/KBfDtEPm9d852W46qe8g59vByxhKY71qZ63w2T048rL5gZ KhULjNCIvCSIBiAfyNc3AflAvi2Tz6c4X5nVN7OOdwpar9d8Kut2HdcJjDQlQoF8IB/IB/LtCPl0 7YiF0tUtKZEvkt8tL+ddQrOUfHHeyK8ju/VZZNWVqG/YuzA6jj8vVB8zlFavpWHiBTHifCAfyAfy 7RL59CN51vaa9pu89XpjQSs4nqhdwEylNRxhotmGjawWkA/kA/l2gnzO792ByFRZw+G4kenpaTQA +UC+vgnIB/JtiXyLOd3DkZi1E+nNrkr0nSbnKZvVVVvJHjR/APmk3ku80AgHIB/I1zcB+UC+rWk+ t6tW8Ck5j375lHZxvc/JcPHLH6j5pB3EcYS5XZAP5AP5doV8C2/385CdLUWeEvF68qms23WT2HVM HeQD+UA+kG9HyEfVCqTm+/hLzP7O5YWeViN5LR/3cdfJp7Ju1/A0w7BSzHCAfCAfyLcj5KNqBdEv Z8PnVSR9Hvlc29Y83YgHIB/I1zcB+UC+LZKPqhWcRWffxT0in0rFAiNyPU8PiVAgH8gH8u0m+R4w Xke3vCQIBjBeGG/fBMa7D8brxqEemxqMF8YL4927J6+fBkZoYONOGC+MFwGDlwsYnPzEa9EcMNEy Xhwtl78sXsnXWS7/xv4yLwUzjANmaLqz0YJe/zzjl/LP/1KJisa26/jI+wbkALm9Uyh67PmJ42Cb SRgvjBcK5QUVymkpL10p2sO4lldxQ3zct6v4+isWmZheyF5J6aJSddRKbD8yATlADpDbO4XiWEFo +po5gPHCePsmMN69cC/c0NXlawDjhfH2TWC8cC+2mDFFuxx8Gp4O2aE88deWNa2YNSwv2TC/lA5H QRf/sYwppZ0ObN1xU80YgHwgX98E5AP5tkQ+qvN9GnwKqN6j/L6i7qp8q64NWpBPZacDI9RN2wq8 AcgH8vVNQD6Qb0vkozrft7Uev4t+auTT08B0E9MZgHwgX98E5AP5tkQ+qvNN5b3r/EJeuVq54uNz yWcnRuxbHrKUQT6QD+TbBfLpR+yzGItalE9W9v495NPtwLN1F3E+kA/kA/l2YoZDsq8r/rjYye9K rIPwjyOfK03WdAMsbgH5QD6Qb1fI1xV/XO1i+lz2MVNlR1PdSgIzcBDnA/lAPpBvB8gXzNtJVTf/ wYLRSB5vnu/xMkulDpDrRameOP4A5AP5+iYg3z4k45pRlARxAOOF8cJ4IVteTracUDTqtGzrajTP KO1CQWnYaeJrSUAXGLACrACrfVIaWpAYSZLGAxgvjLdvAuOF0thSgOR8kjdsVGXzqaDvM6urq3wk O8zZ5XqZgbHsRVd94EhBophJ6up6CMqBcqDcvkkUw3U1W3ejAYwXxts3gfFCovzpwRAKh/w64S2T iqNTGwpiQw9SIzJRBgW8Aq/2Tmw4ianpmn4nSdi05O0aBb1RwnhhvDBeiI0XiIdsKI7rDyNRyM/I SWdQn3iXTvLD4OM/6LcRb+mSa7p9qBuHhn6uOx9s/YOm/WMxMveO2fJgLLovYDiaExn7O5ByfM6p Usy9w3k+Ed14Lhut6Th5hN6dl/TBNLr0BPjO0X0Nw9ieBHduvPu+3tuwwbuaX94kb4dAn0R7XdVf +lX56bzsZobZO+kOvX8YTybw9Fw85SXjrFwO+KOcem333okomzntdZCXrbik++xAwdO2rMR2bYd8 anjaEOsQ6xDrWxbrWVWO85Eo25wX9LDk5YjxK54X/CLvDlTjW8Bn1XQ6L/NsUd7mgI1EK7K2UeCe qcd2HEbhYIN7ju5qnmFT0ii4B+6Be+Dei3FvXl5zqdwk7KRvcEXyjdB3xzfoneuOMG/ZuT6u6jft VbKLosq+NKyat0yehresoI6zad7ml/JOaFg7EUyMx4pPRNeSD0TfuRO2t31dD0KjYwueiHgi4omI J+JLPRGl0P/modgVM99MIVh/KtrUW4WnovFan4rfkP5tPRPv3BjkH0pP8jMvL8Ww5XW7vE2W1Osj rV2k6/vum7caaR2Jq5zqTFD7B4Os6xcgkY78xvA/ZXrD9qYQq75Fy09aFbjY7OnqPKu/rp9odTO8 NhM44bVY5XaPujBJVpXNfCp/yUsFwWcFfhynejRA6PeRFhB83zSB4IPg+1MEX15mteysvL7FDRvl V6JupAdbXuV1VXZLWaT6S2UXxFc+nRXigM3lexvSiVITNhJ/82IzYHI/+Azbs7XEQf1egA/gA/h2 AHxL4XY7r9WsMkWoSaeyqzEp2xGrSjaVsMkl/m5bKSDPjTwn9O5OdwF5QB6QB+RtA3mzRX2Uhk2q hgJ8VSloGmNa1QS2jnor57beTGRaj/fRvltPxm2MD8YD8T4rsXTdfH3De/eJ8EqDgCftROQ1q65L 6SVIQszqvBGNStqb7TqRmehwAR5tgechnod4Hr4EsFk3hU/5bBd52WWzUVSDJvClQ3CkADQn8V07 RjAXQAPQdhho9xuvmcZhEui0Gg3GC+OF8UKNbFmN0CrPgmdfSIU0LS9HvKZZZXmdx5zCkW1FMcu2 rgpGE8/Tqsxb2SMSLHd89YdSMPzl7fDKRvTkQkz4VS4//pFx6DMh7o4CnftPyYToTvSYgHSNIHV0 BxHiR1vgGYRnEJ5BfygxH0v/pGn9AzblX2Q/85Zd5XU750Vxw/KpvCea/EJSkapY3p0vu40cqyS+ W7Hpm4kH9Q3ygXwg3w6QT6prumRT3vZzYV0CgLzitKyHt2ze5kX+m2CjvEsMKNvnZAMYnp5GdoTZ DxAPxAPxdoB442VFnIaN62rapzhdiXJU1c2RAtQcOzV93TcHgBqg1jcB1PZhBsSKDCuQAzTYNF7T jQPL6ar0wXhhvDBeKJKXnAE5XU14kEe2IUE2ioh2V/rpxaOW+azFo15o+pG/v0O7WhP6aZiy5VpR +qtC3dBuIvw7B/Q1jFy7VjFy4fyvCka+8dXd77r9A96zbmxmdSXJvJiLXE1RUkSEK/gKpmWFsd7V +YKvALkBuQG5sWW50Yi2y7Woxu01retfy7WgBIs74uOhpIqVrb22YTuRj3/OptVI3tubz8DNsegT K74ZiQeEwe/PrFicadWbN3LD3p//o/DktcMg1PWI1u3gyYsnL568ePJu+clLOYuzyU2TZ3wBs2WW SZd8csTYMCfWfzvPupqbUICeFcWO5th0owB6gB6gB+ht292Yz2aVdBt6rI0Fb7vtIwiBt9OxBx0e u7ALu86Lgo2rbN5QFQp5XIV8fhjruoZME5AP5AP5doB846K6PrzgjRgtioZ12XTLdGHW1pKC5OST gyvf/EXIryz7Q29qJDSziQTg/E5V9vvJ59qW6SWBOQD5QL6+CcgH8m2JfHnJTs+Gx6fxcDUfe8Cu xQUb54W81nTZbw8T7+45roA9M4zM1PQQ3wP2gD1gbwewNxJittRyEoHNTHSebc+6GW/lNS/ZlLfZ hO6CexopgM9xHcOLNYAP4AP4AL4dAB8F8mpxOBWjfFFRakmzI5W4XRD5jp+kA9AMNOubgGb7sJjC CFM9MX1kN8J4YbyQIjsgRc4nohaM8hrb64oV/Ga5bcdaliNt89FIldLtXrQ268hns7ri2eSDSszd D2090ghxAB/AB/Dtk2oxLU03DIt2cITxwnhhvFAtW1Yt1XIVaKdDIj7jF3lBiZ8/k35hFCTOx7mg HSyuvz8h3gi8yEkRaQH2gD1gbxewx7otthvGW8ZvM0F5QTUXC0HJUYtociGuRHFEiMwpi4oKMVJq 6FiJeo4XJInjGQNQD9Trm4B6oN72qNcSyWYT3lC1xbUQ1K9V/eVIAWq6F8Vp5MCDBdQAtb0LP+m2 5/iGOYDxwnj7JjBeKJJdCD+tKkEtYk8jMZaXdRl5mvQ7QbNZVeQZxaSqsUrsyY0cU7eITWAemAfm gXnb98KyIhf0Xab8hl0IJr5SA1qutxZXF6Mu8CTuYFG6b9W8VQCf69tRvEAcwAfwAXwA3/bBR+Xf smq22NFoMxbVacD/aLrClyqRKNePjES3sJkb+Aa+7VskyrIsP01MzI3BeGG8+2a8jh34vq8lAxgv jLdvAuPdizkgx9EDx8eTF8YL490347VDS9PChL4wjBfGC+NFTO9lYnonP/GaCsmIlnFKiF17JV9n OdVU/cu8FMwwDpih6c5GC3r984xfCmb+SyGwZ5nyLorMeADIAXJ9E0BuHxSKpnu+kRgohgzjhfFC obygQuk2sixFexjX8ipuiI9FetmPfMZ4yYubJm82xUksMjG9kL2ivRcVFIrmhFHo6dEAkAPk+iaA 3D4oFF1L0jAyyExhvDBeGO9eBUA9XU/8bjfqNeO1PNvRXK83ShgvjBfGC/fiBZIa0y6RcbWEZcN5 6LZ9Z8sdVE3qIn96v3f72/3e70NXLLrvs+/bwMsBOpcQv390s74cDb1l2XbNNZNH6EPykj6/G+Vu fL5vlF/DcLYn0Z078L6v9yZMc/PeWb9r5O1yxzZpNTts8wHbPOlKWaoaoPPWDfDnt2eAJ6sb5B4r u99Q9vi7buwWWdVfaF81qfwEbSp5dwzum9w0DCf1vGiA6MMjLeDAfNMEDgwcmD/FgenqU1czUfOL QhDN2kqec7lnJG+IbMS6bvtIKl5NN0Itr3S3i64C8ZxI9+MA2+OCeCAeiLcLxKvqbCKatl7UeMzL cVVPFz9fiPZaiHIp7xar9GkjcM5K+RdSe/Lr8Mtv1e69ifZREmjJnXkmw3UiN40p/R7cA/fAPXDv xbh3JzIhFV01Tmo6ZXszk40vaz4dtrxulxf1lY3LyV29+sAQJOXodQ7AAzfGcg+ay9WzriS9f2eg 1oKlnWRXiPA5mMi4HeLFroTU/MEY6quztiPGTlsqV7S261HnVK6KH6mVb0vT1ItDbDn7aAuoqG+a QEVBRf0pKqoP/6/t7JaXWTEfiaV7SBsI0KZuRZ51fmVzwOj9y0fAk3WNksjXXMTLQDwQD8TbuXhZ c9O0YiqRtgqJLfeEKkQtD8qezOU7N+jXyT4F8mmmk3pajD19QT6QD+TbAfJRfd6mKzfe3uLutg65 bCg7JNXfkQLbHDdIIhfVKsE2sG2H2Xa/8ZquoTnYyQ3GC+OFMNkJYdJvmtJpkrZabpeyrKm9SuJa hqVWe1cWRXXd3RLyPR9UQlHyHrflMA7APXCvbwLu7YNo0WJbM+3QHMB4Ybx9ExgvRMu24shsoVLo AvONxEtesGlFOSZdgsBq5zcSLVlVZmLWqu65bfuGF+spSpMDeoAeoLcD0JOvpuXliNej/De6ykuq 0ZQZW9vujf5UjSn1rjlQAJ2WaFGcOukAoAPo+iYA3T64ZnqSWLYT35kMsl3fdZ0AS0NgvDBeqJTt uWasES1pkQ0ZsrEGgCLCT64BMD/o/rPWADi+5fvp/g7vKrf/77y8pMMq9VK6YiDfN5KvYcjkYAWf fryrd19p7ZCHFofwli/CHw0b19W08xDWV6X2oREFx8D0EiuyMVf9eAtoC2gLaIuXoFv3ykeibPNx vgzqdsTrQr3TedOyC7EoNDJSCXyYoevHcRAPwDfwrW8Cvu1D4MOKTT8NbKq3COOF8cJ4IU62H/jI aiH9rC7wsVZxuBaXedPWN+wdL9lp8Cm4PfJ+IV16TaOgWizLsh3fRSYdwAfwAXy74ZV1M9ETSahM Xl2JtjzrajpKf2zCr3LZI6rR0c1Is7xkV6IcVfVhKeZtzQsVT81OwiQ0sZwTzAPzwLzdYN5VlfGL ecGlsLvO20k1b6Wu+/c87/JvCIgd7tqKglJ93o4YHakAzwnCSOtuEgAPwAPw9ik05dppaPgmPDQY L4wXauXF1Eohu/NZulaiFqMzfinCWvAvixvhsaCV+Mqni3Qd8ZVcN/lDV5iCcoun03m5rL3DpkJ6 eGXeTDtRs4xZ3ZDSURE0qeObiY+iFWAimAgm7oYHx2e041Kd81awipaJjeUpM17XNysXrk8vuN20 RHWzEsv0zcBy4wGIB+L1TUA8EG97xFuuEKMo/LdbldzGrChyL3/J6/UitCT32hsF8OmGHhhmt/gE 4AP4AD6Ab/vgeyfP0BEsF817lQi8lsZ26AaIwINioNi+ReB1KzWMwCYjg/HCeGG8kCAvI0FO9CPj iLFhW8+zlkLo1XhRRzGusjm5UQrKw/CtxAsCZLYDXoDXvikPyzb8wLScAYwXxts3gfFCeWwp+HFO 8mO0lB+LaSwq47whRNYrchjd9X6qjoTxwXjerpxWYum6ub8DvKrAwemYQjkOQ//+YVwbr1d2l57w 8q4CflsVOnjJi5sm75ZD0HzLJZ91SyLo56btJqLHjNetPKbgKji+43uhBVfh0RZQG1AbUBsvQbfF QrB+d4i8HM27la/jqp5PG5WNInRd1yIzwZ6lQBqQtnfRj9D0AseJBjBeGG/fBMYLPbK91I/T5Hyx txVd5Mu6mkuP693D4Y+uaLKC3+6+xfDH/ePciKxLJFQNjZjfP8SvYSzbk+Gd2+++r3fvTfXaLHTt xnkDMaET472CB2S7tu0YMaaQHm0BEfVNE4io7XtAmh7Gvo75XxgvjBce0I54QMn58FSese02+E3n ZSe6Gva3vG7nvMh/WywDOl0Fa4czkeXj1bLvH8ljUpAtjuYGiYGEeZAP5AP5doR87xboS//GToc/ vj94LO7TAQZxnzuj+4fGfShPAXEfxH3eXNzHVIn7OLZtpU6EDYcfbQEB9U0TCKgdiPu4Xmw6xp24 jx4msW3b3c5sMF4YL4wX3s8Lej+/nJHn88tMlGwoz5+JRTDnMS+IAPakRHc+WMazvCAvNP3I33sv aOXwqPo7nWj7vsF8DaMm/Z1+vN5uyr+lIv6l8jc1xyTDgfiHfoB+2Cfxb1ipHsURtieB8cJ4If53 RPxL2f+wzqfNCTDb8azZjsenOd7GrTVsefaFHbI0r8U1LwrGG8YZ/TGX3uU7uucWTR6+87pgGO68 BzzM24FNOe9mixT8TFN1xf7j82qv7AY+SX9dDuFbmGFSmmAKXc0Juux7yFTIVMhUyNTty9SHY9Gm agUVaNTvzcgxf8dit9cwlsjIeasZOfZ79m7StrMPx8ejKmuOKum5NOS5HFX15TEfTfPy8HKej8Rh VlTz0XEmv54o22MFmWUbgYUKFpBZkFmQWTsjs3KiW1H8d7fnelUejq85bw75pWTa0aSdFir+o26n UWSm9EAE2AA2gG2f5ij1KLWTNIHxwnhhvFAlu6FKIvKt2JB2G87bGxYURc7LTPRH3kXDYFOabIQv iGYq4QvvlYYvHpmofAtOfDf5OFxNPt65TdYCid3D6ftuEwQS1QKJqkv7XqslIpD4RgOJjornbBjy qwZdtB3iG+Ib4hvie/viu5v/aD4cH3czHM1ScvOlBu/mQegdvM4mx/KvnDfH/++/qyuSW+JahXqa Hxm24WF3AlAP1Nu3eKGbJJaTdKmFMF4YL4wXkmX7kuW0PIzFrJ2wz4JECO2VNKymYlHi+6yu2kr2 4rHq3qbS+maEgn5PKKh7OCAUhFDQWwsFuUpJFJF83nsWrb+CroKugq7aJ6fIcjXLChIs9Ibxwnj3 zXi1IAxCK4oGMF4Yb98ExrsPxmu6oRNGGuYSYLww3r2bS5AGFetdGVQYL4wXxrtPxmtHmrxnIkwE wnhhvPtmvHooTTd24wGMF8bbN4HxYhb/T54M+4nXojlgomW8OFrM3i9fyddZLv/G/jIvBTOMA2Zo urPRgl7/POOXgln/UphS01xNTzVsnALIAXL7FxvQ3DTWw3QA44Xx9k1gvFAof7JCOS3lpStFexjX 8ipuiI9T49MwZT/yGeMlL26avNkUJ7HIxPRC9opS2hQUimv4iZPohDNADpAD5PYq6cdIDcc0UM8N xgvj3TfjddzY1HWNSsnCeGG8MF64Fy/kXuhH5hFj56KeNtKLGEmfYZyXOS2IaBQ8BmnVmpUmyHcC t8CtvRMdvmXHfoCYJowXxgvR8cKiQ5ey47P49zyvxVRQ70mD5KU8xeWNgvIw3TBKDZ0gA3gBXoDX XikPx0+j0IXygPHCeKE8Xk55PFi15Xwi2Bdxw66retSwwce/Ds8HB4t/2adfup8/J///r6efk5h+ Hv4U/Pzz7Q+LFgqiRQ+tJHA0JKmDe+AeuLcD3JMA++WvPy+ZRj/1tIt++fgx+RQvgPcx+Lv8hwLE g1/Ozk9/+RT8PGB5ydpJrhInNk3LSNOYAAXwAXwAH8C3ZfCNqmxOcSfGa8Hail0IiTN5lWWjVoxo w/iRaLI6v5C/SM59TiNmyLvxgIXRGdMtBeYZkR2bfkx0A/PAPDAPzNsy8/4pKUYQ+1cn5PJylGe8 Fazuo/CsEFeiaNhYdiSrpjMqst6yqArOjhSIp6WeFiQ69o8A8UC8fYvJ205gBAm2QYDxwnghV15Q rnTZAMYRLVd6TuqhGWiJ7hqYQwSvwKt9ExuW70dGqMFTgPHCeCE2diA28mmYfqA1059Ee13VX9hq ozk2npcZaRIpUIKSmrGc9vNdHWbthLfd/1QCJK4RRH5EeAL2gD1gD9jbMvbka4NbcgTqqhonNZ21 vZnJ9pc1nw5bXrfL6/rKhuZkJFqRtZsu5wPDkJSj1zkID9wf8/Kal910qHzWXdHT8M4oZdWUpg0+ 8/JSdPcIW+6utaTVq7tZeDm6MwRrW4pR5eg3vaXYcVXfVUGvdBetBwzmEfOQ7HjIOKgnhqM5kbEx IsP2phCrHkTLjxJjUYsyE5v9WZ1o9deNM6168+qM8aKosi/N8TRv80tpZ42U4YKJ8VjinPZcbObZ REWUp16oO3o0gCh/pAVE+TdNIMohyv8sUf6t8spLVtUj2Y+2kmSbzSoptvgVzwt+kRfUQBKPs3IR vjhS4J5jx2Fi+NjuAtwD98C93eDeacn4aNRNAh90co4Crhkv2UQUM2LgEn10D5DonZeUw0Zx2Kat BZ8qcM9MfS0JIhTKA/fAPXBvN7hHaw8uu/kmSs3NqnKcj6RDn3OSdipqzrS9SJOCbgCqgWp9E1Bt L3JvvdRNQ5T/hPHCeCFJdkGSREU1H7GYt5xFgtZFsndx9J4yZAI2oqPZ4miX/XJnCfj6nNjiPlCY E/Nf6ZzY8yeK1udRLX1pNK9qTE7am5l024tis9DbQ/NlqoPw++fLFme6ldlva+6yrFpWlUwemeaN 7GY1VnE7Isc2Ig1ux6MtoFygXKBcXgJi3auTJrOaKHbALuYtm/CmW848b8Vx01Y17dko3yP7lnVZ A1LDUIz5QigQT9fk0Fkp1h2BeCAeiLcbxKMSDqKhfAF5qpnEmiSe/OXiZpES1fOQ9nrYOHLXeXsA er6dBLoVDQA9QK9vAugBetuDHs/+l72zbU4jSdb2X6ngy7GfBU2/v/jEKqJfPdoYaxSWYyf2zJkP paYk+jF0s92NZG3Mjz+V1SAEQrjtXQsQNzMxI0NZNEXl1XdmZWU2MwoisBvRqIQAzm7zip57HKKa E68NaF3OT3V1QJ6d2Imf6kiPAvKAPCBvP5AXjKkiVybYm+gyeMvejJpm+u6nnzKC2+LEKp+POSmr m7fsusxmNcX1KK2quOkAPifVAicJCHEAH8AH8AF8uwffw3H8plQ1p6UHK7VeWdAuDp3MZ/VUZPl1 nlFcT3DpAMuRU/nHTu6tm1hmjMKFQB6QB+TtHfI41Ruhl3LaqM4l/qjqiGBK9a24uh1Qp0VBaMeo Sg3UAXV7jLrNxmvYZhj6KY6uwHhhvNApe6BTVFh9cKV2G5+UTKtXKqotYu8snb+8olZWkkbJEeuQ NGrqm5NGNcMxI+eAp/v0idN6XKmIb84v0+dXh4nVcRyr4/Tt84tAaZUjXgTPWI7KZZvw+w25bGqR bNaVbmoHnuZGPejKLSOgK58Mga6ErvxR8a9RqRLa6Dy0vEB+0+azLeJg06q8zYeiqinj7fnbBLUz wW1ifYL56oy9YgUxzK/VEZ8u1ZmtRNP0JI17uAtuGYG7IO6CuAv+Jyk1lpfzURTyZiaGF/I+F1aC f24Xwtb0x+EkL/K6qXiT36qU7o6lQlw71EPfwJk9cA6cO7QtIDPRA0OPvB6MF8a7HALjhUjZkase y4vKC9rqoXMW8uudzJ+ico0qV29Yya9dHcKltJXrcjwu72g5fItzpoVeEgV62AP3wL3lEHAP3Ntd iDIri6JsVP3Zmmj3ADRWZ6LgVV7W77o4ZGkS6Y4OhwxsA9sOzSHTU913DWWmMF4YL4wXwmT3wuT/ UWZeLoXIYHAx3yhllRi3SmWUT/ssPxEnLFNjFtVDaEHU5aRLESQjsbzU8FAECdAD9AC9/YCefMzb H21IRWbXVTlhufyoi8yR/+7AOTP1Ej0MwDlwDpw7NM/M8iMvCUxKAYPxwnhhvBApe+GZzXfHAjZY /Bhucs7KQrByKireyIsaqoFdFEsYxZEWYp8M0AP0AL298czWYkxf9dR4UTYj8aSd/KZCjanj+l6I Q/EgHogH4u0N8da023+zsgvNDMsOtSgye6AZaLYcApodQsTJtjTbCv24B+OF8S6HwHghRXYacQqm 03GezfMUBwO2KMmzIerEC8aXo9kbcXJz0kG2OIFp+K6DYykgH8gH8u2NE5aNZ7X8all5rSpHiKp+ +yQUtRZ5mkem+l2C7Xri2laAHiGgHqgH6u0N9USTdRFtuhG4oYMzdcAX8HVwsSbL1fTU0ukDw3hh vDBeaI/daw+qANBud9HZWIISy2uWT6Zl1fCiYVci4zNqOiufL4YUZBKqKEAXX0tLo8RM9B54B94t h4B34N3ueJdT2x0+jx5RcZOHdCaJPdV6kVpyF12cMVcLkyRJzR74Br4th4Bvh+CMOW6ix2awloNo GqnrRB49C+OF8cJ4IU5eTJycGeeXKeM3omhUF54VBXL3bijGbF4i3aGL5F8pke68s52nJdI3wSsW 6hMZjuZExuHOrJygT+S+PlM/fZqLTNCuIv2V+dhH+k4+czyrrS6vmzteiS1rTOnXr60x451pftMa O/Tq/FvXWF5sX1uPmhxQ1s13zu5rmMbm9EkvsU2f7yhs8bnGDo9skbIVuvDePkbeS7QPBTUY6Wh7 tpJJ3zebr2HamlMpM468W53qubUGoKycUGv6j7y4EZcNr5rFetHb93ltU3OaT6ZjQR95dTGszkRS DJ+bh2duRJfN/Vgs3jWa/yqhimxmYvUaFm+0eHXlnZ7cGF73kuTrFrnpsELsGbrjImV36wjELJ4M QcziJYybjPbIYhZPwxTP3kbna3RaleV1UtFVNfdT+ftuKj5RA+ff+yubutN5cvLaNG2cBnmzfZ2T 8Mz6eVJJgN2N8mzEKpGJ/FbMC7/V8gUCSF5cl9VEHXLpJljmK+5hMp9R7/8BwaLeadud2zECK9EN FLbaOgJ3bty593GrMLATw7TJyGC8MF4Y7yEZr+m5iWlpuPPCeGG8h2a8duQnjh+jmDOMF8aLgNcL Rm1+5pWo+0w0jI9PHk5p0iP5Ms3la+xvs0Iww+gzQ9OdlRH0+J3aQjP7j5VIxWbIWZateX6MqD4g B8gdXGxAi2wtCOBewHhhvFAoL6hQzuggUyGaQax6NT9+tJnE7/mU8YKP7+u8XhUnscjE5EpeFWU8 dVAommE6ZmCj6gQgB8gdmkJxbcd3TBdVJ2C8MN6Dcy9c3QsCM+rBeGG8yyEwXrgXu8v448VwUZGT SiZU874JeSmdDTbkDWdvJmWRN2VFq4CeeMt4VpV158IxnuWGYUp0AvVAPVAP1Ns99dqgyrQqm1K+ 3aLl1fzpti37SRe2mZphewF2e8A2sO3gYimRlqaOOpkM44XxwnghTHYsTB7LD1U1JlieqmmfZQ/F PtSp51mTj/N/ibb2nfrbHUSLFrqhrkG0gHvgHri3Jw7ZgyvWlKwSfNhndxJ7gsk3zkZ0FFAhbuUI 4aazmM8RzwwCLYl7IB6ItxwC4oF4uyPeg7JrCx6x25wv1Z0qbHwt/x6b1bQIHvTdAyg7YM8xzch2 o6gH7AF7yyHAHrC3O+y9GYqibMSQ8VoS7eMlC6hG6tsOONNjTdfNELlPwBlwdmjBdiu2Y91MyUxh vDBeGC+0yF4E2z/wgt+owpns8r5uxETF3R8H4ucJUfKj3OXNKC8YL74l9OTEZhjoOFIG7oF74N5+ +GCTJfRqBb15qT41qCbPjDN5HWOh6vjJPxVDNszrpsqvZk8q9j3DPdN3XC82euAeuLccAu6Bezvc ZCxziTxKcn8Ivq/sKBLnrvOx/OpVovsJNVTN60e47AA+MwnsyIoRpQL4AD6Abz/AN1d5kmUr0ffz yw1SUHq4DVFvWGYzev6kA/Rcz40sRwf0AD1A79BC87bhe5GGY8kwXhgvFMs+KJa/51Uz42N2ufDS 0nlLCQrOr8gRuphnWpSY82/8lU3aaU7RuafNNtR5gIwX7KrLoWzL101ft7EdC+aD+WD+fnip8zIU 0ju9umdlIaQLOuHSHb2aNdJPvZdkY+VdIV+WV9L6rWoklx7tSFQdqKclYRhYkd4D9UC95RBQD9Tb HfVayK1G2VZl7aMuaOuilq4qSYw4CVdm5z/QBU2901YJmQaRaWlBDzDdMgIwBUz3MOanR7ZtelBC MF4YL5TQS4avjBPGzpJPqxXNu/hukZNqVoSqFSAWiHVwciPQXd2JkAUP44XxQm7sQeDlExVUIBly 87ixynVe1Q0TX/hEfrHzqlo0aCKoCE1eT+p5pvyI33bZZtOMWDcDE24WuAfugXt7wL0rIQqqOCPG 5VQMqdqWSiVoy2udXbCm4tfXecaux+UdAbAqZzcjxhcnHlfD1JuhZ6ShYcRm3AP0AL3lEEAP0NuV 2FtATZ3tqZV6W5DwOqeMgqv7VujVU5HlcqhqgFEz3nRscuHobmIZCZrqgXlgHpi3B8zjWSbquj3y WPeVvJvkw+FYDK7KL9QNXb49PSkFXkOLoD39U58wdjGvMNglKm+ZcWDQygL3wL3lEHAP3NsR955q O+njZryqnj3rreqrzhXilXRz5d/t4uUaaez6LtKfQD6QD+TbB8W34TA3UY76ml0snnhDek9elryU UVkvxr3tEtdzdcNPrRCbGSAeiAfi7QHxollVKdgtTkPSFgV7cxlEH9SP9MXfSOBN2Zvf3r/tsw9n vyTst/d9hcX410+X8g9dKk+7uh9rsZb0QD6QbzkE5AP5dkS+vG692SF9w1kpMThWWxasvGbiVtBn nHftlg4w1a1t2yeV4zy7l7hs2NV9B+6ZuhaEoWf2wD1wbzkE3AP3dsS9+Q7uojJj3VaonbNQUGWM Stzm8uoJd/NSjqQE+w99k+p+B/BpZuTZfgrwAXwAH8C3D8E96bEuewE/EnxUzXYu9eouUTzTM1In 0rFjC7QBbfuLtmd0SWIbtmlFPRgvjHc5BMYLXfLDj23r5HTN0yTS1g3r4km5RCwDJz9BLBDr0OSG G1mRndpo4gPjhfFCbryw3CDB8eutqCie20Fp6F6qR7YT9wArwGo5BLA6jMCGkQah4fdgvDDe5RAY L5TGD1UaY3k5H0UxFJUYXvAbEVaCf24XwtbSMYJX41zUzcOR4vWDxHfyNy7O4C3GqNIxHZSMbUuv K8UWDWAIGAKGL+h2PYu8TH6MihpCD1ViDXFt2nCqFl5e0+ES+Vc+i0Y1TW0rx0jXLRgOc9qh5uN5 3mEH8hlu7MZhHPdAPpBvOQTkA/l2m3DY6rlMqsN589QpdRqT8FN5hpKM5R0tgYckw3ddAlapHniW SVAC7AA7wO6QAla2ayVejAZ6MF4YL5TKPiiVkrHo14vLBw3Cfv+YRmTEf6gc4YULp2qftHGpplyU 9ex0KMINfd0wLWQDAHlA3sFtsAWaEbhI5YHxwnihV/ZEr5xLDK33cx+KMZu3oFRQkV/rqJRT8eF/ 6E9D3tB3r+n2QDcGhv5JN96Z/jtN+592ijZO3vzJWLSfxHDMyDncGZUT9InmbeO81o2Y1mpK58Me STr5DP39vKBfrSaYsrK/c4Jfw0w2p5dri2/TxzsKe3xYNo8XjFwpr5FIp3nBLvObgrfO0Jvzy7PL t/PSQbzKRnkjsmZWiXfKg7I0T/ujg3dkGLEfah4E1tYREFhPhkBgQWD9EIElH4tYUIsy23fNP96q 6mcdgKZbtm1GBiLcABqAdmjhHsNKdTtBDyYYL4wXamRPwj3PR3qUl41Iz9pkbo30UOLR1jjPa1tZ pxdl1bCo3cZkiyY17M1FdPGWtjJFwa/Gq726VtaYuut9fY1Z2jGusVNVy+Fo1tIzlFpbPFk5oVr6 H3lxIy4bSvibL6X5HfLVWdjZxa1FpiT/77DrsfiSr1vUZrVpB6Gvhya6320dAbX5ZAjUJtTmj4p9 8eFQPrNao2iV6UkxZM8Q/Zlb+2VzPxaLq4nmv0pci0oUmVi9tsUbLV5deafF1RzJ90HFK6ek3iZ8 OiWbo4S08+BTrV5J80rc8XHHyryB7fhWhFYMuNXgVnNoUUnT8V0nDKATYbww3kMzXifQAstN6APD eGG8MN6D2g90XcuyPDJTGC+MF8Z7ULLZcO3QSsnIYLwwXhjvQclmLwjDwIh6MF4Y73IIjPcQjFdP dUP3Ha8H44XxLofAeLGx+YNTMX7mlaj7TDSMj0/aDc35I/kyzeVr7G+zQjDD6DND052VEfT4naqZ MqfLySW1hgwdLVoAOUDu4BSK5mqurWE/HMYL44VCeUGFclbIr64QzSCu5Le4Ij7OjPPLlL3nU8YL Pr6v83pVnMQiE5MreVWUet1BoVi25Tq6DsgBcoDcoSkUO3FsP0ZyOIwXxntwxuuGVhx6DmIDMF4Y L9yLl3Mvnu++VA75PTtPPn34NWZ0fODM+HjJfiurz/SV31TlbFozXglWT0WWX9+rercPrUg6OBtO GniapWqjAXlAHpAH5O0YeYseJHmxpYQCtc7scrxd/6bj7Z5ruJ53uJO6tYTCP7i0GBrcoVamo2zo ++b3NUxkc/qP4Pz92vLb9AmPwyjXdcRrLZU5KYfylqFaBVwJNqufNj+SSiz69Txl8v1IiXUQWHoY hoYVQGBtHQGB9WQIBBYE1g8RWKIYUTNLOq9PWJsj7aePyaX64aQD1Fzb9X0/JnwBaoAaoHZQW1S2 lkaxs1a7W7ejIPRM2nWG8cJ4YbxQJC+mSD7NqztujPU4Ol3Y12IRzjvb+bZShomrB+7hzubWWE9V zhqylq7hHroXfOcUP5rLV7Zc1SxuiwEd+hJqTtcLiB7Bt3rkIa42uk5syGsm17f8bEJFtuqsnIqH Ht/j8m4eiJdD++xqzRCeEZaB5Wq6kpDwCiEsISwhLHcsLFc5xib8ngL7+UQObcSQXd0zuseL5ZAT xoKC5UXe5HzMJqWUSh3A5+qa60ZR0AP4AL7lEIAP4NsV+OSvJyG3cASn5TjP7knz5QX7/WwQn9Qj nn8eDarm5u5m0L48ULzrcojWcq1QLinKwgDwADwA75Di/0YcO14UkJHBeGG8MF6olR2rlU8jKUxq kVHWOnXxvM2Hgqrls/JWjsnlZW+MS1FyFi86yBU9iBMjTqIeiAfiLYeAeCDejoiXU1+34awlXlMq uLV1BFZwtrIPatLlIud9bY637oO+Dy4674Gqifm3U95f2QI+7ZIEf8Afj087fL5X9p0e+Q7ookgL hfofTkqyoWh4PmZlFzlpe77lpBrlpUBOQk5CTkJO7lhOznP4+/OT4n11OKnPLqKLPqNT4+eXZ5cU /Oe3EnLUOJi2ARY9lTv0gHXs+Wp4ZRN6Givsi2EX6uuu6ZgaqfBH1NeCNHYNB2nToD6oD+q/KPW/ FjBw6NK+ntVrud8UMDAczYmMw53PRSxg4QfMowFfjQ8oYf99s/kapq05Dba5yvOP98pM7/TRGtng G29ur7wQS4/WjoohdFg7Xue18+/3Zm4vc/0jvTZ4np50kXZGEFieRbyEQw9pB2l3SOksjh+YXhgg GgfjhfHCL3tBaWGc6OofxmLecJZSckq6rF62VrWxgw6xDFPzHeW3AWVAGVB2SDrEjjUnCLW1show XhgvjBc6ZBfxYSqrkc2qigp93ZXVZ1YWTHyZSkFCX3kzkkOX1VZrdl1mquThWg7ESiDr36i7qub6 0BOGjjx3JisnV3mhUq87yFnHjENbV4Fz3BFxR8QdEXfEHd8Rs7K4zm9mFVd51+SZT8oib0p1mmRa lU0pL4Hd5c3o+W1Vt2ttbAN52N9Te9ztVO9r8/y+Co2B2uPHKK2GFEJUB/Drky7aKo2SyEtwAn/r CGirJ0OgraCtfoi2UlVFctFcDwrRSJANeDaeVxR5dKaX1aKh07w8y0Rds3Fer5dYfKS0OpWlPFal dbo9c+1I1t08ftXljhmkiW+qNYU7Ju6YuGPijrnjO+bdKM9GLOMFm4pqkjfUVWgoinvWVPz6Os/a chdXvA3Ks5HgQwrV80Yd3fkQRGt3zkc+tEmf6oh96Gfm/Bd+L6pj8Sj77Oyiw33RMp3QTj10LN86 AvdF3BdxX3wJRrMtoXcFEziEzziE48XdrUuUnRoSHnWU/Ze1Zbbp470yizs9IvmzmS7tcfhPFS/q aVk1W1DT6fAkUNMFNUpEAjVAzas9YzjPtduSXbA+FRscMc03YzO2CRlwxOCIwRGDI7ZjR2yREVU/ DlXyum5r8c4zh3kl3j30RX/Iofr9Yxo5hqX/0e9CvthxnNhE/xSQD+QD+faAfItm6KtZDSTwBnKY +uGP1pdsK/d+vHxAXysGO1DPiF0vtROS/qAeqAfqgXo7pt5CxRHXHgi4FIHSfW/4eLx+cqxoSuo3 dccrOlfWAXy65SaeEULuAXwAH8C3B+BrqCYuVQSnMN6KmmOzWrT+bhD9UlPHmSmVxV30o+mcfWhb jh8FKbIPwTwwD8zbA+bN1ZwYUq0iXjAxHYmJqPj4gX2DvBiKqZD/KZo56gZtNuLHs7AD81zfD/0g QDkjMA/MA/P2gHkqmvc5L/JBblT14PpqUOVXEnPX5eKk0nyjo6T+XOP5RgdlYZPga7OyO4DP0T0v Nmyk1AJ8AB/AtwfgKwuK04nqWr5Us3oqslyiTMq/+wXrSAhe3S+3M1b0XnoWnnRxcr00iF0T3AP3 wL395d5m4zUCPY1DDRUlYLwwXoiWPRAtmx/zPIwOcsQwDSPUA1oFIBqIBqKBaLsn2l8Gq4+/0JM/ Mfa/m1/tgDnN1mw9sOIeMAfMLYcAc8Dc7jD3J4vFbZ6Jd23eBPtzMCDKycf/Sqz9+ejFSxrdRc2l URJoCbLGgDlgDpjbF8ypYHkaUkqE+vPjx+LVs/nLnTBnpWnqe8AcMAfMAXN7grmqnDWqRn45zrP7 J5hbfbkL5rRQt1LHQT4sMAfMAXP7ouZWH+uYW3u1A+bMxIxC3zN7wBwwtxwCzAFzO8LcX//61z// uvpY/fPTV7twLghsP9Sw1QrOgXPg3H7IuQ1brarLkkro/66tVjcxPcPwkx4wB8wthwBzh5DgagW+ lUbwxWC8MF5olD3RKOqRUtVYwfQOCsTWAk8zY6reDogBYoDYISkQ2wvcOInJTGG8MF4YLxTIjhXI 03pXOTVplX+6qfhkwps8Wx4cZk2pzgcvdvvr+7oRk5Mu4eFQj8LYjXsAH8C3HALwAXw7Al9ATTQl 6xp5mf1l1QN6hlc3ohFDot2VYJJVQl52WdQL/M2rpP7UxVvz/MRyNeITuAfugXvg3otwbywv5yMV 7qvE8ILfiLAS/HO7EL5e8n5Z8FkCj49ps+wx9p6Mo2H1bEr91Dog0Qp110wj5LcDiUAikLgHUpCz UX4zGt8/5/Xe5c1IDWFXvBje5UP5x/JapRL053+1ixS0U1c3bATuwT1wD9zbA+5VYpxT3XtWlI2q BkhtK+u2q9GyGHTd8EawN7Xo0tJIMzxXD3yCESAHyAFygNyOIbfs36YqPvMqG+WNyJpZJf54u0K0 le7fqh8z/3rLavMou3+fMHYxltembgldOoBTUcnvnM5H8/bK1qycxuUsHkGb7GdsVCoLFV+64tnn m6qcSfVRSwOlFtpl0UFz6JZuWqmBoydbR0BzQHNAc7wEz9i8frp8Dz4c5gQy6UYNRcPzcU2F2FUK hfjnLK+ki0UfmIaqzciHvUbWlB3IZ5lRagQ2yAfygXwg3x6Qb/s+YT2TrtdJB7C5se9qtq/3ADaA bTkEYDuEJHfDDmPPS7HRBeOF8R6a8bqmGSaxa/ZgvDDe5RAY70EcL4t13Q6jqAfjhfEuh8B4D+LO G6eh55owXhgvjBfBvJcL5p3+zCtR95loGB+fPC5wypIv01y+xv42KwQzjD4zNN1ZGUGP3+mEAXP/ 6BDYM+VkpV6I+lmAHCB3aApF813HNpSRwXhhvDBeKJQXUihndBanEM0gruS3uCI+zozzy5S951PG Cz6+r/N6VZzEIhOTK3lVlGnYQaHooe34oU3JhoAcIAfIHZJCcSxfflwHeQMwXhjvwe1e+GEU0vcA 44XxLofAeOFe7LA43m2Z8avZmFf3rBYNy4tHJ8qkRzIphwOejQfy/2L8B5WPGueTvBHDPqu7pHCb nm5ahhb1AD1AbzkE0AP0dlUNZXlmZVkTtBiKKZWTKhp2nY/ldy5/sagEu6vyphHF/ARLW0OvA/Vs O/a9GD2OQT1QD9TbB+qlimqDkNdiyD6ehfWD0hvR7nhbPOCqmA5ExgdU+Wmu+E66hJQd3Y0dh7gG 2oF2oN1BnWYJPS+NDZxmgfHCeCFV9kCq/FpQvRT6evMJ1dzl0ilrSiriJlT58hFvFmdwGZVyeziH Kz8Lv+lSxc3SHcs09KgH5oF5yyFgHpi3I+YNxW2eCTbm9/JtVwj2uGqbp75l/vUyY9YxVm3bPLn3 XNoMDe5Qxs2jxIrvnN/XMJHN6T+C8/dry2/TJzwOs1xXEkdVtk6Ff+oTxn4u78StqPqM11vIZIBM 30qm67Ypalc2mcfOphRgahfOct0cAZ1ODVaPyrta9bCSH5tXXTw8M0xMw3AR1do6Ah7ekyHw8ODh /RAPbyL5kU/H4sHVk6Jq3GeFaO7K6vPgLh8+PEdBLT6djucdC9qnt2gvRSNor83aSzmAXTUW3S/g /20SFptvs7oZxIGlpg23WdxmcZvFbXbXt9lyKL83iltQcjPPMlFTynItP9tQXMuvdciu7lUq3+P7 MOX33fFqmLe3iq81AXK92HQiUA/UA/VAvT2gXqPanE34PTX0zidyBPX3noOuKmcNffMPbW8ftQN/ aIPWAXtW6gZxFEY9YA/YWw4B9oC9HWFv4/mNlUzn9CzsM3kRdTkRq7GWWmTycpsunW1N1zU1LybE AXwAH8AH8O0YfHldzwR7c3Zx+dNZfPn2pAPEbNNwUtM0e4AYILYcAogdwiEN3bOi2DFxnhTGC+OF AtkDBfKXwTc8/tJFnziRaYYhNVIG4oA4IA6I2zHi/gwe5eCct7Ej9ls+FO8Y1WstVuq0/tkBcXoQ O2moY98QiAPigLjXqOIsywk1S0t7QBwQtxwCxAFxu1Jxc+X2KMP6HfvFvPwg//P3i3NGIykPTJ13 66LibM9zvUiueSAOiFsOAeKAuNei4hzTsDwjxXYDEAfEAXH7oOLiR9n679jFIvHrbJn49a7NaO0Y i9OCSPd1A44qEAfEAXH7gDj2kZJVP5VT+U439/0nJXu/dbvBTJLQDmM0iwLigDgg7lU6qo6RGLEW 91YQp4ehEcmX6IMCcUAcEAfEvbSj+otyVFcQtlJphLYPulQasV9ppRGUXHz66R+iGmvL5lGpHyXb v7ZszHe6/02lfhzf8v30cOdzUdrnH99Q6kfVCvy+mXwNU7al1M/R0HpeK+Qbk/gszzQDL+zBq94y ApLzyRBITkjOHxQ4fHN2eXbZZ79eXqR9Fr6/6LPk7xfnffaL0f6PEl36TDTZydsOhNN8x5cONLEM hAPhQDgQbseE+4/HDU0njYzINntAHBC3HALEAXE7E3GrGS5nF4zKQF/e142YvKN+Zx9+jdkH1ZSj W4KLacamZmL3F4gD4oC4/fBTs7K4zm8U2cqpqAZ1wxvxts+aWVEIKkz5TaE4O3YS1/MJRUAcEAfE AXE7R9yjSuLsWiXwPdpfWH10QZxr6Fbg60hTBuKAOCDuNcbi9DjwUtunZQHEAXFA3H4i7hl9Yie6 FaVr2RBGpJuplsJ4YbwwXuiTF9UnLG3b4xptJL1m5fWWfEoqN4l8yvXZ/Y58SqXfkE+5JnePMp+y g+a3U9s03Riaf+sIyAbIhj3U/Lrja2nqYWcZxgvjheZ/QYllnOjyH+OEsTPj/DJl7/mU8YKP7+u8 k+owAycyAgIMwAVwAVyHpDrM1LNTA5WFYbwwXqiOfYg0UoP5G6lA8po1I96woiwERRupuXI2qyrq EKF6RpQFPVeLh4SQrJSfYih/6iBadC0wUxOF6sA9cA/c2wfu8fFYMe6WV7lqjqP2WIa84awQmahr Xt2zpmTDks0blPbZnbgazOnX7wA9NwqtNLRxyB7QA/QAvT2AnjqpcD0bs+txeTe4UjU5W6DJr7z/ 0E1+/spQiCmTv+WzaFhe1FORESe7kM9y9DC23agH8oF8yyEgH8i3I/LJ3z7ljfxaCzbhTTZSX3Te jFglBhMxbCXgSesOqwrs63WLO1DPtGI/0nw0nAD1QD1Qbw+opwJ3KrInWDYua1E3jNd1mUneSazR y312NWvUgOsym9VsxGtWlA27EqJgZdEBe4YWJoHpoSEssAfsAXt7gL2z+PKns4u1gF1H71YqxS4O buSbaehQ4jWYB+aBeWDejpnXwbvtwDXHkmrOD7BlAa6Ba/vLtc3GaztuGkYhkixgvDBeiJI9ECUP 0fTfyuozfcs3VTmbsjftc+/fUmxKhZ2kP9bmlzE5oKGRtaoZyepyRbWsHNakszvoPvNk2tUsin/O 8jpvxLrmU2c5N98+3Nj1otiMe7h9bBmB2wduH7h9vMztYxGxY+LLVFRNTsnH8h3X7gjLQgi+apbY 4Y7gfFMhhEO/UcwLH2ye5janm0Z3qY9gfv8Ev4pb7mk9y0bs/DKtGV/Ne9/8SY/DUjeKjNfHqdOz +KLdV/jtYV9hfVthfSo2nYVIHCewE1oc0FnQWdBZ0Fk71lm0Ffq8qFJAgajaLKpOB12lE+XHHLN0 OnLt8CTTYM3gHq2Url2VX63Ibrv8HcnKeMYuVvLwGl7dCMrYI/e3GeU1++39k/nZtJ1rpK4bRkhT 2ToCUvPJEEjNl5Sam43XCm0rCq24B+OF8S6HwHjhJ+7ITwykIBnJd3yoFyIqQT8UJcv4lF/lYwrW V+Imr5vqnr3hBTsLzoOHZzr1bU41T3cdUA/UA/VAvT2gniqLlA9F0eTXuZgfphpJXGV0br5u8qxm 1AvwSoz4bS4vT1USUXtEecFuRTEsKxUl+tqZAst1nUARCuQD+UA+kG/H5CvErKn4mN2WGb+ajaki Ep0qKGdNm2BGVUMUDhXsmlIikEqMFENqHfgvMewSojItK/KNKOmBeqDecgiodwghKtcLvCiIyUxh vDBeGO9BGW/iBl7g4KwfjBfGe2jGayZ6bNpx3IPxwniXQ2C8h2C8mh54pqshAxjGC+NFpO/lIn2n P/NK1JRex/j4hPrMPjySL9Ncvsb+NisEM4w+MzTdWRlBj98v+I1g3h8dAntGbJuxncC9AOQAuYNT KJZluIaO7pgwXhgvFMoLKpSzgsqYiWYQV/JbXBEfT9tlroqTWGRiciWvis5JdFAomqUnfqph6xGQ A+QOTaEYduS5KdrgwnhhvAdnvLob257lIgAK44Xxwr14Offi2VTH3yjJu3UwMl6wGZWaqsoJO08+ Rb+epz99TC7VD4wyval8YQf/wrUtN0gNREBBOVDu0CSKHehu6thmD8YL410OgfFCouxIorTqpB6V s/GQZaW8sKF8/1lNX/gTmTKtyqaUl6T0Ch3R6KhZHMvWg9ihQprAHrAH7AF7O8aeJJn84sWQiWLE i0xMRNHQWTN17uw57J10QJ0RubZnBmYPqAPqlkOAuoPIfzctN9Id9LqB8cJ4oVNeTqecGif6iXHC 2Id8OByLwVX5Zd4rfrUe/DPulRFbnmGgICOwBWwdmubQYt8wfTgMMF4YLzTHy2sOvVUdWTnpoDTM OPRjC6f7ASvA6uCUhh7rThwaUQ/GC+NdDoHxQmnsaBem1R3scjaZ8Or+HftwFke/fmBDcSvG5VS0 e8yL3Rdq6lsxPp2O84xTrxMqDthBs+haYqR+SJ1ygD1gD9gD9naMPcm8yawgiglV+pRNVNSXXZVf RC3dsZ/LO0nAqr/g4YjfCtW2Z4V2K92dFMc4+oCtzrVqc7R+i3itvcBUv/ure7pndrgrOolv2JEf 9XBX3DICd0XcFXFXfAFSy7tiXgxnqsOLkvlsXFIZcHnJ8oa4dt971EZUNcP+vvveJo69sjain6ip n/z3SmRc3h5oRJemorSRDDGxvkSD55TEcuYkYjtOnftau2xOeF6wSl5WWbTdnHhzJALsGbC1/azu eK2Y1lAXl7OLjx0UmpumbhAncQ8KbcsIKLQnQ6DQoNB+iEITRTajUkgUmBXZqJDvd3PP1Nnli48K ceP8sxjLp9hVfnMjr21alVdjMVGS7iz5lHbAnh3GnjRZbDEDe8AesLcH2JMaVmrZRsnZcsjvKWGm DcyqLqUNq6ciy6/zjA4QXZ5dyNfPGoXDWyHd2cksG3Xgnm6bRmiGSOIF98A9cG8PuFfK9ysaEnsl Ow8+/ZT+Rjvzeab2qCTnFOL+/6yWPm0hHm/Mt81NCyGGYthF8dmG7YUJToeDfCAfyLcXik+w61mR Ecw4tZ9fkXztSEW6wQMj5xUxFqG+oovii1zL8tygB+6Be8sh4B64t6sA3xfpyTaPNFybf5lTdqbU ftNxea8KZYjiNq/KQv18pyoHXQn291JKQonBDuQzLS02ktTpgXwg33IIyAfy7Yh8leDjAWWbUA20 aynjCvqu+ywvsvFsSF+7dHj77OcT0zD7SuyVpPZWtGAH8LlelDquB1cX4AP4AL59CvI9HLORvu6n R44s43U9m0xXNCG9uJB9dTnpkm9suZGR2BF6f4F8IB/Itwfka7M0c3J3byXG5PN5JlrEtXBTx244 u83lJ8iLppRu73Bayp/k4LqmA4hdgnxBaqVRavbAPXBvOQTcA/d2xb1C6TZ+NRa0szvH4L8EeyPf tyibt+TUyquSMOTjcTnf0q3EP2eibkgdnnXZ3LBM3wvtlAgH7oF74B64t2tPVwXs7spqdYdi9fwO +adHfX7niaY9qtM6/eePGuoaRW2/c228/rOGm+dTxYr+q1az2uHkoa6Z/xH7e2VrtZ3GtZX5urjz DLXzVRwdxbf9zFQcNZc5aypKNJ2UBOQtjFZ0BaO/mdHbCf3aFtmpivJN+L06vkHOcJu83LrE65a2 KWXZ8vwgDmmdwLuFdwvvFt7tTsUBnc1t9yYGwyq/Fct4nSowVs4atU8r/1M1VIFA3U0pa3ke/FMx vg7cs7TYDxMfiXvgHrgH7u0B9yYiG/Eiryf1T035KHvluqxEf56rklPtlYdDunkhX5u0uxrKn+jA PTdydbmwUJQA3AP3wL094J7yWNuzubXI5Ls3dEJDnc5t85PXnn0QhARFSnHhXbJXDNuKgtjBETVw D9wD9/aAe8veADnlI6vzGsQl8mp5wS7PP1ywD2fhQxIzab9xXUoB2NyVg7rhN12ylTU/sF3DR88A cA/cA/f2gHuPDpq1Xmuf3Y3ybKROacx92xaKZTWUV0aZfeNxeceuRCMXQxetFxq+Z6sdeDAPzAPz wLzdM69Uecjy2qRuo3IDJ12CdUai+a6LYB1ABpDtL8ieUSGxodmahRPyMF4YL1TIHqiQ30b37Mw4 v0wplrQiP1ZTDylY1CX10EPq4WJ2h/m1qrXSdrbrlCBOqSffOcuvYTqb03htCW76eEdhmitrZ0Nm 9GPbVMIBtvkttqmqnnc2y659uF6tWV5X5QSWeVxnFU7b/tXrn3ZT3mQYmqFmYD9p6wh4NU+GwKvZ fUjCcl2farj0YLww3uUQGC9CEjsKSSxr0a960M9EJrr2c4X3833ej67MCd7PygLc9AmPwz6PxPvZ /OnbSOm84TTL5edRKXl1NhKT9pTxZkjpXSuvAFLL8Gkp6uK/ugdP9a4VTF4tp2jG6Mw3WHVkkZq7 svq8/lk3Ves0UzdwLJxv3ToCrt6TIXD14Or9EFePju+rcw63edXM+JgVoiGYLc93LRqV1ezNrdRe b78xW05PQnm/cwhNQB6QB+QdUmjaTCPdck0YL4wXxgu9sgd65UM+jMoJ+5hG9bsO6sO1YtuNPBww B8AAsINTH7Huhpab9GC8MN7lEBgv1MeO1Id8/C6lh2lq5h9sQGIkk2KEV9kob0TWzNaqaG/Gmq27 lq7rZg9YA9aWQ4C1Q9AkThSmqRXh8C+MF8YLTbI/msTWPf+RJrmYt9tll0Jec5NnnZpJhnqq+Tbg BrgBboemTHQtdMLAocwiGC+MF8YLZbI30RLrkTKZLpQJVQzOK5VI0kWcWLHup6ZBhw3AN/ANfDsk ceK6vmGGyAKD8cJ4IU5eUJycGif6iXnC2OUin/W3bqn6ZprGjhbTsSEQC8QCsQ5Kbjiup1k+qjzC eGG8B2e8tm2ZkYWcTRgvjPfQjNcMfT/yHETpYLww3oPbQrSDwDIibCHCeGG8B3fnTWMttFMErGC8 MN5DM17LSrQwCqMejBfGuxwC4z2IgFUU2nbiooAvjBfGe2jGa1upa9ha1IPxwniXQ2C8yEz5wZkp P/NK1H0mGsbHJ2267PyRfJnm8jX2t1khmGH0maHpzsoIlVt7wW8E8/9QC6P91c9BzvBs29CRfgfI AXIHp1AcK0nC1I96MF4Y73IIjBcK5QcrlLNCfnWFaAZxJb/FFfHR1uF/z6f/x9657jaOY2v7Vgh/ P7pqd+zW+RBgF6DjTAZd1Y1O0BvomfnBSLQtlCx5S3JSbuTiP1KyLTunZtXsiuXk9fSkHJuxJUrr 4bsWFxcJLWi+rrP6UJyELGGLa35UovS7hELRLd31ArhhgBwgd3oxlNDxNF2D8cJ4Ybwnl/Rj24YW Odg7FMYL44V78YLuRbc0T50Q8ssNq24ydivhKJix5loRisICV8DV6TkKuqOEqo4CYzBeGC+0xstp jSdrFF2VKV3/wA/wMq5JVvTbXqXsJkv4kSe0IHNapDkj07y8HV/TmqV9s+u1hGZR4sj2Yg3LkYE9 YA/YGwD2llV5k6Xi8jYVo42owUaakvCWn1lT/yRIV5+RepXMCa3Jxa+XP12El2fkf9g1mWY5vx34 n55JkM+wdFGKAYtSQD6QD+QbAPkE2vYYxnUeW264x/VfvWSJ2Oz0jPCjWNJGzH+TBW2SubghuAwk FRtLcE/XPMtV9WAE7oF7fRNwD9w7EvcWLM2oQNuEO71z/saj7uzW66UV2+zznArqyRDPVyNHcQXb QDwQD8QD8Ybg49aceJxh1+vdxvYd1lqPt17XDVvUEwm8qYFux26INZ7AG/B2atOOmme7PrfgEYwX xts3gfFCmxxJm3wqSd1wx4pWafZn64A1pJySTCy4KJesotc5636b0nYWkp92VeZtBKoTMDKaxfVM PQ6tEbAH7PVNgD1g70jYa+asy7SoS/6cNoSShDtiFc0fumVt5sU1IysRoKJJVdYyu0TZuhP5UYgS lmAemAfmDYB5D2Lr06pckAWnSrbkIu93VqRlVU+2S2rbGNUy5+zLatKUEsgzLD0wrRgyD8gD8oC8 ISCvd225wtv3bTtv9npNbudZMn/ErW0FYDmV8W71SIn0UB8Be8Be3wTYA/aOFdQTnu2CroXXmhU3 5WeWnpE2mteIZy3kyiJryqqdkTyXgJxuukqkRljtCMgBcqc27ahquqOHIVY7wnhhvFAoA1Ao/HEg Om7PU5bzj8kErVRdHBi/pPOSd8PHP8RvKZcu4gtUc6xqY029UrVzwz1XlD+67nm04zYvhqw9C8fW bMc53d7kPXTF0f14nyZi9ZQwF/EHm5Z7io6/Ij4iK8Snd53cds+3dfJr6M3mQ3DvDnzs9N6EPe7f Ovs3Db9bXiOUPoiQdjEtq0Wbhs5dIcGedhYwZVM+pLRZDglb8nOq2P+uMuEl8eYyoSDNc/3IxaaT z7aA0HrQBEILQut7Ca0+CN4us56zw2h3FwgSb5XTNnLUBYjayUHeWIZ6pqJ6hhmOQD1Qr28C6oF6 x6PeQ4XXukiMcCeHdq+IXId3V3MRI7/f9jbLcwny2b7iG0qAjAeQD+QD+YZBvm2qalOSGWsIo1W+ JnRWsU1OQ0E+szVpWDIvsoTmZFlm/NQn72V45wZKZLngHXgH3p3aLKDtmF4Ue94Ixgvj7ZvAeCFW BjkLKDaCwCzgd54FFFIOs4CYBXyDs4AkoUt6neViSUzFZlndVGvyjjbkwvvkve8mBFkhFkDXkoFw U/dcU3WRZ/VsCyisB02gsKCwvpfCSuacTomoMlo3WVITMbl3zeb0JuNfvZnyE7Gia0ZE0dFsmrGU rOq2zKgE8zTVCxxdRcoDmAfmgXnDYN5Nu5Z5XLBVW9Lhpkzo9SqnXN/dZtzVWTWbxK5tQkTHwDlb 1Cy/EXJPZrmzrWmRGqrBCOQD+fomIB/Id9TJv/16XhMJjlmRGgdaGI7AMXCsbwKOncKknqk7umv5 4oRhvDBeGC9EyPFFyIHoOJzUa5GESb17vfnspF63KEl+Sq+dr3rLU3rhvfvvsdN7Zdb4Qdwj97X+ ZuZu/94QYVqJe8NUXuu9wYedv+4mrR2C/mMTemX32BPEf6I7dx3yWixMxAk3y0FFHm0tloQSWmyq JS6rsin5d3WbV9YimphJlYn1dCdwDOzI+2wL6PcHTaDfod+/l35vKjqdZolYHvW0lNfEXrrfqCXe qpT/e7lk01Wer6XVfLtX+9tWbCmjosfubXD/+Hm+DSN9K5KrYuMuEYV9Eckr/MlWZsktV7Jiy3Y0 Rx9BXD3TAuLqQROIq5cUV094RqpiBbouzBTGC+OF8cIzOrJnJEpFtHtVT7Nc5NPy65yUxTSbraqu dsS96vGLVd2QadaIivNimyGZJQSab/uxFWGRJqgH6oF6A6Dezvfa7R9EK0Z/qPsNgiYCjVktGrQY 5FDkHcOqmszLW0nuGaEf6JoqYkrgHrgH7oF7R+ZeN6/H5Vu902+HCOwAuCo46cgtXfNWbZtLL/go Azw7dD0zxMQfgAfgAXgDAN5zc326OCyJWSgVc33bHt2NFeIPpKb62u75tk5+Db3ZfLi8dwc+dnpv whr3b51HJvr2LVOySg4ss+9dMTBtqr1K26ZknZzXa5sebLO7ew5vnjcwDf+EERXpM3n+WuvBAEuP Y+nDpgC/NH0kU/pfL30CfrhZsSpXNfm427Dgjdjfh/dnJPzl6pK8C8PykvyyZAW5motyXfc74JEw g6L7vs57YIQwwzMtEGZ40ARhhpcwb2G0byzMcJnNCprz6zd73+008/Hi54i8+9jPm18USZaKJz9n s3lzy8RPEn1J5rSYsfcTCerpMX9ouohagHqgHqh3Sol/phP7puVBssB4YbyQLC/oaGkTdaJPtAkX KdsI7P+IOV6hUuI2509mSace6q4RmYJU4Bf4BX6dlPjw7NiwbJTwhvHCeCE+BhAvuejSypZVya8/ Szd5abvk27P23e7FXcpBwRrRQEKsmLEfB6YrZpHBO/AOvAPvjsy7vQVU9bpu2GK7XXkt3lqLWt2k KFN+CjcZ3YOfN+N/slmKIAM+X/EDz7wn9CxVN3Vbb28hgA/gA/gAvpcC3wZzYk+Wdo9ysdS0JmJd VbbIclqJ0mICd8Evv14S9oUulrnYuvy5LBypcn/WuaF9XRaOr7uBe7qXYJtys1mvJt6RycLpRoVv 683X0G3Nh8u+w95s3tt9c0vKhdAqv4m56cuGVs3udlE38H1l3fLhy+TL5JlOiIr0yS5ovzjUDN8+ 6IDLZs1RtvnCYPNZbMoqViTs8Ou337R99/CrnhN8VmRGUaQisvdsCwi+B00g+F5S8D1uvIYXqbYR Y5c5GC+M9+SM1zJV08SEOIwXxntyxqu7hu7HmjhhGC+MF8Z7SsZr24qjGIYwMhgvjBfGe0rGyy+T 41rtynMYL4wXxntSsjkMjEhHXhWMF8Z7egEr0/RdzYTPC+OF8Z6a8Vqm4gRxjGgzjBfGe2rGq0Zq rAWoigvjhfGenPFqoWLragyfF8YL4z25aLOjGoZnYOMhGC+M9+SMN7Q134swVQTjhfGenPGatuNH CnxeGC+Md7jGe/v6VnL9nVasPiOsITSfkP1H9GWZ8ffIP1YFI5p2RjRFtQ5a8Mc/f6UzRlTl3+2N 0X30k5Az1EjxI0TlATlA7uQUSuz7huKHIxgvjLdvAuOFQvnOCuWi4JeuYM04rPhVPFAfXdWfv9El oQXN13VWH6qTkCVscc2PSlRnkFAoaujFemxh9gKQA+ROTaFYthoHnoIAKIwXxntqxmu4rqX7OgKg MF4YL9yLl3MvnizFd/D4cbz3+FHCk9B0yw0UBcVqwDPwDDwbGs/uNqGT7hcZnnmxE8UqlkOBZ+AZ eDY8ngV5JsrFfw3PVDUU3AHPwDPwDDwbFs/2f5HgmeKGSqAH4Bl4Bp6BZ8Pj2W5fMkl95sRarGD3 dvAMPAPPXo5nOT+c31iRsoqlIrXZrxj93N0IsqT79PFyu2uZlHLzYtONPJAOpAPpQLqhKbevnvlU /FC3nRh77IBn4Bl4NgyedRT7UTz9iZB/7b0kQTTDC4049AR5QDQQDUQD0Y5PtLs2geNuPP6p/fVf nGWblySIZjmqbjghCv2AaCAaiDYQonkzVjSHM5/dSzIazQqjII71EYgGovVNQDQQ7YhE2/u5JVr3 U0ajBWHg2F4wAtFAtL4JiAaiHZNoYtXAPaK1L8kQTTfCIIrDEYgGovVNQDQQ7VhEG4/viJgGuNuf 5ex+6X5KYE33Fc/TsbU5sAasAWsDEWq7Cc+UNpRM8/L2KyY8NU1zVT+MRyAaiNY3AdFOoZKOGqlR bHmopAPjhfFCjgxDjhASZ7NVxYgmIz+MyDEtIxqBYCBY3wQEOwX5oSiGHugefAcYL4z31IzX0HzL jwOEMmG8MF74DgPwHa7mjJTNnH/nroDAsiqbkn8x/7Sy+kyakmRihwCaNOQ2a+ZZQXh7UrBm87aE x2HbkaPGqJ4C7oF74N4QuMchd5OljNA0zZqsLGjOKTctqwUVv5EN5KZlnpe37U1A1+cSoFNj1XYi H6AD6AC6U/POLDPwDL01UxgvjBfGC5VyZJVSEnLpBR/JPy/G4SRjzXRc02QxplUyzxqWNKuK/Zuk rE6q7JqfBy3I/lvkdp4lcxnV4ju+EhtYrgrwAXwA3wDAxx8N/8paRJ9Sxi/vgl9Kkk1br4wV6XhZ ZkWzF7Mq8ywR7WmRijYS0DOU0DI0zIIDeoAeoDcQ6FWM5oJn71JWlA1LCa33IVcLWfee8DazYiIT d7d8z/YdMA6MA+PAuGEw7p4z24k7/r2ztfBlp/zS1lvUCfwJxZeUxVTkN7bBeQnuWb6mxVrLJ3AP 3AP3wL3jc4+7pj/xL6kb2qxqUk7JnFbpLeWUE6+W06Z7XogwHndxOw+XAzBrJIinW0EQ+yGqAoN4 IB6INwziLVnV0Kxoo3gcamU1o0X2Zyvifjjwa/MsWU/EGpac3wY1SXjja5kYnq1EVqiqoB6oB+qB esOgHndW+ZmKDW6EmHvgvrZqr9OAy4wlYo5jThtSMJa2oJQCn6XGShgE+gjgA/j6JgAfwHc88C3K ImtKzj2pqQnF1BTPQ84JCAaCDZdgjxuvatmKaumogQLjhfFCfgxAfpSEhL9cXZJ3YVhekl+WrCBX 84pxx+oymxU051d29p6MSVa3qxrFfcBdsaQsqzQruF9WzGS8LlNV+O1pjoA9YK9vAuwBe0fMk50z ssiabLaJLk1Ji0DaNDT5XE8I8QjnV3P4xnzvTyTAp9uRyv01FJ0B+AA+gG8Y4MvacPl2IXee1U2b VUHTlDesu7UD14xM20lFlpKbjJKLX8mc0ZRVEtAzIlfxfFcfAXqAXt8E0AP0jge9jma1TIRdjVUt Nh1BKvAL/AK/TinCrpuWpkS+OoLxwnj7JjBeiI/jRdg/XvwckXcfaUFn3J+6KBLueBUNOdAit+cp y/mnZ0KBtDOE5/xKz0veOx//EL+ltBG3g6KaY1Uba+qVqp2b+rmi/NH12qP9uXkxZN3JhZrh26fb ybyHrjjRP/x8MZs3tyzjP8W725d7VcdfEe1FCu22R/Vv79G9rntlN+2Hn0Uf9j2534e8896QnUZf kjktZuzBXJeEw6CEoWeGOjTHsy2gOaA5oDlegmVdNrWYxBcXmIqs6SKlVZr9ydVHV6tT/EOyrRAR xV+yIs0S2vCXK7Ysq6Y+kyKfboZxiHwmkA/kA/mGQT5Bsz36bcuyi2mtpqJFLehGmjlXeXuViydt SXcJ5FlW6GimE4yAPCCvbwLkAXlHnNLfKrn9Wuxt1Il/e84SfpoLuiYJXdWMdI6uoF+7Ce9YbMIr pfU007QCdwTwAXx9E4AP4Dv6tL7ISS+LtiDMoqwY+XQZS031W4Edcy5YIzANTOubgGmnMNVvaaHi B3YwgvHCePsmMF4Iku88a6pN1InO/0fIhcalxm6fP7lFIXYQ+mFkQXSAW+DWqYkO1Y3iyAuFmcJ4 YbwwXoiOI0dBxE7E202FF22K4UJEgut13bBFVyNNLHXtlEqSZ+JN/vdZytqwyYKuJTSLZqhKrHAw AHvAXt8E2AP2joS9g73VN1uxd3SrRRiYY1A8S9kNy8tll/fUcrDlZFnMSrnSJboTRr6H0iUAH8AH 8A0DfC3HxP6mZ23tpjMiMp7EbP/lLm99VpWrpShiciXynGrWxqb6HU8lwGfqrh37UTgC+AC+vgnA B/AdCXzz8rYlH03TbFuyqfVqf6gJvc7a/f+aUhQNb6oyb6G4qawr8gEkkKc4nuNEobhNgDwgD8gD 8o6MPO6+ZmKnA67hknKxpE12nbOWbPW6YNUsq5ss6TxgTsaaEfZFvMRvBzadikU8EwnsGabtO6oH 7AF7wN6pzUdqkeb4gSuMDMYL44XxnlQGox/apmpiGzYYL4z31IxXj0wntsJgBOOF8fZNYLyIFnzn 9OO/04rVZ4Q1hOaTbh3U5hF9WWb8PfKPVcGIpp0RTVGtgxb88c9f6YwRVf23RGzAthRdt0PsNgbI AXKnplD4na05sQP3AsYL44VCeUGFciGS8wrWjMOKX8UD9dHlIf+NLgktaL6us/pQnYQsYYtrflSi LqfM7EUcuL5iogQZIAfInZpCUWw7Uh0NlVNhvDDekzNe31ZM1RJmCuOF8cJ44V68jHvxXEGo/vHj ePf4ce/3HyV8CiuKYs/wUeoOZAPZQLYhkG1HM86yO7Gghx9BsyZ3/80fd90W7ncSZLM9J9bVCOu4 QTaQDWQbAtnuLr3g00fxRPz36eNlJ9/u2h/diu47Wd2m2Z5rGfBIQTfQDXQbBN2SsqhXC1YJuk12 j7t/9Q5p20yCbqoeGYrvoBQF6Aa6gW7D8kq5FyoqUhDyX6rQbv86CMXJ0E2LXM8L1GAEuoFufRPQ DXQ78mxCC7k7sStiLYpJrLmSO8CbVNwtClzLjfQR6Aa69U1AN9DtyHTr4mx7numWeBvXVIZuShwr mhIgjQt0A91At8HRbZN0vvn9riuV2D2XoZunmYalizsCdAPdQDfQbSBxt7suG2RT1H9DtM1vsnQz dUUzUOAadAPdQLdh0G0zk9Dy7F4Wb/frubRnqrqRbvohtBvoBrqBboOg20UxLUXZltY3JT/dmysl 5Lz9KUM3QzMsRbeg3UA30A10GwTdllV5k6VtvpuA27250q+hm6rFoaLZ+gh0A936JqAb6PZd6Zbz w/mNFZxhLBWl8vyK0c/djSC3PqvF3n3wyXNPiU3dt13MpoJ74B64NwRVt+VbD7cN3rYvf4Wqc30z 9rllgm6gW98EdAPdjke3uzZB5G483sKN403Mr3YvfwXdbNNRrVgB3UA30A10Gwjd9n7uPbYvf4Vn qjqh5rioBg+6gW6g27Dp1mb53k2+wjONTd/UUUkadAPdQLeB082bibpI299ktFvoOlqIVQygG+gG ug2cbl09y6+gm6Ypnq7Z4Qh0A936JqAb6DZU7bbNF5Ggmx3osRdbmFUA3UA30G0IdBuP70i3BPXe o3uh+ymBNl3TndBGyV6gDWgD2gYi3HbJbiltKJnm5e3+yxJUM1zPtj0zGIFqoFrfBFQbFtWekCSu EilGAG8LxgvjhSQZgiT5L5WMSTPPasL/a+aMtBUyAn52VZnn/FjeBb+9J7dZM5cQJ5YbupGmhyPw DXzrm4Bv4NvxXC7+yPipXFflZ1b9tKzKL+uf+pLbpJ5zH4zWMnSzAlc3QuxwB7qBbqDbYOgmHimr kyq7ZinJil7G0SqZZw1LmlXFJjLBpTgOdTvC+nAQDoQ7teCSoZimZwSQJzBeGC/kyVDkSZzNuPog uoT80BU3NlXPH4FgIFjfBAQ7Bflh+UoQ+AHWuMF4YbwnZ7xGrAZ+jJEXxgvjhe8wAN9h6zaQTdXf mlCSZnRW0QUpp/yXel03bNHGOttaSmdtyPOMtAu8aJFK+Buar/mmH6DoCKgH6oF6A6DeAbRuz1OW 88/IUnGztDTh13Ne8j74+If4LaWNuOiKao5VbaypV6p2bhrnivJH1zeP9trmxZB1pxBqhm+fblfy Hrri3H68Q7vdGEXrTbO94YC/Iv4+K8RHdz0sNrv4xh5+DV3ZtP117w587AzfhjHe1w/8TnmNKPrQ beo3pmLlKOEfmZRFvVqwatwlzIy3uy4QyuVYypZ5uWYpacoZ49KrmkjILN21QtXwghFk1jMtILMe NIHMgsz6LjLrijuN0zLPy1txiQXY+H1QZ9d5+yRrshtGsoJfdpo0Geeh8DJrRuqEFbTKSrLIZvNG xsF0/CiMbITVQD6QD+QbAPnm9Iady2i20HLDOHJHIBfI1TcBuU5hNk9T/Tg0XUzFw3hhvJAdA5Ad JSFeQWqW8C9u1qRgzW1ZfSb8SOmMLUTkaTOd9+7Tx8v3JKGFiEM1NCsIvReR3I/YioX0MhFb/bVG bIs3EqV84sYSM74SYta0bY42C5nxz7bAeIjxEOPhS2CrfewtQaZFSq6ZGPEKljTt7Eq3fi8rpmW1 oCIGuc2DqZ4ZDluUveUJzAeruN/WcCjuo3u3x34GgRj/kEFwvzO3qQGtznwiT+AJN9uJHDvwohFk xTMtICsgKyArXgL/7aPVDdscjme0gojsQyu8hQSfSTff3SZJkwVdb5UkKQsmUqlFBvUtXddCdSZz WsyYhEtte4oe2ZoYozD2YezD2Iex7/hjnyAZd5hvaZWKyzzNcn6V64kEzhQtsHXHiEfAGXDWNwHO TmK6Ow7s0DSwjAvGC+OFFhmAFik7l2s33/3p42XredG8Lh9E+tsFq2FYXpJuKYZMKVJNMSJDMcSK JSAPyAPygLzju19tNo+4wMIP25+6FPNSHHlTsaR/+37Fr3J9PzQlE3gyFcMIFX0E8oF8fROQD+Q7 Hvn+MqL+jWEpQ1V8S48E1gA7wA6wO6WwlBVyB821EZaC8cJ4oVSGE5Z6pMzLXppgd5GRJnivV7eZ gZfitSfLCb2RW6kLVBLh2sss6mlo/plDRULwml7k2lEkbkGMmRgzMWZizDy+d8+9eOHR/8WwKTZN wrCJYfOZu2lTY63boKsoU9ZOClaMJs32JsuKJEvFJCC5XpNVLTdqGp5vGhxMI4yaz7TAqIlRE6Pm S3CufXSTehxrNWt2MW/SZTsknHkNP/7rnCafx3lWN/UZuV41JC35q0XZtHWKJMin2Uro+04wAvlA vr4JyAfyHY98lCTlYpmzRmSANWJC8Cum/EwjUnxFxRasIBqIdmpTfoYXxGbowhGD8cJ4T814VcUw 4wAjL4wXxntyxmvZkR4qMUq8wXhhvAgEvFwg4MPfKXf/zwh39Gk+6QIAm0f0ZZnx98g/VgUjmnZG NEW1Dlrwxz9/pTNGVO3fMtFONzS8SENRdkAOkDs1hWLGmqcGOvaCgfHCeKFQXlChXIidrArWjMOK X8UD9dFN0v6NLgktaL6us/pQnYQsYYtrflQiiUlCoVih40ZBmwsFyAFygNxpKRTdtSM9GMF4Ybx9 ExjvKRiv7nuBr6ooRg3jhfHCvXhB90KbqBN9YkwI8VnBphk/9mlVLtp09tb16DbRlfEefFX3LAP7 1oFhYNjJzcD6YaQbVjiC8cJ4+yYwXgiQI6Vit8HNH2pCr7NcLFBvyl2hpjZFe1EWJBMCpVxykXKd 85eLlNywIuXHVbBVU9FcQrUYlhOpgSsABfABfAAfwHdk8LVQm/LXN0WH8/K29cYO6hFzGq5qQUKx yJizb1Oo7ms2gTGNyNdVD0l3IB/IB/INgHz9OuN2H7SN3OMSUCi9viDxohSVOzjq+HtJlV0zwkXf eFlycNZnMuALwyC0TIE4gA/gA/gAviOD76B4Ar+Mn7ngy2qSZhVLmrz1fb9iEbIdqLYfWyhdCr6B byeXCWCptq6YSDSG8cJ4IU4GIE6eqvlErmnNUlEQr+bHlHTxd+6SNVnR+WkXvxKapvyjpLwyXfOs KAyCEcAH8PVNAD6A70jgaypa1Muyakj7o1iJtRRnIizVlPzLyUV41jKPt5tOs4RUnJATQn7OPjPy Kbr6+Ev4gxT5DCcOHd0LRyAfyNc3AflAviOR7wBah4WyRXqnTKFs8y0Wyn68Q73g58u2S5+soJ0V 4pO7Dta/vYP3evKV3amiD+/dlI+d9Qmf4OG+wW/ioj6Bn/uKiRvH0xg54StOK1FGviH1SqjHdkuW Kf9kmufbYD/hvyb8pCouNrljnVXc3b5et8kgny5jGWWp+KqpadYIyvKZFlCWD5pAWUJZfhdleV1+ YVKTmFbouUbkAF1AF9A1XHQ9bryqrlumg52PYbwwXuiOIegOsXPqdncuktKGkoQum9XGo/qLzeFa 3iDmda+zsTnc3h12m3G3fbv1EWFFuZrNN268hNjVrDg0lUgfYbx8pgXGS4yXGC9fgmZiEVq/3mJv 5a2oN5iymyzhx36bNXMyYwWraE7EX4pXJ91Q2y7elQCfGatGFFioewTwAXwA3wDA1wq5a0baigKc fHNapOLZZgvpe06ESP/pUiMJzVnViCkbCewZih+rvg7sAXvAHrA3AOxVTOQ41u0MdMlhV/XlBup1 3bCF3MqzyDEiK8QWF+AauHZqkzaG7zpxpECUwHhhvBAlLydKPugTQqKrywvyKf5dxnuyTVu3dKxv B6gAqlNTGbYd8NvfCkYwXhhv3wTGC5XxXVVGzg/nN1akrGKp2LTTrxj93N0IXH+oWwXyy42YyGK3 EjLEtAzd1FvigGQgGUh2SjLEimNLdxVxwnvGaxiKavqOCIHAeGG8MF7IkBebgfnEmtuy+kziVZE8 2HHncImwKY7yP14ifLp9eG+x7E+vdo3oEzfL71nVrGie/dnlZ737FP/+vq+We+/G2U9kFqup/vLG sc4156sSmaNICyP/dLv52cX7IvFDtH0zCc4fNql82xuqemBsj/lCemz6boDVes+2gJx60ARyCnLq u8ipNjt5mrMvWbd/0BlJyrohbDplXF7ddNUK6Wy3t1DJ36hEml8mUl+6ZGYJ8KlGZPgmancBfAAf wDcE8IktgFZ1Uy66nTR+KRipV8l8CzWS1W0yc7FxN3dpftPH/M7HoaeZqmdrCtL8AD1AD9Abgtqb ZxxxsxWt0gcBELFXJCua38S2aJcNrRqyDYfYm0v8ynqpjVlwKLMqE9ncU7FL3D2fXlQWE1t99yPF M50WcaX8VJc9Ef+5bNY52x5gsPksxhU2KxJ2eLjbb9q+e/hVzw1DiuaajhqHIwxDz7TAMIRhaIAT sHrgObbvQUPCeGG80JAD0JCibsFewPAgQMhF1Kf4d8L1CT8sOuOn8WCWhDveMq6z5QahbasjYA/Y 65sAe8DekbC3Le2SZmIGRFQ24K+kq6QRRNtu4ESuVzW/wvxJw5twHzsrNnMlC1p9Zo0E+SxPUUPP j0cgH8jXNwH5QL7jzZRs4XfNGn55d6KunQzm171FYMc5Tj2y4u9PCPHEjk9pJiZLaC5DPkNXA90Q jAP5QD6QD+Q7vuYTCq+bGKZ/MSFM3n26jN9zobcWdbGuq/IzK6Sop4amg1XaoB6oB+oNgXpZwdXc gkMkW+aM3HRJ9LtypoxyFs7LumEpmVblgtCiK4R1w6VfKXTfhQz2TCOIXMtEgA/YA/aAvSG4uVzc LfnBnj2UeFv2CW3XFq6/Zqx4bgGRI07j21aePbOA6FXv/llzw8rf3Boi/snJZiCVGDQ5k1zbCPUR Bs1nWmDQxKCJQfP/FFRPDpqU1AuxE2vNGjH53/kANRmT61WzmfxqMwJuGO+OsmgTBPq9Ec74+5nM 8iEt8HU7cO6VoQD4AD6AD+A7Bvgqlq6EctuArxNydb+/1XbGjJKkXCxZk7WLKVk6YxNCwpXYM0GC e3bg+7Hl3QsOG74balooXgX3wD1wD9x7wShJJuIgIpmJ1PNs2ggN98is2DPBEZHLLlFdRVdQXWXb 8Z1efmPBka0zQSvGh1tRx4dTRWLQNNVYCzU7HMFZeKYFBk0Mmhg0/0+J9cygSZtufqEql/y7G1qt Ow9BBEXEZee/NCU/Dk67IhW7Cy0oP3HuWLTbpy3oWoJ7lu+ose5hShXcA/fAvQFwT+wPSfKMdivF RJWVVRst2UaFW5dhToXEy2pW8MYpqzMu98T2apR0U4IyYRLdCgzHx5ZMIB/IB/INgHxZwS9puWRV uz/uEwklhxKw3SOXn31VyiyWUAMtdh0HdQGAPCAPyBsA8rYu7ETGVXVi34lCuKqgF+g1XHo9IT1M TwvdWOS4wnhhvDBeSI8jS48DxSG+74lKlubmW55uoG4u+5voOVHJ6UIT+ZjPdOBeVcsHvSOO6ftU tey+ans8r+1yfGjTxK4ZSdkyL9csJTQvOZw2cYKaiCoyM9Ktq9sFDWiRSkhrTXeVwFD90cHorHiW E+pRyzmMzhidMTpjdH6p0VnM9DQsmRf8i2ZiFkhytNl86a6fvuNoszuXt3NhvAcFwPe2zjM1cVQS OXrq41vnnXoy3pNpeHVSZdd8vM7uLf/8abe33l6mo6l/ey++1UzHWmw7VHa9+2Sq4/6d2vbOG75T P1zeM+PHTu/Ru+q1WefenfOIXT5uWSd83fV7130fPFI7nwI8B0JlB/dn0fPqbqMuf19oNBEI2Dmb UssyFd2P48gW9wkiwfA14WvC1zyyr3kYUHtmhJTa4lk7Ny1UaNl179saGGuxfPdeCHZb67Em7zzP OyOXXvDxjIS/XF2eEbnwrG27XJ61khxDJoZMDJkYMo88ZH68+DnaFmR5Lza8SxlbjnnDz6wZc+d5 2fnVk27nl+jq8oIfXJfPGm9xKAE+NXQ91Y4E4gA+gA/gA/iODL7fu8q22Z9UMOy8jYFsld45udyb didX1apuyGyVpVRMG6VlshITSRLY031X9zVLHwF7wF7fBNgD9o6EvXedhOOwu4wCoig6USf8f+Sd pqjGWNXevydZkWYJbZjY8YA2u1rgErjTAi22LEXMPwB3wB1wB9wdGXc0XWRFVjcVbSvwpfwY2/QB kYG5ixZnBUlo1R7ZNgdTrFYvZJCnq5brKhYWnwN5QB6QNwDksS90IbZu6Spt1KzfzGVLv6xut3Bp k8yn/dsNK6icV+uGlqsGmMUA88C84TLvceO1bU+PQy8YwXhhvH0TGO8pGK/lGtx8FZG+AuOF8cJ4 T2rkDQwz9txwBOOF8fZNYLwIFXznZMa/00pst8QaQvMJ2X9EX5YZf4/8Y1UwomlnRFNU66AFf/zz VzpjRNX/LREb0HQvMKx2C0RADpAD5E5JoWi6qiq+L4wMxgvjhfFCobyQQrkQFXML1ozDil/FA/XR 1Sj6G10SWtB8XWf1oToJWcIW1/yoxNodCYVixrEXKFowAuQAub4JIHcKCkVXPV/XDARAYbww3lMz XiX2DTtwwhGMF8bbN4Hxwr04VsGATUbUu4blLCkXRLy125sjZZVYEyl2Juo2IyJZMa34uVWrpFlV 24QqCZ9D9VQvCiN9dEA+Q9Vd1dEED0E+kA/kA/lejHzv7qFsA773hD6oDLlfOKVVaX9VOMU613WU Ftt29jSbiQ4WzaVKGoqps2/s4tfQl82H+N7999jpvQkz7W+cN1DR8PEuMEg9L2/Fcpxd+Yln6CS7 t/ybpFMXY+/2ppOFkdWO8m8ZRhdvD0YftnfIW6ijOr5/oo95b5ZmRGGM/cqebQHv7UETeG/w3r6L 9/b7p/jjrg4NeUc/U/I7G/9eTIv35Jo1t4wVbWFflrO2BT8FOuue1uu6YQsiuZ2MGjhR2EaoQD6Q D+QD+Y5MPkG1Temu3cba27qsYmFzS73/XWX8YwXtukXQndMz5Z8mwTzd0GPXC7C3NpgH5oF5A2De vqLrsiGTPGvpJqYmH9V2e235m1JVHRRbU0MrwMoNcA/cA/cGwL2yQ95W5vV1+Blt5yy5FzyREXSO 7lqRgfAdwAawDRdsT6iSyLAdI/JGMF4Yb98ExgtVciRV0j4mjzwkpIjlBJrvO6gWCpqBZqDZEGj2 43h8zv/55fLyJ//ycreq9lyCZqrqaaproQ4oaAaagWZDoNndt2szVfPNyA4QJgLNQDPQbBA0k3Ep bcdxIhN77gBbwBawNRARxr3KJx4/SjDNDgLXiJR4BKaBaX0TMA1MOyLThG/5+ENGp5lqYDhWLOgF poFpYBqYNgimbSNke4EzaabZvu25WqCNwDQwrW8CpoFpR2XaOSHRx0tV/Mv/z5+Kf7o32xIS7XKg sVhEKQE5zTFDzTSCESAHyPVNADlA7ujC7e5up9y2T8Wb77aLwSXwpjpW4GkaEmyBN+ANeBtUrO2u D7nxp/+9e3QLG79mUbfquWboeFjUDcqBcqDc8EWcBNMU1TNdS4VyA9PANDBtSNG33z/F2+jb7il/ 54oVtGjky+Ybjh1w5YaSFCAcCAfCvQrVZgaqqdgq5kzBNDANTBsC08gPm8fd3fbZ/tMfJKimhX6o OobgF6gGqoFqoNqwlBoXaP3TCX/ncP8jGWfUM13dMIMREAfE9U2AOCDuuOG2m005bHJ+8PxOPs5m +rpn+z7ibEAb0Aa0DQdtSblYrhp+lc8Pnt+R26yZkw3sJABnhZ6re1E4AuAAuL4JAAfADWLx1cY9 3T2/2xa9lmCbqhiWY5iYUADbwDawbTBs+7HP1917/Eh2lUAk2GYHRhQ7qMkGtoFtYNvLsS3nh/Mb K1JWsfRXOmN+xejn7kb4C+rdbb3S7E/a7kmX0zWr9kuHSC2sDzxP0Wxxr4B74B64B+4NWtN9Hd00 VQucwA5GoBvo1jcB3UC3AUbj9p/K0M0wVUuzFBTkBd1AN9BtEHQTKu1gMrVuyor7tSJlZLu95rmc Zxr6oW0H+gh0A936JqAb6Ha05QttqsicVuktrVqkbZ8fPJXaTMHxHCuMoN1AN9ANdBsI3TrC/d94 p5riBJFlomgICAfCgXCDIhzZaTj+Pj+OhB/24UNqgT1XcH5oYjEDCAfCgXADItzTm2L1D5ntsRRT MUNVhZcKwoFwwyXc48Zr+LoWBB5Su2C8MF7Ik4HIkwPVcXuespx/TsbBpFoi+f6cX9N5yfvh4x/i t5Q24sIrqjlWtbGmXqnauWmfK8ofXf882nObF0PWnUaoGb59ut3Je+iKs/vxTp1msxX3YkXzTbs9 QcdfER+QFeKzuy4Wa7e+sYtfQ182H+J7999jp/cmzLG/cfZvGX6vvEYifTAknB3bipRI0RGwfrYF 9NKDJtBLx3d2tECxFd2FswPjhfHC2RmAs3M1Z90ekMuqLKeE/5eURcKWDWmTIOe0bp+wlJQFaXjj aZnn5a24H2qW8KNt1hKiRTM0xdYDRGjBPXAP3BsA954J8OjiqBDgudeVzwZ4usFDOr7T9s1/HN95 Zbdq14kSgZ8TPsUHNU42kZx98xMiAeb3Veb3NbZnwfYeuTHfquE9bjonfKIb76U+l/BKlECxVCfE JqjPtoBX8qAJvJKX9EoeN15LifUoCIMRjBfG2zeB8SKkcKSQQknI/1MtMn4uttCCCc7N1zg3n+Lf Lyit5T0csdIBHs69u3bTja/by7mUOL3/z965N7dtZNv+q3Txn7FrKBrvh6quqvBMlBs7rsjH51ZS qakW0BRxDAI8AChaKX/42w2QAqlXOpmJCEiLNRNTZNsCAa4f1t7dvfcLu66P0Oi1hHtt34MLMRHF puQi/CBmr5qqzHOWkv/2PpDvuPA39GYqEw06oeZGpj6BoXxiBAzlvSEwlMePBlVdVRwriicQL8Tb D4F4EQ3+zQ5En2kzQs61Dxcxdxsr4hU0v6mzWsJx2IFq6n6I1YCAFqA1Nsdhmp7hmjrKKkC8EC8c x9EzPveWtCXlcsmK5mdaXLGLhlYN2SVI3e1VfRUnRixw7tzZE+cnKtJHz444pijSwsg/ODcXzU3O dscSbP8tNmcVKxJ2eGS737R79/BX7Y7npV2Os02W5+SSkZSt8vJmu4K8XIk15ru2zLcleAnHzheW SphmzYxDK3DEMibcd3HfxX0X990j33eb8oo1C/4rL29uwVaVa36dazEd0W1+T8W7H6JPwU8f4nc/ RxftE8IP7Fz7+XDa6mHsKZbOv7++PwH2gL1+CLAH7B0Je5tFlizEtsHrrBaN/Sj30MuyyJqyEtdc 7BX8UZ2SH7UpyfX2XfF3M25/V7RZbOiNTIrUNPl3PDCRIgX2gD1gbwhub8G93dWi5du2VcxMAmS2 a7iu7sK/AWQA2djmelTLV7wAbdchXoh3fOLVIkUNYogX4oV4xyZe3Qu0ONb1CcQL8fZDIF7E/3/z 7PX3lEf9U8IaQvPZQdOd6Osq4++RH9YFI5o2JZqiWgcj+OPXj6KdrGr8JpEbsMzA1HQbU9qAHCA3 NodiWlFkqXAoEC/EC4fynA7lvOCXrmDNSVjxq3jgPvrtKHS7HeXQnYQsYctLflRiS7yEQ1E1Vfc9 F9vrADlAbnQJUDfyVUeNJhAvxNsPgXhHUebMV5woQOV0iBfiRXjxjOHFowugzrs+EB/izycVy2nD UrEINF0nTVYW9bR9M1lXFSsaQqtkkTUsaUQXr7TkH6soG4l4wxRtcrS2kheoB+qBeqDekam3oNeM UEG6puS/jDQlWdKsaPj/CS1IJnIx5YpV9DLLs+amXxcvvhHzqlxKUM/2Dc+LIswDgXqgHqg3BK/X 5pGTPBNmjiOv+5le8R9nXe8wPpozhmQ193206bf4CPylrJIqg+Rrhmv6Ak/AHrAH7AF7QzB7rcMr xCoeEdHeM3jrWlz+VZVd8xD41hfWohZcIQE9w3QVxQqxsRHQA/QAvQFAjz9flUXdgq9ZcEPHmXaZ s2WX0UtZ6+v4ca/ntM3nVTURm7rFm1vXJ4M91dK0UA0mwB6w1w8B9oC9I2HvNlLtXN8lu1qLMmUk zepkXQvGbaPe29TfnB/Qnh3MZbhnRZZrarE+AffAvX4IuAfuHYt7tG4j2HJ+OFchPN08y/n15pAT rFtSMbE7k4Cc6XqKbkRYaAbIAXLDhdwjWXhN9S3dEzLdE69hWZYStFvT/pR4t43ptnVzdyOhaCj6 dshAFb3XrdFux9I/6CRonepm20mw+1fgeobsen5asYLU/NeKKtxl9YW8qdfJgtCa/PTxQ/z57S4c 5HGfKE69LAv+R8rDQlofhnkHLSdtUVxE5ovySMtJK7BCMx7x+T6712DvhTYclGm3eMgQ7U8x5PFz tn3x8MY62hO5a+TK4wvx6iN9XR92KmoceJHveZMDp6K5umZ4YW82/jNhxt6JhimBKUGY8SdcxT4G dfFLgcGHMSiRnG5KUrdNXJoFyyqx+r7zL7ulpTKdse329P21i/ASznZzxu3cXtnq9sQu6c29M5uy a5aXK9G0pT3Lr8TcnM0I+b7c8A9fiUnfTLQveMj7PnxbNiw/9kxM7T49Ardl3JYR7P9HsfXo3XPO XxLrkhmp6bJdo3eZs2W3cLliYs1yUXLW3wne9m+YYtvtH94wtVPTefiGqYSa4dsv79S+lvuhWOnU +q4ipVW7zbFdATCTuRuKsrOKgx2MT47A3RB3wyFWTAlC27B9LM6GeCFeWNlndBwGd6ftTJSExVDc yAwDFRYDlAKlxmYxTE139UiHxYB4IV5YjAFky8Ru/tZ6kDebzWZWror59aysrt6KRBklCa3EAZ1c VTTttsPyZw1Lp6Ts19RIuBbbVXU3tMMJwAfw9UMAPoDvWDshctqIfQ5kXibrmqVENDNOEpYzDrhd K2MOvNsid2LPRME/zYeu/adMqKY4oRdaAk6AHqAH6AF6R4ZevC5alh3A63Dys9308YonP8/uFa96 XYuaP2dVs6Z59nu7AZC82a2PF3fBrvbDtu7DthRYFzy8L+98qR7Jf3BQ20aIjhJPjsAdEXdE3BGf A3btWtv/YUlbynA/EEjTXQhQs4QfU3PTFX8Qi4vaUhCUxwKycQD/Zoa2F7kTUA/U64eAeqDekai3 bEsctivd65u6YUuyyZpF1tX4vxMc7O/naGH114KDJ/ZzjD1meHI/xydWUH6axXCp3RpiYv9Vx1+H nSIe/nivQqf9F+c1rLrlUWRfWjAr5hU/wGrd9RAR70n4LFsPVVXV4LOeHAGfdW8IfBZ81t/is97Q mtSLciNahTzlqwSyZG76LnzV7uzOsytxa5D1VY5UVZeHT/HL8FUxfFX3zem/OK/BVxlv20R9VotM VpvS74vdFKS8Fsl8fozlXBgvCZOlW05ghJH4rsBkwWTBZMFkHdlk9TOQt9l8EUdSckVX/BnNb2pO v0vWbBjblXXeBZqyuy702DUtTRVlnUA9UA/UA/WOTL2Wdx873s0kCGYpkaKFNpZegGAg2HAJ9rB4 VV2P9MATBUchXogX4oX9eK700UzdbU4/sBwSjsM0Pce1PVFNCdACtACtMTkOPQ4ixwqQ8IB4IV44 jgEkPPrNJgfe42Ai3ZFqyYCJ9P1TuxSuTgyWmkaXamzwkqfR39/59j308V6FJHdfm9cwib6bV3qz aJpVffru3Sb7kt0rlrHbKiIRG9mqyo1BjITOkyNgr+4Ngb2Cvfpb7NW9LSEz0nZFWNf8qJO8XKei NdZq3dXGYMmi4Ed0lTHRpEICeHoYxU7QdgUE8AA8AA/AOzLwrneFDli7Eoi/VYpiZt0mFHExlzyu ad9KSlEGKN8WPNhfaCQBPs2Nw8hqt3UBfAAfwAfwHRl8PFYVhQvaNvDFXti6tYBVW99AcC84dH0S sFMCOza405sAdoBdPwSwA+yOBbvDncSPJPDeiSR4t1HmTxs8xQtDW1GjCZgH5vVDwDww70jM4+zi F77NzHWb/Wqx7U8YvUbs80uz+ZxVItHXpfVuI99328p+ohRW26D7j5aUB5oW+pZgHMgH8oF8IN+R yff5Q1yTN7clTFlKttW6byvf1m9FL+icdcHubZ3vusy7eqflXAJ8qmLYsecKQAF8AB/AB/A9C/hy fjg/syLl7i39SK+YXzH6pfsiPIHEi2nbw3Zb/YEbQEHJaTvNsSyLrCmrNhUoXr+YbTcWii7w/B9v J3upBBF1wzJ8zUYQDCKCiCDiAKzgnVmN/VqnYn6jW0ksqp7em/+QXNGiWppiGUAekAfkAXkDyfsJ l7eX4MvpjeBZV9yrXc53OB/y12Y8bN33Ix8bO0E+kA/kGwL5RLi6KMtaXOBrWmXlui132Nm63eaN JUsWtMjqZU0mlKNRNDe9W2x8f6uTLj7Pa97qdK8c5Evd3jORc/yKbwSKG6C++JMjcN/DfQ/3vf8o oB6977FiXlZJl9yoWC46c99PZ3CT7z2RDpEx/LGmaEEAww/wAXwA3xAMf9Gwq4rzrt639QeLm26J R+sVt/8Cg20ZdPk8h6pYmsu9/gTYA/b6IcAesHck7N3JVuxXvmlpgso3d07lrqbNJstzMs+quuW+ VKUbgf1Xnf4R99gifWg29HV1RN8up35op1yzoNxocHuRzUUlhDX/K/U//kwdGF3RI933BZZhMWAx YDFgMY5sMSr2v+usahNEImQ6b0h776R5Xe7STYd90ftVM4uqXF8tJKhnRo7haRZqIoB6oB6oNwDq 7SaN95JJefaFiTow3P9nv3ebQ8TCQZokrK53NWGmIqhgG5rnEtjTVNM2rdiaAHvAXj8E2AP2joQ9 AbSi2yHHr/F0bx+ceKduyopbuynJy6t2q1xbGKaiCf9uZDn3flPCmmQmQ77Ii0Pd8iYgH8jXDwH5 hkW+R8TrGZEZGahVDPFCvLAtA7Att3sW7iXkyxXrVgVQscv1/vu0aZNX0aeLcwnbovqO5tlBODkg nxXylx1HFLkD+UA+kA/kezbyfWafi/mS5OxaTP0vWNUl47um5mL/V8kPQWyHaGh1xcRyUFo/tWpA 5KL+cJLbOtWtP7VqwAqs0IzHe/6f7Jczz65EJUExXGodQeuQ/9opfgnnsjmL73z/Hvp4r0K//Rfn NWyqMUm9KDe1THrIjkQpOQ1lg58cAZ91bwh8FnzW3xRhcg+1vdO3Sx9alhH+n9ZvddVDRIR5cW+X afaVibUQ9zZPPhRfmpZjWQ5KiIB74B64NwDudYHkNrwUxZEE7VImqgJ3r8rYOUvVdcUwBH6ANWAN WBvTbJ8d6rZjoPE7xAvxjk68phmFimohkQLxQrxjE6+imEEYKEJkEC/EC/GOSrymrWqhgloREC/E i1TeM86zfk8rVouV+ISKFtV7j+jrKuPvkR/WBSOaNiUajw0ORvDHr6KRBFHN36QSe6ETOD5yA4Ac IDe63IDhOnpsIzcA8UK8cCjP6FDOC37pCtachBW/igfuo5tv/I6uCC1oflNn9aE7CVnClpf8qMRi SRmHEgdOaOrBBJAD5PohgNwociiW5xoKZi8gXoh3dOLVLNV13LZpBsQL8UK8CC+eJ7z4413Cu6XZ eVY37dJsMi/zvNyIK39FVzXJCvLTihUXDU2+nEpEGXrgh4Zi+hOwDqzrh4B1YzAqhm56XhjoE4gX 4u2HQLwwKkcyKiUhH0qSsKKpaJ79ztJddcm24FpSLlfrhk37cmy0SPeqts1Ia14kbIviBE4Uw7aA fCAfyDcE8vFHG3SJzgn8MMtruoc8cdUF6i422bzpClKW82ZD27bVEU0W8g3s1NjVxdqVCcgH8vVD QD6Q73jkW1BRpo5bvbbOwLbsbpazFnoZ/5DlZq/C3arMs+Rm18Qu59CsJcBnuZFq6hpW7AF8AB/A Nwzwte1jbopkUZXFrrXCbeMF0pTkcp3lacvG5SpnzbbZjExFFcXQYzWOxXcEvAPvwDvw7vi8u2Px +O8T9aMOaHZYMlI0xvrDkpH6qaK+1NaTn++i/qUWSZxJ3dN8J9ZCtA16cgTuabinDXG22TIc33cQ gEO8EC8M6QAMaTfbnN4UdJkltzPNddk1s87mPO4WfaxJedlQYUpFtN6UX1gxbZ9mNSnuNQR/cCeO Eel6gNqmAB/AB/ANIxLf0BuRX+zQdsu+8pofh2Cb4J5MRKZZmmWEEdoZgm1g29giMs1y7MBVkE6B eCFeGJPBRGTJum7K5W4+lP/Gec6+Zl2jZWFaqNiyRLKiYVfbmQT+XCYSMzTd9v27XQwBPAAPwAPw jhSJpdl8zipWNOSaFWlZ1VOpnJIWuJqFIpsgGUg2trhL9WNXidoPDPFCvBAvbMgg4q45v36Eh1RZ QbolV7sQjDbdRFjX94oQ7+DdrCZlkd9IuBY98Axbj8SiLoAP4AP4AL7jx18cbmLGy/t4LkEwxY9j W9H0CQgGgvVDQLAxxF2Waoe+EQUTiBfi7YdAvLAfR7IfbVE+mqb8NVH2gfuQWqwrrNf8B/5yW/dh P9aakry8uuIvT8l5eCGTKNYiV/N0TbAJzAPzwDww78jMY8W8rBK2FDNe5XxXvmtb1aEr6bWt7yXK lTYsEeCbbVmZ1eSS1iyVIJ/hOa7tK/oE5AP5+iEgH8h3rCz7XnFl8n/ZDcdcwWYSKFNtQ1VUTBgC ZUDZ6LJOuh66gRoLkUG8EC/ECx9yZB8Ssjy7ZhW9zBlp+KGSeUWX7JQcOBFxHEsRpP1MiyvGPUvV kF1VFnd7tV/YCTvTLu531zs8DxGPTh87C+J3W4EVmvHBObhobvh53v7OYPtvsXbJZ8IOj2D3m3bv Hv6qJ4NdPdasKMY+vCdH4CaDm8wgK6O4jml6WMwN8UK8YxOvGaqe7er6BOKFePshEO8oxOt7jmP5 qEkG8UK8YxOv5RuGEdpCZBAvxAvxjmpWxDIDPbaxFQjihXjHJl7Fj/1ACYXIIF6IF+IdVcxraKoe OvoE4oV4+yEQ7yhKh3iG6mkBbDPEC/GOLmGlK5Fn2FikAfFCvKNbpKEHTqB7KJYM8UK8o0tYOYpl h4Y/gXgh3n4IxDsG8dqBohqBhUUaEC/EO7pssxMGuhXBNkO8EO/oss26rsW6i2wzxAvxjk28muEL 5xxPIF6Itx8C8Y5ieaRjanqkhBOIF+Lth0C849jPq+mmH0G8EC/EO7qElel4dhyqE4gX4u2HQLyj sM2hyb+6BippQLwQ7+jEa5mqowaY54V4Id6xideKIz+IsUgD4oV4x5ewMuw4iF1MFUG8EO/YxGtb RhD5vvjAEC/EC/GOSrxx7Pma7U4gXoi3HwLxjsI2x24YxAGmiiBeiHd0d15Dd5TAiiYQL8TbD4F4 R7G22TTU0PFx54V4Id7RTRV5muYbWjCBeCHefgjEO4rlkYplRUGoTyBeiLcfAvGim+Xf3Jzxe1qx ekpYQ2g+I/uP6Osq4++RH9YFI5o2FU0crYMR/PHrR3rFiGr91n4xun/6MciptusYrocpNUAOkBtd Vt4xQl1DK1SIF+KFQ3lOh3Je8EtXsOYkrPhVPHAf59qHi5h8R1eEFjS/qbP60J2ELGHLS35U9/pP PxKGGZ5rRTEqswBygNzYHIqiq7ri61huC/FCvKMTb+DpKnIDEC/Ei/DiOcML8nWZtxeSX6JVxWpW XbPJ2S6AmD3wkIgjLEf1Ahcb5kEz0Aw0GwTN/nlycsr/+Oni4p1/cXGbITmVoZnlOYavYjcFaAaa gWZDoNm3f8ObqaYZW6bgFmgGmoFmoNnRaSaBLd0NHdOMgC1gC9gCtgZiwnhU+cjjnzJM8y3DUNB2 G0wD08C0oTBNxJYPP2R8mqpwEZgOkmVgGpgGpg2GabsM2V7iTJppuh3GqqdhZRWYBqaBaYNh2ikh 0fsLVfzJ/8+fij+6N6NPF+ckEyvHTz5/iN9LQE4x4sCwHJRaBuQAOUBuUMbt27db57Z7Kt5885md fC7mxVsJvJmh5rqhggW2wBvwBrwNKtf2rU+58af/5/bRbe9rXdyc/30JymmK7cSWE0xAOVCuHwLK gXIDNXHvy7IgPEQV2Lv9QcbP+a6tqYE+AelAun4ISAfSHTsn1z66nNztU/7OBUv4ITU37Wu3P7z/ 7mcJ2hlxbGvo/Q3agXag3bBox+3abgbi9qnUrKrpmKFia8jIgWlgGpg2glj1Eyto0ZCUH3tWSBBO 0SPb0A1rAsKBcP0QEA6EO1pRj39sH9++7Z7tP/2HjG/zlMC1bHRJAdVANVBteL6N27X+6Yy/kxXz in+Wap0060pqGjWODcMOwwkQB8T1Q4A4IO646bbrrGrWNBfJtv3n3+RjUsO1zcAJscwXaAPagLbh oC0pl6t1w6/y6cHzb2STNQuyhZ0M4CzPjDwbm+oBOAAOgBtUeLp9HDz/RgrWbMrqiwTbLEtTQsXH lCnYBraBbYNh2z/7PQt7j3+Sb7tqSBJsU/VYCz1Pn4BtYFs/BGwD247Ktm+72DP7nTZZWZCc3rDq m9QSN8vyPcvHPAKYBqaBaYP3azIuzQnEBlMsaQPRQDQQbTBEu/M44Nr+FtPu+bkE6WzFszRN9Scg HUjXDwHpQLojkU5Q7uHivPVuN+mqKv+HJW2T8D+5w1RXbNsydUwtAHfAHXA3GGP38LTp/lOpRFxs q76BCr6gG+gGug2DbiI0PVj1VjdlRa+YWNu7XRIilvbKhKqO6hmxFU1AN9CtHwK6gW5H22faruld 0Crd0KpF2u75wVMZummGZamxi2byoBvoBroNhm7/mcjUDkLL8NDXFHQD3UC34dCN3Ho3/h4/hoQf 8uFDhm6GoRhW2HIMdAPdQDfQbQB0e7xrc/+QWQxnO5GjC/2DbqBbPwR0GxbdHhFv7IaBq4UTiBfi 7YdAvLAmR7QmB65jc5oV4t/JxMJ7t726/JouSn4e3v8ifkppIy68oponqnaiqZ9U/VRRTxXll+78 7M6cON5Y19wwHvF5O7vXFoafHfFOyvLbkySqUv7Fk/QQ1kPWHvPYzx0/Q5/4De5sLl7b/dCfR/7K SxTaWXa1rhgxJZy8pet+YHqYY3pyBMwAzMAAnbxiqx4/Pd4E4oV4+yEQL5z832wwjJk2I+Q7uiJe QfObOqvJnP/LP338EH/umhl+7DZkSFgQ/qV3BcYmoBgo1g8BxUZhQbzYsAz054N4IV5YkCEkE39a seKiocmXuynF/WyZqAIuky3TXmO27OFTm5TFFf+hbk/ro6m0/byt/tdP8ks4m81ZcOcb+NDHexWy 3P/qPJDHfmlsOktLfhRF2Yht6ddZysg1K1L+T2dFyjieUlY0pL6pG7asZxIRkhmEihOZWG7x5AiY rHtDYLKOHyEZdqz6uoEkLcQL8SJCekYXYs72o6HbsjhxVrENzWVaiqiRbcdOe73BLrAL7BrVOk/f 9i0jRtQA8UK8MB6DSs0uaE1oek2LhKVkzqhoT1uTcn5K6FvifTxvZ5P5J6BX4suwq/In4VhE81rH NsMJoAfo9UMAPUDvSNC7qsr1qiZvFk2zOn33Li2TelZyENYChLOyunpH02VWnFyts5SdJHm5Tt8l /KOzonknE6I5bhT46B4E4AF4AN4QgMfdmmgX9K+da+sAOFs0y/wtoUVKLt+S+TYHxV0g/x8RfzlL mFRGKrbC2BS7XYA74A64A+6OjLu/y9jx86XGvovapiAdSAfSDYB08w2l9b/oKvsXv9pNRVubtzV2 Mxnv5ttR4GGjB4gGog2YaA+L1/I021QVdAWDeCFe2JEB2JFPi6zeJZt2C61rQgtSXot0Ej/sck4a MUhEZaQNy4hoLjFts1CUXNGVhGtRVDOIFTOYAHwAXz8E4AP4/lbw5fxwfhZ7RSqWfqRXzK8Y/dJ9 ER5FIt1txufkW5Qbcq59uIj32JimmaAlzcl8XXThmwQBLdMOfddE3AYCgoBji9s0XfejONAnEC/E 2w+BeEexdyy03FAJrAnEC/H2QyDeUWRMY9tX3RjihXgh3tGJV3HjWInRNxvihXiR9Xu+6Y6z72nF 6ilhDaH57KDvWPR1lYltUj+sC0Y0bUo0RbUORvDHryJXSFT7N4nEnq1FoR63dZoAOUAOkBuTQ1E1 Lwh9J5hAvBBvPwTihUP5mx3KecEvXcGak7DiV/HAfXQTjqIu+O1U5MEjZAlbXvKjEiUgJRyKElix 4WjY7gPIAXKjm3o0tCjwDSwZhXgh3rGJV9d0N9A9IVOIF+KFeBFePFN4Yc5UUbhybxH3riDUbQnL 70RJAYnwwQpV3fdt1N4FxACx0YUPrhJoqhJMIF6Itx8C8cKBHG3HGbvbVCgpl0tWND/T4opdNLRq yK77zfb79TpOzq7WU1ftjmyyZkEafrbuvP7EyYuK9NFTJw74gW5AF81NznYHGmz/LTZnFSsSdnjY u9+0e/fwV+2O56Vdq7OKY6bu9/9k2zY8tEglzLOpmoHj6O4E998nRuD+i/sv7r/PcIvh91/W4aup 6HyeJWSe5fwS1+SS1iwlYhN4WTWz7jaddrTZ3nfSqlxx7En1vLDMSAv9AFOOwB6wB+wNAHs727bj Xlu9Is/LTYu0O1Tc8m9bdVoYcQnmGb5qWpGByR4wD8wD8wbAvP1SFVubRysmXuZWrylJshBJg668 zyVb0OuMH6JgX0nWTZZnv0sVk1Z0w/ZcLFAB9oA9YG8A2LufM62n7YsFa0TpMnHhV/n66iQr2hlx 0VGJdC2Vluu6kbF6jqnouo2NjWAemAfmDSG8Xa5yJmZnHpox8j6ebyPaeSlC3j0AivkMGeDZoWE5 EWJbAA/AA/AGALwDaG1OU5aT3XS0qLF4yq/nouTn4P0v4qeUNuKiK6p5omonmvpJ1U8V7VRRfunO zYNnbftiyNqP8MDc+ahOJT9Dnzi3z9r+oZ9q7nbFm7tXe/rzV8RwcWvYnVBRfecvntC9M/fCvpnd iRRRw937Jz91r0iK3GlU3HfkNwcepKsq3ZqQU/L+R23aRVnXF5usSRZTCcuhe4GrKy5irCdHwHLA csByPAfnCPkxK9ZfiV9l6RWbkg9R0NXA//x+I7LqHy7+Hw+yzovbrHuXc0pKjsekuW3WKEE+Uzd9 TTVQKhrkA/lAvgGQL62ya/4LRXacXO5NIC7pl+304a4UPs1nEoSzPNUxHCyVAOFAuAET7mHxGvw6 BaqFnqoQL8QLe/KMGTdzpt3Z1B4/FFUdZoNbIkkkL/VXmQ1uWxc9mgR+ad+gRwwurQklF+Jblcis eLNMN7JdByvenhyBGyBugAN0r4rvuZ7jaBOIF+Lth0C8cK9HSq7tPGxnQ8Tr3IaQrO3Cy2iV35CK 5fzTMGF4+WuikFOzoKK0fbt9qR0jYVsUy9cMDd04QD6QD+QbAvloWq7aXUlNSRpWN7sF+v1KEtq2 1xXzqg1J+IemYlkSB2AtuynTjgMl1EPU3wD0AD1AbwDQE2RashZ7YvPRbl0IacsMTfufV2WeJZl4 SSwy+RPLRzTdCXTPQMtEIA/IA/IGgLws5VYum/NfKqxcuw/pgHokK5J8nYqlJPtblLKCA3LZWsBT Ce6ZpmcYkY3MHrgH7o0tLa/6lqYHCoqMQ7wQL0zLAExL2fuWpPUgIv0u7Ap5k6VTUvAgbkpSVidV thJvv5UJzTTPUhUdFgWUA+XGZlFMO3AU18SyH4gX4oVFGaRFaVhBi6azKbSuyySjDUvbyTKpPdeK 6odGhKX9QBwQNzZ/oluB4ZgWaq5DvBAv/Mkw/Am/eF/a9T1ZUTc0z1k/ld3NcN/I+BIt0EPP8YE2 oA1oG13eRBSPdFxnAvFCvP0QiBe+5Hi+5Pyj6OjXlPx3kTcHDuRw97CglszuYeNV7h5uktWUrFP+ nyxZtr3EpepJitXYf/GkvoSz15x9Cj5OyX+F/D/nwfuPdw3wC60feTYlRVkwmXlSyzSt0MQ86dMj YBlgGYZYHyjWw0DVME8K8UK88PvD8Ps1/6UJI2IrTcrqJiu6+VIeBtA0Fa0fJVyJEmuOHcXIQgJs ANvYXIkau56n+ljaAPFCvHAlg3Ylq7KS6UKoeLofWD72zABpQNrY/IiuGbqt+cEE4oV4+yEQL/zI 8fwITdrN9l1lOcJ/XcqKG9JUdD7PEglHYimuaes+Ur+AGqA2NkdicUX5nhZOIF6Itx8C8cKRHDFD 0tBmXZ8S/gVom+q1uRJW0MucvUuzWvyZyqRKTMMwPDWYgG1gWz8EbBuDMdHs0A8iBf0wIV6IF8Zk AMbkoIThrlDrf6aKoW7ZvqnGwQSwA+z6IYDdKCZ1DMVUjAj5T4gX4oVTGUYK5X4VQ2FQus33j9Uy lCoWFLuerasCSoAdYAfYjSqnouuh67bNcSFeiBfihVMZpFPp6hn+hVKGSqi7kYP1dQAcADc6d6Ko nqYbcCcQL8QLdzIQd1JWKau4A8mzuhHe5E7nPglPYlgBB4MdToA1YK0fAqyNwpO4hukrHlahQLwQ LzzJQDImRbrLlmTz3ZxOQgtyyUjNGP/zZptDqUnZLPjhNQv+brkpWNU2FpZwLabqWqbiYlIb4AP4 RudaIjdWXU9U3IR4IV6IF65laK7lTi/wBb1m3L5w70LXadawdCbhURTHczSXSxSYA+b6IcDcKFbN 8vBCNbC/B+KFeOFRhuBRDvb3NGKTsegWcZ2l/KD/vd09rhoEegzUAXVA3dh8ihq7lmmo4gNDvBAv xDuq6kampvuhgS50EC/EOzbxarammp6J9B7EC/EiQ/B8GYKz72nF6ilhDaH5jOw/oq+rjL9HflgX jGjalGiKah2M4I9fP9IrRlTnN4ncgGG6uhEaKOcOyAFyo5vDiBUnMjz0hoJ4IV44lGdzKDk/nJ9Z 0e5MEV7Drxj90n0Rzs4LflEL1pyEFb++B77kXPtwEZPv6IrQguY3dVYf+paQJWx5yY9XdGSW8C6m rtu+4wUT4O+JEcAf8DfEeQ3fNxzdhXeBeCHesYnXtjVHsaxgAvFCvP0QiBeBx5AK+dyupvo3Cg6a puObjieQBNQBdUDdmHyKGYaG5fuYwoV4IV74lGH4lIfLC5JmkdW3jkWqFLKrm4riRRPADXDrhwBu Y3AmhmrZke8LkUG8EC/EC2dyfGdC02VWZHVT0Sa7Zm0bTEberFfv0nIjly0xvMBTYx+VP4A1YG10 nsTW4lBXggnEC/H2QyBeeJLjeZKuFzd5QxPhSaZEWJEpWbEiFVc9qRj3KP3PKcvZ3s8SjkVVAsVS dWyOB/QAPUBvANDjj/UqPcAaq6qyeiuTE47NMAo8lE0FzUCzscVfqmqEhupjLx7EC/HCigwj/rpd Q7et834eHs5UE/78zlS2hE8x/TDWfTTKA+qAuvH5lEjRbTeEeCFeiBc+5fl8ypk502cP7SOWcByK ZVmeq2O1HKAFaI3NcWi+bVu+jTqKEC/EC8cxgMyIKNb+04oVFw1NvpBNWX0RiRA+JM+WWUGrG/Km Zgk/quaGXFXlelVzs5L2WRPKf5ZwLWpsaa6nxBOAD+DrhwB8AN+RwCeeZQl7OxMM5Mhr0ZeW/JCL UtSrzMsNJ92N2H4tmlawr1ndiC9DwRoxVIJ5muGHiulgRQ6YB+aBeYNg3tbJXbMiLSvh89q+PIQS frT0ii1Z0ZBMVL6b87/N0Xix+xspE7SUSlBpjuuqjsATsAfsAXvA3pGx19AvjDT8GElTit7uDavF FP+c/9b5ukhECR2aC8iJyJabvaziuGtY+wb3fxLMszVP0TULzAPzwDwwb0hWL6vrNavbKPdepu+2 LSMtOtfHuhi3zparnMl4Pcv3NMMW3xVwD9wD98C9o3Ov6Som5vzS1tPW0i0px2DR9Z5dN+vqth8t qUtuCq+zqlnTfPt3ZBJ7kWq4qHkC6oF6oN6QJjO4y/u+3LBrVnHwNd369i7uFc9Kbv448dZVwg5n OySQZ9mexb+9+gTIA/L6IUAekHck5NE05T/Wraur+VXO2YNzGHWb5qPkmvLja9rp3F1oLIM9T/Vs HdgD9oA9YG8I2NvOw84k4KXqvq/6HoqGA16A13Dh9UhmPdAU2wzRVgzihXjhPAbgPLrdiu3mgJJ/ A8R1rviFFBEYbcgmEyUUiiRfp4xE1zwGOwnKIs3EGoqTJW2ShdTiMdMwDUe3UToG2AP2gL0BYO9N FHhvd51NGJmXYmeAuNryUDNcwwgNTZsAaoBaPwRQG0MgZiuOF4cKxAvxQrxwJANwJPzBX/3CGnJJ ayaWN7VGhJQF+VGbkh/1btXTjwZZMJqyqt2x/Y4fU71iiegrK5M7jlVX9X3sXQT1QD1QbxjU2075 86MU4Vi3orNmO8rJtHXSVMPxPBttnYA1YG10kZgfKL4RYbMJxAvxwpMMw5Mk/JNwEt0PxWr+JOVX ddt9UkRku5em5NcozZqyOpWxLF5kx4EWTEA9UK8fAuqBesej3gcmYFdWTBRKoFle8yCsYrPfZHim BGpsYjIMPAPPRheCGX5kRo6pTyBeiLcfAvHCjBzJjIiqJg+sTBRddnkQJvZ+dUniKPC6zk+ZCM/m MpGXESmRp+tIFgN2gN3YnIqmuY6v6kJkEC/EC/HCqRw/bXJJ6yzZehPhQkjKihvRHbtaZs22VlEm WmTLzGWbVqiFloZeMiAcCDe6uWzVilxDRxYU4oV4YU+GYU9oek2LhKV7DuWUnH+8IHV2VdC2cGJX I7HNsHCz8l8//9i/MpPwLLqnO1ocoQ0UsAfsjc2zqI6rB6qPejIQL8QLz/J8nuXMmhESXHhdNyJG grxcpxJug1PJ10IbNXQALABrfEtNHN+IbWRIIF6IF27jWd2GuvUbP12LuupsI5XZsHXPi4Er4Aq4 GpvXUDRbDT0DVecgXogXXmMAszFiWWub5ug7MHt5nonpGfKGW5O3bzabzSwRI3btDGj39qysrt5K GBbLCOLIw+pWMA/MA/OGwLyUzfm1S/vWpbQmdNfairy5oPTi7baPX1b1XGxHXXSjJLin2qbrWBYq W4F74B64NwDuiV584uJeVeV61XGO/Pd3b0m6bhfaaIqqnPD/aNsezu1EmBjTjd9SU8bx8XPoei5S VCAfyAfyDYB8DStIQht2VVbdtkxSsKZtTfonevTxE2T7iodZfmANWAPWBoC1N4umWdWn796l5abI S5rWdzN1faruXVZkTUab7JrV7/gASut3EtCzFSf2oxjQA/QAPUBvANC7EOy6+Ndn9V/KbJXO3xKx QWRVlddZyg87W67ytjMzbetyXK2ztJ3LEAU6GE0W3PtJUM803VA1VVAP1AP1hku9R+I0S49UNxAf GOKFeCHeUe39sq3INYNgAvFCvP0QiHcUd17HNi3fw65riBfiRbLg+ZIFZ9/TitVTwhpC81lXZGL7 iL6uMv4e+WFdMKJpUzHNbR2M4I9fP9IrRlRXpq646vtKqJqAHCAHyI3NoVg8tohtHaUlIF6IFw7l GR3KecEvXcGak7DiV/HAfXRlxb+jK0ILmt/UWX3oTkKWsOUlPypuXUwJh6JFjuF7JtbfAXKA3Ngc im5EgRu1HxjihXgh3lFV2zXsOPQd3HkhXogX4cXzhRePr3xvmxLdWf/+acFDjJq1xXf7pVO0IOW2 Do1YId90W4Ak4g3LUY3Yxk5HUA/UA/WGQL122+LBdseapGWy7heGikWj9DDnIpaItqkYCeTxr78e Kg4mgYA8IG9sUZrqG0agRfoE4oV4+yEQL/zKM1T83NX8/OO6MpvTrBD/WCbmdJT2EvMLuyj5yXj/ i/gp5SGdeEs1T1TtRFM/qfqpYp4qyi/dSdqdPnHQsa65YfzyzN5ds8ZP2Yv86nRliSSsqW7Hpm5p uLs9OQJ3N9zdBmhNTVPzfCP2JxAvxNsPgXhhTY9ZIHZXCeywgtiujqKYKZiXeV5uxHuHcw1ts2EJ 12JpVhi6MarEAnwAH8A3APBt50XTR0tKlG2F2Jrt0e5UgnSab/LT5qEHAEgH0o0tPtMdy9UcNZpA vBBvPwTihU05kk0R0wnk/7N3/r1tG1nb/ioD/ZUgsczh8KeBDUByyNRF0idb5Xn3RYvCGJNjmwhF qiRl1wt/+GeGsk25TYNJd9ciszfRApZ0Yksk70v3nDlz5rRQ9mTYuyPPZdeR96IWl4NnIS9Oo/dG aWOX6Y060PIKZAPZQLYJkG04nqHFqeNRP6EePB3IB/KBfFMh332f00T0Z/RMmbiz0yd5qLO393mo oQmqAeZo4Dl+wFGyCswBc3PLOymLwpMwQl0AxAvxwqNMwKPoXcIIF70g75quIx9aea1zUE1NXvB3 H4wyTjRKgzDDRBiYBqaBaf9FGScryyzLVjcxyAfyjSEgH8g3kYyTfaZM3L+acbLcIIr8TOMImAPm gLlZVToxN8wcdMqFeCFeeJQpeBSmM07/kOfjyukXN/LcaOoryaIwSjS1wDKwDCwDy/5LMk2uq25z mqG2CeQD+UC+CWaa2JmydGcPlu6LKafXBsDz/ZhHDtYRA3gA3uxyTg710oQ7mBeDeCFeuJUJuBVH 55zStSirvayT1I9N8k6unXg29fkCPAPPxhDwDDz7xvNO1M2yKAlAPpAP5AP5Jph3cs4GW/fvyzxZ SRB7boDBK5AH5M0t8+RGic2tGItjIV6IF35lAn7F1Zmnx5xT1HWy67Q76QysiJ8mmZVa2JAPNAPN QLP/oryTF7hhnA2MA/lAPpAP5JtY3skdM057pu5fzj65HmXUC/XNAvABfADfrNbaua4beL4WGcQL 8UK8cC0Hdi3e0FW87tttp1s6vX/sJ25gRWxOGQ98tgDNQLMxBDQDzb717BP3mG9jdxiQD+QD+aaY ffLOHk3d2Wjq/uXsE40pT/wAq+4APoBvbtknz/KT0LOx8xPEC/HCtUzAtfhPap/K+qJp17vNd0Vd kFQ3Gv/KlJQXBq5royAKiAPigLj/opQU45av7lCMzEA+kA/km2BKyj9bnaZf3t3OrAAqTHzOMYoF 6AC6uaWgnCRkYewmC4gX4h1DIF64lAO5lGBo/FTn7e1G+xETA+LGcRr6mPwHw8AwMOy/KMdkO1no I7sO8oF8IN8kc0zB2Wjl/vViJ2pl3HWwMxZwB9zNLdNk+74b+QzrZCFeiBdeZQJeJdSZpnjbqQvY dSRRH6qst7ruSdc68bJTn0O9nx9l3lzL9pa8iBP+o0nzcc8P4zBlmPkH6UA6kG4qo7Jn2PMuoJQn WbQA+AC+MQTgA/gmko4Kz7SJ+3IiSts/A9g5lus7aYyu44AdYDe3ZJRv+SymKSbOIF6IF05lAk6F Wkui/lx/07SfHlfgGdgQm/pJZDPYEJAMJAPJpjLmeobiJ8f1/Iyl8QLkA/nGEJAP5JtItolaZ/eO zmyzu6VR2slyXeZqvoF6oB6oN68aKDe2wtheQLwQ7xgC8c6iW1sUZEnkoYAR4oV4Z/fNG7os8X2U pkC8EO/cxGulNHB5whcQL8Q7hkC8yPT9ZzN9b74TrexeE9kTUenVAuOR/rYp1Wvk+20tiW2/JrZF vScR6vj5g7hUr1q/GCT2XJ8zJ6IaRoAcIAfIzcmhuFnC4xjDC4gX4oVDeU6HclqrS1fL/oi36io+ cR+n9g+rjLwVGyJqUd12ZffUnXCZy/W5elfKurgGDsW3w9SOOYpmATlAbm4OhYWW47sB6gYgXoh3 buL1Y8qDxMHwAuKFeDG8eL7hxZ+WOn68kqSTua5h7Mi5rJobclleSzXSILpbynWp3nh/pf4BKZ8U PJIn44ybk0JW6o+XeobW0jsInKgb4apRJ+/9T/pRIXp9t6jxyRG1j2z6kbITyz2xrJ92J/Wzp/v+ SS6Hz54xO+TZfK+BOkMfFfDfXN5Xinb6tYcnx/GaekZHl7X+RbvzqcvM/uL5/BZO3O6USc2Ybvn7 4a06T3/qlP0wTqmr7yN82eLLFl+2s3LKtuIe89EiFOKFeOGUn9FseEu6tJeEnBbK6+ouglGe676C 7x+3SyUvTqP3Jg0EXTfjbop6J0AMEJufA3HsKE5TJNohXogXDmQCubqiybfaf5wYWA/bS6MwdtFU AfQCvUCvCdDrGTrJUOp6cYQeWoAeoAfoTQF6+01kzk6jL2/SbkA4R8kq8uJsAcKBcGMICDeLjBJn jDsOW0C8EO8YAvHCnhyw+qt8mOdajxNc3W3Xy3VHyjqvtoXUFWDkoqmq5kbfCvrfl7nsTPJQTuDZ mc/4AswD88YQMG8OhoX6MUscT4sM4oV4IV4YlgMbloaQRBmUVlTlP6Xe3LOVed+0t2R170lMth/3 vIBmzGILYA1YG0OAtVk0ALRdJ+IOWu9CvBAvPMk0PMkfS4S/xo/YbqDQ5SULIA1IG0OAtFl0DAsy zvwkXEC8EO8YAvHCjxzOjzyuXfqLjsRyXZqxBH1KADVAbW6OhDmWzawYjgTihXjhSCbmSDJZyHbX QuhrHInLqGN5scYXoAaoAWpzciSO7dpBiu0SIV6IF45kIo7kx6aSR7HoZPEwfZOoz9Y21Vf5Et9h IaUpFuQAbUDb7HxJ4tuWk2AjBIgX4oUvmYYv+V/16NGRyLYvL8r86/MlDrc5DyL0zwTagLa5+RJf addxPYgX4oV44Uum4Us+tOV1WclLWewsiqgfEydjlYlRuSuPE8dN9S4RoBvoBrrNavlNxGkQoSsu xAvxwppMxJqspMbTkCNpLgjf9qV6w4/ZEu1UTDImLInUDZguQDaQbQwB2WYxkxNlbkIjjCkgXogX tmQatuSx5nUvVfKj3DRtr6/6gz9ZGngTl1LbCjysxwHegLe5eRMW8zBOUr6AeCHeMQTihTc5YNvX 0+g9KaR2ICRv1uttfV9lon5d2V8NHV8fdub4Y2dYA8tix4yGNMQcNqgH6oF6E6BefyV6xbqhxr/b tbQuK3WV9QVvLkgherHcsTFZRWQlxGqAZLeR+WMNngn4/CjK/AFQAB/AB/ABfAcGX9eLXmriKf6V tbq8zUa24rystLc7l/2NlPWeH+yGfNVg/iQRQ9rKAHuekzlxzLH3GrAH7AF7E8BercjWtJ8+u6+J Yhx5ArWbk0JW6m+U2sENrcFP1PW+atQ5ev+TfqTsob4pLOoeUfvIph8pO7HcE8v6aXfuPntW75/k cviIGbNDns33VKsz9FFx/fMnfHc+70P2virUM9/iXfdm0zbnlVwPIwZ1O6kbwyblk839DL40acx9 FmODjS9H4EsTX5r40vy34utPvzTbYX5ap0kuynY9pEnUKGD4vrwUm11u+AtfnANx8MX5+S/ON6f2 D6vsi1+Tpc6/359LvSz9L57Lb+GkqdMVvV/+/ktUnaA/TbzFVsostAj7cgS+TPFlOsEiCTfystAP 0bQU4oV44YQn4ITJq6O945V+5o/HY8wrg9G+5VE/Sn2+AOPAuDEEjAPjDsW4u/06sDuiSUZW76Lh h4fj7mEu8M6Aca4b8MijaKkGxoFxYNw0GLd37B7cL8ZpFffU2x6e3hU6GDGOeXboBRTtrME4MA6M mybjHov35bXUn3F4+of3K/2DAeM8HkQscLHiEIwD48C4aTLu3rP17e6y78cYMS6KrCRzMGEIxoFx YNxU5hzu7vbnHKJtUfYPZTnD8RhjMufAPJbEHhafg3FgHBg3CcYN9uyJmfv8cWc032A7ts8j1I2A b+Ab+DZBvj0pI9kzdoZ8i3kcOinmGsA38A18mwrf/vZ4kLts6KJBZH3RtPmw/O1ueMWIb5SmcZAl fAG+gW9jCPgGvh2Sb3vH5/ybCdicLHDjTAMIYAPYADaA7fBgy8pLXcjrmfDLSxPPt/U1B7/AL/Br TqspLY8lmWvFC4gX4h1DIN45iNeL1eVWAl5AvBDvGALxzkG8jmPFGXXZAuKFeMcQiHcO4qUhc3mc YNEDxAvxzu6b12Y89COMeSFeiHd24s0yyw2x+TLEC/FituwZZ8vefCdavUe87Imolk8m/tPfNqV6 jXy/rSWx7de6x7f3++qAnz+IS/Uq/cVgSs21wzSNAwwvADlAbm4OhblxynmULSBeiHcMgXjhUP7D DuVUb9lVy/6It+oqPnEfQ0N58lZsiKhFdduVus/L3sFlLtfn6l3plvEGDsX3nNixbDgUQA6Qm51D ydLQtzJU7EG8EO/cxOuHYepx7AQG8UK8GF485/DCW9IlW6qxgugFedd0HfnQDj0jy6YmL/i7Dy8N Bg4O537IKdpwAF/A19y8h8diO/KHvfsgXogX4oX3eB7v8adLFXmTb3UjiRMD6+H6cWqzMFmAXqDX GAJ6gV4HoteLq77fdCfHx0VzU1eNKLplXjXb4qElv6iqUtS5XDbt5XFZl30p+vJadscqQIju2AB6 zPFCK475AtAD9MYQQA/QOxD0Vppdq7NE9Gf2GX/34ex0vamGbmBCZ5LO3m7LYoDeprgwySixJHMo szCbBcKBcLObzYqCMAp97AIJ8UK8sCcTsCcfryQp9AxXpWe4Nl+a4bo5KWv9F8pC/wFPv2d1ta8a dYbe/6Qfqd+jbwmLukfUPrLpR8pOLO/Esn7anbmHc6o/ScbskGff3hn9vYNTp+xbvJ/e6M9b5uqd rLddT0RRqFPQmaQlrZR5mW3TBb4CvxCBr0B8BU5xRjTJWGRnEC/EC/HCv07Avzbqv7a8LOshm0au ZVtelPnw4LWBG3HDOM0CbHUJoAFos3MjVur4YaCuA8QL8Y4hEC/cyOHcSFn38lJXM5DmYsismdgQ L44s5nrYzQwkA8lmN6mX2AnPQiRFIF6IFzZkGjYkb+qLstBzeaLSZkTUBRF5LrtOv9S3TWXkS6wg jFN07QbagLbZ+RKaub5PYz1RD/FCvBAvfMnhfYnyIM22Vle71LbExIP4QWzTKEaDQWAMGJubB/FY HFoOReM8iBfihQeZiAe5bspCX+ALUXWSqPugHNaZkqYmhexlPlSP6JSJgT1xYp4xL0X2F4QD4eZm TxzuhI6dJQuIF+IdQyBe2JP/qD2p1Nv5UdaFbGWhN0qJWyk+7W6ELxmXTVtei/xWz+Dksq27pYE/ sdJQDcEylJYAcUDc3PyJRanj8IQtIF6IdwyBeOFPDrhePFlFZCXEivB3H0gh9TpgZUnW6219v/Km I638dVu2kvRXoidlT67EtX4gTQyLnflpaoF5YB6YB+ZNgHmyvmjafOjZRXKx2c1dl+od9w0pGo01 ctFUVXOj7gCTFgh+4tuhT7FuCYQD4eY2JHMZjT3uYEcHiBfihT2ZgD1Rh6hk2xNd4181l2M/L6MO CClL/ChFfhg8A89mZ0aow9RQIllAvBDvGALxwowczowUspL9fVfRpibdbdfLNVF/diO6Tl/4/qpt tpdXJu6EBmHs8kSjDIAD4AC4WS1AjL3QSyhKYyFeiBfuZBru5KKs1GUlzbYnL86rJv90/OtW8aru 1UV9adywScmahVGULIA2oG0MAdrm4Etsj9GQJnwB8UK8YwjEC19yOF/SylZ5kl3axGjexouZncRY WQ2IAWJzcyBKuT6nCXqaQLwQLxzINByIrPP2dtMPDsQoBZIEMU/SBRgGho0hYNgsGh+ktue4qf7A EC/EC/HCgBzagLw62jte7SzJ74/HmFcGBsXmLgviAIwD48A4MG4KjLvbXzJ9RzTJyOpdNPzwcNyR TubbVr1uwDg/pHFAHc0iMA6MA+PAuMMzbu8YHkRPViftnr7fi8SEcXbGYmolKCME48A4MG6ajNtf 9PD49A/vV/oHA8ZZ6lQFEUUyHYwD48C4aTJuVzp9/FCptB9jwjgntlzXx0YuYBwYB8ZNZs7h7m5/ zmG/CGKHtscYozkH31Lai+MFGAfGjSFgHBh3uMIuZc+emLnPH3cmHs6zncwJXc0h8A18A9/At4nx 7UkZyZ6xM+Mb9eIki0KsqgHfwDfwbSp8+9vjQe6yXQODvabUd8MrZv4tSr0oifgCfAPfxhDwDXw7 JN/2js/5N5PEW+rHroOGLAAbwAawTQRsWXmpC3l9A345iZdYSeQuwC/wawwBv+awmtILbJ6lMVYa QbwQ79zE6/ihFbEQu3FBvBDv3MRL7dRKQttbQLwQ7xgC8c5BvOqmo8o5o1gO4oV4Zzfm5a6bMQ+2 GeKFeGdnm13P5yxIFhAvxDuGQLyzSFjFduzSUMsU4oV4IV5MdT/PVPeb70Qru9dE9kRUyydVO+lv m1K9Rr7f1pLY9mtiW9T7fWnPzx/EpX71l+HG2P3qP80N+KnLEw9NXwA5QG5uDsUOHMdNOLqZQLwQ LxzKMzqU01pdulr2R7xVV/GJ+zi1f1hl5K3YEFGL6rYru6fuhMtcrs/Vu1LWxTVwKB6NYi+xNYwA OUAOkJuTQ7ECzwqYj7oBiBfinZt4/TCyrMRJFhAvxDuGQLwYXhxirY+3pEtnScg/5Dl5Mm64OSlk pX5ZqVMi1gAmdWGvGnUy3v+kHxWi11dfjTeOqH1k04+UnVjeiWX9tDtJnz19909yOXyWjNkhz+Z7 TtUZ+qgA/mbY86Dsb1/o1x6eHMdf6hkdXdb6F+3Op648+Yvnc+/EfWN36ON5JMOJ3D+F6tx9i5p8 o2T38qXBeN1KLCd2U76Aa/hCBFwDXMMUZxTihGXUsxcQL8Q7hkC8sPwHWt7Pm3yrmy+dGFgP6ltZ xn3Mh4JeoBfoNQF6XfX9pjs5Pi6am7pqRNEt86rZFg+jR1FVpahzuWzay+OyLvtS9OW17I5VgBDd sQHz3NhPgjAJF2AemDeGgHlg3oGYt9LsWp0loj9jZ/+Q52ere9qdna431dBJU1Guqc/ebstioN+m uDAhHYtTHlsoVQXpQLq5JZbcOHUiy4FNgXghXtiUCdiUj1eS3Mjz3S7weiZPv1Tm6i2vt11PRFGo 6M4k7eQlqZvZlC3ANrBtDAHbZrHKNwmcKEtQoQrxQrwwJhMwJs2uxM1eWserJi9FRd7LohQkVx+v barutYEloaEbUBThgGqg2vwsiccczh1byxTihXghXliSw1uS96K6Ea0koi5IVPfl0f8r2233VaaE xdyKg1jzB1wD18C1WU3gUCeK/Ri1dRAvxAtTMg1TwkUvyLum68iHVl7LWpeVPFoS8qK5Vm/oH/L8 6Fx0shgneKrykyRv16KsTFxL5Ptc3aELgA/gG0MAPoDvQODT7GtJ3Py2rGX/0mTkZVPOIitD6RwY BobNboY65TTjIV9AvBDvGALxwoAcbuT1/1er1+R7cS1WeVtu+iEt3PRX6m0MNXUbmZcXZU5E34v8 0+OQzMCqeEEWu66fLEA70G4MAe1m0e6RW7E6gRhnQLwQL6zKNKyKLqb73x/fkays1OVVV9okY2LF XmpFCaa7QDKQbG42hPoRZQn2zIR4IV7YkInYkA9NVea3D6mQIWEiinVZl13fDl1fiHrf4nLoj2BU 4p+Fvu0k7gKQA+TGEEBuFokSx4vcOEVRCcQL8cKhTMOhxMqT3JRFf7XnRAaf8utWVLpDQnPxUENH Xvy9Wb0kudiI81K/9loHGrgWP3NZ6Fu6ITzAB/ABfLOqRHG4ki7nC4gX4h1DIF64lgMuTGzqsm/0 vI72J6vVOyJrcV7JgvStuLgo86WBLbHCIHC5FS9ANpBtDAHZZmFLMs+jTpgsIF6IdwyBeGFL/qO2 pFJv50dZF7KVxQdxKeNWik+7G+GLXSeTVURWQqyGypTHRYmFHBIrebNeb+syH1pkd6SVv27LVpL+ SvSk7MmVuJYGfoZGjAZugDQLkAgkAokTGKn1CnyyvmjafJdXfkwdl+pd9w0pmiHkoqmq5kbdBSaN d/2Ac4/TaAHKgXJjCCg3iy53NMr8yGcLiBfiHUMgXliUw/VVEJVsd3PeVXNJ1vc979SfFbrl3fXQ 8q7QTWc2olfXvzbqe2ezLPQzJ1mAdCDdGALSzcGmMDd0Hcq0yCBeiBfihU05vE0pZCV7uXMiLx5c inYtg0N5qdxJ1+nr31+1zfbyinS3XS/XZk16w4w5zMMSbvAOvJvdTLjjJTFN2ALihXjHEIgXZuVw ZuVi6LtAmm1PXpxXTf7p+Net4lXdq4v6cvAwRssdgzRxKZIoQBvQNr8kSpL5gRVrmUK8EC/EC18y GV9y3x7KKDnip5TGvo9lAuAYODY3E2IFcZAyip4LEC/ECxMyDRNS1uqqirwnN2V/RTa7HlF6JqeW /U3TftpvxfA1szh+Gqdeig54YB1YNzej4luWZzOLLyBeiHcMgXhhVA5nVB76Vp4/NonSLuXvzUp3 XbjvtGDaBIp5fhzZIVpXAnAA3NzciWOpq+AHEC/EC/HCnUzDnax3TaCIrPP2dtPLgrzY6wT18tGg GJgTGju24weY4wHfwLe5mRM3iDMvZuh7AvFCvDAnEzAnUVUNGZIr9Ry5kKLfqleJLIe9UsfuTpKc 2j+sMtL1oi5EW5T/VB5meMrAsjj61rQZ+qCAeqAeqDcB6uVVqWes++Yea+Ly/uGmba7LQpK1Akx5 dC3rQr2RYRK82cj2fjOBpckwLWJMmT2kocA8MG92OWQvSFLHDhcQL8Q7hkC8cxCv7dEwSQOMNiBe iHd237w+dZ2MeQuIF+IdQyDeOYiX+kESYaMLiBfinZ941WViEU8hXogX4p2deNXdn9IAthnihXjn Jl4We5kfOajog3ghXkyPP9/0+JvvRCu710T2RFTLXaXy/ZH+til1IdD321oS235NbIt6TyLU8bPe VY7Y7Jfhxtj96j+FXBozl2E+HJAD5OY3vLCiILZDTKlBvBAvHMozOpRTXXpXy/6It+oqPnEfu8q9 t2JDRC2q267snroTLnO5PlfvSlkX18CheDYPfIdhZwFADpCbXdGPk6ZeaOsPDPFCvBDvnMTrhQ6L LYrZC4gX4sXw4vmGF3/esuHV0d7x6unA4uF4jHllMrpwEl9pPFmAcWDcGALGgXGHYtyd3lqgk7n6 w/3tHdEkI6t30fDDw3G3C5DkzoBxTuhniZtgIhuMA+PAuEkwbt+wDQ+iSrY90c1Bq+by/mmR57Lr zBjncpZaAV+AcWDcGALGgXHTYdz+/tuPT//wfqV/MBmrJm7kBhnycWAcGAfGTZBxu73xjlvZNttH 0D3GGDGOUpZEFGNVMA6MA+MmyDhZdzrx9oRlNyfK2qlfXeqSB0v3JzpRl/mqUafm/U/6kSKhvhcs 6h5R+8imHyk7sbwTy/ppd8o+ezLvn+Ry+GQZs0OezfcMqzP0UeH8zbATSFH2V/q1hyfH7wT1jI4u a/2LhvNJBwH9tfO5d+K+sft1dx71jiq//1ZVp+5bFOib47//z+rrzISTMe74EQZMX4yAmYCZgJn4 t7LK2Ez8cQOK/RgTxvlJZqv/0RMRjAPjwLgJMk4dexnv/aeNGcdj6iYMi1TBODAOjJsC43SR6d3d fiHqvYXbY91jjEkhKg3s2KVpsgDjwLgxBIwD4w7FuMGePTFznz/uTDyca6lxqm9jYg98A9/Atwny 7cnaoj1jZ8Y3y+K2H/tsAb6Bb2MI+Aa+HZJvf3s8yF02VGepgepF0+ZyLev+bnjFiG+2y72IosAe fAPfwLfJ8G3v+Jx/MwAb8yzLy0JMoAJsABvANg2wZeWlLjINDPjlhImn7lbwC/wCv6bLrz8RL/di mmXo4AvxQrwwH89nPt54S7p0l4Ska1FWZHXfboa8kPrxy5cmGSEae2GsNAN2gV1jCNg1B+Phu16U ZTa6akO8EC+MxwSyHrzJt3pO6sTEejhJFKaRvQC9QK8xBPQCvQ5Er6u+33Qnx8dFc1NXjSi6ZV41 2+KhjaeoqlLUuVw27eVxWZd9KfryWnbHKkCI7tiAeVbCHD9ywDwwD8wD8ybAvJVm1+osEf2Zczbk kc4e8khnp+tNNZQYKc419dnbbVkM/NsUFwascx3H5rGP0SlYB9bNLbVkszR01fVcQLwQ7xgC8cKo HMiofLySJFlFjykm0sq8Waufio70V6Inw6TX454LRP/LMlefaL3tegO74gTctZXkFyAeiDeGgHgg 3oGIJ4pCPexMcumMxTF3MrYAvACvMQTwmkX9oJ+6jgXnAfFCvHAeU3AeDSGJGls1NZGVzPu2qcuc DMMrNeTaNLUafnWvTcZUVqpunYFAIBvIBrLNyZZQ13ZjP8b8DcQL8cKWTMOWpL/zI6LNr8pePadX Wm7aRv9YNrWJOfGY5SSZwxfgG/g2hoBvs8iZRCENI1vvCAPxQrwQL8zJZHMm/VUrhWHCJOUOdz0s JQfWgLW5eRLXsxKbOVpkEC/EC/HCkxzek3yQ6i+q63Yl677Mh0J+EyNiRzFNvARGBCwDy+ZmRCxq syyiSI5AvBAvjMizGZFKvZ0fZV3IVhYfxKWMWyk+7W6Er5nTUZ+kU/+adL2oC9EWRpkTN2EZ9Vxs TQPmgXlzMyx+7IRBGKAtAsQL8cKwTCNz8ntbcr83aNnURPkSUpSXZS8q0pWXtdDlJ0bzO5nNbe6j zzdAB9DNzaVQxjwnDVAQC/FCvHAp03QpufpkujtCWXebXS3s4FYuhm3j1I1gNPnjeqlvR1iQCNAB dLNzKSGzspQlC4gX4h1DIF64lMO5lF1LSXWBdx6lKocVxNqZGNgRyw/dzA7SBYgGoo0hINos7Ega eNnuA0O8EC/ECzsyvaRJIXqxt3p4yJiIa/WKOC8r3UxSdN221b2vDewKi9TJozHmeEA8EA/EmwDx 1KHIdlWXv25lZ0AwL2GOxRgmukAwEGxuAy7b9mI3CLFyB+KFeGE/JmA/Hjr3r4RY3W9V/ccu/a38 dVuqf7Xr5V/25EpcS/XAZMRlxczmNHYXQB6QN4YAeUDegZAn64umzYe900guNrs0Uqnp1pCi0Vgj F01VNTfqDjDq7+9HLHFcmDoQDoSb3YjMiq2AZliODfFCvLAn00gIb9rmuiyGERZZi+pGtHKY9lLh a1LI/ZmwVq4b9QeMKodT308ihtl+oA6om5tPcZzQcbI0WEC8EO8YAvHOoudTkETqrkKGAOKFeOcm Xtdmdpj5aF4E8UK8cxOvH1NueQHGvBAvxIv03vOl9958J1rZvSayJ6Ja7tJ690f622Yopvh+W0ti 26+JbVHvSYQ6ftY9Gont/GKS2GNB5qQWSiwAOUBudom9OLa45ScLiBfiHUMgXjiU/7BDOa3Vpatl f8RbdRWfuI9T+4dVRt6KDRG1qG67snvqTrjM5fpcvStlXVwDh+KGLLZ8DMMAOUBufg4lCOOIO1pk EC/EC/HOqsWH79rcDbDgHeKFeDG8eL7hxZfqG0Ul257o8sWHSsdWbEpdzNhtmrqTeiWG/Nrted2M e6GLZRggHUg3vzGGZyd+5GMKA+KFeGFTpmFTlDGp+/Li9t6LbNWL3eBahhXyclh70Usi8lx2w+rR Ic7EqzDm2VHmoYk7cAfczc2reHGaRamdLCBeiHcMgXjhVQ7nVYqGNPVRoRzIQ1alK5taX/Hm4t6/ PLTzMTEonpOFnNpYFg/GgXFzMyhuyiPuWNixF+KFeGFQpmFQdpvckWbbkxfnVZN/Ov51q3hV9+qi vrx3KLrVu4k7sRLLcRKKcjIADoCbXUVKnHqxE2A9LcQL8cKdTMOdfKqbG3JzJdtd06374pNWXFyU OVF/fdiEptSdkNUJ0TfCi77RMz6tvNxWom/aWwPb4idRkEYcPXxAPpAP5JsG+cqu28rupel+n77v eB6j2H4GDAPDZjdzbbvqBFItU4gX4oV4YUAOb0DOJRHn1VDzv27qUo2liKzz9nbTy+IrKuq8MAwS F/uQA21A29x8CYujKMkYymEhXogXvmRyvuTej5i7EdvmCXUtAA1AA9Dm5kZ8i2ZOwFFdAvFCvHAj k3MjrexFWd/PUbcyb9qiIy9urspKx+ymp2/K/ops2vJa5EYz0zEL3cBBxTCQB+QBedNAXt7UuWxr 87lpj2Yxt7DBHSgGis1u1KXOTRr7NuamIV6IFxZkGhak1C2yRd7fj6eaqsxvtRkhtexvmvYTUW9b XMq1rHvS3Xa9XHdLk+GW57vUQas6sA6sm51RsZwwSmjGFhAvxDuGQLwwKgcyKlFV6S4v/ZV6jlxI 0W/19mKt/HVb3q9n2u3n0fXKuoi2KP8pi/un8qrU3qVvDFyLY1mZ4/sosQP4AD6AbwLg2zFMDcAG hD02E18rrJRH17Iu1J8fhnDNRg3jzsuq7G9Nxme2yzw/TPgCpAPpxhCQbhbFxG4a+wlnC4gX4h1D IF7YlEMlkl8d7R2vdqnl3x+PMa9MDIpnW16MThJgHBgHxk2CcXfq/3QoSRweaJKR1bto+OHhuHvY OeHOJN3kcDejGdJNYBwYB8ZNhHEDwMr+Vj8YtrE7rppLshbVjVBcG2Lu94MxYZwaqipMJFgnBsaB cWDcVHzc47HPuPtNJDZirWN+eL/Sr5swLqahnbnYgRiMA+PAuAkybtea/riVbbPt5a7X6xhjwjjf YpHHbBR0gnFgHBg3QcbJutOJt3NRFzdl0V8d//1/Vl/HOCvKYjv0sboOjAPjwLgJMu6P7SP3Y0wY 51k+9dwE2x6CcWAcGDdBxqljNz79w9OmjPNDNw5pinwcGAfGgXFTYJyufbu726+Pe+i4ObLuMcak Ps4JstBPKfpZgXFgHBg3BcYN9uyJmfv8cWfi4WzP81zwDXwD38C3SfLtyZKHPWNnxjfHYiy04mQB voFvYwj4Br4dkm9/ezzIXTYUjaiB6kXT5kMHsLvhFSO+Uddx3DTDHujgG/gGvk2Fb3vH5/ybAdj8 KEv8jGICFWAD2AC2aYAtKy917VtoMvBkkcsdX3MG/AK/wK85df5xYq7066CyAeKFeGE+ns98vPGW dOktCVk9rA6Puk52nc4KGZgO208SHseorAe3wK25mQ4/pE4UOHQB8UK8YwjEC9NxoIwHb/Ktdh4n JtYjCPzEoWgkCHqBXqDXBOh11feb7uT4uGhu6qoRRbfMq2ZbPPTdElVVijqXy6a9PC7rsi9FX17L 7lgFCNEdGzDPj/0o9EMUT4J5YB6YNwHmrTS7VmeJ6M/cs4cc0tmYQ+rOTtebaigyUrRr6rO327IY KLgpLkxcXkjdyPf5AsQD8cYQEG8OCSaWJr6d2KgVhHghXtiVCdiVj1eSJKuIrJRpGae8xKNdIWVd lLno1Wfor0S/90pHaikLs+0G/TDznDjUfAL3wD1wD9w7MPfOJSmaWpKmHjZVvWiqqrnRV7uQ12Uu O5OEux/Eqed4yQJUA9XGEFBtFkOxmGaBF2K7BogX4oUlmYAlaQi5ut2oh2XX6L2OL1r1ztttrreA f21gRxzmR2lioXoJRAPR5mZHXB4nUUa1TCFeiBfinZN47Sh0ecZQhQLxQryz++a1I8u1ORIBEC/E i0TA8yUC3nwn1PD/NZE9EdXySceW9LdNqV4j329rSWz7NbEt6j2JUMfPH8SletX9xSA34MWhF7s2 cgOAHCA3N4diZVEW+aiegHghXjiU53Qop7W6dLXsj3irruIT93Fq/7DKyFuxIaIW1W1Xdk/dCZe5 XJ+rd6Wsi2viUKw4iZwAkAPkALm5ORRH/U4ndVDXDvFCvHMTr+clge/Y+gNDvBAvxIvhxfMML75U CaUGHTdN+4k89AogebPe7NoFkO626+W6M6mJYozGaRRgZhZsA9tmNzOrrqVr83QB8UK8YwjEC2Ny OGOy0g/ajoi6INqhdLs2HkZuhDp+YFno0AagAWjzcyNRFDiJC/FCvBAv3Mg03IjYbCrdnsPUgVhu 4EZx6C4AMUBsDAHE5uBAfIc6lKfYEwfihXjhQKY1UXO9rWrZivOyKvtSveevmKRx7CTxAuygDK6B a7MzJcxLHdfykBaBeCFemJJpmJJyqFsXFRHbouzVn9OzNerJdtuVTU0K2ctc50yO1T+8lrX+8cGw kBenfGWy9YSXpdxPOMAH8AF8AN8EwKdX5XxYvXytaWeSC3Z47HGGdBIABoDNLhdsZSF3OSZyIF6I F+5jGsOuG3m+PyP9MKRaGpgRFgecRZQtwDPwbAwBz2aRA2ZZmNA4W0C8EO8YAvHCjBzIjERVRZoL vbVLJ8mFFLqHekda+eu2bOWw48uuf4meutY3wWXbbDek60VdiLYo/znEmORQsiAKGAf5QD6QD+Sb APluxC3pG7IRnd6xT+Nvf8s+9YqeCrtom/UeBfOq1Fv97fbCMqCek2U0sTy+APVAvTEE1AP1DkS9 HcfUGxOXw9bq96mnAXYj56JL9ZJJNsoKvCyLmQYRAAfAAXCzakYXW04cWmgbAfFCvHAnz+dO3nhL uvSXyo08Vhryh0pDo1wSS+wkwkYk4Ba4NTfToc5wGAaR/sAQL8QL8cJ0HDglwpt8q1MhJyYJXRZb aUqxPRDoBXqBXhOg11Xfb7qT4+OiuamrRhTdMq+abfF/7J17c9tGtu2/Shf/uVKNTOH98NR1FZ6J ZuKMruk7UzWpKVUTaJJ9DKIZAJRGU/nwpxt8QHKcnM7UOSaQs5iHRbItggTWj2vv3r371A6YVode wHPRrG95zTtOO/7I2ls5gNJWZ/2W70ZhFhhwbGAemAfmjYB5C8WuxUNCuwfv4ZxDenh/ntV6uNvu qv6nvr764Zs9L3sK7srVtQbyTMv2HMsH8oA8IG9y01pemHtZlMwgXoh3GALxwq9cyK983DCSLCKy kK7lxZzXubvGy3ocXhfVvpTv5tyFQ8OveKnnBn4K5AF5QB6QNwLkDWzrNo3Yrzdv5UOPvGCtTprd i80wDxK0DALPwLOpxV9u5kWGZ0O8EC/ECzMyAjMiiHyxQ/flrqGrFS9kdNXuDgblhizZhj5yeVSq D2JNq+eWt31vMLKqxJOGXbEcP/USAw3CQDwQD8QbAfHk7UwyDYD5UeS5Iab4ATAAbHrxVhSbbpJj GRfEC/HCfYwj3vrLjjW0U2d40S8wvyF/5U23pxX/16Hl4Xf0mTWHKOtb0XbkvhEFa1uSqTbzrU6O 2HRC37DhWYA9YA/YG0fQtRW12kZDnmKdsMsNPTOObXsGhAFhwxAgbBILWV3XD5wQSV+IF+KF/xhH 2DX4D9XVNXrRYr6Pt47Rle7GN24YeGEQRzMgDogbhgBxk/AncZgZcQJ/AvFCvPAn4/AniWgaVh0c yUdWbGr+454di21Et5GHk/K2a/hy37GyfzRRq9nfxLRlOo7FDG0vS51kBugBesMQQA/Qu1xSOKE7 uuQV7zjTmtiK7cj2UsUaMAwMA8OmFHXZtus5lqFkCvFCvBAvDMiFDciw3lw+uhN1y4Y15ksZc+ms xzRyK088B7t3gWqg2uQsiZf6QeZgPSbEC/HCkowjERzJU7alHS9uyHta72l1Q+Rrfvu8bHhJ3rNi Q2vebrUWLxmeH1kmthYF38C3yZkT0/Mty8uVyCBeiBfihTm5vDk5zEwXypQc1zGJWt1R89GndUqD R5lreBTbcVIrwLw0MAfMTc6jGLmRx44TzyBeiHcYAvHCo4yhoXDDCrHdsrps+x28z32DyWkPmJ9v 961VhhIEjpuYWF8N6oF6oN4IqHectia7RjxyRTh1plVM9nrVE60q9YdkYctI97yTb0msdGK0IEkS y3ZnAB6ANwwB8AC8iwHv51tFXN2li2s1VzY8KXl4evbYY33eW0QN5lmWY9uGhxWeYB6YB+Z9NeZV 8nA+yJCVNay8l7Fp3DD66XAh/CINX0SxZ3t3DGdlDPzjnsvB0vy14nxPq7TRi1wzNxXrQEAQEASc VGbejzw3yrwZxAvxDkMg3kmU/th5mKZmMoN4Id5hCMQ7BfH6duRYqW/NIF6IdxgC8U5CvIkvw14D BS0QL8SLrN/Xm+l49y1tVLsn1hFazQ/dUY637J+7PoH3p33NiGXdEMswvVcj5O0HlSsklvcPjcSe n0emmZqAHCAHyE3NoXhW5skTjnlJiBfihUP5ig7lrpanrmbdm7SRZ/GV+7izvl/k5Bu6I6e9FV+7 k5QVbLuURyWti6vhUBxLXkMJwjBADpCbnENx/CxLAhfttSFeiHdq4rWyIEiT1JxBvBDvMATiRXhx wTbRrO4aWpGG7UTTb50qVoT1G/YQtcqFVqzptDoiuXaQmGFkz4A34G0YArxNIrAwEsMLIiUyiBfi hXjhTS7vTWi55bXamYd28rVq0fHVaWNBaVLOS9G03Ilt+LFjGuhHC8ABcFNzJ4btR5EfqDcM8UK8 EC/cyeXdyXu6252bf6gkCenEcePAw7bHH1lN6+JZx53ISywIwxypYQAOgJuaOzGd2PMyE63gIV6I F+5kJPM6yoiQVr50f5p5vRKN2vpC1MqmyNFqioesaNUyIi8S3vFH+Y54rZNKcaPYzfprBLwD78A7 8O7yvDv3Kusb5mtQzIic2M9DhFygGCg2uYRw6oWBj+lqiBfihQUZiQWhVSWe1AmWoRZpWMmbY39U 1TiwoasVL1Ts1Q+Tz29Fx0jbiUatLhaNhmWxnMB1fAfUA/VAPVBvHNSTZKvbLW/7ptAvUkuVKGhF 2CNVT8x16BYYceJ7aO4EuoFuUwvIPC9L4jxMZhAvxDsMgXhhTS5kTaKXG/KsGO32qtHTsUl7v2fZ obNC29G6pE3J/8XK40NFxZWD6YSOa7H9PAqidAbwAXzDEIAP4LsQ+A4Mo+sDwg77lpWMbCVW+BsZ mpWi38aHNULtMr3kFe+edeIz3/a9JMhBOpAOpJtafGbl8kSZPma7IV6IFzZlDKnjP7x5cfvDIZn8 +e085g8aBsVMzdR1A+zLA8aBcWDcGBj3kwzH0sXt3f2iv6NIRu7qlSD9j4fbT6Rlxb5h5CcNxhmh 58Wui7UmYBwYB8aNhHE9wHj3rO70a2FvK6HWnJz2ilYPFwVrWy3GOY4TJAbW04FxYBwYNxbGDbef Dq2Inj/rTyTHfP++93kajLPdPHdNH7EqGAfGgXEjZNx7tePEua9J38ukG8boMM7MMieNPPg4MA6M A+PGx7gVr+Qpvm1YI/YdO63R+U2Mc5IwiUx0pgPjwDgwbow+7rjQsKQdPa82/G0+zsqzJAgSbDoE xoFxYNwYGKfqQn766b+uHenH6NSOWIYTeJ7rzsA4MG4YAsaBcZdbWi3t2Ssz9+XbT1q5OCeIAsPC 9gfgG/gGvo2Qb6/KgV8aOy2+WYZn236E9Q3gG/gGvo2Fb//3fCM/5f1sA2GqE3PBtqzufuqf0fNv oRumWaw4BL6Bb+Ab+DYGvr24fcm/6Rg3PzFdw0aRCMAGsAFs4wBbztdqQZZpaADMzmzDcVLMjgJg ANh4AfZl8bpJkhmhgbQRxAvxwn18Pffxzpub82BOyOK0dFItCz/t0EXrkmR9F+X3tKbrPln0yoo8 veW1+uVcRVCmwtdbeaI3Qn447/+u7pW0U1eDYbpvTOuNZX407beG/9Yw/n740E4fp3oTuW2Faf77 s3Kfmzf5kf0uL6Wrzy6NklXnS0N109a5NIKfXxpf+oZLWX+sU79i5Cf0UX7Xv1tkd+/Vw6f7w7Ui H/lcZfa//1H+LlT2bnGX9Z/W/wZNXWtEfp5vJ66VYg3nr46AefzZEJjHy0d+puFI6RpKphAvxAvx IvK7aLBCSCqKvQr03upYj9wMgyxJZ6AX6DUMAb1ArwvRa9N1u/bt7W0pnupK0LKdF2oH+lNnMFpV nNYFm4tmfctr3nHa7zh/KwdQ2t5qMM+xgsCOAizRAfPAPDBvBMxbKHYtHhLaPfgPKjv2cLfdVX22 vs/jP3yz52VPvV250sko+bkdpr6vUATEAXFA3JQySl5oxIGXxjOIF+IdhkC88CcX8icfN0y/voD8 2jRyDx9MI3/2yf9b08gqfsU08mde+Hc7jUwaVjCV6OgbMOmEAJFj+pGbzuAifmUEXARcBFzEfyur ftFFrBqxJZQ8qU1EG1qvmdpW+bzjQ/vcdmzbknZfbAhtyV0pvYR6YvvlysUvU89ODcP2UnsG6oF6 wxBQD9S7EPVOXLu6i95f3xzaZ1aibYkcpSInFUZdpd/dy+ee2HLg4dXf2FI+xraUVxrgcxLHMRJD XSwAH8AH8AF8lwbfmWQ9wyTLhn28StaxQqHvVlGQ949dHTc4vL6+0eCdFwapYwfJ7DXvksxwXK+/ csA78A68A+++Fu9YXTTPOwU16fJ4Kw9bvnzDCvHImucbolLlNeueRPPpjMb5IbX+Cnev8+VqTch/ meT13jrGb8qXB7EdJuF0T8K/lS/vTfC/91H+Hj6zX8mX/8I3bOy5rm1+/g2LiALfsL8+BN+w+Ib9 H/mGLcR2KU9eS7oNP8yDqZBCEEpaec4rRtquYXTbyq/VqKrkKCa/f3/c86bPHrdkJRqNyMIKbcvO o3QG7oF7wxBwD9y7EPd60nXitp9Ak1Rr2TmrTBvFuF3FC2llS4nDz56vGSvVvpsa3DP8xAzdDP3H wD1wD9wbAffW/JFJcyf5JppObR6sHJ2KYo94m+u4uSAy4iBBYzZQDVQbL9W+LF47SJPAydIZxAvx DkMgXliSC1mS6KX/IE9iX5VkyciukYdNClqXXM0pKK+yocq8vHIor+cj1BZq/6vr9+vP7dvvtHj/ Fy6mO+v7RU6Kiqs1M92G6pS3+lnmuF4AN/urI/CFiC9EfCF+DYbJGJ3KoLw5zsYcKvzrI9qitSIb bVtR8D47+cS7zTE/+UgbLvYt6Z53rNUAnxmkfpDmSE4CfAAfwDcC8H1h7dKxnCtZyCiB0sUhVFjt 677SlVZqZHnszaeTuTS8zElj7LQM5AF5U8tcOlYUuGagZArxQrwQ76TEmzmJnxsINiBeiHdq4vX8 2HLNGAthIV6Id3IT/lnuRKGPb16IF+JFmu/rpfnefUsb1t4Q1hFazV/tR5/9c8flc+RP+5oRy7oh lmF6r0bI2w/3dC2f9f+hkdhzYtPzUgc71QNygNzkHIrnJU5mQbwQL8QLh/LVHEolD+cDq0vWsFJ5 jbhh9NPhQnh3V8uTWrPuTdrI8/vKlxwqMb6hO0JrWj23vH3tW1JWsO1SHq8qOtTwLvLyM+wkQYAG /AF/k5vXCKwgNX21lTfEC/FCvJOa1zByP/NzlH5DvBAvAo+vlxr95Qaf+/WatZ1qx0M7ImpGClEX MhIhXLWcOKyAajtal7RRTSjUKFpV4ol08o1VzxrhhmUGYeab6QzQA/SGIYAeoHch6KmGnk2pTq9q 6NluaKN+Fqt+Acz8lHApaE12jXhUW12oZmVzDdY5lm/neRrNwDqwbhgC1k0hOvN9K7aNAFVnEC/E C6Py9YzKO29uzkNpPLJz+3Edr5HlRuC4CivAFXAFXE3KaySm6WYRFoZCvBAvvMYIkiLpcVX7Wx3r YXqhawUooAO9QC/QawT02nTdrn17e1uKp7oStGznRSX25am7B60qTuuCzUWzvuU17zjt1Ebst3IA pe2tBvMMIzRNH1VzYB6YB+aNgXkLxa7FQ0K7h+BhSB093G13Vb9bDu3vfrPnZc++XbnS4JwbOpEd xu4MnAPnhiHg3BTSSkYeOnEaJzOIF+IdhkC8MCkXMimvmikOJoXwVyaFrI8m5dxcUdUhys+HNTqd Zd3AzgPDjmfAHrA3DAH2gL1L5aPEU19NfcZcS1StoTxSumaqjpqRlVB11OoK+LwHrU4K3vQt33Zc pKOAPCBvamGa6xl57iXJDOKFeIchEC/8yoX8irx9Ys9Hf9LHX6fdh6/+/H5xfaPCsa4RlVolIQe2 N72dUX+l4itGiueiYn/UsC126seZ4WKBBMgH8k3OtjhuFEcOihYhXogXtmUctmWxoQ0r1WR4wzrC hgzz1eJ5u2VdwwtS8J3a4Oz6Rseh+FFoGzkcCiAHyE3NofhGEsQmthiEeCFeOJSROJTvxZujO5Ev db9fVtKR/Jk9v5wNv6Ltv2VW3Mwz/MyDWQHvwLupmRXbS7PAsVBpC/FCvDAr4zArG9pu+s5Y1Vo0 vNtsWx0fYpqB4WaZghZQBpQBZZNaNOAkbuBbaCkO8UK88CHj8CEpX/OOVmTB1zXt9g0j0W9yJFaQ pqljI7gC1AC1qTkSz7SsOLS9GcQL8Q5DIF44kss5kn7KppVnu+Ltpi+RXRQbJo9ax44YiRU4Skkg Gog2DAHRJlFVkkeu6UVKZBAvxAvxwo5c3o7cN6JjRV89IlYkUZUkYt3Q3eZYXfKeyrPOaUWu8rv7 BTEd4431x/4PW6u0xI89K4jTZAboAXrDEEBvElM6WZh4ZgDxQrwQLxzLOBxLv8W92LGGLnml2p1I 3/KiBnZxWHB807uXRNQr1rBaXRD9IxqOxTJcL09DdCUH9AA9QG8c0MvaohFPA9xU2wTRqQJ/DaI5 jpP4jpvMQDQQbRgCok0hBnMcM4izGFM+EC/ECzsyDjtCd7uKF4eeu6/Dr5V87ZR2lNCOyL/U3fS7 YRNek66h8j10vXfRMC2G44a+m6CcGNwD98C9cXDvxLJ9q9WmzvcN38lzcwaGgWHDEDBsEtXDWWgl RoKmCBAvxAsDMg4Dcv/nO3LF66Lal+o0F6zp+EpFYkxGW4/iGJLNkg/fza51HIqR5bER+skMkAPk hiGA3CRSw3nkh15gzyBeiHcYAvHCoVzOoeT7fpn1Zxnidl9sSMeKTS0PYc3le6At+VZs5T9NX2s8 dNzVqSr2Yscz8hTLskE+kA/kGwf5/t+e1t1++3IRxfMNuStZ3fHueUlbVr6YKXtZw6OVSw7TyI5z LGYH8oC8yUVqjh07fqTeMMQL8UK88CuX9ysHn/LmsENbv6xi3W8fe/WteCJLWn62uXZLClqTfV3K 49xy6V2ohmux5bUX+q49A/gAvmEIwAfwXQ58fQh2At+1bkGincSuEYQoxAbKgLKpBWBGYPqBlyuZ QrwQL8QLHzKWAOzUbWfBin0ffy06aUhoU7Z9hvibPS+ZOs06Kz2NMDLdMMbadWAOmJucR0nzJPJj eBSIF+KFRxmBR/m4YeRJ2g/ySOUrH1rtvNgaWw3khXwDDftxzxtGOjm+PdoYnYyKEUdpbCOjAuAB eADeCIAnD4mu+ykvcsgOt2TJCF1Wkm2C7BrxyNu+dmcrat6J5lDEU8g334hK4U8nRov9IMrCbAbq gXrDEFAP1LsQ9U6o6za0I1T6uCVT53qvChYl9o6Or1/8PlemkLekFMW+xySvy375mU52ysqTPIiw XgXkA/lAvjGQT7UlkjHr60InFcIeCp56IPZB7TElz/91XtHCVRvalfyVWh0YA8MMPQ/kA/lAPpBv BOTrxO2qEdsvRbzKAX5iz8r6rYUo+59/Pkxr8488ty0rCWfAHrA3DAH2gL0LYe/l7MXLXtqvSkLb uU4wmwaRnwRYggy2gW3jZduXxWs7qZ/EiRIZxAvxQrxTEq/rxkZmxVhMC/FCvFMTr5/mrusEaGMB 8UK8SAl8vZTAu29pw2S0zzpCq/lhAcbxlv1zx+Vz5E/7mhHLuiGWYXqvRsjbD/d0LZ8N/qGRG3D8 OAjCKJkBcoDcMASQm8YyjMDzLANVyRAvxAuH8hUdSr+zcc26N2kjz+Ir93Fnfb/IyTd0R2hNq+eW t6/dScoKtl3Ko5LWxdVwKL7vxX6AUjxADpCbXg7FyGMrS7EzDcQL8U5NvF7umI7rokUDxAvxIrz4 iuGFNzfnpjEnJN638mS1LUnkG+D1XjWdUUVQKW/lMcvX/sAK8ciaZ3IVJ7fph2uNgML2jNwJrGQG rAFrwxBgbRIpT9s1AiNJZxAvxDsMgXjhSS5Up50e1xe/1bAejuWFuYFKbNAL9AK9xkCvTdft2re3 t6V4qitBy3ZeVGJfnlpj0aritC7YXDTrW17zjtOOP7L2Vg6gtL3VYJ7v2kluG8gigXlgHpj31ZhX ycP5wNQeMKxUBXFxw+inw4XwizRcKKotHhLaPYQPcZJ+eLh71W/hQbU47nm4K1c6qaZM6jowUP8P 9oF9k0s1JX7uOKaSKcQL8UK8MC4XDtZUk+NkEZGFNCn/I1NjRujZmZUBeUAekAfkjQB5n/W7Wx/j r6GrZyHkwcogT7XAY6/7g57/rgb5pKQdz/JAPpAP5AP5RkA+hbNX4Hp6W7JK/h4uwWSZqlPdW3lO N0J+Du//ru6VtFMn3jDdN6b1xjI/mvZbI3hrGH8/fD5f/OSOD6asfxu5bYVpPt2PU35CHyW7v/yh nj7R46AXXwjykd/jtfVOtfuXgGB18Ux2Fa0P+7Rt5XHu1SrikrV8XbOyf/T8bdm30tZJbsZ2LoMF a4avzF8Zga9MfGXiK/O/FWu/0jJRcY2IHWv6cIFWRD7NK94D8NhBmz2qsEGsJPSeT/tCadDOTLI8 SZ1kBtqBdsMQ0A60u1RqRK3BbvZ9i9hWrZVQWd5zBoTXRbWXBk+nLNH2IjtybOzzBLaBbeNl2y+I N8uMKMpQYwLxQrwwJiMwJuS3rNs8uBbaEnoKxnS263ASI7CNOJkBeoDeMATQA/QuB71DyKXOsNpm ci3kEbSk3RcbhbdCqPx6x76AQAU/Deb5piMvzRD5djAPzAPzxsG8xcGzkav0A6WL68MWRe1+2bJu YN+KV4w0R9zdkCUtPu1Ve8BSJ++eh4EZZMkM1AP1hiGgHqh3OerRptjwR61I1QoNI8ltLPkHv8Cv qeXWzdwMMztHyAXxQrwwHyMJuTrRqA1e+pz5Kf4ack9i+R+s6G7Io6j2W3ZD5PEsK1F8Iu3h7/1R w7TYuRP5aaAIB+6Be+DelEyL5ceZF2bmDOKFeIchEC9My+VMyyvT8fSW1+rX9CuZrP7kaqxkCn++ kkkd7tSXLHXvks8dmfx0fo/XxztRlWTBO2lK/0ab7fHHb0XX/3SaFujXKemYVCfLjTB2ULX6qyPw PYfvuRGaVD8PrCQJkFmDeCFemNRxmNQ71Vfp6q5eNfKgm33RqdWEL9Ns1zfkvh9zX9FuJaSHef2s hmtx/SwJUa4P8AF8AN9YwKeKtvqmclcLseqe6OfY0wnHrCjPPCuxZwAbwDYMAdgmEY4lZh7kphIZ xAvxQrxwJSMIx1Q7l77b41XfoOp8t2E70ajGVmTXiHVDt61Oc1vPTIzczhXNwDgwDoybkkFxLDex nQRFDRAvxAuDMg6Dcu5ycE+brpavHq2Zem9Xy9MTtG1FwWnHCF03rG+v2WplUzzPM6Io8WbgHXg3 DAHvJlGB6Qby0+lFBvFCvBAvzMrlzcqibwxJPrBdxYvDbhpXK/mqG77eEPpIeUWXvOLds54/sR03 ymzs6grEAXFT8yeGbUdhHkYziBfiHYZAvPAnl/MnuXQgb9QaANIJ8h1/ZEfH0pItKza05u32uH0J rem6T6XoGBU/NkI/ztF/A6wD66ZmVGw3c904RZQB8UK8MCrjMCrnvq3qUMlf+nYbyq5cffj4l+ve oZxH3Ated6+G3P9FK71ix4Zlh4lCHMAH8AF8U3Itbu7lrgHXAvFCvHAtI3EtWV00z/1eYeSqpB0l tFObI3bkhzT68I8b0j/Ga7IV/Zgf0rv38tEVZ5VOl2Yn8TPPNlGuAuQBeUDeOJBXsUdW6a1d9KPE CrC5K/AFfE0u3DKt0IpdR4kM4oV4IV54jzEkiWm1fbOkLStJVBSnrRAbUWn5EdMx4sizZ0AakDYM AdImsVQxtmPLSoIZxAvxDkMgXviRC1b/Hzo5velzIiQ6L0YkV4vvous/Er3N+GwvthzbSGdAG9A2 DAHapuBLvDyxjQz7QkC8EC98yUh8yd3iL7d3WUIsx/est5Z8tzckXlhuGIY36kli+YZtHrYVzu++ /xARdaqJY/uGTh4lNLPEiLBFAJAH5E1uXidOrTB3lMggXogX4oVfubBf+biRd0ic3KYfSHtanLhv O7KR9kS6kr6G7riNkTIszXEdwA3pf0ej4Vj8yHZi11YXCqAH6AF6gN6FoXfg2e3AMkW2nnQFq+XZ JlePvOn2tLrdbZ5bXtDq+gUDNZDn2qafhbY9A/KAvGEIkAfkXQh5J9bNXyz27PdDUUPUbutXHyhd XJMto3VLug3t5P/OxvAwptUhn+9GZh4iPQXygXwg3wjIp3Z+WjJ1eg8hbUmWzy8a7pyjXrHv5MfB euz1LnDX8JbNNZhn+36cuQ56j4F5YN7UUvKWbwZGaGGZJ8QL8U5NvJ5h2bGFRY4QL8Q7OfG6jrTN eZ7OIF6IdxgC8U6ijaUZW1EYowctxAvxIs/39fJ8776lDWtvCOsIreaHitvjLfvnjsvnyJ/2NSOW dUMsw/RejZC3H+7pWj4b/kMjsWdllus6sYIRIAfIAXKTyg2EVu7kORJ7EC/EC4fyFR3KnZo9rFn3 Jm3kWXzlPu6s7xc5+YaqQjJaPbe8fe1OUlaw7VIelbQuroZDcX0z9o0IkAPkALnJJUCtOPXDBLVS EC/EOzXxOmHuRY6JBCjEC/EivPh64cWvLeUjT6qC8ZHKV+6eiVgd67cb9uO+z4yq2saWFfLIui/W QHZCI+aQQjGjwLRnIB/INwwB+UC+S63nY4QuK6Z2WS3Edruv1W7wjOwa8chbLmp54m/IVv7Zieaw 2K84NK6VQBQt08mzBGEYGzGYB+aBeWDeCJh3tmxqqd6wxmWvunNLDqrlym/OPRtaCb5DL4c5IVGt Y/JiM4kyQ6ENwAPwADwA78LA42pWTexY01s96e06UfQOTvGvqsRTOxi+Vx5PhsGKfBrQsz0nNRwU NQJ6gB6gNwboHfrR/J+2J9ip51b784Y1L3J5Jet7NZz/5DptGxw7jlzPUoQC+UA+kA/kuzD5JIIa CbTqmfDtTjQdlWiTcW234S2hu12lUnzS6f2sn81xVwidnF4W+H7kovwCzAPzwLwRMO9q0ffg4nXZ T2AMfbhaNW176MFFanbM8A2THvJHyUrRSVpqcM/IvMwNfWsG7oF7wxBwD9y7EPeG6HWuk6WLvMg0 zHgGfoFfwxDwawpls6aZB2HqpDOIF+IdhkC8MB8XLJtNFhFRsZeql40/kFIU+8NWoqdQjGzE04tE FCWt/LOkTcn/xXQawhth7NupYc+APWBvGALsAXsXwt5hJfK5jIK3OqGX60aJE8dImQNjwNjUQi8n zazIzbFZMsQL8cKDfD0P8s6bm3PTnBP5q7sn0Xwii9MaxPRQpKQTQcWGk0dIHIFeoNfkrIcbGrbp m0qmEC/EC/HCelw4/ZEeU7xvNayH54VhbDsomAG9QC/QawT02nTdrn17e1uKp7oStGznRSX25am1 C60qTuuCzUWzvuU17zjt+CNrb+UASttbDeapDYwTz1BsAvPAPDAPzLsw8xaKXYuHhHYPpvFwzCQ9 nDJJD3fbXdWXEPbLQh6+2fOyR+CuXOlYPN/PXTdAgArcAXdTyy6ZsSHPpo39dyFeiBdeZQRe5VVN 4c8mvfgrq0IapprWsbo83OV1Ue1LrTkx0/AtN8tQjgPwAXwA3wjAR0s1n09ErZNXN7LYCCI7mQFf wNcwBPiaQtBlubGdOnk+g3gh3mEIxAvvcSHvIW/fiifVD6Nl674VWn2IvNobDTPiZ3lu2pa6BsAz 8Aw8m1QGOArSyHDtGcQL8Q5DIF6YkcuZkVPe97zh0rEhtZYdcTwncYwINYcgGog2NTvie27gZC76 yEO8EC/syDjsSHJwH5U6x/I/+WxLVBt5dvjxZE5Iuy82qpVyzhv2RKtKZyLadhIz96NwBuABeMMQ AA/AuxzwrhYd7dhqX13f9PBTGeG7ut2xoq+zUew7MpFcHWO1N0vasvJaJ0AzDcdL0tibAXlA3jAE yAPyLoe8O4mzfb8BWsq6I+cW/UaRt8NT9w17lCwcnmvJ1V26uL27X2iRz/CdLHAd9BEC+UA+kG8c 5FNu7m9sSaJha6AhgtWhmhe5UWLFmP8H1UC1qSXcbS+L4yTHQgiIF+KFJRmHJenXezHSiH2nTrNy KJ08aK0QK4kzOzZhRsAz8Gxys/9Blvh5hP2pIF6IF2ZkHGYkZTWnFRGr0wbJ5CoVi+velaS87Rq+ 3Hes/OI4NVDDtFh2FsW5hyAM3AP3wL1xcO++EceJsNv3vOPrPjOstR4sj7MwD7G+FTQDzaYWgjlZ ngVpiHpEiBfihRUZhxX5K2+6vYyt7hv+qLYUPa0Pu/rr/ffX5Il3G/JeUoaf9+T7ji5ZRRbymWIj LwwN02J6QWzYMbgH7oF74N44uHf1/v67xbWqta5VJPaolsJeiUd5GIvFd9c3qmiRNTXr+litB9+5 U+LV3X3LCp3kk5eZkR/binEgH8gH8oF8I3B899+3Nz/zfd9F3w/J9b8qNt70afis2xw4ePwLGtQz gtxNjTSdgXqg3jAE1AP1LplyP3JOnkRylUnCaS0rcUM38rxYMQcsA8vAsknVPCWWlWc5Ek8QL8QL IzIOI/Jx0zDakfe0put+vw2tdWBumIRWYs9AMpBsGAKSTWLe34p9K0xRggjxQrywIeOwIblomDyg giz2u51ouj7bq5Pc9ZM0jywsAgPMALOpORHDMUzX6d8wxAvxQrxwIuOYmeEVW7OS/H/5xK38H3kv at6JRp72uYYncSxDhlcxsAasAWuT8yR5bCRxbM8gXoh3GALxwpNcyJN83Mg7p236ho1y2mNb0ob9 uOcNI7tGPHLVu1ReCDdke3Ys2pmUJLCdMELHUoAP4AP4RgC+bsMIXfJK0W4lX0rdP+Nve56wPpKw 39N0v2yLhi+ZvKOBPMuOEtfw0hmQB+QNQ4C8KQRqlrzozMTC3hIQL8Q7OfGmiRVGDsQL8UK8UxOv mUauHbqY34B4IV5kCr5epuDdt7Rh7Q1hHaHV/DBde7xl/9xx+Rz5075mxLJuiGWY3qsR8vbDPV0z Yhv/0MgNeF7oyH+DGSAHyA1DALkpOBQpXj+LXIQXEC/EC4fyFR3KqU/Tm7SRZ/GV+7izvl/k5Bu6 I7Sm1XPL29fuJGUF2y7lUUnr4uo4lNRwUy+xZoAcIDcMAeQmkUNxjCQ2feRQIF6Id2riddw8T6Ic 4QXEC/EivPh64cUvlko1Mnbgj4xUYt3ekLamu3Yj5BsTK1LQXae2WCxpRw89FDv5Xkj7XBebRtT8 X/1uH3ONgMMwzcjMUoUnYA/YA/aAvQtj7+OGt6QUxf5QB9rRTh6tKhNdiaoST/K8v9VJpFhm6mU2 +rKBa+Da5BIpqqd95kQziBfiHYZAvDAll+shMLvriHQmRcM7XtBKLU3Z1yVrpEOR8dfThnYvFuiR 6P6uJVSGaPSR8oouK6ZhWvzQi6PEQRc3cA/cA/fGwb1VI7Z9/JUs7g+5Jr5S99Vyva7YkIa3n/qH C7HdVZzWBTutX1YRXDvTaT5rW7H0fGk8A/lAvmEIyDeN5rNmaEaekinEC/FCvLAtIwjXTrvMnrsL 0H2porNDWFZsaFWxWnWEWz739qZm8mcZ1HUNLaSh0TAtbmB6UZChZADcA/fAvXFwr7/THOI0+ZZ4 KWOwvtmKCuMKtS8IF7XiXMkq1lcJEBIpMh7Ax7W22/YDN/Ic152BfCDfMATkA/kuRz6VnD+6OnWa eU3YI6t7b7cVbafSVapmqqjEviSsfuSNqPsM1Q1Z7js1TidRlSV+7vlIVIF8IB/INw7ynYPZQ2y7 Vi6vej4m5AvaHYLcA/iO/rDdNfSputGknhk4fmzZyPCBeqAeqDeSSJd3+0M0+7RhEnt9Em/fr7ZV JfIvaNeSJVNXQh/+ShjyVod5ZpBEhoViDDAPzAPzxsG8ddNXwMuAVgLvxz0vPlVq9oLWhH4hsD13 Wu7EsbeyBvfcKAsT04DXA/fAPXBvHNyT3m47n+nQywlzI06x7gf0Ar3GS68vi9eXF50XRujPCPFC vLAe47AeEZF/h5fSgqjsEXlkRSdfU+1dcwi4+GF1cnR/R2hRsLadE7Lgqgpep4ZMKtVwkh5uQB6Q B+QBeZdH3pb+h+hLZsVKrfqRgBMlfSbtfrcTTUd2+2XFi554XLXGXMlf0v6mhY5G5lmOHSo6gXqg HqgH6l2eek+82/C+Xow3p61ZJdbqklT8E6skDVXhhPJ6p4bAWhkpL0p817DAOrAOrJtcRip2Iy/K 1RuGeCFeiBdG5asYlUoezgem2suwUm1wFDeMfjpcCL+2p7yM1iKyoHTx863leV32paAqW0X7avfj 5gXbfduR5XEXZq0CAS9xvSwBE8FEMBFMHEHw1orPoZZUnNXdm2iteojuGtEJeRCkFPJd1ELhrhBb Rughta8TxOW2F7rY2gHMA/PAvDEw79V05JyQu5rQsuSqHr7tl/UcGlqoecp+BWRf/tm3VD7hUAN7 ZmLkqZ2gESuwB+wBeyPAnkrFHz3ey2ash7z9cVVjP235eTH8XAN3lidZ50cKbMAdcAfcTSpVn+eB n2OeDeKFeOFVvqJXeefNLRWAnbcCjo5bAWs4Dj+WSjHtZAZoAVrDEEBrCo7DjUMnNYx8BvFCvMMQ iBeO40LZkXMJwLnncUuovNc88oKRK1UZcP1ib72NeCJFxWhzaCLQT6BplQD4Xp7FdoTpMJAP5AP5 RkA+rkC3lsHXknVP7Nj289T+RPQb1gzFUSVTPFTLWsiGPvZ1AKwuRaOTInbsNI9j9HwH+UA+kG8E 5KvZvmtodUN4LXasUSvwhoqn3tVRtW/yoQpAsobv5ABJxGOFqI7bC7LMkv/OwDwwbxgC5oF5lyr4 PMW3L5xcIbbbfd3XuJMdbVt18iUHH3nLRa3u0Fqr0tMJwtAzYPAAO8AOsBtDaFuvRLPtOx3TipS0 o3NCMlpsTnGtaRC+la5OJfUODZHpumGH3VfJTnD5hwb4jNRJPdtGTg/gA/gAvhGAT23G+J/snXtz 2zi27b8KSn/cY9exHIJv5tZxFZ+Jp7rTmthn+k73Sd2iKUhimSI1JGVHU/PhD0BK1iO2G0lNW6S9 ND3dlgRbFMj149obwMZMJPZEbq+aFWUdT9l5O8rRzrbYw9r9+zHL+KekIk2nUnHc/IzzX/uvwc+/ iWccneKyUKgxpOpQpddUe6847xXlt7b3Hu3X9YsBa75kpKlOEPW3s3kPXXOyP97lq5grSTRet9q5 X/BXxK+nufjLbQeLdMAPdvBr6Mn64u/upw8HF+Bj3/BtqPXQYPAr5TWy6mJecCm0VWEekmwcUWKt DZMKL/1QDSxD+Cm4LLgsuCy4rCO7rDhJinIsTm/jt3aHSdcTRapzCbAZhulTxxG2C2AD2AC2Ps1k VSMaeKGBXRMgXogXruQF4ymrKV0wHLNFPSOf2V3KD6iYkMvwOnoIsGSy16pGfeq6wQAEA8G2TUCw PtgPxdZsalEspIF4IV7Yjxe1H5QbkE/htf/Lp6jJ6n4Or5onMrlcN/B8zfYHwBawtW0CbPXCc3ih 4ykKxAvxQrzwHB0YiGmmtYi8x8aOiOUZ4mxPy2K5ILO4EtOdWVYsmNiNjpGbuEqTaj0LUMKv0Ihf dr6OsWcgD8gD8jqAvA3pHqbSTIpk2azcKPL1hgQkKfJJOl2W65nNPET7x5KVK95IAnm642imEmHp GpAH5AF5HUBes0Z3vZajquN6M6H5GxT+/jnyTVWnX8g8XokNWspl3mxBJ4E9zYg8RcMWLcAesAfs dSK4/emqJZqpOV8I/6yrq4/kZM049ctOEj6Jc0E79nXBvZ6IdAse9jb8kSqo6fie42OjFpAP5AP5 ukC+NeO0L2dkxomWiRPN7pq1uQ3/DNWyvjRxbZPPE/tTpRNRxoB7RJmknqYFRuBiixYAD8AD8LoC PN1SOPAE1SZpxk9xc7bLtGbVu5LF40rAjpu7In/YqTROElZVIt1Xl1KbU2m6Fim26w1APpBv2wTk A/mORL714uCTT67/81nLQUMzv5wepPj2RzTW+y/LxLZU8/UA21MBeAAegNcF4Imae2ldt1m6+ABs olIVqeqiZORkzHhYy5vFjcHjjf7r+vN/h6fnMjaPWl4Y0YOCfLpuhbplauK7g3qgHqgH6r0U9fag tV91quHRHxdFot9Xdcp0dMfpf9Wpi7/H7aQdqfpSTSf8WFe+hj57pL7Uu1dbVukJqa3jqZS7hzqd rEjOn/M/ktazNH/ObvBjinOZgMq1o8j3UPbg2RawFrAWsBYvwTuyNztsB2jtnNiY/L9RXM/E1Aj+ O6KsOQ+sNpt5lUVRk+FwWBcS4FOUINJDQwAK4AP4AD6A78jg4+QidVxOWU0q/uEJE0nzTcJ8WTFR cpN8HvmtJyTr+pt3qTCEmymzEuCj1PfdyAH4AD6Ar7vgeyJc0y3bdhUM+EO8EG/fxKtHhu6bFBOz IV6It2/iVVQt0lQF4oV4IV7kC15wEOxjXLLqjDCxi+052X2EXxcpf4/8ZZkzoqpnRFWouddCzEUe xVNGNPpFIjegB2YQOoHAGSAHyAFyvXIovqe4gYuhXIgX4oVDeUGHcpnzU5ezehiU/CzuuY92k8IP 8YLEeZytqrTadycBS9j8hh+VmNIk4VAsqqiccaiTDcgBcn1zKNSwXcX2ggHEC/Fum0C8fRCv6Vmh Qh2IF+KFeBFevFx48eSEqQn/8w/1ZNqZ8BU5mfI4pH1yRtg43T5JisXq4cmYZaxmQ4mIw/CpEuq+ NgD3wL1tE3AP3DvakuOWYVmR3J6RZd7+l3PvlIhJoVU7MZ6jMMmKig3Xz8/IbZplMsRTIlUPHSrI BOKBeCAeiHdk4q0RdlhF5tf17iAfHtkdZLOJ2Rm5n6XJjKQypVO5UEIz9JBdBvlAPpCvA+SLc/Lx +no0bGsFPlTGr2dxvV39E4sfp2U8n8d1mpBUDMdN+N8SEbIE9XTV84wgCgegHqi3bQLqgXrHol5T CFWc3mYF+JhN+Kkcc7ARURHkbL0YXGwAJ95vFogL77dpJcE81aHU06xgAOaBedsmYB6YdyTmrYPa cxl4WTRyFAdrUQAvwKu78Hoiu65EjutQ7FYB8UK8cB4dcB6bVDmplotFUfKvNKjvi2byhBhr5P9p iguymiXip2pAhqTmX0ls3jgXE7vHEp5F0QM70lWk1oE9YA/Y6wD2REXVekXqeHq+w8C20Bb578+X vEFSiO0XF/sVB6ud5hLgoyr1TUfDsjyAD+AD+DoAvodxw4dSq5XYvEIUHizZvKi5sRNtS9Ggfffk l9H15S+frk7PeIuaH+6dzGY9phkFph/SAcgH8m2bgHwg35HI14wmzlg8FnA7+Ri6wWkzcbZ94+RD eM2fJyWLOQP57xWiCuu7NL8rbtkWljIJek03Q0PRBiAfyLdtAvKBfEci38nolysBNx7LJrM17kbu tf/xdLMW6gF45CQIfwqvQ/4OP6Z/LFm5OpdgnkV937IVdQDmgXnbJmBeL0rT+qruRwaSVBAvxAvD 0gHD8jnivyVWeK/nRUk4EM3TNMuwBGwAMUAMEOuVA1HUwKeYFgXxQrxwIF1wIMV2963fuRsxVV2V qaGtmYYRaB5W0wFkAFnfXAg1XDvyI6ysgHghXriQbrmQeZGndVGKU90YEkWVMiRKGPla5NoDMA1M 2zYB0/pgSKxQVQMnhHghXogXhqRbhqS44598dfXxu/Ij1FVCJ9D8AYgGom2bgGh9sCNa4KmeYQiR QbwQL8QLO9IxO3L901VjRwxDc6SyI16oqY4LooFoIFrf7Iiq+1SNFIy1QrwQL+xIt+xItapqNid5 UaeTNGmWDv6faf1/22SJbiky7kRVNTOkXJwAHAC3bQLA9cKdhJajGBbcCcQL8cKdvJg7yfjhfGb5 mJVsPIqnzCtZfNteCDK+pS2+LnZKrMsiIyefXP/n09a1GJop41osLdDtKPIGAN8zLQA+gK+LQzy+ q9thqA0gXoh32wTihWs5Xk7loTzn75fD4Dxl9WSYs1pshDrkLZsfpOaeKIpruXowANvAtm0TsK0X U2EDRXU8FzVKIF6IF8akU4M9wweDksRZRmbFnD1iVcR7Q/GejFcxberanoHsMXAH3PXNqxiBSW1q IgMK8UK88CodS6LwD8vavZwedhSXMCSK4oYB9TEXBUwD08C0DjCNP57OBw+3lJMJt/TAUzXPwf50 oBvo1rdwS3dcU1VMfwDxQrzbJhAvrMnx1wH8xsqCXBfLZEZGYuc1sYdkU8PpG+vyTyaiMd5QauGi oZmeaQUDMA/M2zYB83pRZzJSNMc2IV6IF+KFYXk5w3JhnavnhFyqn6+EG5HN/ZpW5BmhhjJ04BV4 1TezoVHDtQzdGEC8EO+2CcQLs3Gk7IgXV2xMipyk+WJZk0lZzEk9Yw8pk/uivBUnf1oWy8VZ81bj WPZel7AtlmlQR9OxJynIB/KBfB0g35gl6Zizry5IyYbLiu1xj3/2wySdzcycisT5mFQL/ouTlQTz uMw8zQqwTALMA/PAvA4wLx6PUzENpxLU47jj0NvCrYz5KyV/Oc5JUrK4ZmTFas68onn9O+YnqjR0 DTPQBgAfwLdtAvABfEcC38nf3dHpuYxnMyn1VIo4FegCuvqWXjei0NEcqg0gXoh32wTihe84ku+4 njFSsn8s05KNCecRy8Wcw4pMChForXPpm8iKxCUjad68MSmyrLjn14WEZ6FUiywduXVgD9gD9jqR Wy/5Sa3eS7BLdw3PVyhy5GAX2NW3eEvzQ8NwfdTWgHghXhiPDhiPYncdeqqW1ZAtZmzOyjgbVnVc sy9nMqbECBxFV/0BuAaubZuAa/2YY23TiFriC0O8EC/E2yfxmpTaaqALmUK8EC/E2yfxWpYdhJoD 8UK8EG/fxEsdk6qKCvFCvBAvcnkvl8u7+BiXrDojYqp5dt7Wklw/wq+LlL9H/rLMGVHVM6Iq1Nxr wR+/i40ViabKVGrSQupp/H8DQA6Q2zYB5HqR2BMzBSIPDgXihXjhUF7QoVzm/NTlrB4GYl7Tnvu4 VD9dReRDvCBxHmerKq323UnAEja/4UfFrYsh4VAU19Ncz8PoBSAHyPXNoaiOH6q2AvFCvBBv74Ye 9ZAaSIBCvBAvwouXDC++YzLjYnkzrPj/10vK5ox/zy/kZLS8ydIkFpU9hlfLmyop04V4IpMRVX0/ NLAPO6gH6oF6XaAef+RFnU7WQKtkJmxbDu8Pz/IHoBgotm0CivVi5okSRKofaQOIF+LdNoF4YUE6 E3jVJW8V36RZWq9kJpoYvu+rhirYA6aBaWBarwxJ6DlepNIBxAvxbptAvDAk3ckEr2uGDSuW8KOp V/s5YRmLYoamSn13AMqBctsmoFwvKp0arqdqGmaaQLwQLyxKByyKW5N6llak5od59rCNjtgw52Ef nSTO86ImM/5i1u6281Cch4zjOpYwLSq1aOAbWMAD7oF74F4HuFfVRdnsosNPPxuTm1VT07ndKXGx nZfTkLD6vrk5qk0jXeVXP2AH2G2bAHaA3ZFgt5tjahG3OzB2JnZNFC9uclJ77Tc172VSU6puWJqD gvYAH8AH8HUAfBxzebUoynpnsw5u6PgxV6L6RJrXbCqIdy5BNz0wI9uwgwHoBrptm4BufUi8666p 6Qq2GIN4IV5Yk6NbE+tcOyci2/7zLwHZ8x7378cs438tFYkk1RDHx8/srOC98fNv4tk4rsXpV6gx pOpQpddUe0+V94ryW9tLj/bf+sWANV8m0lQniPrbqbyHrjnBH+/av8dcMaLxutWOqeOviF9Pc/GX 2w4WSbof7OCdnnxl1+zF3w8uyce+c4+/nvvpg8QXfGUn9YkY6TDw4eJ4GiM9PufzYsxvk5VEnGf4 ThDaajCAVXymBaziN01gFY8f52lKqIRmGA4gXoh32wTiRZx3pBT0OsgbszuWFQs2Jmme1mmcPRf2 NaBC2PfnhX32j3cwwj6EfQj7ehT2saydwyAG+8oJ74iK/P458i1V1b6cnpHLkURMqEWKTS1LYAO2 ErYSthK28si2Mh6P+dOKnLQss6yWZXcmP9wlP9u8wR0r67RqZnEdNpNBnm45mu85AyAPyNs2AfKA vCMh72pV1Wy+QZ5GOcvIfVrPSNW8QS6Ds82PYjUT4V8hnjb4OyPBpysJ5qku9fQQa6vBPDAPzOsC 8/jPRcaN3Bn5HI/TZUWSLG2AdnX1saFdVkwlwGbprmsEFPErwAawAWwdANvJtjBOzup5MR62MBs2 GTsRpbr+T1ePNIuT7KGNBPl001d1S8FiTJAP5AP5upC5y8ckEYvPy2JZi7N8kxXJrQhrD1G3bjBM JtMv5Hr28BsykaypepYbAHvAHrAH7HUAe/dFeStO7pRDbEFOynp6Pz0ls7giN2y6zEldEPY1nvPz SxZFliarZtB2w0gOTQnqmQHVVd/0B6AeqLdtAuqBesdagL7Mc5ZV5xLw0pzIUXwTNdIAL8Cru/B6 It5SjVANI4wcQrwQL5xHB5zHaFPwplqwRGzLR37djcAqHnrdsZ1lCXsOZX85gpgDJjNbnmI5wuYE rL5nOUJTD/wHO/g19GR98XfMzX/Tc/Mvry5l5mdRVfMjG1sOPt8CLuubJnBZcFl/isvaGbRLq7Qa ivt++5MYtDs9I79cjaLdVkW1mDStxJtiKND7IDMbX7c5GVzPH+yRT1ENzw6aV0E+kA/kA/lejHxP x4ua2IFRJpyxviteNB3dcfofL16ckDkrp009bangUJTT/sHe3Om2V3ZZXpw8dOIbCJWeEGExabcX rGZxejsbpuNyeDNdrGdHNuaiefufs3Gc36b5QwNhTSQ8h2qabuA62gDR1jMt4DngOeA5XgJ3pF3t J3aqeMZ8CFwhWf1dyWp+T5DPVTc985Zz1YcB++Nf8G1I8o34r4v1jMSH7cLm3Miki4wdjqmdPAMm 2VrOANPD9cUNqzyYZEs5v1owXQafAaY3BibJedG+wc+/j6mFz7ZAJPdNE0RyiOT+lEjuGZ/U8Ag+ 6XGfdNGsm5H2RLJ1Tl+tJ/p8/eHX/ZlFr9cMPC6209NzIgaZyRV/norql89o78+Z6RcE1HEx0+/h tvXjgux7T/7xTL/1N3wT0nxrM/2aGcc3jOXbRIqY/DcaeST82+iTRCBjmJbrO822WAhkEMggkEEg c+RApp3aV1f8BM+GN6yqhoubmyG7W+TtXMD1NEBJvmmRrZmWA76Bb+Ab+NYZvv1zthQwa/j2wDbB tZ80DrZHGmXaTisJ8KmR6riq5Q8APoBv2wTgA/iOBD4xfbIZ5k/4EZOfRz9dvRNZtMsR4cTbVGvL 0mXLu/kWd+cSuDM93dM1Q4ANuAPugLtu4u5x8erU1HTLQ5AG8UK88Cov5lUyfjifWT5mJRuP4inz ShbfthfChXWunxPi/zKSWkZv+6rfzpQGwAAwAKxP7kNRXSWgCrbygHghXriPDmRKfskZYXGZiYrN ybIiRU4mWXFPJmnGz3VT4T4WY/389fU6CpZPijJpd6YsJjL5kpB3nuYhXwLoAXqAXgegV5fxRBRV ZGJX8aZCPclZLYrck7Rq1qhSx1GqJiRr9hsXAv9CxqxKpzk5GYVSe/B6euT7FJkmYA/YA/Y6Mio2 CkanJK5INSvuc5Lmz0wo12VLAamYUL7p5Uk6XZZtiQOpKeWy9YEe6eLX0Jf1RXRw/T329d6EPrcX zluYVE7PSbMp2qiNKccsSau0iTFTHlbeskUt4bCsyDBUVREXCBwWHBYcFhzWkR3WOooc3qfjh53Q nikromviUOGwHndYF6G0jWp64C3bqLdSTPHifMqdg+v/VJ024UwlstBpLTYgXFuJnfR0JeEh+IHY jtJICB4CHgIeAh7iyB7iflaIFHRO7otlJnabzuuy4JZhFteE39TiZnxObLxa34vVuCJbzU2HiKYq sSVQG0hJkM/UXI/6TjgA+UC+bROQD+Q7Evma5E+1IV7GxlvekUlZzMkoHDVOLxxxEyjG5TTF1ptx uaRMb5iM39NMywhMGzOwQD1QD9TrAPWaSQbP5IhkS89iFO6hV5fVdwzByZaefT539MquVt6FB5fk Y1+6x98vnh7YhTdxWt94KStRsGpbDfyuiZT5ffVcJlqmnhYGNqLlZ1vAN37TBL7xJX3j4+LVQzfQ vcMNGCFeiBfi7bx4TUeLNM/EPGqIF+Ltm3g1JzAtrFaHeCHe/onXUkMrNB2xDADihXgh3l7FvIZt aGoYDCBeiHfbBOLtg3hVGkVcpUJkEC/EC/H2KmGlOKal6FiWBvFCvH0Tr2IakWUbEC/EC/H2TbzU chzLbKbtQLwQL8Tbq2yzYbq+jpgX4oV4Oyze+9c3LfRjXLLqjLCaxNk52X2EXxcpf4/8ZZkzoqpn RFWoudeCP34X9dyJpn1pLoz2Tz/pULwoskNf4AyQA+QAuV5NZjGpofqBO4B4Id5tE4gXDuVPdiiX olBxzuphUPKzuOc+LtVPVxH5EC9InMfZqkqrfXcSsITNb/hRieVsEg6FX0GmbfviwgDkADlArlfz BhzHoa6DBCjEC/H2LgFKnYj6bjCAeCHebROIF+HFkUqT7D9Ggcy2J4pCfSVwkSQBxUAxUKwbFPvP oXj8p/jxHSH/s/OSBNH0SNfDQEVGBEQD0UC0bhDtX6NwRMm/hsN3zdP/4SwTL6nkXxJEU1XdCaij DUA0EG3bBEQD0Y5ItPW/Xf+nd+sibeuXZKJOPXI814BHA9FANBCtW0Q7eMhTzfLMgCsSxcpBNVAN VOsC1XiYSUTi7F9N+mz9aJ+0/5YJP31D01xXGwBrwNq2CbAGrHVgiGC754z8EIESRYHhR4I8IBqI BqL1quSDEWqeozgDiBfi3TaBeGFHjj/vKkqny5IRSmVciK+FBlUx+xsgA8j65kL0wAs0zfQGEC/E u20C8cKFHMmFNBtTzuIxicUOu+k0J8WEjNqR+TCfFGXC5iyv+UvNtr0no3B0ekbifLzeY03CsZih 6Zr64bA9pYama+F29z1AD9AD9AC9F4BewJJmW8gt1YLRKYkrUs2K+5yk+XNb9TY2Lf6DrWTN95r9 XVv1mr4ZGP3fqvdi0oSy4g2pfXnFrIcf7MzX0Gv1RRv6H95FX+nerE8IktJzQq5n/Dn3IGtlLhpl yuRDVMfSTYqQ6tkWcBdwF3AXLwEzQhL+Ncoiy9i4HWGelMWc8LiJ1IX4z7kM1BTTUVXfHwBqgNq2 CaDWhySv4Zu2G+gQL8QL8cKRdMCR/DpbtYnetCJ5QbIin/LPX1ZsLOFFNNMP1NDCgDNwBpz1zYtY thXYHrYpg3ghXniRLniRK5bwj6xXYpSlnjGSs/q+KG/FU5HzF66kItWCJekkTciY3aUJf+HkMrh6 dzm6OiOf3GuZBIpmmIZjoEAZuAfugXsd4N4kLdl9nGVnz40ti+UJfzgcqr2n6neNLQcBddxXMLbM 6kS8KjOw3Mw2+sGe3OmyV3Zxih78ZvjhlY41X5yS+7Seba1EM18t5UfWTF4ri0ma8ScT/mEsTmak Xi3402IiYS5U1Q1t10PFhmdbwFzAXMBc/FuZ9qS5aMOkc0I+FSQp5nMxgaYs6oJ/MOGfvK60xVk3 j2vCvqYV/9I3PPBirAnCJJhHA8W3KBV0A/PAPDAPzDsy89ZQ40cWi9Gs9Rxe7u2qTYaJ7axfaOcT fmN+H0sdUcPTdMMYgHQg3bYJSNeH8S5VjTRTb2QK8UK8EC9sypFtiv/LqCKfI796T37n/9FVk345 a35UHV35crbnSPaywQYVR41s8EFXr9O/T3R4059PZojfyFUnri5NsfX9zer3Ly4VF9fTF9fF2R9c SLtDDdqP9+ROl72yK/PibJ9s797aorZGg7qt7WvwcddqhiaN/DAYwLU+0wKu9ZsmcK3HDzl1RVMi 2pg1iBfihXgRch455BTLPS7VT1eRWO8xTicTVooUuFgBImFGNMU1HaqiUip4Bp71zYwolHqObaEa BsQL8cKMdMCMNOtO7+OKxNspSWLS5Xr4vmRZXLOxqI3x12WciWH7YkKu+K+nCSMnfy2uTiU8C3U9 wwg1jNkDe8AesNcB7ImJSHvgEp85F1ORPsf5lF3VcVmTzQjC+vp6bZ1zIerJxhm/iKfPdEXIe+qp jhAf7+jUDs29briqVxnbfKy//lusCXMTtn8Qm0/avLv/UZvjeSOX5eYGXJETdj49J+Tz1d9Gp+Rk M2PurClY1Zb3LeoZK6vTc5mMgRt6IeV3Dtx9n2mBuy/uvrj7vgTmyDr7mZSMxxYi8jhcE7FZ+/Aw VXgdjWzKj0pATzE1JwpcZFoAPUAP0OsA9NolDuTkSmYlBG8Wjk5F3eViHK/+Q6bSsuX4hhrYWPYK 4oF4IF4HiPfAt02ZIP5UDHVnK1Lk/F/LignPt+CHVcflahv/ykS11LcU32guEeAOuAPugLsj4+7n OF9O4qRelqzkv14sszHJ0lvGA9wHEu6XO9lzfhLMUwPdi1QlHIB5YN62CZgH5h0rqN2k7MpYDEiQ ehbnnHdTlrNyS7lNKxlfZxgODRxPsAiMA+PAuD7NbzQsw3EtA+KFeCFeGJSXMygX1rlxTsjIH8mE URxTmupiCQUoBUr1zWJQXzU0z9YGEC/Eu20C8cJiHCkH4lYkzcdp0iyUuFm122bEc3bW/DQqypr4 RbPnKBlt0iUn3KmcEpbHN6LKdZzLJEY80w5cLGQH+AA+gK8L4Lsc3emifjX/r0lmRVWLZWKTjH1N b7JN5deGgZcjEo/H/FfX1f0FEufxYnG48uBx8JmK7euehZF+gA/gA/g6AL5UjNrP4zotcsL/+bTe I81dM+66jPMqi+uirMjJJ/e6OhWU3OwwVHFfWEhgT6GaGeo+/B6wB+wBex3A3oSf2yyteZzbrNhZ 5iLmFQxsdnIq2bzg7wgfKDWBU6ORauoq5quDb+Bb37Lwmhs5VFf9AcQL8W6bQLwwJ0cyJyN/1Nbx lwmtFNtyIgsVEUAv0Ktv1sMMokC1IiFTiBfihXhhPY5sPfjjd249TNu2ZLaTULVIU0KKVVwAGADW u8RHaFHDx6gMxAvxwn10yH1YqmrIuA8aKormGGJHMwAMAAPA+uQ+FMc1fBWLHyBeiBfuoyvu43IY nKesngwXyWLIT+CM5fV6aoiMI9EsVQt8FyEVoAao9c2RWEagBQ4m50O8EG/vxGt4umP7JkYiIF6I t2/iVSMn0DUfVUwgXoi3d8OIkRZqNsX2JBAvxItE3ssl8i4+xiWrzgirSZydtwm89SP8ukj5e+Qv y5wRVT0jqkLNvRYi2TcSi/o1XSaxZyiRpxuOwBkgB8gBcr3KDaiuYwe6EBnEC/FCvHAoL+RQLnN+ 6nJWD4OSn8U999FuHPkhXpA4j7NVlVb77iRgCZvf8KPi1sWQcCh64ASG62AyFCAHyPUuAWq7rmEY WMUJ8UK8vROv49iOC/FCvBAvwosXDC/kZzIWizqdp/9kw1vGFnGW3rFKKusZmoar+YJAIBvIBrL1 ajqjr9tWEGgDiBfi3TaBeGFLumJLFmXxdSVjRBSdX9tRiKnZYBlY1jsjYmmBr9juAOKFeLdNIF4Y kSMZkV9nK5JW6yHYcTqZsJLlNZmUxVwU35Spu0ktqph2gPUmgBqg1jdHYnqOFug2lmlDvBAvHEkH HMlH7kBIzP9fFXP+Q7VgCf9a9Syu1y6F25UfMyoq1X3NpZgXBtaBdX0zKopuhLZtInUC8UK8MCod MCpFuz1JkWcrUi0XYv9b4VPYeo/cubAnxaTdF1dskLvZLHdnn0kJ06I5rhZpMC3gHrgH7nWBe/xR xpxzpQjKco62FSmapxVL+LHUKzJZ5onAWyXBN5N6qqdE2DASfAPf+haU0Ujz+akSMoV4IV6IF+bk +EGZX9w13oSRZlLdGZmkJbuPs6yJwj651+Sm+Cre41dInIl4rE0sS5gVI9BtV0cwBt6Bd70zK7rp B1QJgwHEC/Fum0C8MCvHMCvWuXlOyKeryysy5J/5tSZ7BuT+/Zhl/E+mYuDaMMRB8tM7K3iX/Pyb eDaOa3ENKNQYUnWo0muqvef/KMpvbVc92onrFwPWfKMgoI4b9bdneQ9di457tH+rmi2qpk/XzXas HX9F/H6aiz/d9rBYs/6DPfwaurK+uDq4/B77em9CmA/Xze4Vwy+V14imCx78XKXTnEdH/C4jEQHp uhLpFJN9n28BE/VNE5ioDqRrbSP0IuugPAvV3MDSPCFpiBfihXgRAb2M0SLr8OeZuKdxFH/kyi1u yb8r7nF0aodm7+Oei7QiE/73qjrOx3E5Tv+59nBSAY8Ycf/Brn0NfVhfxOm8InWx033sjbj+J+QY 5+RyRKqHcECMkdQF/1By8vnqb6NTEmcFf/VArrvXlNi25i1fU08ElDP2ZuJJfrpjiTBSMUItMLSD nVI021D9UEMYCScKJwon+qJO9OCuxm99xSQsxUfWqwVvPC3j+VUdl/X6pL6yfrlYxPVMpg/CfPw6 e+CJK0MYbJaPyaJIxbfhfrFk/1iy6rnhGrNhAcKWx8OWxzs6reUHa0yxXP1Nxy7cUqblwQX42Fd8 Gxp9K+Z6maccPeSvxRVJZtxJJ9yFpFWdJtUZad+TsN5UsazI0g4WUprN4mhfGHJYb1jvx5rAesN6 /ynWO/qVu6ssTVJ+kPyTxAzdnLFxRU4+R77hWNppW/5BFIU4qPxwcAvc9Qiq+EJv2yMUVTMH+i4d szG5WT1xm9w1rtqPd9obyLdz1yVtUZs+QCr0UO1FmU7TPM7eiGV7oheiX99xykmYNdMwdNU63A5e C6LAV8OGcDBrMGuPNIFZg1n7U8zagePaNQ9Sk5T5LY8i67Xp0M3t8PnU12u7uC4qVteH80337ZPU dOzHr6XX4d6/qZ3wWpNa54Rcz9gmq141UV5SzOfLPE34GR/zkK9kSZ2tRO5dDKVz8yTjnGzb0qmO icrPtoBz+qYJnBOc05/inERea8zu0oRVm4VfaUWy9JYR8R2G92JQcTPlal3xVFAxFfVQs28i5scK nFohVQNf+DAwD8wD88C8IzMvze+K7E6YuBZ8wsNNlhk3c9ziLVpPN485AdOa3Bfl7bkE5RTdNdzI BeVAOVCuu5R7IizT9CgMHYgX4oV4YVG6EJatAzExAXaYFMtFxsZnwo+I14qqSm8y1tgUVlXxlMdq d6xc8dZlnSYp/yW5dfOKbyueY2gDcA/c2zYB98C9I3GvjcjWa/riBn/kPq1nxbIms/hOnHdOvdu8 uCdibnZWJE3J+jMxRYu/IME8nRqqGYQo7QzmgXlgXgeYt4EYKVnGf7hrjF1bvH6ToDqpZ9z4NX5Q OLxlFpfZSvBR7N0h5/Woqke6YaJKLLgH7oF7XUjDV9WSkfsZy5+bv9Wg6Y/m3KDI5G7frorlf9y1 1R2kZoVLFV15zVUmeYeJ6GJ/odrj3/JtiPPQT7zWaV7ToiZFzkT0OC9KJmZDVI2pEmt50ryZ2ZWz WgwCihBTwmYppmpZjuYPYLOeaQGb9U0T2CzYrD/FZjUGqy5X69xZE20yEi/EXiNlKn6ul3nOHRfL x209idNzCdBpmql6dlMDHKAD6AC6Xk14CHjnBCHmoUO8EC9cSgdcykHoLdba8Bjsc5xPWVPgjGyS Fc76rL6yjrlwyTiNRS0zUs2KZTYmN0xszs3GZMZ4ZMpfvBcXf7MpHGn2jLu6PNwdY7fXQt7kqT4T R/rIYrSrepWxzRH667/FmsoWCds/3s0nbd7d/6hnfWNkh/we4w9w63mmBW49uPV00Dcalu26XgTx QrwQL3xjB3zjr7PV2hOlB/tj7Q0jWlLFTzGMuNu726pm4jdkRhItqRKor3kkMTi4BB/7em9CmnvX zvP13SyponjQ5v7uDXE7a0JKltpbl6UoywhlvrHBfZEgeX/4ZR8Jaqwg0j3LFiJBUIOgBkFNnzIS mqJR6isHe/ZAvBAvxIuMxDEyEoX8YJa1vrxeW99ciNp5bVbmoYJeUxk9yVImvsi4IHlRk2mxV0dv PdNSwrKZlhK47mEFYlAf1Af1Qf1jUJ8/KpbwT61Xm1V7Z+RmKWaRVzWLx4JvCf+qZZFl/MAK8U8y 42Qs45o/EXX1JLhHVSPw9cNtcsA9cA/cA/eOxL0kFvPL47zKmsnks2ZyeSbqJKdF/m5ZNbgTvo+J DQvXW+q0ZZMlkKepWuB6JqaqAnlAHpDXDeQdBPhvbl/eTQVVmX54a3vzbmp2rJePpvy+V054o7Z2 Nn9pRarlYlGU9fkzeaKd6bvfZInEUf8503fbj3rudqyooWlqkRiyx+0Yt2Pcjns1fddz9NDT4KUh XogXXroDXrpo91naGysi44Ifshgf2tloZDM4RCbLPBGJhcZgtRUiJbIIlkep7SCLAPKBfCBfR7II zZCQ2HBkPVLUVPcWRR3b3ZbIDUceE8U7HgjZjp8TsfxTLntqugHXUnQwPYprVDOsYDvhFdwD98A9 cO9luNeyzJ3uFFnbGRoXcNsdGz9Iku2ua5Dd21d/rfux7mcQ363n8j9+K6CRGxgaFt7jVoBbQf8y d5ZpO5QKmUK8EC/ECx93/Mxd6+PGbMJPYrWJTU92Jv9Up9uZP2NWJWW64IZOZpcWkzpqFJmY4A3e gXfgXTfi1pNFWUzSTMzs5p8V13WZ3ixrxilXF5vBi3c5mxa1KKv7jn9AKsJRyVSdERmB4VLM7Qby gDwgrxvI24y6Pqxt2Q6/NtPZ4pI1I7VFm8YTxcUzsYHCPK1Y9U126rGslGeY/MrDtlSgHqjXu6xU 6Eaq2+wfBPFCvBAvLMuRLYsoB3nPyA3LUjZZJ6hmsZhVMUunYkfNZBaL+e48YLthZMwWWbFiYjJF nDcFtWXqRSlK5Hqqag5APVBv2wTU64NlUX2HUmrDskC8EG/v4g3dcHU30gYQL8S7bQLx9uLOa0au aruiRDjEC/FCvH0Sr2lEhunqiHkhXoi3b+KlauSGnidEBvFCvBAv0vQvk6a/+BiXYrYUq0mcnbcz CtaP8Osi5e+RvyxzRlT1jKgKNfda8Mfvo3jKiGZ8kcjKa5FGaRAGA0AOkNs2AeR6kdhzDSMwVSFT iBfihXjhUF7IoVyK8nw5q4dByc/invtoZw98iBckzuNsVaXVvjsJWMLmN/yoxGpjCYeiuophaYGA ESAHyAFyvRq9CDXHtHwUkIJ4Id7ejV54hkKVAOKFeCFehBcvF148t3r+lwXL96KG/U2xxVCrzJ7N j9Q2egxab2FT7Oc3xH5t19bFVR0ntyTOShaPV+tZ7k0F/iH/JynyhC3qd7x3snSe5nG5kghRLcfV IiPCGuRnW+BGiRslbpT/Vpg9twY5nS8yJraraGrKtLVSxWLjasGSdLIuNSNKp4qFyE1BVVaz8282 abkpitt5XN7u78DaQC2P5/xz//+HwuNEbY9203p3Hw5rfeG8sr6/uAyvI7GLl0wOU1U5L7ABIW4Q uEHgBtGRG8Qii1ckzkmc1OkdI2WRNQs85/Ftux3h/o1iwo+nHdpJZSqRGaqpG5qCBWMgHogH4nWD eDsud2PeHl4jooA2xxRrNwlo8kxNqkACdmYQqKpLBZQAO8AOsAPsuhb/C2e3KIu7dCxI126vWSxY Gd9kh06vqVAmF9dqqmuotocRQoAP4AP4ugG+OWNtpjNnbFw1vm69I56gYUWKCWnIJ2pqN++m/HOK 8rZB4eRg55THuacY1A4MBes6wT1wD9zrBvfE9ugZ/9SGcIJ/NUtmOf/g6eq83S+Ux7o3ad66PN4m 5i6vZJNllskMcqu6p4S+4g/APDBv2wTMA/OOx7wxq9JpzsYHAW2T3duPau/TeiYiX94mH1b8WBPB w7HMFgOaavi6E4J8IB/IB/J1hXx3LCsWIqT9ozmxYhAWc2IPexdzYh+us/Wc2Ps0y0jGr6tS1I9o pgDUJcun9WwbUtwXEjdM6ti+52JPnudb4IaJGyZumP9WkP3B4P98mad1KkrrtIP9C/EfgbU0nxTl PM6IeJfcsPqesXZrHg48Mi2L5UJqWx7d9HmkYGDWE8AH8AF83QCfS6piUt+LPcd2g4ZklWSsWf8k ODcpsqy4F5eBmBBV5GKkTGZXD9VUxfp+wTYQD8QD8UC84xMvLpNZWrPkf9k726e2kWyN/ytd+rA3 qbKc1ruUrUpdvSYQIL6YnWwyNR8au8FaZImV5CTMX3+7bYNsQrKdmR2QZh5qdzCmA0b28/M5z+lz ul3VfLT1iPft4JH0fsVLYBMJ7pjHeZG3StWwJDDdKEakB+6Be+BeP7jX8qYVz++22n+3xb2VHT3V 55LXzSK/vrXyLvK6adf5bdPy601OrAA+17GS0MZJUAAfwAfw9QR8tzvb+RcRxLV5s+nmYeSyqubr vZ3yyWftsmquF1zkwc/yUmS+syud6e2iKpvnCuCjfiI+LPli2QGfHVpBagZyBzzAB/ABfADfY4Iv 31QpCrYbyq17tfeItr8fIJAP+b++H8AN7CAY/n6AV+vGz7Nt4+c3twDkpfxB6+vpr2X0267nzoX7 k71qN9fxoQZacen+QjIVP7tq5RHa9zce1moVRdOLjMTH8X/fXYGoA1HHk0Yd30oZhHp9CvFCvBAv UoYepAzVdvLJbdm/M0xEJtHwmXg87c1e/WztpGxLaGrNsZ4bh7HjRxqoB+p1S0A9UO8pjZLd/rDr umor8WslBFlLxL+Rg6DKtq6KQiRmL+pqJZY3I7LM5/OC6wrUc2IaOHZsaaAeqNctAfVAvaej3nn1 5Xa3+11wx8u53tw0LV8qGVBuQp3IovfKXuAauAau9d+ASiOamRAvxAvxIijpmwHFyCJv2qq+kVsS b3fpyDMpvpGrKblPlmPTMDbRewzkAXlAXj/ysE953a5Ykf/K56TkrWQduViVM9mK0pBnR+ZPk5MR ObLEp+cbS2rTrXddVDfin5yrdKTQxAj8IMRMSoAP4AP4+gG+btBuXpKC1ZecNDNWrDuR8xlvbk9i 2ISDTVtX4sWwrGSD8mpJWpVhM6YXm45rxRq4B+51S8A9cO8Jh83UnLX8P8V9DedkmsXk/WuJR1l0 FK+J5/KohnOVuZSu41nUjeR2bpAP5AP5QL6nJ99d0iqIdou8dRlShHo/n1Qtf0neb45mkJxj8zmZ hvExkSXK9T55lcMFqZ84SRCirAHwAXwAXz/AJxuLfxmr0CujYUDXLcOgF+gFeg1pR4VpOWHoubJd E+KFeCFehB6PE3q88qVXHp6EJK7EL59LX126SCo+kZe4gluSTmAWmAVmDSngMBLDDVMf4oV4IV4E HD3wOk6qTRwy24tDCP+SN+169FC7yBsyr2YrWcZXckRCyxQahyMCxoFxQwtQbMtJE8eQIoN4IV6I FwHKIzkiwZiQ6W1b6w+7IuK1JV4ZJsaUgFvg1uBckcxPojDE1jeIF+JF0NEPV+RuxMY9Z0T2cuXl p6r4xOfbc+jJJbsmrGTFTZMrjeEwIiuNrPXoZgAPwAPwBmWRZJ6XujFaMyFeiBfRyiNaJAYdE2mN tHV+vpJ9mAqhhu0kCU1N0Aq0Aq0GF2rEnh16GVpjIF6IF6FGD4wReRRpd7r8Na+u18fOf5Kn4Gzj kk0v4N62kZfkTdWUOV8oBCyW6UReEoN5YB6YB+b1gHmn7CLnXMXX9cLMpp6VaGAX2NUtAbuGkGx5 aewGcYJZoxAvxIvA4zF9XWMsogx+wWtezrjSdjfbix3blVQCq8AqsGpIgYZDozQKM+z+gHghXgQa jxtoyFDjpKqXrM0/8R8LOmxqeHFqSb6AW+AWuDWkoMON7dQ3HYw6gnghXgQdPSir/HyaxdQLjF8I mVRNy4sRORyPiHYgD4wqeUsm27OitBGZniXEGRHxL4j4FyOFYMUI09iJXTQEgnfgHXjXA97tfCTv DohBx4ZQsPdii0EBOX7d8uW5eFBG4CtBzvND0wx8QA6QA+QAuX5B7m9F+/dF216/fPHi8+fP4/pi pvN53lb1uKovX+TlRfVC3CfI97fL9u9jBdpRatIwwW5o0A60G5z/RGmU+Kl40UC8EG+3BOIdhHgt ajnUkSKDeCFeiHdI4rUMM3FdOKEQL8Q7PPE6UZpaFDkvxAvxwuF7NIevEA/nlJdzXvP5hF3yqObs avNCePWG1bwZEd4SVoz3LL/0y3UuvkcOVyUnpjkiJjXcfVeQkJ/lzyOW+4tKgcMzPMf1HA34+84K 4A/46+M+d8eJI4pZ8hAvxIvY5RGrk69ut5DpSS2exb3o48A8mWbk9c7A1v3oJOGzzR4MEbo4ChGK kyVR7Po47QaQA+QGV9dInMR0U1ODeCHebgnEO4jhiEEYOEaMeR0QL8SL9OLx0ovvdrSY4uX1CyFR zeYlr0dkKlta3vIb8rmq5836RM1VI0+QkM0sjZyUeFDO8xlruYodmkVWEFoo5QJ5QB6Q1wPk7Xyc 8n+v8prLea/kiH/iRaONSBRPiGFvOvckGlW6WkzfojG1kJWBcqAcKNcvyt1v3VtDjRyzerYgRhB4 Sm17hh0atm1oABwA1y0B4AC4obTtSeyp9u3ZRuZlro89jMAdcDc0l92lke/ZJsQL8UK8iFUeL1aR wyrNMSEHIuL4TeMqjcyOEsOLNZAL5OqWgFyD6HsKI2qlBiwSiBfiRdjRA4vk5wM9GS9k65Oem3Wj n5fXOp8xfc5api+rOS9UGpoM1w4SP4g1cA1c65aAa+Da01u/28ZOuWXp/WpE/k98PmPij1zVbDOb l5Vzcjom7xd5y0dEC0sF4pkh9UI/wOBxEA/EA/H6Rbw7c6kqybGM4dYbNCPW5DPxgNrPVX1FJlWR z27W7MvyQrwaFKBHzSQOU/GyAvQAvW4JoAfo9WCjpngC5d7MuWyO1b+b0urUJM/WFMxVYj3XM/zE MnGyHbAH7AF7/cLedV1dim81z0fk3aytbnv8xwpcs1I3iBwXY4jANXBtaKVEz3dpHGYoJUK8EC+C kh4EJfdLiXJT9TbfkovyGdfb6rpSqSdatiOknWL8EOAGuAFu/cq47tUT38vPrLwckY/bWuLhmHyo VutK4q4Vr8A9z3DDOMNxMuAeuAfu9Yx761BuXUnchnNEhnNFdXnzkOu+E/0pgM8MgtC03EQD+AC+ bgnAB/A9Pfh2s1edWnelw13v/ZCVK1bfKHvvRmAnsRXGGoAH4HVLALwheO+O5/iu7cCegnghXkQr ffHec95ebJIvObcpb/msXdVc6UAih2ZW4mPoMIAGoAFo/Uq/wrZgzYiE4xF5w4prXpebtp1dH57V 8xFJtv77mUoC5tqRnySRRBOQB+QBeUBef5B3wuacbSuI4U4st3bf2wUn66OgLtjag1/fcVqtWvHK ULHaLSM17TTWAD6Ar1sC8AF8Tw++6U3T8uVdPfHhjFY3jB9p33FcL7JdA8ktgAfgAXj9At5OCXHv jE6VFNYxrcQ2fAkggA1gA9iGVEM0LOpZvi1lCvFCvBAvopInjkru1RD59YIvec0KvWlZq1RGNDzq hik2NYFpYBqY1rNM6w2TVcTDMZElwun4tnyoHZinU5Lewo5MJewUWOe5rhfFMYYngHVgHVjXL9bt HFrajcT6Zmj3g+OwqB0bcYTmbJAP5AP5+uunT/l1+2OGuhFEAU1deHIgG8g2NEPdjdzQTjKcrw7x QrwIS/pnqIvQ5Lzgy03OJVMzFUvd9a3Ecn3YTKAaqAaq9SvZ2unMud2xfrbtwUnG26Yc7f5WdRWH KXMN36HIwwA9QA/Q65m3vum02W5VJ5NNVLepG8qo7gG/XQF5ZmQFpp/GGpAH5HVLgDwgrxemumRc l7nq1P2vTMGyw9SKHAvUA/VAvaEZ7kYcxn6SQrwQL8SLkKWXhntbiV+qN3wmHkp7o9c7+6JU3HfT jBM3cFFTBOKAOCCuX1nZzvyr4/xSgqUbgXUo97dvZ2VtdrhPtwxUoJ6VODRwvEQD9UC9bgmoB+r1 YWt7wVo+/09b3L+O/RTA53i+FRsxDnoG+AA+gK9f4NvNXXXaTcD6fVvePWnBWxTHyAJ5QN7QHHgn SL3AtxGvQLwQL+KVHjrwq3O9Ef//Yd/djkMamhJhABvABrABbP1JxH6q8nZE0vGIxAVfLjf736Xp Ho7JRDysthoRbdeeklPbVVIxJ7NtL5RwAvQAPUAP0OsP9Kar82ZW59fyIHvZyPMhPHlNEtaKP6US /+QhB34b+ymQz/LcxPGiRAP5QL5uCcgH8vXNd3/49Od3s7b6Idfdj6Mo9jFCC8AD8IbmulsRTYKU QrwQL8Q7NPEatufYsQNnGeKFeIcmXs/MUtfy8M4L8UK8QxOvaVtREjpSZBAvxAvxDkq8niXedy28 80K8EO/gwubES+PEkH8wxAvxQrxDEi+1/SRxMQsT4oV4Bydehzq+l0S+BvFCvN0SiBcbW/7YjS2v tsNBeEtYMd7bz5J+uc7F98jhquTENEdy04q7v+WFkJ8n7JITy1M6oiBJosRHCykgB8gNz9hzstD3 rUSDeCHebgnEiwjlD45Q1ueClLzVE9k4sBd9HJgn04y8ZteElay4afJmPzpJ+KybcqEQoRieHTh+ Bg8FkAPkBle9sFI3cs1Yg3gh3m4JxDsI8dqpFwYpji+EeCFepBePl16oTqip83N9zlqmL6s5L1Ts Ts91k0hKGkgD0rolQBqQ9vTNyu9ZeTkiR+MRCUtWtgt2VefNQtwckTdyYM2Ci1vH45EC59wgiwzT w64xcA6cA+cejXOFeDinvJzzms9lFTqqObvavBBUCMiWeTues6b5X17ns6apyvGsWo4IE/h7m5f5 5sAMOa7rZEwitmDzVT0iWqhARCfLMssysAkeRAQRQcR+RX53A7nIscxk5cxBcntU9UEpvlqy9eyu iDWcPDs9iJ5rKlGgEzt+ljgw8MA8MA/M6xfz7o8c3DfzdGo/NKxLCXpZFNhWpgF6gF63BNAD9J4e eifVpx874scKhYZsAyEcaAaa9Zdm33DhUyumJk6ghnghXoQifQhFHthAkZcXlfoGCppZtmPE6BcD 0oA0IK1f2dVdRfDkq3rh4Zgc8/knPpfH+3ztrCuQz3Usw8jMSAP5QL5uCcgH8vWBfA1f82xTQHzg RJ/9UE+n/sZeVwCf6ftOmHqwoAA+gA/g6xf4ft9RPmbkm17mwKAD2oC2obnrtu9Epp24GsQL8XZL IF7EJf1w19taLGHneZG3N0qz2KKQZqEXawAagNYtAdAAtKdPtOKC1Vd8RA7HIzJlxeWK53U1Iq+3 /no8JpP8smQtk/dq6/lQF+IHkrZSIJ8RRK5jBIEG8oF83RKQD+R7evK1C37XjDO9aVq+JM8OzNPp c3K2E+C9JFnNlny9ZV0AUQF61JTM8ywN0AP0uiWAHqD39NDb7Tr8VklxN7/VqaNcUPQiPxUvPxh3 AB/AB/D1C3z7BcW9YcVjlUzW9hM/oKEGtoFt3RKwbQgVRcOO0zTDiU8QL8SLwKQPgcm9iuKq4TPW cL3m/270ZrVcslqtsmjEmYnj2wE2gA1g61vGtT3tbjqWvjk5Hm8HnWrTDd9IdUGk3U7+0XASC/qp 8M4KvMgykIWBd+AdeNcv3p3yf6/ymi+5+MMecNUfivF0aihQz06iNEkw9BnUA/VAvZ5R74FhfuSY 3ai36qS2kfoW2q8BN8BtaMa6ZXhuZrgw1iFeiBeRSf+M9RtWXuqFqZe8lXGK3lbX4hFcKpnrVmR4 mRHiZAnADXAD3PqVdiWVPFPscOOt/3NM3vNcHpjz4IkTR+yG17qpkozRIPNtB1MAgTwgD8jrF/JO NjEcOdvEcDl/yGW/H/CpQM8MrdRGnAfoAXqAXs+gd5uw6tR40Go/XBXqXju1fT90DHjtIB1INzSv nQaWGRmhpUG8EG+3BOJFmNIjr33XaFcx2T0/cdwsiTVQDVTrloBqoFofZmPx5XJEwvHo7pAJOSbr J1ZfshE5FTfPrsQr4Up8Frd3T6lQsZ0yy7ATC7OxQD6QD+TrF/lkVfHNmIQlK9sFu6rzZiFuriuM 94qLW1deAXiG4caOjyPGADwAD8DrGfD+c1FxN7PVqXnnxiv57oETJAkaeEA+kA/k6xf5fs9ULC9M rNSM0Y8NsAFsQysomklEXdOJNYgX4u2WQLyISp6+oNjk27RrfWt2cak0DsuMQjN04TCBaCAaiNav POsob6+qz83V9vD6D3wlO3gScfMoL+d8W2f8uGCbxp7N8TtHKlmYEWZ+6ATY1gnsAXvAXs+wt6ja KzYi2kOdiQfTg6k0oNpKPKR9412Be3aWOalBMX0C3AP3wL1+ce/rDHa3aLg/LaueLdTnZbmxm5io JQJ6gN7gLHfLDkzbdbHnE+KFeBGx9MpyL3k7q8oLfcaKQl9US67kuIehTS1YTwAagAag9SwFe8/a Rp448XY8ItpJeha/O8lILPBG3gi8rf3103R6725NpXfHMszIjhOMjAH2gD1gr1/Y2zHRv4rpdOp+ a2K7SrTnWDT0bQk4YA/YA/aAvf5gT/kkZzeyg9S3NEAMEOuWAGKD2LMeWkaUBohAIF6IFxFILw10 8d31DRX/3DHcwHVjRwPPwLNuCXgGnj19RhWJ37yUU1/kxvToX1V9VazK+Ygcbzenvx3fWezarZGu wjwr8N3IAPPAPDAPzOsX8yYPbka/H9rp1P6R+S9G4NDUXrMNxAPxQDwQrz/E2z1MgpUrVqufJ2Fn TuD6KXZ/gWvg2tCsdMs2wtR3sBcd4oV4hyZe6jnUtU2880K8EO/g3nlNI/NtCy2cEC/ECzvg8eyA V2+YyPRHhLeEFeM9FyD9cp2L75HDVcmJaY6kB+DuGwWE/Dxhl5xYvtLBTqmRZmYQa4AcINctAeQG kV7YdmqnjqVBvBBvtwTiRYTyB0coB6V46kre6omsvu5FHwfmyTQjr9k1YSUrbpq82Y9O9qbXq1Qv IiPzMjPWADlArlsCyA0hQjFMJw2SALP/IF6Id2jidcxEaMrCnHaIF+JFevF46cVv6OLRxe8u+KzN q1LF9jTtwAzMGLUdoA1oA9p6gLadjyj/Qxp6TNewQ8szNTAPzOuWgHlg3tMzL74L38gpb8QjmfH/ 0NujQDxK48w0TUsD8UC8bgmIB+I9PfG6hFWn9MFpfz/a52M6TmLbrqsBd8BdtwS4G8ReHtdwEjNN NIgX4u2WQLyIVXpjtv/K5diF1WyhYrHT1A4Cy0LjIoAGoAFo/Uq+ds+ciAtWX/HuMOfjMQnPa7Zg y6appMf+UWCPnEnuKWDP8kIj9AKcOQHsAXvAXr+wN6mrT3mTV6V8suXJzl8ft/NM0m4Nu+d3BrwC 9uws9K3AR6c7sAfsAXv9wt7DSex/56BnakW2a9kSUAAfwAfwDWrER+jQOKaIWiBeiBdRS99M92U1 19ms0MVnXqh47rYf0SDzscUTPAPPwLN+ZWFRdTlnZfUpn41IMh6Rac15mX9iDdv48G9WrLwckaOt DZ+MSVSwvFY66DlMbRobkk/gHrgH7oF7/eGedsLbtc0Uzma8aUgs/sK6KshR3rTkWRgfPScfwpPX JGEtI8cy1FM63N4JImqGfqiBeWBetwTMA/Oennn7jTt7eex3bXcV7rlOnNBIEg7cA/fAPXCvP9xT PpLHiLIk8hINEAPEuiWA2BCqhp7v2Bb1sbMd4oV4EYH0IAL5qmpYV6tWPNv67OJS6Xx7mripF6Fz GEQD0UC0fuVUR4uqvWKyMEhkXTAck6O8nPPliGjhfed8van9dAM/Fe5lvm0EDrwkcA/cA/f6xb1j VrJLvuRl+9UkrHshnm4EP3LOvRvEiWEkGMoO6oF6oF6/qLdXEVSffeVFlulZFtquwTQwbWiGuhN4 sdA5DpqAeCFeBCR9NNSbm6aoLtU7cahjR04YoBMHSAPSgLR+5Vjv82IuDxiPN4762/FeL442/TA9 evd6Y62vgfcjg2AsN0ktK4k1gA/g65YAfABffwbB3I/odGr9rj3p1PF820scDdAD9LolgB6gN5w9 6Z7p+k4WJRogBoh1SwCxIVjoZmAmURDBQod4IV5EIL2y0Kvm+kK/YaXaVvTQCnwjxOYkgAwgA8j6 lUp94Cs5okpOr/q/1Yh8EJ8/LtZTq+ThEfcHXG28dQXmuZGZZYGTaXvMc1LX8oxM3gvmgXlgHpj3 FMzbKw3uwezzS9lx8/llLvNPX6aeL8XzvKjEtTn+KL+as1a+GKjh6Iapm8aZYb00gpeUftxcswev 5vbOhK//NDewgyAb7iUWV+hM8PzhC/1BvHUQuXi7auddQtwj/3leyp+8ucByL8lvvMB/hivZvpIF 6XsvwIf+wr+GRu+HFeKV8mck1Kt7vX3vppOMTOQJDuI3/Mi+BDP00jDFhqzvr0CM9dUSxFiIsf7o GGvfJvvWefA/djCN42dRQmGkAXgAXo+B97B47cynkUGxoQjihXgRrfQgWunKedeza13aELxs8xlr 86pUqesZnmGliZ9oIBqI1i0B0UC0HjTEsEbcLx6jSLLkSTSsbtdfTLsC321B72xMTvl8fjMi2qSq WwXyeaafUBqDfCAfyAfy9Yt8t4fR3Frq5Nkknjwn4V58R475TFAwb5Y/5LgLzUdxhDHJ4B64B+71 0HH/OpPVaTdJ77eOoqJG6MdZkGjgHrjXLQH3BmG825bhRWGsQbwQb7cE4kXQ0gvjvbpu82X+K9ev OL9mRf6JNyruuxW4pmMl2P0ErAFrwFq/crGtn342HpGJyMIK8UncPGjEw77KN4789kD49+LloHI2 Mo0t1/N97H0C7oA74K5fuNPebWI4+VyfhGdrtmV5zT+zoiBv78I68o9GrpBFxluXXsV0p1EYBREC PZAP5AP5+kW+/SLj/qk230hudeqqpLeuZ8pxyxqoB+p1S0A9UO/pqfd764luEGZJtm5sBdwAN8Bt SPVEIzLNKMVcPogX4kVk0ofIZL+eKGKSLzdK/TtpFlqJjQP2ADKADCDrmbHE65pLnmxadqJqNWNz lteb4uGEl2U1Iqfi5rqAeNfLM1VJv6hB0zCyEg3gA/i6JQAfwNeD9p0FbxZ5zbfdiN9q55nIKI9k q3ImN7lrKlsozDCOUjuKNGAP2OuWAHvA3tNj717dcJ3E6tT//VZ7ZJhBFAN6gB6gNzSr3bbSLAq8 RIN4Id5uCcQ7BPE6aRjFdD3jGuKFeCHeIYnXS6ljRPAKIF6Id3DiNR3qJJYjZQrxQrwQ75DE60Z+ 4NmB/IMhXogX4oVL/zgu/as3rObNiPCWsGK8Z86nX65z8T1yuCo5Mc2RdN/dff+ekJ8n7JITK1Da embZQZgmoQbIAXLdEkBuCBEKjWMnNMWzCfFCvN0SiBcRyh8coRyU4qkreasncrfAXvRxYJ5MM/Ka XRNWsuKmyZv96CThM748F49KbhxQiVDszLVtJ9EAOUCuWwLIDWLfgBsGTobzGSBeiHd4BmgYJ6Zv S5FBvBAvxIv04nHSC4X+2obNlro8szdv+axd1VzF7HQiPw0zamkAGoDWLQHQALQetJuxpS5baHk7 IifjETmqal7+mpfilvjqeJZUJSvmI3KwbbAtxgrEo1ESZ5mB8g6IB+KBeP0iXlF9+fK/s7yZVeNZ tRwRbcpnIpKTB+SJR74+HE+CTvbd5uWqWjUKwLN8y7IDByUxAA/AA/D6BbzjqszbqpZP9bNpGB8/ J+FOBrs/s3ed4CoAzzQDQyABzT0AHoAH4PULeLsGnU6tb8wQEIuUpwhYThAlWYCEFrgD7oZWULS8 JEkiHwN7IV6IF7FKD2KVewVF8fwu81L80kulub2OY4Wx46I3GzwDz8CzfuVe71mxxpkcYCmH8h6L v/BTXhTiy1B8+YbV0ohqq3Lz7Z3yowL57DCyfTfCxHKQD+QD+fpFvvXuidWIHIrPWVXPRyTa7pk4 HpO3jFcjop11kR65qGoF5NEwNLIkg9EO5AF5QF6/kLfeOZG3NyRsGt40S162D5QTd9JbnbobN16F fFbgJQ6FbQfygXwgX7/It19MzPh5vWK1+lRyz0ws2wh9DWwD27olYNsgxismfhhR9PNAvBAvApM+ BCbreuJVXuZ6btaNfnGu1/m5npcXlb6s5rxQqSpasZ8ZaYwzyUE1UA1U61e69VawbXMQ6HZIpbyZ rMpzVm8aFV8vWPmZyUWyyvi2zptFyUqVmqITBEkUG+AeuAfugXv94p484DiqLuesrD7ls82WiTMm /spVzTaVRllfPB2T93LD+4hoWS63X6h08BiW7SZGZGngHrjXLQH3wL2n517EGi64dhCRA5HE1tu2 7GOZy94VGB/Od1XIl6aeG0aJBvKBfN0SkA/k+0PJV4iHc8rLOa/5XJ6VENWcXW1eCCpMXDt5OjUf bGd8N2ur2+nGYwUGmmnmBnGIHgIwEAwcWgHSdlLHsDMpMogX4oV4EcA8ceq2LkAW1qfrUpd35jOu 37DyUqXuSKlrBImL0VmAGWAGmPXLhzrK26vqc3O1LT5OF+wqr0drW/6sWlYtk9+R9Udpw78dk+R/ ptXqV6ZSd7SilBpWgi2g4B64B+71i3vah/DkNUlYyzamu2xWJEfWT5MTso3viLg3/8Trmzs/fhP+ KfnvrksjF409IB/IB/L1i3y76atO6YNm+w+3+9hRnDmxiVgPxAPxhua2uwnNHMeUMoV4IV6IF+FK L9z2fKWfi3hEX8q0S91tt83Qse5FIq4XW4ZDpQcPmAFmgBlg9jRu+2pEPozXZno2Jq9XcmTWHtQ+ v5Rm1OeXudzC5FvyUYvne1GJa3T8UX41Z618UYi8TDdM3TTODOulEbyk9OPm2j14Vbd3Jnz9J7qB HQTZcC+1uEJnguuvPoi3BHn37dfd+4K4Ry7MS/kzNpdyfRF+26X8M1wzcbXCk9f33z/FBfoLSfGe 23ss3tfzmXjoJC8VAgvDiwPqmhLGyJIQWCCwQGDRn8DieHI0fRG9npCDCflpctJ0Nauvkqhdz1cF e04WR26A7mFgD9gD9vqFvZ2SVXhd54VyvcoIMzdMDQRzoBqoNrR6FbV96mRBrEG8EG+3BOJFSPKU 9apmwfKrhZ7Pa/388lp9Lp0dpdT3XBy9CZwBZ8BZvzKs6Rpqm6Fzt70f5K0c2sTKhhWbgU3bEU23 zSNa9HqiwD0vi7woCHHwC7gH7oF7PTPU78qE0207yKSuPuXz9eNppX3eeew7gZ9KuOc6gRuGsQbs AXvdEmAP2Ht67N0lrjo1HuwMOWb1bKFss7uZkxp24mhgHVjXLQHrBmGze45pWQYmqEG8EC8ClZ7Z 7HV7+flSv66KfHaj7rULcGWOmWA3E5gGpoFp/fXadwcx7fnu0muPxyResIarTGFywyAyQg/T50A8 EA/E6xfxtNNq1conerKO40hclRf55areOQ3hQQ9egXtO5FhGmmEiCbgH7oF7/eLet0qIXye1uz68 AvWMNPGpnSDaA/VAPVCvX9TbKSMergr14XIutVIrMDBOE1AD1IZWRbRTk5qRjYgE4oV4EZH0ICJZ VxHbRjy/i81ohOvzc53fjUeYXSjNmbOFljJ0EINr4Bq41rdM6yyvV584ny9WxbZsOJW4G5EzeZP9 izVNvqkzvl0tWX3XxaPiMLmh5wU2doWBe+AeuNcv7h2NySEr8mL08PkukygiqTzi5bqu2ko8sDv/ XQF8lpHaSRqmGsAH8HVLAD6A7+nB99109lunvKx7eVTIZ1uZ79NAA/lAvm4JyAfyPT35VIuI1HbM IHUBMUAMEBtaEdGjgRUnOKEK4oV4hydewzIth8Ixhngh3qGJ10xF1BybmOAB8UK8QxOvETiO4Uco WUC8EO/wct7QTL0A41EhXoh3aOK17CAMU8yZgXgh3uHlvIlluSFGB0C8EG+Pxfv5T1fvfvWG1bwZ Ed4SVoz3ytzpl+tcfI8crkpOTHMk697ufiWckJ8n7JITm6r0r5h+ELmhjXo4IAfIDS1CcRM7sC0L 9XCIF+JFhPKIEcpBKZ66krd6Ivsm9qKPA/NkmpHX7JqwkhU3Td7sRycJn/HluXhUcsueSoSShrbv wkMB5AC54VUv/MTNXA/VC4gX4h1cehFEgUtDGKAQL8SL9OLx0ovvz+z5dSEbGnOzbvTC0Nvqutq0 OCqf/kG9KKVuhkGC4Bq4Bq71gGs7Hx8l3Ubkn+MROWXViETbwz7+OSZH+WpEtJA8MNNCxUehRmJY DiYwgnqgHqjXL+odsRvxqw2ynYhPzkRUV1SXN3eTeb4V9CmAz3C9yEvNWAP4AL5uCcAH8D09+P6L p2wbYWjTGG0+4Bw4Nziv3TT9IHAi+QdDvBAvxIsgpR9e+5yVV3mp5/NaP7+8Vh2Lb1g2dQw31IAz 4KxbApwBZ0+fc4UF/7IZez9hLS82k/Hjgi+Xm3u37RdTcfOQtwtWslJQMFc5ZtsUiqaueW+/k+l4 Rman8l5wD9wD98C9p+De8f1S4h7QPr+UtcTPL3MJLF9OenopnutFJa7P8Uf51VzAUv5mw9ENUzeN M8N6aQQvKf24uW4PXtHtnQlf/3luYAdBNtzLLK7QmWD6qw+svJR3337dvSeIe+TCvJQ/Y3MpZcX1 N17KP8M1E1crPHl9/71TXKC/kAzvHUARvZ6QyW85eyLyfBrEyKq+uwLRBaILRBePgbW9j4esom8d OXHIyhWr1Y9+pp4ROxTjJwE+gK/H4HtYvK5tRY6Fc2MgXogXUUsfopZtaWslNxCuz8q6OydLpbbl mGnieen9fTaxYxo0kc1y4Bl4Bp6BZ0+RhX1cU00Wr9ZW70dp9X7f6V1HYHB6713s3+T0ruEPp3f/ HfSv5fR2Jm/aLtYjcshPkxNNpXbsRYY8YgP7d7+7AnEF4grEFY+Bsr2P2y6sB3Kmb5i8CsRzXcMK AkeyDcQD8UA8EK8/xNudU2iPFWhm+Gkq/pdooBlo1i0BzYZQpDLMNEl8G6eTQrwQL0KRHoQiXxWp CutHqlR24GdOFtzbMuM4kWOZphymDKABaAAagPYUudWPV6nk7iFUqf4bVapgLSNUqfbfQf/q/Qgv jidHU3IwUfE5YscMzRD7+b67ApEFIgtEFo8Bs72PnyYnzc7QwIeyp99erzIDy01tDwPxQT6QD+Tr F/l+uF5lBakXuB66SUEz0Gxo9Spq+yINjxCKQLwQL0KRHoQiP59msdTsLyIUWdULthyRZDwi6Vz8 J6puCj4ih3LOVrXg5YicyjlbvP61WrvA8qyLf7FSac9gSoPUiOSLBeAD+AA+gK8/OZikmixohWMy FQ+/vhkR7WzBSfxuMiXP4mq5rEry7pqXZFIV+eyGTMVPyWf8uQL4aGxaWebBdgf4AD6Ar1/g25lm JsJAIpUswr93B8SgY0N84b3YRoe7s38oVQn4nJjGHsaHgHvgHrj3iNwrxMM55eWc13w+YZc8qjm7 2rwQVIj4t6L9+6Jtr1++ePH58+dxfTHT+Txvq3pc1Zcv8vKieiHuk9L/22X7dxW/3rVD13Bs9AcD hADh0Px6x/Rj201x+irEC/EiiumLXx/Y9BdCpsu8XdyeiFG3LC833r20sg7HZMqL/LKpxJ2a4E5e 5m1elQ2pLlSCltD3o8xEXx24B+6Be/1yrY5ZKRK7OXl3/i8+E3+b3Av/bZOePJM2vopVb0RGGHmx oQF6gF63BNAD9Ppj1ZO4yLn4424texEKPmDZr+99N2urc16rhHsR9U3Xx+4MkA/kA/n6RT5T/PCR qjEvwKdqzFtmFKRZJvEG6AF6gN6QjHnTtLwwMRGxQLwQLyKWnhjzFvXtXwiJF6zcHE/defByE/3u BvvXLN9soT+exUV1uRCPVmVblR1ngetjigO4B+6Bez3L1CTx9rqDeD5bLPkNr0ckE19/YJ9Ye8Xq TR/RZse9ii/vWTQzfXQ8g3lgHpjXL+ZtN2Fo616hfzTskq/rkdsa5KSuPuVNXpXypbAuROqT0+dK 58rYUeI4DjJcUA/UA/V6Rj1ZepTJ7telx829x6yeLaRzbyj1Cplm5tMUu82AOqAOqOsX6tQKjxJ7 qoVHanlGkGKCF3AH3PUYdw+L1/KTwMlcdARBvBAvYpUexCrrwqNFLdkRVOfNSnxvMSKT8Yi8XbXr SqSsPZ5WDS/PeX25+fK4KmQMs+keYuVcJWxxzSS001gD+UC+bgnIB/I9fZYWjskpu1nTTjvO5/OC n1dfyKxaLldlPmOy9ZFITypv+awViFRknkmNOHJ8MA/MA/PAvH4x76JmSy5PxNj2Askg8AFDfn1v uLpcNa105E0VR576buKlBiwqcA/cA/cG6cgL7inP6Ir8yE5deb4qcAfcAXeDmtEV2nFmJNg9APFC vIhV+uPIy1ag6Wcmj9CQ+92PWd1ufPlp/q9zeZqGvB3V+XKzW17uhz8ek+miqpVagRw79RzqYoMo uAfugXv9ytF2THg5muvOhG/Is2U+n1XL591Em1P+71Ve8+VmrI0C+eyAWnbg4BQ1kA/kA/n6Rb6t E//Q1vj1vT/oxBupaXhZhoZvsA6sA+sG6sSr7413xSvO9WDmAXfA3dCcePEkeEFIcdQNxAvxDk28 IslIIseDeCFeiHdo4rXFCyaIQlODeCHebgnEOwTxUi/13MzC7jOIF+IdmngdO7TcKIJ4IV6Id3CG VewGHvVx4hfEC/GiuPZ4xbVXb1jNmxHhLWHFeK+mln65zsX3yOGq5MQ0R8Skhrtfdvt/9s6vt01k DeNfZcRVKrk+MAMDnIsjwQBt2jjNqbNdrVa5IPY05sQFC3Cy+fY7A3ZITqLdqbS7BempqlaejFRU /Pz0zjPvH0J+1aPtietcGVypOa6dJHaCbClADpCbnCvvOE4UZMKCeCHeYQvEiwjlb45QTkv16krZ vk1q9RafRR+n9HyZkXf5juRlvn1oiuZ5dJLIlfx2rZ5KhS6eQYTiJoEQnOPqEZAD5KYWoVAReSwL kbEH8UK8k7u9iAIvDTizIF6Id9gC8eJ48SNr591Ad7P9nN+r99j08zI/7re3eV0WfcfauLrN5bed Hiy3OJTOf5z3czcNzhteyuzMzzSdQD1QD9QD9X4w9Z78srJjW8eng+T6yXKZlOvrfNX/RNfVVyX5 tJOlAfMcP/Jo3H1PwDwwD8wD88bDvAPklupnxUqS+6Ld/AUTNBn3QyUBjGoB8oA8IG9cyOvahKhz 7ittQrrVxwmazOhEK5wkYraGGlAH1AF1QN14UGfYJURhz7RLiB/YLk3DxALugLthC3A3iTtH5idU BIhVIF6IF7HKCGKVw52j7ted1PmdLszQDbutA1pItF6r7Q1Zyq1cdaPktP9+TJA0iFdUtEKdOEos IA/IG7YAeUDeCMz3Yx/uO1lro51wcnJ6ccffHMfKKTKaeFA0DgRPKOI6QA6QA+TGBblXTHZ3RjJ5 Xe/z+sHYZ3c912VByCwwDowbtoBxYNyEfHbjbtzcYzFLGDIogDvgbmo+OxVRQCNMSYJ4IV7EKmPx 2V07sK8IeZ+Xq2p12xvtHxWxboq8LItmRt6phbNqf7Mp5cOMfDhU9yzn5EtekrVRrrsb8YTZAt2Q QT6QD+Qb1yktrprVZkasc4UlsmzlriFFSZbFTZlvuxz38+Xp8s2/yWMZkFGuuxdmLncDtFAB8oA8 IG9cyNO3iDrue5nr3q/2rS5t2zMhnZ0JGtIUhYwgHUgH0k3RgtfUM7XgGQ9Cz/NxlgXugLupWfBu EmbC94UF8UK8wxaIF7HKj7TgKXeuCPk5397qBlof5p3DHs2f9NhK1zr//UmHmUM7BpPzmRe7IuVg HpgH5oF54zqfHTvMdI1k3pBPd+pBLuu8bHZV3ZKz/EF9XsqVesL2gZxcni3NOs3YrpdFfuxZYB6Y N2wB88C8kbjvKuR7xX3vV4dpDWYOPHdjhycUtAPtQDvQbpIOvCKfqQOvDrSeLULk0QJ3wN3UHHg7 ie00pJjwC/FCvIhVxuLAh254RchyU9Q6yb1rNnNsJzP4T++2VdPktdrw5dCZgZrlgvJUeCLA+QzM A/PAvHGdz7JfTgnjfWcZjcFXXKluNdrf7JtWe1K+UWMGN+JuGAsLzAPzhi1gHpg3GU9Kcc84KzTi fpBmCPGAO+Buap4Uc1KXBgITkyFeiBexykg8Kc8JOk+qLeQ3WetS5H626n/3RdvK26EVw+WcXOYP 6olmxFoU6/VWXle/GcQsTpAlcSRwjwbsAXvA3riOaDrVfV8Wq7xr736yOE3Ep8Ub8tgbeSnV87fF qjk0Rda0NPLig4y5XoRqZUAP0AP0xgW9/3feO6gNkwcDo9R3X9CUOYjqADgADoCbovGusWdqvHtR kAoRoR0DcAfcTc54Z27i8QDGO8QL8SJW+cdila16nM+yXMtari/yGxnXMr/tvwh/bMlT378iRGyK ZlNtv810F2TtwL+fk8ta3hVlpfuIppfi03lG0jtZmswiZEGWJL4HCAKCgCAgOK4D23nVFl8PLvyj 1a4o+DJLtF/9sN92w7uMrCo/YXHoOZkF8oF8wxaQD+SbjFWlqGdqVflO4orQhlUF3AF3U7Oq7JjZ nh0iwRvihXgRq4wgVukMKY/pHNE4X9d5nx36aD9Vf1ErPc9XIUschBbAB/ANWwA+gG8crfQ0A1+x o7rVRd65UWaZoXbKbDfUQALoADqADqCbnBuloGdcsWwzFsQ+BhQCd8Dd1Nwo1/VjJwtRxQLxQryI VcbiRoU+e61i+bJZbaqvsizU5/fqc1TtyxkRh/LldE6S/K6QjVFbKerzOOSw4QE+gA/gG9chzTqP Lv+VFbW8z7dbosfGk2GMfG/AP9Yvn5wvzy4MHfgsVkoLEwvMA/OGLWAemDcSB17Ffa848N3qp1Vb 9bNsHNsoJ9SnYZp1WAPsADvADrCbnAuvwGfqwjtp4oZZhOIf4A64m5oL7yVZSmMXsQrEC/EiVhmJ C89tSrULv6raVvvvncmu/or/V9W32325nhHrl+j8HVlUa/WSyVf1SIekUZPzWSQyJwxQswfmgXlg 3rjOZ4uq1Kcx9aoPpcqahS+dqX71u50prr5aYcIskA/kG7aAfCDfVJwpDT7jKcsBFZGIMKgVuAPu puZMMTf1OeXcgngh3mELxDsF8dI45lEQwlaGeCHeqYnXCXnqO2lkQbwQ77AF4p1E2Jw4buK5qImE eCHeqYmXM9dPE3QThXghXvjz/6A//5/3eS2bGZEtybfzZ7Z8+tuuUD8jH/alJPrSkdoOf+7cE/Kr bkFPXHpl4Mp7IbejOMJ0L0AOkJtchCIiThNPWBAvxDtsgXgRofzNEcppqV5dKdu3Sa3e4rPo45Se LzPyLt+RvMy3D03RPI9OErmS3w55Up5BhMJS6lNb6C8GIAfIAXJTilD8lNpuSBML4oV4hy0Q7yRu L/zIdd0MnbohXogXx4t/7njxx+Vo1HWuCEnLspmRz/MZSdfqjyfFaLpDXLe2XG0qWd7ncruW9Yx8 OKybnDlYxlMfGVMgH8gH8o2BfE9+6fLbaE5i9QDqQQ+ss85le68QSERVfi1u9nU3YZMc28MZMI9S J3NjhutuMA/MA/PGxbyTQ0OBN8c6XBUEvlKH2632d+O245hEetQLuS+yxAL1QL1hC6gH6k2mCFdR z7g9XOh6QjC0hwPugLup+fHUi4PYDlBBD/FCvIhVxuPH6/ZwP+dNczCkurHBPzX6rbcbeewF9+hF 9ZOEu8nB0sSLD9V/XyiYBeqBesMWUA/U+/EntOVGbrfkZLl8/8SZeq1DXLf6Xc6UnzleaCeI9sA9 cA/cm6gzZdwezg+5E9kO+lwAd8Dd1Jwp5riB7VAtU4gX4oV4EauMw5nS44Pj4uBLRf3ognhOzmR5 8yC3M2L9XLSbt+ueNw0R+S6/LrZF+6CnGJiYU5Q7dpSgOA3gA/gAvnEd0g7G+2BMvTJUs1/9LmPK zdIgDCLNJjAPzAPzwLwJGlPGEzVpyNzIU19u4A64G7YAd9Po4SjsIHbR3gzihXgRq4zFmHIZvyIk Uo/XyhlZzmdE5PVO6qZKMxKrj9qnWs7JhyIvb2bE+txV8+X9cE2DmIWLSLh2hMs0YA/YA/bGdUT7 abfOW0naqssOPb244yTbVvfkLL+WW7LcyVXxtVh1xDtaV4qXRsV8PgujzEHDGmAP2AP2xoW9F867 hho5r+4eu2Eaue88yjKHZ7hxBOPAODBuku67Ip+p++75TpbREBOUgDvgbmruu59Fsc9SiBfihXgR q4zGffft52mhf9o+b+g/ZXJCy4LYT6mwQD1Qb9gC6oF6P/6EFueNJOdV+2ixN48eu2+/kh6qV02O aZ7vcpqhrxSYB+aBeeNiXiav631eP2iPnc6MTSrfNjWpeGJzaqfIMgP9QL+pmVRORkM39HGhBvFC vAhdxmJSeV2K6BOTiuic0MX86aSb110rg4DFTjJmhwFmPYB5YB6YN67j2kvTnUSrlWwajbm2Vj9Y VGu5PfpWnlluKMsE5bGPMj4gD8gD8saFvBe2u4YaWeT1atObVgaAo3ZkCxHCggfgADgAblyAM/Tc ve9IDGUJV19LtEcG7oC7qXnuXihS7njw3CFeiBexylg8d87CK0I+FrrnQtJPiz+67l9keZu3shkG Li8UcYrd0avqipdNwpbEDyjnSBUA+UA+kG9cp7TlfdGuNvpNX9Z52eyqutVu/NdiK8nJ4uJs+fby 4g1ZnMZvdRqp4mJe5jfymyxbA/Kpr5X6HXkWyAfyDVtAPpDvx5Pv051aLdS/fLhUVJHgK8nw3eqx V7KZKU8dnjKGCkhAD9AD9CZpyivqGSfCMyfwQwZTHrgD7qZmyjORpm7MEatAvBAvYpWxmPJB4Ovx 8k9N+RkRG9lsivrQPDmu9qt8nRd1P3v+QpZlpQ5yfR9lg7DFEYkdMoGwBeQD+UC+cZ3SLuZkKbe3 RX07I9aFtuSPafBDovyFuHicP694aeJM2YFw7CyDHQ/mgXlg3riY98J511Aj0a4uttp6ZyaA850g yWxPWAAcADdsAeAAuMlY7wp75j1o3CgNBLOAO+Bu2ALcTcF650li+6mN2j2I90/E+zsAAAD//+yd X3ObxhqHv8oOFz3tHEWG/cOCe5wJsJC4M041dnpxTqYXa2ktUcugARTH+fRdJNnYjVNx5kxrcean i9haXlmg5Xny7rsLcpbmqnHI7fGqrE8czwvdwDl6/a/b40Zf2tZPenniPA2hAeV7Qpjk7p4Q7gu/ DTnaxNRtbL3S07yY2xB91ZjqxHHb8GVemBOH8ocn5+ulbdDrpty+RTWpNj+ysmjq9sX1NM9PnKRc V7mpyHtz277S6LqJ6lyfOB/yG1O3zeS8vNFFu3ERFfXXL5nWT5s27zYtl2V1f0ju5rHdUH+5b6UP LUm7P4/ajnZ7a3+udnttA6o6n51P2uN1AyGzlDsDPSzbP3Z3zk0xM5WZTfTcxJXR19sTgXy+WW66 2HbeqjK1qT4Z5zUh5ON5lkhK2a+ExL+V1fVyXcxG5Gw8Ik5E/h29f0uUbjQ5K2dmSa7sXp4W9uy4 sn9oc/Js3377mbZvtCK3Hj9e6Uqfzk4cSQNXhGnkbFob87nZtO4e7cex+fQfffbPdsh9ozJXer1s vt4y+UPv7br3/tT+Fgaht4HgTzgJGP3zCCr5HmKZ7+8BlotgD6+Ch3v21Ofenj2VjO7ZU2uWPXtq P7B9ZnFdue9DdcNwz75ChBDh/yLCb+vu0eNMF9aRN6ZonBGxFiStBkdE/XxKPHfsWbDl0U6OVoj6 jlDX46Me1uOe6wtPtXaC9WA9WA/WOxzrfbdsflw0zer46Oj29nZcXU1fmVnelNW4rOZHeXFVHtm2 VnrfzZsfxz10RyOZelEQO9AddNeFQHeHpbtv5Co0UW6QUgfwAt4uBPAiV3mhXGVXkBJtQapcT/VM 59WuIKXyelp+MlXb9++jDz4np5NPPplU5ir/bI/pl7rd0iz6lKZ4qqJQ+a2gID6ID+KD+A5nkDYp q4Yk9rCqcmn1VjalfXfy/SSZ/NDVqkSfWhRjimd+mDnQHDTXhUBz0NzLa+6ZUrv470rtbuKKTCnP gd6gty4EeoPeBlRqF31L7SJJ/SzxQwe6g+66EOhuCKV2yv2UpWngAF7A24UA3iHAy7h0qcuVA3gB bxcCeAcxyZ2ELPOCFlPAC3gB75Dg9WkkYpbgGgLAC3iHBq8bphlVKnUAL+DtQgDvIMa8Ms6EYu0B A17AC3gxufb3TK69fqcrU4+IaYhejp/MqaWfV7ndRn5aF4ZQOmpXCvhPp90I+dhe/Ew4+7XHlBq3 hCshMbyA5CC5oWUoIvYCKX3hAF7A24UAXmQof3GGsrkLSmGaV6qyvfgk+zil7y8y8laviC708q7O 66fZiTJTc3Np98qmLqJHhiJ4FHJPYQk3JAfJDS1DkYlwVcIwvAC8gHdw6waEpyIW4uoCwAt4Mbz4 +4YXey6Ol7L/3RonT+5z1mO44SkvSJSA9CA9SA/SOwDpPXpsL32X8rnbNLat22mhnhePijgIhQhQ PYbpYDqY7rBM1/fiUSn7XjzK0ojGwUZL0B10B90NaiEtC2MVuYkDeAFvFwJ4kau8ZCmKeZtSlH1n u4cjEo2JLmbkbPy4OvV8ZapHwuIqN0ioYA6cB+d1IXAenPfy47OLu7oxN898iYhV4jPVqU1rtJ6v 66aH+Sj3WMiy1nEwH8wH88F8h2O+TXm9b33Keq9vfcpLqUtjhfsjQXqQ3tDqU4KxVHk+cwAv4O1C AC8ylr/4Soxo3SzKqv4HiWYzm7HUpu4zwIozFqkQAyzoCroaWq7BUiFZFuCaCsALeJFrHEB15GJd 64Js7lrRI/lgnCo/oG2fw1/wF/wFf72wv96t9a3Je6iLK9f1Qxff9Qx1QV1Q1wGoS3LByLt8el1W d/bnctmn+sOSKJIBvkYHFoPFYLFDGEDqtu9G5OyUEB540u8zjHSDMKMJdWAxWKwLgcVgsRey2C8X UR9vWVhUlPkOvAVvdSHw1iDm3oTrp7GHa+YBL+BF0nEASUd6o/PlMakX7ezbm2L2ZTGeljc98hBf SMF5jBsdQWVQ2dDyEJGq0MsSwAt4Ae/Q4OVRxF0/biEDvIAX8GIQ8cKDCKWnC2M79z8LXcx7jB08 L6JuyjD3AoPBYDDYARgsNvlveU93uZJnceLAXXBXFwJ3wV0v5K5kkRe6T8XWDaKIctwhAuaCuQZX 9PECt/1iCQfwAt4uBPAi7XjZmePZtvYz/jKbvtHLXF/qy1d5Me05iyzjSIYyZg60Bq11IdDaEHIS X0oWMYkrsQEv4B3cEpBIeJmXKAfwAt4uBPBiQPFSczDlJTkr6+vyNm++9Bg7eDz2mVRYxAaDwWAw 2AEY7N2HDyQpi9pqpN9kMlVB4EqJhTBQGBQGhR2Awn7W12Siq+v7mylQJnt4TPihBT3NHHgMHutC 4LFBTC3HYZJEEutCAC/gRRJyAEnIbmq5mt+8Wdr+Hi+a5tV0O67qOa8sQs+lQZQ4cBqc1oXAaYOY moozQQOJG0wCXsA7vEUhXhqEIRaFAF7Ai9HEIczKlHWRmwU511e5MT0GD57Vl3AVc6AwKKwLgcKg sBdS2Nm6yKeLPnUPV4ZSRci+oC6oC+o6AHW9NZXdq7s+7sqU4LgrDNwFdw2v7OMJKhIWoWYLeAEv Eo8DSDwmi7Iwx+SfPPze/cGT7f2qA2n/6ZGJ+DzJ0iDCihjIDDKDzA5AZrsVMblprt5U5Rdd6Oue K2E86SnJPFSE4DK4bGijKpEplnGGRATwAt6hwet7PEl92mIKeAEv4B3U/7wp9fkWMsALeAHvkOCV qWIJzSIH8ALeLgTwDmImMUnjLOQtZIAX8ALeIcFLWeJLfDcd4AW8w4PXzRIeBj7u4gJ4Ae/g4OVe ELhp7ABewNuFAN4hwMtizxeh30IGeAEv4B3UPC+TrudHzAG8gLcLAbwDmef1uIgxVQR4Ae/g0mYl ExWFWB4JeAHv4cJ7+393ncbrd7oy9YiYhujlmDx+pJ9Xud1GfloXhlA6ItQODp5E2MfHiZ4bwvmv mxNj+6e/JTkZqkixtM/X3CTUnvzqoemRz3Zbtkdmps3koUe+ft2F3f5H4c0v2g/otuVid44u7O8i uAdgNT/T7Z9sypXdN7qJqPL5onl4dlk2TXnz8LTF5OHJwuhZS8Lu6VVZbsDYPZ2vmx0n933Ydszu Kpk2ZtM8K6dvq3y2o2eSN9NFK8f7ntse9ObXy3J2t/nFvmR9Y4rm9e8AAAD//wMAUEsDBBQABgAI AAAAIQBAg4RQGQkAAP8nAAARAAAAd29yZC9jb21tZW50cy54bWzUWMtu4zYU3RfoP1xo1QJjW5It vzBOYMvyIIt5IElboDtaoi12JFIgKXu8m98o0P7cfEkvafk5wUSedIAki1jivfeQPvdJv77+lGew olIxwUeO13QdoDwWCePLkfPb/azRd0BpwhOSCU5HzoYq5/rq559er4exyHPKtQKE4Gq4LuKRk2pd DFstFac0J6qZs1gKJRa6icotsViwmLbWQiYt3/Vc+1RIEVOlcL+Q8BVRTgWXf40mCspRuBAyJxpf 5bKVE/mxLBqIXhDN5ixjeoPYbncHI0ZOKfmwgmjsD2RMhtsDVR87C1ln363JVMSlocDu2JI0wzMI rlJWHL7G96KhMN2BrL71JVZ5ttNbF17naT6YSrLGjwNgneMnW6M8257824ieW8MjBmJvUecIp3vu TpITxg8bfxc1R+R6wWUA/jlAsXyac95IURYHNPY0tBv+cY9lMvsCrMrJx19NPe0wdykpMAPzeHiz 5EKSeYYnQpcBsg4mrJ2rQ8WB9ZAlIwdL1XpISp0KTNm3f5q3hGi0Q/yg4fkN37v3usPAHbqulTLO NCOZstoGr0D4zrAgktwgXuC5bjibzhy7quknbVb9IOz0/U7fAGCVTG5xY9fvut3Q3y9N6YKUmT6S WPQP0n7c6U1GUXVFspETbr/CPaI7ravXrb3a9l/1/JDJLV1QibWZVnaVLuFcaFt3UKGS7PH01R8p 0ZAIqoBpyCnh10ZD7/TM/vZ/Re3XLHdrsuzXZNkLplE4Cc9ZnkTdad/1XijL7+5mCnKyAeSOAuOQ sIXF0WCqFCxIrIVUrwBR4K9SaSAKSFFkjOBW6kKXDP5nlwTebNDrWfKPXNLu+m3X9dov1CXvP8Ka 6RRKU15gIpEBlYIqaJbhgoJ5qUGnFCRFb4iFfU5EDExBRuSSZhsY51SymPAmmCz68vlvZbVuovsZ LEuWUESil+aTZ9l73Huddt2EGsxmPvrqLKG8znQQzsYn3utP2oPQRs+59yrJs/Ge14Qvn/85oRa3 lEIsIilxB70pkLGlJPmdJtKeaW+LbJI6lhFPju1MKxuqgsQoLjAqqFxR5wpygX5WXz7/ew1+E8YS owTxq2VAJ+yjR8U4mFwaDm3bWGqEQ69mOPTcmeuHwQNdbBoFLzWZxxywxNo+xjEPNaRkRUELXIG5 0GnzQtY7ttE8xro/9Ac1We/0Jl7Y8zunrPeqvxPWO1HHO6qqR6xXkmfD+p1pZmhNZSGZwhEC2ZYl N8HOJIg1hzgTZaKwPmL0p6LMkq13iFJ4k0E9nD1IllVqQDB5MBNXWDkTmG/ApBgOhbs1qS51Y1DT je26tdQdt73BtD+t4UbMkXZoh6NzN1aSZ+PGqZn+bOPyTRKRpSFQUnTMBlheZNQyyvQ1vJf7UVEZ yWbnGiDVjwAywekGAwIHmotLXVCz8wXdunPLwJ1MgrFpaMdzy2QchcHkpY6S9ykzibYrdIrSHCRb pvpStm2JeZxtP6g7Z/Q7fmfcPsuNrtvDIfFoqDCcRpE/jSYPsX0q+XC0dOQAPLS4M414Gu0odbed +iB5dy5JzFh9a4i64cmZ0HR1MwWi2gKD11BgL49mfsOXnk1j83Jbmnun2aWaDCr3zoT5nQvNVczw 2h2SjM0lM1bpmKvTlVgdXi1IRuzW9kCUHwfDDw6mH3x62yJs1YeEqliyuSn51N54Gtsbz240wrLz C20um6/g97eNOVE0eYVXJa4Jci63C7+aK5EoCoHPprOvU4E3Ko7VytSjhzrDV+VgFnTDcXRWDrwu xlcYRZcFaN1y8B8AAAD//9SXzW7jNhCAX4XwuZuQFEVZwtqB/gzsocEiTlugN65E22wVySXpeH3L ayzQvlyepENZ8U9gIHLRg+2DTXHIkfnND2du19Hyqx5/voXf9rtonp5kbcefd0O0jlQ5GvjDAYzE yi4aPRr8/Lt7KoWVowHFxP9E6CdKHgmNGI4wbqWqVlaJyrSrncIlWhMWLYUWX0AhTQM/T2k4aGet /G7dbNB9nAJtVPkwGmCMKfdSvpvK5EysKnsgabW7c8DP1G4qCUufRTUapNszPIL2we32mNtl269u fGrLg5xJLetCdvu6taKuGyusampY0El2+uz4XsrSIC3XWlnphPZtyceEud+HMI/YsCdhb0iSMPAd ywPCHseEsDQ/Ikw55ik9RbiTXAzhr7p5VqUExt1uNGs0sguJyqZYOb03Z3InHunn2j7pCZ7RCUlY kvVx7YyyZD916NpbycWA/22higUysnAr7s5lzNozfuzctK9zY49SilMXMweMGc8JG3qO/J5xntMs T04x7iQXwvhN36SprXG0TKEUaBSV+qaV+/+LuDbHM4XZP9663ZWo52//RdbHb7fj15e/4SxSq0a/ vvyDlEGqLrQURtXzaoNqoXWzvkH304lBQstj6VLqZxg/Swg33azmi2Zl28irpV03+s+fEBwO/bEy FqKzknMwb4ls0y6BvepJwpvPjk6/V3TyyGM9PYezmMSUvbt4cEIwzWPvKj3HRaewry8/DAILPwLv LxRsCCY+O1B93BM37Yk7oCGb4Imz4hFuniT44Mq5LtxT8P2qRMqib/IIOZpp8SRdNKC1qionBsDL Srp3Cb1x8dBAQGiXSVdQJWyQqEt0P/l1v9P8F7tx58//Z5gwzgnzs3dh4vOEp0GwN9JV2Q19f6oi sxQFYFlqaSChycEY7YLHZarWjHedNcUcXmXONsawrzHC3hUFJzmJHeNDYzCWhbnX1o07Y/CUZ/7k lDE6yeXlLDpFjsvZmEPWB7MX4b65imXxJIzbFPhR4TbxaJidxNxJLgaz60lc2um6knMpU78XZR75 fZ2ZZ2Hqp9m70g0HiZ8P8z1SxzJkZJif7Pw6ycVQnqp5DXUYFF+qRr9MUQ4lkzKLc2H3S+NBhHv3 IgmNaRDGx7A9L40ndNj29FcIOy+VbTSc2l2u3c16Lumgl1sH/ZMHTtKApCR9l6O9mOCYHRc610P6 QYqq2tzBFbmBBlua7l7U8q+Vgv5AgAFqq5uqkhoWSUjn2lU89awCnRAMpTQQGGi5a9ehsVF20d60 orArZ8KF0NAYQJIyRbOUNx8Ycj82438BAAD//wMAUEsDBBQABgAIAAAAIQCqUiXfIwYAAIsaAAAV AAAAd29yZC90aGVtZS90aGVtZTEueG1s7FlNixs3GL4X+h/E3B1/zfhjiTfYYztps5uE7CYlR3lG nlGsGRlJ3l0TAiU5Fgqlaemhgd56KG0DCfSS/pptU9oU8heq0XhsyZZZ2mxgKVnDWh/P++rR+0qP NJ7LV04SAo4Q45imHad6qeIAlAY0xGnUce4cDkstB3AB0xASmqKOM0fcubL74QeX4Y6IUYKAtE/5 Duw4sRDTnXKZB7IZ8kt0ilLZN6YsgUJWWVQOGTyWfhNSrlUqjXICceqAFCbS7c3xGAcIHGYund3C +YDIf6ngWUNA2EHmGhkWChtOqtkXn3OfMHAESceR44T0+BCdCAcQyIXs6DgV9eeUdy+Xl0ZEbLHV 7Ibqb2G3MAgnNWXHotHS0HU9t9Fd+lcAIjZxg+agMWgs/SkADAI505yLjvV67V7fW2A1UF60+O43 +/Wqgdf81zfwXS/7GHgFyovuBn449Fcx1EB50bPEpFnzXQOvQHmxsYFvVrp9t2ngFSgmOJ1soCte o+4Xs11CxpRcs8Lbnjts1hbwFaqsra7cPhXb1loC71M2lACVXChwCsR8isYwkDgfEjxiGOzhKJYL bwpTymVzpVYZVuryf/ZxVUlFBO4gqFnnTQHfaMr4AB4wPBUd52Pp1dEgb17++Oblc3D66MXpo19O Hz8+ffSzxeoaTCPd6vX3X/z99FPw1/PvXj/5yo7nOv73nz777dcv7UChA199/eyPF89effP5nz88 scC7DI50+CFOEAc30DG4TRM5McsAaMT+ncVhDLFu0U0jDlOY2VjQAxEb6BtzSKAF10NmBO8yKRM2 4NXZfYPwQcxmAluA1+PEAO5TSnqUWed0PRtLj8IsjeyDs5mOuw3hkW1sfy2/g9lUrndsc+nHyKB5 i8iUwwilSICsj04Qspjdw9iI6z4OGOV0LMA9DHoQW0NyiEfGaloZXcOJzMvcRlDm24jN/l3Qo8Tm vo+OTKTcFZDYXCJihPEqnAmYWBnDhOjIPShiG8mDOQuMgHMhMx0hQsEgRJzbbG6yuUH3upQXe9r3 yTwxkUzgiQ25BynVkX068WOYTK2ccRrr2I/4RC5RCG5RYSVBzR2S1WUeYLo13XcxMtJ99t6+I5XV vkCynhmzbQlEzf04J2OIlPPymp4nOD1T3Ndk3Xu3si6F9NW3T+26eyEFvcuwdUety/g23Lp4+5SF +OJrdx/O0ltIbhcL9L10v5fu/710b9vP5y/YK41Wl/jiqq7cJFvv7WNMyIGYE7THlbpzOb1wKBtV RRktHxOmsSwuhjNwEYOqDBgVn2ARH8RwKoepqhEivnAdcTClXJ4PqtnqO+sgs2SfhnlrtVo8mUoD KFbt8nwp2uVpJPLWRnP1CLZ0r2qRelQuCGS2/4aENphJom4h0SwazyChZnYuLNoWFq3M/VYW6muR Fbn/AMx+1PDcnJFcb5CgMMtTbl9k99wzvS2Y5rRrlum1M67nk2mDhLbcTBLaMoxhiNabzznX7VVK DXpZKDZpNFvvIteZiKxpA0nNGjiWe67uSTcBnHacsbwZymIylf54ppuQRGnHCcQi0P9FWaaMiz7k cQ5TXfn8EywQAwQncq3raSDpilu11szmeEHJtSsXL3LqS08yGo9RILa0rKqyL3di7X1LcFahM0n6 IA6PwYjM2G0oA+U1q1kAQ8zFMpohZtriXkVxTa4WW9H4xWy1RSGZxnBxouhinsNVeUlHm4diuj4r s76YzCjKkvTWp+7ZRlmHJppbDpDs1LTrx7s75DVWK903WOXSva517ULrtp0Sb38gaNRWgxnUMsYW aqtWk9o5Xgi04ZZLc9sZcd6nwfqqzQ6I4l6pahuvJujovlz5fXldnRHBFVV0Ip8R/OJH5VwJVGuh LicCzBjuOA8qXtf1a55fqrS8Qcmtu5VSy+vWS13Pq1cHXrXS79UeyqCIOKl6+dhD+TxD5os3L6p9 4+1LUlyzLwU0KVN1Dy4rY/X2pVrb/vYFYBmZB43asF1v9xqldr07LLn9XqvU9hu9Ur/hN/vDvu+1 2sOHDjhSYLdb993GoFVqVH2/5DYqGf1Wu9R0a7Wu2+y2Bm734SLWcubFdxFexWv3HwAAAP//AwBQ SwMEFAAGAAgAAAAhAOjkMYsiBAAASwsAABEAAAB3b3JkL3NldHRpbmdzLnhtbLRW3W7bNhS+H7B3 MHQ9x5Isy5ZQp4gla00Rr0WcPgAlUTYRUhRIyo477N13SImxk6pFtqJXps53vvNDnh+/e//E6OiA hSS8XjreleuMcF3wktS7pfPlIRsvnJFUqC4R5TVeOicsnffXv//27hhLrBSoyRGYqGXMiqWzV6qJ JxNZ7DFD8oo3uAaw4oIhBZ9iN2FIPLbNuOCsQYrkhBJ1mviuGzq9Gb50WlHHvYkxI4XgkldKU2Je VaTA/Y9liLf47SgpL1qGa2U8TgSmEAOv5Z400lpj/9cagHtr5PCjJA6MWr2j574h3SMX5TPjLeFp QiN4gaWEB2LUBkjqs+PgG0PPvq/Ad5+iMQV0zzWny8hn/82A/8qApG/JpIPuSC6Q6OqkT4MV8e2u 5gLlFKoS0hlBRM41lOVXztnoGDdYFPA2UNOu60w0ADfCq61CCgMsG0ypKfKCYgQGj/FOIAblaSWG owQqHu/xgej+kEZU4gq1VD2gfKt4A7wDglTmfu+l2CPgKCy2DSrAQcJrJTi1eiX/i6sEql/A4/QM 0wvn07brK2DUiEFyL3plw0usg20Fefv9a4LxDld04fK1Iw5zQJASP+hL3aoTxRkEvyVf8U1dfmyl ImDRdMxPRPCjAHCtPX+CMng4NTjDSLVwTb/ImXmJjJJmQ4Tg4rYuoVx+mTNSVViAAwLlt4HyIYIf zT1/wKiE8fuTfieXZQTDvJT2cM+5sqquu5jNs3XQRarRM+L64TQJB5HUD1bzQWQ9924GET90w8Qf QoJ14HnTISSMgijKBpEkTGeDyHwRLtLBCL6f6WLuzxeLQWQ1jZJoCIkCb7EevJ3E99woHULS1Itu BqNer/10vRpCsqkfpYYzeX5HFuvV8lnYk27KEesYCWK5IGi00ctnojVy8bgitcVzDNMUXyLbNrfg eNwBkiFKM5haFjCjjMUlkU2KK3OmGyR2Z7u9hhiUwoT8+GxLD2Es/hS8bTr0KFDTNZtV8YKgZ5Ja 3RFm5bLNt5ZVw/y/gNq6/HQQ5p7O1wPjGprGDK07ZJrP6OJ6/GXbNycVW91YeIOapuvPfOctHUp2 e+XpllLwVcJ/FPOR7/we8w3md5j5QIXODLT7w1nmW9mF3tTKpmdZYGXBWTazstlZFlpZqGV7mIwC NtcjjAp71PKKU8qPuPxwxr8RdZcg96jBabfFoLx4J+jXmhwdYvwEaxOXRMFfv4aUDD3pLeqb8u+1 KTrxVr3Q1ZhWbl5aKJFCdki9IJsSfxWL3q4FgXLcnlh+XppXXeCUSBisDexXxYXF/jCYF8QlL26h k+Bk5GHg3WTJoutmb2b2snrQ6xze/R5XKyRx2WOWOuuof7vTcJVF0/nYTSJvHPjeanyTZNHYm6/W UZL4YeYt/umb1P4Lvv4XAAD//wMAUEsDBBQABgAIAAAAIQBbuUFtHQIAAO8IAAAZAAAAd29yZC9j b21tZW50c0V4dGVuZGVkLnhtbKSW226jMBCG71fad0C+T7AdDAGVVGDiVa+3+wAukAQVH2STpH37 dc7ZrRTFzZUB+//mnxnb4un5Q/TBpjW2UzIHaAxB0MpaNZ1c5uDPKxtNQWAHLhveK9nm4LO14Hn2 88fTFpGsVkK0crDzj8BhpM22us7Bahh0Foa2XrWC27HoaqOsWgxjtzxUi0VXt+FWmSbEEMH9kzaq bq11MSmXG27BESe+0pRupZtcKCP44F7NMhTcvK/1yNE1H7q3ru+GT8eG8QmjcrA2MjsiRmdDO0l2 MHQcTgpzT9yDpFL1eleEfcTQtL3zoKRddfqSxndpbnJ1gmxuJbER/WndVqPosR5Uhm/dcAHeY785 iER/cH6biOAdHdkhzop7LPwb8+RE8E5eAn+rNFfFRcQPgP8H6OVjzfll1FpfaN1jtBf5fmbtTrcH 69jk69TsY2Z+r7h2J1DU2ctSKsPfeufItSxwVQ922xrMrm8dd+ns3jQ3/KXJAUEQUlYxsP/a7C8r CMJbEkSqOS2pj4QgliYJRD5RUsZwjCcekgQyiCnxMRYlJaIJjjwksJigtJpWPumnsCxJkfpIGIlp MfeRYJqQOcU+kskUlWlCEp+KYYbKqPRJH04wxpASD0kcFajAkU8uCU4jBpnPHoviGEWk8okS4RjN UVH6SKqCpQWBPulXKSW08qlYVOICJ2nh05eSJogi+kUSXmncX8rsLwAAAP//AwBQSwMEFAAGAAgA AAAhAHQ/OXrCAAAAKAEAAB4ACAFjdXN0b21YbWwvX3JlbHMvaXRlbTEueG1sLnJlbHMgogQBKKAA AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMz7GKwzAMBuD94N7BaG+c3FDKEadLKXQ7Sg66 GkdJTGPLWGpp377mpit06CiJ//tRu72FRV0xs6dooKlqUBgdDT5OBn77/WoDisXGwS4U0cAdGbbd 50d7xMVKCfHsE6uiRDYwi6RvrdnNGCxXlDCWy0g5WCljnnSy7mwn1F91vdb5vwHdk6kOg4F8GBpQ /T3hOzaNo3e4I3cJGOVFhXYXFgqnsPxkKo2qt3lCMeAFw9+qqYoJumv103/dAwAA//8DAFBLAwQU AAYACAAAACEAetTOB+IAAABVAQAAGAAoAGN1c3RvbVhtbC9pdGVtUHJvcHMxLnhtbCCiJAAooCAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACckE1rwzAMhu+D/Qeju2u3az5W4pR1caDX scKuruMkhtgOtjM2xv77HHbqjjuJR0J6XlQdP8yE3pUP2lkG2w0FpKx0nbYDg8tri0tAIQrbiclZ xcA6ONb3d1UXDp2IIkTn1Tkqg1JDp3puGHydMl7ydk/xqXxo8f6p4PixKDK8bTJePOe7hub8G1BS 23QmMBhjnA+EBDkqI8LGzcqmYe+8ETGhH4jrey1V4+RilI1kR2lO5JL05s1MUK95frdfVB9ucY22 eP1fy1VfJ+0GL+bxE0hdkT+qlW9eUf8AAAD//wMAUEsDBBQABgAIAAAAIQD6MGPXHQ0AABZ/AAAP AAAAd29yZC9zdHlsZXMueG1s1J1Rd5s6Esff95z9Dhw/7T60sRMnTnpuek+aJpuc27S5dbp9lkGO tQHkBdw0++lXEsIWHgSMULNnnxJj5iehmf9IAxh++/1nEgc/aJYznp6PJm/Ho4CmIY9Y+ng++vZw /eZ0FOQFSSMS85Sej15oPvr9/V//8tvzu7x4iWkeCECav0vC89GqKNbvDg7ycEUTkr/la5qKL5c8 S0ghPmaPBwnJnjbrNyFP1qRgCxaz4uXgcDw+GWlM1ofCl0sW0o883CQ0LZT9QUZjQeRpvmLrvKI9 96E98yxaZzykeS4OOolLXkJYusVMpgCUsDDjOV8Wb8XB6B4plDCfjNV/SbwDHOMAh1tAEr67fUx5 RhaxGH3Rk0DARu/F8Ec8/EiXZBMXufyY3Wf6o/6k/lzztMiD53ckDxl7EC0LSMIE7+YizdlIfENJ XlzkjDR+uZL/NH4T5oWx+QOL2OhAtpj/R3z5g8Tno8PDasul7EFtW0zSx2obTd98m5s9MTYtBPd8 RLI38wtpeKAPrPxrHO56/5NqeE1Cptohy4KKyJqcjCU0ZjKQD4/Pqg9fN3JsyabguhEFKP9usQdg xEXAifCblyoQ39LlJx4+0WheiC/OR6otsfHb7X3GeCYi/Xx0ptoUG+c0YTcsimhq7JiuWES/r2j6 LafRbvuf1ypa9YaQb1Lx/9FsoqIgzqOrnyFdy9gX36ZE+uSzNIjl3hu2a1yZ/7uCTbQnmuxXlMgE EEz2Ear7KMShtMiNo21mbvaOXe2FaujotRqavlZDx6/V0MlrNTR7rYZOX6shhfmVDbE0oj9LIcJm ALWLY1EjmmMRG5pj0RKaY5EKmmNRAppjCXQ0xxLHaI4lTBGcgoe2KDSC/cgS7e3c7jnCjds9Jbhx u2cAN253wnfjdud3N253OnfjdmdvN253ssZzy6VWcCtklhaDVbbkvEh5QYOC/hxOI6lgqarID09O ejTzcpAeMGVm0xPxYFpI1OfuCFEidZ/PC1nIBXwZLNnjJhPF9NCO0/QHjUVZG5AoEjyPwIwWm8wy Ii4xndElzWgaUp+B7Q8qK8Eg3SQLD7G5Jo/eWDSNPA9fRfSSFLYBLernlRQJ8xDUCQkzPrxrnHjL D59YPnysJCT4sIlj6on12U+IKdbw2kBhhpcGCjO8MlCY4YWB4TNfQ6RpnkZK0zwNmKZ5GrcyPn2N m6Z5GjdN8zRumjZ83B5YEasUb646Jv3P3V3GXJ7HHtyPOXtMiVgADJ9u9DnT4J5k5DEj61Ugz0o3 Y81jxrbzgUcvwYOPOW1L8rWuVyFyKY6apZvhA1qj+RLXludJXlueJ4FtecMldieWyXKBduOnnplv FkWjaBWpl2jnJN6UC9rhaiPF8AjbCeCaZbk3GTRjPUTwZ7mcle70kfl2vRzesR1ruKz2s5LX7mmk h17GPHzyk4ZvXtY0E2XZ02DSNY9j/kwjf8R5kfEy1kzJHyqX9JL8VbJekZypWqmG6D/VV1fAgzuy HnxA9zFhqR+/Xb1JCIsDfyuIm4e7T8EDX8syUw6MH+AHXhQ88cbUZwL/9p0u/u6ngxeiCE5fPB3t hafTQwp2yTxMMiWJR55IYpnJUuZlDlW8P+jLgpMs8kO7z2h500lBPRHnJFmXiw4P2hJ58VnkHw+r IcX7J8mYPC/kS1QPXmDGacN8s/gXDYenus888HJm6MumUOcf1VJXWfvDDV8m1HDDlwjKm2J6kPHr 4WBruOEHW8P5OtjLmOQ5s15Cdeb5OtyK5/t4hxd/msdjni03sb8BrIDeRrACehtCHm+SNPd5xIrn 8YAVz/fxegwZxfNwSk7x/pGxyJszFMyXJxTMlxsUzJcPFMyrA4bfoWPAht+mY8CG36tTwjwtAQyY rzjzOv17uspjwHzFmYL5ijMF8xVnCuYrzo4+BnS5FItgf1OMgfQVcwbS30STFjRZ84xkL56QVzF9 JB5OkJa0+4wv5a8ReFrexO0BKc9Rxx4X2yXOl5O/04W3rkmWz355OCNK4phzT+fWdhOOsqzfu9Zl pn7JMbgL9zEJ6YrHEc0sx2S3FfXyvPxZxn73VTd6nfb8xB5XRTBfbc/2m5iTcadlVbDXzLobbBrz k+r3LE1mdzRim6TqKPwxxclRf2MV0TXjabfxbiVRszzuaQnbPOm23K2Sa5aznpawzdOelkqnNcs2 PXwk2VNjIMza4mdb41mCb9YWRVvjxmbbAmlr2RSCs7YoqkkluAhDebUAeqefZuz2/cRjt8eoyE7B yMlO6a0rO6JNYF/pDyZndkzSVO1t754AeV8tontlzj83vDxvX7vg1P9HXbdi4ZTmNGjkHPW/cFXL MvZx7J1u7IjeeceO6J2A7IhemchqjkpJdkrv3GRH9E5SdgQ6W8EZAZetoD0uW0F7l2wFKS7ZasAq wI7ovRywI9BChQi0UAesFOwIlFCBuZNQIQUtVIhACxUi0EKFCzCcUKE9TqjQ3kWokOIiVEhBCxUi 0EKFCLRQIQItVIhAC9VxbW81dxIqpKCFChFooUIEWqhqvThAqNAeJ1Ro7yJUSHERKqSghQoRaKFC BFqoEIEWKkSghQoRKKECcyehQgpaqBCBFipEoIVa/tTQXajQHidUaO8iVEhxESqkoIUKEWihQgRa qBCBFipEoIUKESihAnMnoUIKWqgQgRYqRKCFqi4WDhAqtMcJFdq7CBVSXIQKKWihQgRaqBCBFipE oIUKEWihQgRKqMDcSaiQghYqRKCFChFt8akvUdpus5/gz3pa79jvf+lKd+qr+VNuE3XUH1X1ys7q /1uED5w/BY0/PDxS9UY/CFvEjKtT1JbL6iZX3RKBuvD55bL9Fz4mfeBDl/RvIdQ1UwCf9rUE51Sm bSFvWoIib9oW6aYlWHVO27KvaQmmwWlb0lW6rG5KEdMRMG5LM4bxxGLelq0NczjEbTnaMIQj3JaZ DUM4wG352DA8DmRy3rc+7jlOJ9v7SwGhLRwNwsxOaAtL6KsqHUNh9HWandDXe3ZCXzfaCSh/WjF4 x9pRaA/bUW6uhjLDutpdqHYC1tWQ4ORqgHF3NUQ5uxqi3FwNEyPW1ZCAdbV7crYTnFwNMO6uhihn V0OUm6vhVIZ1NSRgXQ0JWFcPnJCtGHdXQ5SzqyHKzdVwcYd1NSRgXQ0JWFdDgpOrAcbd1RDl7GqI cnM1qJLRroYErKshAetqSHByNcC4uxqinF0NUW2uVmdRaq5Gedgwxy3CDEPchGwY4pKzYehQLRnW jtWSQXCslqCvKp/jqiXTaXZCX+/ZCX3daCeg/GnF4B1rR6E9bEe5uRpXLTW52l2odgLW1bhqyepq XLXU6mpctdTqaly1ZHc1rlpqcjWuWmpytXtythOcXI2rllpdjauWWl2Nq5bsrsZVS02uxlVLTa7G VUtNrh44IVsx7q7GVUutrsZVS3ZX46qlJlfjqqUmV+OqpSZX46olq6tx1VKrq3HVUqurcdWS3dW4 aqnJ1bhqqcnVuGqpydW4asnqaly11OpqXLXU6mpLtXTwXHsBk2SrF5KJnYuXNZXP4DZ+MBOVzyDV FwHVjrfR9kVJ0lj2JNCvpNKbVYf1BcOyRWUImwpXoq1QPz3J0pR+Cur2ZzzqGaj7DVselao6shuC am89pLtLoeV+tcuerf0u5JC39Fm5pHWMSq/ZOnimw7Crh6I/i7h8aZf45zaNBOBZv7Cq7Gn0k5Qo 8f0ljeM7Uu7N1/ZdY7osym8nY/Wj+b3vF+Xz36z2mUoUVsBBvTPlR/3iMMt4l0+E11ewrSEp1dAw 3Op2iqEjbe9bTS7b3tw83H2qPbpsv19yh/rDzcqxJaK9L1LhQFDy8YumtWl8KYQ0PJiynMkIUlbj 8enx7PpKXwXXb4YTca8Shvhb7SeDRR75mueiqYmeBWw7TE6P9Hxj2+NwVmVx2x5HJ9WdUbY9psen OgHb9jiennX09GQ66ejp7Oiwo6enh9VdBC0D1tHTyXg86xrU8dlZR18nk7NxR2cnh6K7Hbsczar7 E6y7TE+OVXelrHW0gPcJmm8TnG4/NL9N0PJKRnmr0yZjNAs+02dJ2L0E8YElNJebg688IeoHo+p1 jMAkzOubSpXs3sOoD7X2Hka1zXidYp+JLdzkIl+q6XY/aTXquDNVBDu57+WLxsmyM3sgM4c9Tfzf u2rrmEueyCfE7m4S23dK46tUcC7xl6qnV9PJRN/qpH2wG5wqJ5uDU27rHpzmyU0PjnqGRcu4qNek NA2JbVYzuL9iQjNHCbzqFJuOXjdP7I/M/qjr78tHUg/MDqZ3hySG1qAcMmitQTnXDyhticvqGaZN QwQOPpUjavuyYdh0+786fvWALspjuMx/RbSZh2ILOL2PPeYaNW0fN98RZw7Qr40//bSixqRYe5JR 0yjZMqIBffWM6HOxNqePnAbfbo0Z3twkp/ft5z1PTfS6tTZ9qW3+An5/mNv8NzS9mnHiOdj/R6Ne /Ze//y8AAAD//wMAUEsDBBQABgAIAAAAIQC/10uf5QEAAOQDAAAQAAgBZG9jUHJvcHMvYXBwLnht bCCiBAEooAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxTTW/bMAy9D9h/MHRv5GT5hqJi SDH0sK0B4rZnVaZtYbIkSGrQ7NePthdP2XaqT++R9NMTSbHbt1ZnJ/BBWbMj00lOMjDSlsrUO/JY fLlZkyxEYUqhrYEdOUMgt/zjB3bw1oGPCkKGEibsSBOj21IaZAOtCBNMG8xU1rciIvU1tVWlJNxZ +dqCiXSW50sKbxFMCeWNGwXJoLg9xfeKllZ2/sJTcXaox1kBrdMiAv/e/akZHQOssFHoQrXAZ+s5 JkbKDqKGwOc5owNiz9aXgU8/rVdYOBC2b4QXMmIH+WqTr5eMJhH22TmtpIjYXf5NSW+DrWL20FvO OgVG0xKG1ziCfPUqnjmem1L2VRk0sVxsGB0gGvSi9sI1aGq96GyOnB2l0LDHJvBK6ACM/gmwexDd gA9CdR5PcXsCGa3PgvqJI56R7EUE6Fq3IyfhlTCRDGUD6bF2IXpeqKhRe+Q9TMtSrOZ82hcguC7s Se8B8bW7/oTwUOHd4n/MTlOzvYfBamIndXY54y/VvW2dMNhjOiJs8Y/w6Ap7123J7x5eB5PZP6vY HJ2QOJXNbLVapFuQ5NgRo1DiWMepjAF2j3fwujsB/zU1lJeafxPdXj0Nj5ZPF5Mcv36RLjFchfE1 8V8AAAD//wMAUEsDBBQABgAIAAAAIQBFL9EqawEAANsCAAARAAgBZG9jUHJvcHMvY29yZS54bWwg ogQBKKAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMkl1PgzAUhu9N/A+k99DC1BkCLFGz K5eYOKPxrrZnWx20TduN7d9bYDCJu/DufLznyTlvm80OVRnswVihZI7iiKAAJFNcyHWO3pbz8B4F 1lHJaakk5OgIFs2K66uM6ZQpAy9GaTBOgA08SdqU6RxtnNMpxpZtoKI28grpmytlKup8atZYU7al a8AJIXe4Akc5dRQ3wFAPRHRCcjYg9c6ULYAzDCVUIJ3FcRTjs9aBqezFgbbzS1kJd9RwUdo3B/XB ikFY13VUT1qp3z/GH4vn1/bUUMjGKwaoyDhLnXAlFBk+hz6yu69vYK4rD4mPmQHqlCkWn22rTxuj t3CsleHWD40yL+NgmRHa+efrkKOCV5fUuoV/z5UA/nBs6X+rjdDAXjS/oJi2iiHNTpZ2GwEPvBVp Z1zfeZ88Pi3nqEhIfBvGSZjEy3iaJiQlpD1mNH8GVqcF/kdMkpTcjIk9oPNl/B2LHwAAAP//AwBQ SwMEFAAGAAgAAAAhALM1paN9AQAAkQMAABQAAAB3b3JkL3dlYlNldHRpbmdzLnhtbJSTXU/CMBSG 7038D0vvYRt+oAuDhBCMiTFG8Qd0XTca256mLUz49Z6N8aF4wa56+rbv03PybqPJt5LBmlsnQKck 7kck4JpBLnSZks/FvPdAAuepzqkEzVOy4Y5MxtdXoyqpePbBvcebLkCKdoliKVl6b5IwdGzJFXV9 MFzjYQFWUY9bW4aK2q+V6TFQhnqRCSn8JhxE0T1pMfYSChSFYHwGbKW49o0/tFwiEbRbCuP2tOoS WgU2NxYYdw7nUXLHU1ToAya+PQMpwSw4KHwfh2k7alBoj6OmUvIIuOsGGBwAiiXPpQZLM4kRYCcB wsgYM8jF2rVrUCUiT8lg+Di8iaNB3JxnkG9mzdmaSsyXhLWKCbzwwu/V6KC+i3L5j7wAcy5OwXtQ f3TsY5rbuvJHj8Yvh+DGbet7dWEo423NQAIGTlcedgh50lk3Z/aro25eezp5F2t4HHpX7tcmFzBe KLHlc7BTC5XjtnmNSgnV2+vTzn/yI41/AAAA//8DAFBLAwQUAAYACAAAACEABB7chJMBAAAaBQAA DwAAAHdvcmQvcGVvcGxlLnhtbKSUTW+DMAyG75P2H1DubaBapwmV9rBqUw/bZdtltzSEEpXEURJg /fczBco+pKofpxA7fvw6Jp4tvlQRVMI6CToh0TgkgdAcUqk3Cfl4fxo9kMB5plNWgBYJ2QlHFvPb m1kdTWMjwBQiQIR2cW14QnLvTUyp47lQzI2V5BYcZH7MQVHIMskFrcGmdBJG4f7LWODCOcz3yHTF HOlw6j8NjNDozMAq5nFrN1Qxuy3NCOmGebmWhfQ7ZIf3PQYSUlodd4jRQVATEreCuqWPsKfkbUOW wEsltN9npFYUqAG0y6UZyriUhs68h1THiqhU0Z+rTXR3XQ+WltW4DMBT5KdtkCpa5ceJUXhCRxrE IeIUCb9z9koUk3pIfNHV/LjcaHoeYPIXYDbXNefZQmkGmryOttLbA6t52Wewuib/LM1dJ+YtZwZf oOLxaqPBsnWBirBlAd560PzWZN5NHOtAN9aYlT4HfKwvn73PCoezS6x0BvsTiK9kKuwqTcgrTi+y t5autWAcnc/oQD1smqE2/wYAAP//AwBQSwMEFAAGAAgAAAAhAFwz0GwIAgAABAcAABIAAAB3b3Jk L2ZvbnRUYWJsZS54bWzElNFu2jAUhu8n7R0i35c4IZSCGirKQKo07WJrH8AYJ7EW25FtSHn7Hdsh 20SjgaZuiYjCf+wvzifn3D+8ijo6MG24kjlKRhhFTFK147LM0cvz5uYORcYSuSO1kixHR2bQw+Lj h/t2XihpTQTzpZkLmqPK2mYex4ZWTBAzUg2TUCyUFsTCX13Ggujv++aGKtEQy7e85vYYpxjfog6j L6GoouCUfVJ0L5i0fn6sWQ1EJU3FG3OitZfQWqV3jVaUGQPvLOrAE4TLHpNkZyDBqVZGFXYEL9Ot yKNgeoL9nah/AibXAdIeIOj8qZRKk20N8mElEcDQorMftXNJBBRWpOZbzX2hIVIZlkDtQOoc4RRv 8ASu7szw2F1R7AbSimjDHCQMxCEuiOD18ZSalhsTCg23tDrlB6K5W1QoGV5CYW+2OEdrDEe62aCQ JDnKIFiu+iR1z/JH0iXjPsEuoZ4TRsz8LOo5/Rh4ZhwMnJl45oKZ6Atro69KEDlgJMW3YGICPpyZ 8VVGtOdeayRd/2pkBcn0LhufGZn92UjgXG5kpfaaM+2cDNiYgoGZt+JsZFfZEGrH9Fs6Cv7KdgMu lv/LxTdWKha9PA2IeOwEhB9sjPf9ULK3tsU6m55/KO+xLULLiD7zsrKDjcO1i3/VOJZuySDk98YB 2/PxzId/+79sHN2NWfwAAAD//wMAUEsDBBQABgAIAAAAIQA1ZRhYpAAAAP4AAAATACgAY3VzdG9t WG1sL2l0ZW0xLnhtbCCiJAAooCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsz00K gzAQhuF9oXcIOYCRLlyICkLd1kKgq26SOJpAfiQZQW/fIKUn6HL4Hl6YRtY8bFFBIhwsKISJ42Gh pe/+2XOzox4mgyb4cZ6NgtFb46HYk6XkhA/hMs6WkhfElGFLK0p2Z32qZUs14lozlpQGJ1IRVvB5 m0N0AvMZFxbO8D2ozYFHdivLikkjrQlLFKs+vrG/pLqG/R7urpcPAAAA//8DAFBLAQItABQABgAI AAAAIQDyW/zvjQEAADkHAAATAAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsB Ai0AFAAGAAgAAAAhAB6RGrfvAAAATgIAAAsAAAAAAAAAAAAAAAAAxgMAAF9yZWxzLy5yZWxzUEsB Ai0AFAAGAAgAAAAhAKNfeHNIAQAAOgUAABwAAAAAAAAAAAAAAAAA5gYAAHdvcmQvX3JlbHMvZG9j dW1lbnQueG1sLnJlbHNQSwECLQAUAAYACAAAACEAxgnkwYhzAQDCmy0AEQAAAAAAAAAAAAAAAABw CQAAd29yZC9kb2N1bWVudC54bWxQSwECLQAUAAYACAAAACEAQIOEUBkJAAD/JwAAEQAAAAAAAAAA AAAAAAAnfQEAd29yZC9jb21tZW50cy54bWxQSwECLQAUAAYACAAAACEAqlIl3yMGAACLGgAAFQAA AAAAAAAAAAAAAABvhgEAd29yZC90aGVtZS90aGVtZTEueG1sUEsBAi0AFAAGAAgAAAAhAOjkMYsi BAAASwsAABEAAAAAAAAAAAAAAAAAxYwBAHdvcmQvc2V0dGluZ3MueG1sUEsBAi0AFAAGAAgAAAAh AFu5QW0dAgAA7wgAABkAAAAAAAAAAAAAAAAAFpEBAHdvcmQvY29tbWVudHNFeHRlbmRlZC54bWxQ SwECLQAUAAYACAAAACEAdD85esIAAAAoAQAAHgAAAAAAAAAAAAAAAABqkwEAY3VzdG9tWG1sL19y ZWxzL2l0ZW0xLnhtbC5yZWxzUEsBAi0AFAAGAAgAAAAhAHrUzgfiAAAAVQEAABgAAAAAAAAAAAAA AAAAcJUBAGN1c3RvbVhtbC9pdGVtUHJvcHMxLnhtbFBLAQItABQABgAIAAAAIQD6MGPXHQ0AABZ/ AAAPAAAAAAAAAAAAAAAAALCWAQB3b3JkL3N0eWxlcy54bWxQSwECLQAUAAYACAAAACEAv9dLn+UB AADkAwAAEAAAAAAAAAAAAAAAAAD6owEAZG9jUHJvcHMvYXBwLnhtbFBLAQItABQABgAIAAAAIQBF L9EqawEAANsCAAARAAAAAAAAAAAAAAAAABWnAQBkb2NQcm9wcy9jb3JlLnhtbFBLAQItABQABgAI AAAAIQCzNaWjfQEAAJEDAAAUAAAAAAAAAAAAAAAAALepAQB3b3JkL3dlYlNldHRpbmdzLnhtbFBL AQItABQABgAIAAAAIQAEHtyEkwEAABoFAAAPAAAAAAAAAAAAAAAAAGarAQB3b3JkL3Blb3BsZS54 bWxQSwECLQAUAAYACAAAACEAXDPQbAgCAAAEBwAAEgAAAAAAAAAAAAAAAAAmrQEAd29yZC9mb250 VGFibGUueG1sUEsBAi0AFAAGAAgAAAAhADVlGFikAAAA/gAAABMAAAAAAAAAAAAAAAAAXq8BAGN1 c3RvbVhtbC9pdGVtMS54bWxQSwUGAAAAABEAEQBXBAAAW7ABAAAA --001a11409d3e44a2f705276ff667--