From 0407739fec8bc8f996bf78eb47ff82530c475c9f Mon Sep 17 00:00:00 2001
From: fred_the_tech_writer <69817454+fschillingeriv@users.noreply.github.com>
Date: Tue, 11 May 2021 15:43:50 -0400
Subject: [PATCH] Release (#585)
* Promote to Staging (#567)
* mobile launch in GS Guide
* recovery code note -> when does it change
* EA + forgot MP
* Send in Feature tables
* BE Badge Counter
* Send hidden email option
* weak passwords sort
* safari biometrics
* custom fields - keys
* FIDO Updates
* release notes
* updates to user types article (not rel-related)
* Folders Correction (interplay w/ shared items) (non rel-related)
* Send Options Policy
* Hide Custom Fields Update
* rn updates
* final release edits
* safari-biometrics-updates
* biometrics safari fix
* fido list update
* rn date
* link fix
* Update attachments.md
* Update cli.md
* Update 2020-plan-updates.md
* Update about-bitwarden-plans.md
* Update premium-renewal.md
* Update what-plan-is-right-for-me.md
* Update why-choose-bitwarden-for-your-team.md
* Update about-send.md
* Update create-send.md
* Attachments note
---
_articles/account/biometrics.md | 10 ++-
_articles/account/forgot-master-password.md | 4 +-
_articles/faqs/send-faqs.md | 2 +
_articles/faqs/twostep-faqs.md | 5 +-
_articles/features/attachments.md | 8 +-
_articles/features/auto-fill-browser.md | 12 ++-
_articles/features/custom-fields.md | 12 ++-
_articles/features/reports.md | 2 +-
.../getting-started/getting-started-mobile.md | 12 +++
_articles/getting-started/releasenotes.md | 24 +++++-
_articles/miscellaneous/cli.md | 2 +-
_articles/organizations/policies.md | 8 ++
.../user-types-access-control.md | 48 ++++++------
.../plans-and-pricing/2020-plan-updates.md | 4 +-
.../about-bitwarden-plans.md | 6 +-
.../plans-and-pricing/premium-renewal.md | 2 +-
.../what-plan-is-right-for-me.md | 2 +-
.../why-choose-bitwarden-for-your-team.md | 2 +-
_articles/send/about-send.md | 9 +--
_articles/send/create-send.md | 14 ++--
_articles/send/receive-send.md | 21 ++++++
_articles/send/send-privacy.md | 20 ++++-
.../bitwarden-field-guide-two-step-login.md | 4 +-
.../setup-two-step-login-fido.md | 70 ++++++++++++++++++
.../setup-two-step-login-u2f.md | 67 -----------------
.../two-step-login/setup-two-step-login.md | 8 +-
.../two-step-login/two-step-recovery-code.md | 6 ++
images/autofill/disable-counter-badge.png | Bin 0 -> 30380 bytes
images/getting-started/mobile-launch.png | Bin 0 -> 13806 bytes
.../user-types-access-control.png | Bin 216707 -> 99990 bytes
images/send/received-send.png | Bin 149492 -> 96372 bytes
images/send/send-email-hidden-file.png | Bin 0 -> 91574 bytes
images/send/send-email-hidden.png | Bin 0 -> 35823 bytes
images/send/send-email-visible.png | Bin 0 -> 26870 bytes
images/two-step/twostep-options-fido2.png | Bin 0 -> 77379 bytes
images/two-step/u2f/fido2.png | Bin 0 -> 152746 bytes
36 files changed, 245 insertions(+), 139 deletions(-)
create mode 100644 _articles/two-step-login/setup-two-step-login-fido.md
delete mode 100644 _articles/two-step-login/setup-two-step-login-u2f.md
create mode 100644 images/autofill/disable-counter-badge.png
create mode 100644 images/getting-started/mobile-launch.png
create mode 100644 images/send/send-email-hidden-file.png
create mode 100644 images/send/send-email-hidden.png
create mode 100644 images/send/send-email-visible.png
create mode 100644 images/two-step/twostep-options-fido2.png
create mode 100644 images/two-step/u2f/fido2.png
diff --git a/_articles/account/biometrics.md b/_articles/account/biometrics.md
index 6b23049a..20fac4a7 100644
--- a/_articles/account/biometrics.md
+++ b/_articles/account/biometrics.md
@@ -83,22 +83,22 @@ Once enabled, a new button will be presented on the Unlock screen:
Unlock with Biometrics is supported for Extensions through an integration with the Bitwarden Desktop app. In practical terms, this means:
-1. A Bitwarden Desktop app must be installed, logged in, and running in order to use Unlock with Biometrics for a Browser Extension. Additionally, you will need to enable Unlock with Biometrics in **Desktop** before proceeding.
+1. **For all Browser Extensions**, you will need to enable Unlock with Biometrics in Desktop before proceeding. **For all except Safari**, the Bitwarden Desktop app must be logged in and running in order to use Unlock with Biometrics for a Browser Extension.
2. Browser Extensions support the same biometrics options as Desktop; for Windows via [Windows Hello](https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/windows-hello){:target="\_blank"} using PIN, Facial Recognition, or [other hardware that meets Windows Hello biometric requirements](https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/windows-hello-biometric-requirements){:target="\_blank"} and for macOS via [Touch ID](https://support.apple.com/en-us/HT207054){:target="\_blank"}.
Two things to bear in mind before enabling the integration are **Permissions** and **Supportability**, documented below:
##### Permissions
-To facilitate this integration, your browser will ask you to accept a new permission for Bitwarden to `communicate with cooperating native applications`. This permission is safe, but **optional**, and will enable the integration that is required to enable Unlock with Biometrics.
+To facilitate this integration, browser extensions **except Safari** will ask you to accept a new permission for Bitwarden to `communicate with cooperating native applications`. This permission is safe, but **optional**, and will enable the integration that is required to enable Unlock with Biometrics.
Declining this permission will allow you to use the Browser Extension as normal, without Unlock with Biometrics functionality.
##### Supportability
-Unlock with Biometrics is supported for Extensions on **Firefox** and **Chromium-based** browsers (Chrome, Edge, Opera, Brave, etc.). Unlock with Biometrics is **currently not supported for**:
+Unlock with Biometrics is supported for Extensions on **Chromium-based** browsers (Chrome, Edge, Opera, Brave, etc.), Firefox 87+, and Safari 14+. Unlock with Biometrics is **currently not supported for**:
-- Safari
+- Firefox ESR (Firefox v87+ will work).
- Microsoft App Store Desktop Apps (a side-loaded Windows Desktop App, available at [bitwarden.com/download](https://bitwarden.com/download){:target="\_blank"} will work fine).
- Side-loaded MacOS Desktop Apps (an App Store Desktop app will work fine).
@@ -106,6 +106,8 @@ Unlock with Biometrics is supported for Extensions on **Firefox** and **Chromium
To enable Unlock with Biometrics for your Browser Extension:
+{% callout success %}Biometrics must be enabled in your Desktop App before proceeding. Additionally, **if you're using Safari**, you can skip straight to **Step 4**.{% endcallout %}
+
1. In your Bitwarden Desktop app, navigate to Settings (on Windows, **File** → **Settings**) (on macOS, **Bitwarden** → **Preferences**).
2. Scroll down to the Options section, and check the **Enable Browser Integration** box.
diff --git a/_articles/account/forgot-master-password.md b/_articles/account/forgot-master-password.md
index f56571da..5f7c00a9 100644
--- a/_articles/account/forgot-master-password.md
+++ b/_articles/account/forgot-master-password.md
@@ -17,7 +17,9 @@ Before deleting your account:
**First**, use the [Get master password hint](https://vault.bitwarden.com/#/hint){:target="\_blank"} link if you have a hint setup. Hints will be emailed to the email address associated with your account. If you don't have a hint setup, you'll get an email reporting this.
-**Second**, if you're using any Bitwarden client applications (Mobile Apps, Browser Extensions, etc.), you should check whether any of these sessions are still logged in prior to deleting your account. If a client application is still logged in, you should manually catalogue your Vault items to preserve your data.
+**Second**, if you have a designated Trusted Emergency Contact established using [Emergency Access]({{site.baseurl}}/article/emergency-access/), get in contact with them to regain Read or Takeover access to your account.
+
+**Third**, if you're using any Bitwarden client applications (Mobile Apps, Browser Extensions, etc.), you should check whether any of these sessions are still logged in prior to deleting your account. If a client application is still logged in, you should manually catalogue your Vault items to preserve your data.
{% endcallout %}
If you weren't able to gain access to your Vault, complete the following steps to delete your account:
diff --git a/_articles/faqs/send-faqs.md b/_articles/faqs/send-faqs.md
index d5277e06..a012672d 100644
--- a/_articles/faqs/send-faqs.md
+++ b/_articles/faqs/send-faqs.md
@@ -12,6 +12,8 @@ order: 09
**A:** Use of text Sends is available to all Bitwarden users, however creation of file Sends is only available for Premium users, including members of a Paid Organization (Families, Teams, or Enterprise).
+Additionally, creation of file Sends requires your Email Address to be verified.
+
### Q: Why can't I create a file Send from Firefox or Safari Browser Extension?
**A:** You can! But in order to browse for a file on the Create Send view in a Firefox Browser Extension, you'll need to open the extension in the sidebar or pop out a new window using the popout {% icon fa-external-link fa-rotate-270 %} button:
diff --git a/_articles/faqs/twostep-faqs.md b/_articles/faqs/twostep-faqs.md
index 5d84c439..d0cd3322 100644
--- a/_articles/faqs/twostep-faqs.md
+++ b/_articles/faqs/twostep-faqs.md
@@ -15,10 +15,9 @@ This article contains Frequently Asked Questions (FAQs) regarding **Two-step Log
**A:** Bitwarden does not support SMS 2FA due to vulnerabilities, including SIM hijacking. We do not recommend SMS 2FA for other accounts unless it is the only available method. Any second factor is recommended over having none, but most alternatives are safer than SMS 2FA.
-### Q: Is FIDO U2F supported on my iOS or Android App?
-
-**A:** At this time, due to platform/OS limitations, FIDO U2F is **only supported for Web Vaults and Browser Extensions**, however we are currently investigating ways to implement this. In the meantime, we recommend enabling another [Two-step Login Method]({% link _articles/two-step-login/setup-two-step-login.md %}) for use with unsupported client applications.
+### Q: Is FIDO U2F or FIDO2 WebAuthn supported on my iOS or Android App?
+**A:** At this time, due to platform/OS limitations, FIDO is **only supported for Web Vaults, Browser Extensions, and Windows Desktop Apps**, however we are currently investigating ways to implement this. In the meantime, we recommend enabling another [Two-step Login Method]({% link _articles/two-step-login/setup-two-step-login.md %}) for use with unsupported client applications.
### Q: Why is Bitwarden not asking for my enabled Two-step Login method?
diff --git a/_articles/features/attachments.md b/_articles/features/attachments.md
index 4eed2e8e..a10fd82e 100644
--- a/_articles/features/attachments.md
+++ b/_articles/features/attachments.md
@@ -8,7 +8,7 @@ tags: [attachments, storage, files]
order: 13
---
-Files can be attached to Vault items from any Bitwarden application. An individual file attachment must be 100MB or smaller. By default, paid users have access to 1GB of encrypted storage for file attachments. Additional storage can be purchased in 1GB increments.
+Files can be attached to Vault items from any Bitwarden application. An individual file attachment must be 500 MB (100 MB if uploading from Mobile) or smaller. By default, paid users have access to 1GB of encrypted storage for file attachments. Additional storage can be purchased in 1GB increments.
{% callout info %}
File Attachments are available for Premium users, including members of Paid Organizations (Families, Teams, or Enterprise).
@@ -118,6 +118,12 @@ For more information, refer to our [CLI documentation]({% link _articles/miscell
+{% callout warning %}
+**A note on Attachments created after May 11, 2021**:
+
+As a result of an Attachment upgrade, Attachments uploaded on the newest clients cannot be opened on older client versions. If you find you're unable to access a recently-created Attachment, upgrade your client to the newest version (**Hint:** The Cloud Web Vault is *always* on the newest version.)
+{% endcallout %}
+
## View an Attachment
Viewing an attachment mimics the same procedure used to attach a file. Refer to one of the above sections for help.
diff --git a/_articles/features/auto-fill-browser.md b/_articles/features/auto-fill-browser.md
index 574995cb..6d96d548 100644
--- a/_articles/features/auto-fill-browser.md
+++ b/_articles/features/auto-fill-browser.md
@@ -16,11 +16,17 @@ Additionally, **basic authentication prompts** work a little differently than re
Bitwarden Browser Extensions have a unique **Tab** view, which automatically detects the URI (e.g. `myturbotax.intuit.com`) of the page displayed in the open tab and surfaces any Vault items with corresponding URIs.
-When a Vault item has a corresponding URI, the Bitwarden icon will overlay a notification bubble reporting the number of Vault items for that web page (*pictured below*).
+When a Vault item has a corresponding URI, the Bitwarden icon will overlay a badge counter reporting the number of Vault items for that web page (*pictured below*).
-{% image /getting-started/browserext/browserext-tab.png %}
+{% image /getting-started/browserext/browserext-tab.png Badge Counter %}
-Simply clicking on the Vault item inside the Browser Extension will auto-fill login information to the detected input fields.
+{% callout success %}
+If you want, you can disable the badge counter using a toggle in the {% icon fa-cogs %} **Settings** → **Options** menu:
+
+{% image autofill/disable-counter-badge.png Disable Badge Counter %}
+{% endcallout %}
+
+Simply clicking on the Vault item inside the Browser Extension **Tab** view will auto-fill login information to the detected input fields.
There are a few alternative auto-fill options for Browser Extensions. In all cases (except [manually](#manually-auto-fill)):
- The Browser Extension must be unlocked for the auto-fill functionality to operate.
diff --git a/_articles/features/custom-fields.md b/_articles/features/custom-fields.md
index dda20560..0ddca722 100644
--- a/_articles/features/custom-fields.md
+++ b/_articles/features/custom-fields.md
@@ -14,6 +14,14 @@ Custom fields, available for any [Vault item type]({% link _articles/account/man
- **Hidden**: Field value stores freeform input that is hidden from view (particularly useful for Organizations using the [Hide Password access control](https://bitwarden.com/help/article/user-types-access-control/#granular-access-control)).
- **Boolean**: Field value stores a boolean value (true/false).
+## Custom Fields for Keys
+
+In addition to common web service inputs like PINs and Security Questions, Custom Fields can be used to store values **up to 5000 characters in length**, for example RSA 4096-bit SSH keys.
+
+{% callout success %}
+Character limits for custom field values are imposed on the **post-encryption character count**. For example, a 3383-character RSA-2096 Private SSH key would grow to about 4400-characters when it's encrypted and stored in your Vault.
+{% endcallout %}
+
## Auto-fill Custom Fields
The **Name** specified for a custom field is critical to successfully setting up auto-fill for custom fields. When naming the custom field, you should use one of the following HTML form element attributes/values:
@@ -24,11 +32,11 @@ The **Name** specified for a custom field is critical to successfully setting up
4. HTML form element's `aria-label` attribute.
5. HTML form element's `placeholder` attribute.
-Bitwarden will search the matched-URI webpage for those HTML form element attributes/values **in the above priority-order**. If a custom field's name matches one of those attributes/values, auto-fill will be available into that HTML form element.
+Bitwarden will search the matched-URI webpage for those HTML form element attributes/values **in the above priority-order**. If a custom field's name matches one of those attributes/values, its value can be auto-filled into the HTML form element.
### Name to Attribute Matching
-Field Name to attribute/value matches is **exact** and **case-insensitive** comparison. For example, if your custom field has the name `PIN`:
+Field Name to attribute/value matches is an **exact** and **case-insensitive** comparison. For example, if your custom field has the name `PIN`:
- **Auto-fill offered** for `pin`, `PiN`, `PIN`, etc.
- **Auto-fill not offered** for `pin2` or `mypin`
diff --git a/_articles/features/reports.md b/_articles/features/reports.md
index 54abaedd..8f8fce77 100644
--- a/_articles/features/reports.md
+++ b/_articles/features/reports.md
@@ -54,7 +54,7 @@ Once identified, you should create a unique password for offending accounts or s
### Weak Passwords Report
-The **Weak Passwords Report** identifies weak passwords that can easily be guessed by hackers and automated tools that are used to crack passwords. The Bitwarden Password Generator can help you create stronger passwords.
+The **Weak Passwords Report** identifies weak passwords that can easily be guessed by hackers and automated tools that are used to crack passwords, sorted by severity of the weakness. The Bitwarden Password Generator can help you create stronger passwords.
Once identified, you should use Bitwarden's Password Generator to create a strong password for offending accounts or services.
diff --git a/_articles/getting-started/getting-started-mobile.md b/_articles/getting-started/getting-started-mobile.md
index caec54dc..c97c8629 100644
--- a/_articles/getting-started/getting-started-mobile.md
+++ b/_articles/getting-started/getting-started-mobile.md
@@ -84,6 +84,12 @@ Setup Auto-fill to automatically enter logins from your Android device to a Web
Once toggled, you might be required to change some Android-native settings, depending on your available or enabled Auto-fill options. For more information, see [Auto-fill logins on Android]({% link _articles/features/auto-fill-android.md %}).
+### Launch from Mobile Apps
+
+You can launch a website directly from the Bitwarden Mobile App by selecting the {% icon fa-share-square %} **Launch** button in any Vault item with a valid URI. If you're unfamiliar with using URIs, see [Using URIs]({% link _articles/features/uri-match-detection.md %}).
+
+{% image /getting-started/mobile-launch.png %}
+
### Unlock with Biometrics
Unlocking Bitwarden with biometrics allows for seamless access to your Vault. If you haven't setup [fingerprint unlock](https://support.google.com/nexus/answer/6285273?hl=en) or [face unlock](https://support.google.com/pixelphone/answer/9517039?hl=en) on your Android device, you'll need to do that first from the Android {% icon fa-cog %} **Settings** app.
@@ -175,6 +181,12 @@ Setup Auto-fill to automatically enter logins from your iOS device to a Web Brow
When you create new logins, make sure you enter a website in the [URI field](#create-items) to surface them for Auto-fill.
+### Launch from Mobile Apps
+
+You can launch a website directly from the Bitwarden Mobile App by selecting the {% icon fa-share-square %} **Launch** button in any Vault item with a valid URI. If you're unfamiliar with using URIs, see [Using URIs]({% link _articles/features/uri-match-detection.md %}).
+
+{% image /getting-started/mobile-launch.png %}
+
### Unlock with Biometrics
Unlocking Bitwarden with biometrics allows for seamless access to your Vault. If you haven't setup Touch ID or Face ID on your iOS device, you'll need to do that first from the iOS {% icon fa-cog %} **Settings** app.
diff --git a/_articles/getting-started/releasenotes.md b/_articles/getting-started/releasenotes.md
index afa2e2b1..ba428255 100644
--- a/_articles/getting-started/releasenotes.md
+++ b/_articles/getting-started/releasenotes.md
@@ -25,12 +25,33 @@ Bitwarden believes source code transparency is an absolute requirement for secur
To be notified of Release Announcements, subscribe to the [Bitwarden Status RSS Feed](https://status.bitwarden.com/){:target="\_blank"}.
+## 2021-05-11
+
+The Bitwarden team is pleased to release a set of features and updates continuing our mission of making password management easy and accessible for individuals and businesses:
+
+- **Privacy & Security Options for Send**: Use a new Send Privacy option to hide your email from recipients (see [here]({{site.baseurl}}/article/send-privacy/#hide-email}}) for details). To prevent abuse, File Sends will now require a verified email address. Additionally, Enterprise Organizations can implement a new policy to set the availability of the Hide Email option (see [here]({{site.baseurl}}/article/policies/#send-options) for details).
+- **FIDO Updates & Expanded Support**: Our FIDO implementation has been upgraded from FIDO U2F to FIDO2 WebAuthn, but existing FIDO U2F keys will retain their integrity. FIDO support has been expanded to more Browser Extensions and the Windows Desktop App (see [here]({{site.baseurl}}/article/setup-two-step-login-fido/) for details).
+- **Custom Fields for Keys**: Custom Field values have been upgraded to support up to 5000 characters, allowing storage of keys like RSA 4096-bit SSH keys (see [here]({{site.baseurl}}/article/custom-fields/#custom-fields-for-keys) for details).
+- **File Size Increases**: You can now create File Attachments or File Sends that are up to 500 MB each. Due to device restrictions, the old 100 MB limit is still in place for Mobile Apps.
+
+ {% callout warning %}As a result of the Attachment upgrade, Attachments uploaded on the newest clients cannot be opened on older client versions. If you find you're unable to access a recently-created Attachment, upgrade your client to the newest version (**Hint:** The Cloud Web Vault is *always* on the newest version.){% endcallout %}
+- **Disable Browser Extension Counter**: Disable the Browser Extension badge counter using a new toggle in the {% icon fa-cogs %} **Settings** → **Options** menu (see [here]({{site.baseurl}}/article/auto-fill-browser/) for details).
+- **Biometrics for Safari**: The Safari Web Extension now includes support for Unlock with Biometrics for Safari 14+ (see [here]({{site.baseurl}}/article/biometrics/) for details).
+- **Search Internationalization**: Vaults can now be searched against 1 character, improving the experience for languages with 1-character words like Simplified and Traditional Chinese.
+- **Sorted Weak Passwords Report**: The Weak Passwords Report is now sorted by the severity of the password's weakness (see [here]({{site.baseurl}}/article/reports/#weak-passwords-report) for details)
+
+{% callout success %}
+Since implementing [Soft Delete]({{site.baseurl}}/article/managing-items/#items-in-the-trash) back in 2020, we've been patient to take out the Trash. **Starting 5/15/2021**, we'll activate the nightly job that will permanently delete items that have been in your trash for 30 days or more.
+
+Prior to 5/15/2021, we recommend digging through your Trash for anything you might want to Restore!
+{% endcallout %}
+
## 2021-03-11
Bitwarden is proud to announce the release of Bitwarden Send, and end-to-end encrypted solution for ephemeral sharing. This release includes:
- **Bitwarden Send**: Bitwarden Send is end-to-end encrypted solution for ephemeral sharing. There's lot of material about Send on our website and Help Center, but you can start [here](https://bitwarden.com/products/send){:target="\_blank"} or [here]({% link _articles/send/about-send.md %}).
-- **FIDO U2F Support for Edge**: Two-step Login via FIDO U2F is now available for the Web Vault and Browser Extensions in Microsoft Edge (see [here]({% link _articles/two-step-login/setup-two-step-login-u2f.md %}) for details).
+- **FIDO U2F Support for Edge**: Two-step Login via FIDO U2F is now available for the Web Vault and Browser Extensions in Microsoft Edge (see [here]({% link _articles/two-step-login/setup-two-step-login-fido.md %}) for details).
- **Domain Exclusion in Browser Extensions**: Bitwarden Browser Extensions can now be configured with domains to explicitly not offer to remember passwords for (see [here]({% link _articles/miscellaneous/exclude-domains.md %}) for details).
- **Improved Import Error Messages**: We've had lots of folks migrating to Bitwarden recently, so we cleaned up an import error message to help you reconcile issues faster (see [here]({{site.baseurl}}/article/import-data/#length-related-import-errors) for details).
- **Safari Web Extension Port**: Our Safari App Extension has officially been ported to a Web Extension for use with Safari 14+. Due to changes to Safari, Web Extension use is now limited to only those obtained through Mac App Store downloads (see [here]({% link _articles/account/install-safari-app-extension.md %}) for details).
@@ -44,7 +65,6 @@ When your Browser Extension updates to this version, you may be asked to accept
**Biometric Unlock is currently not available for:**
- Firefox Browser Extensions below version 87.
-- Safari Browser Extensions.
- Microsoft App Store Desktop Apps (a side-loaded Windows Desktop App, available at [bitwarden.com/download](https://bitwarden.com/download){:target="\_blank"} will work fine).
- Side-loaded MacOS Desktop Apps (an App Store Desktop app will work fine).
diff --git a/_articles/miscellaneous/cli.md b/_articles/miscellaneous/cli.md
index bcbddb80..2608fdf6 100644
--- a/_articles/miscellaneous/cli.md
+++ b/_articles/miscellaneous/cli.md
@@ -737,7 +737,7 @@ Used to specify which [Two-step Login method]({{site.baseurl}}/article/setup-two
| Yubikey | 3 |
{% callout info %}
-FIDO U2F and Duo are not supported by the CLI.
+FIDO2 and Duo are not supported by the CLI.
{% endcallout %}
#### Item Types
diff --git a/_articles/organizations/policies.md b/_articles/organizations/policies.md
index bcddc3c1..180dbd7b 100644
--- a/_articles/organizations/policies.md
+++ b/_articles/organizations/policies.md
@@ -110,3 +110,11 @@ Vault Items that were created prior to the implementation of this policy or prio
Enabling the **Disable Send** policy will prevent non-Owner/non-Admin users from creating or editing a Send using [Bitwarden Send]({% link _articles/send/about-send.md %}). Users subject to this policy will still be able to delete existing Sends that have not yet reached their [Deletion Date]({% link _articles/send/send-lifespan.md %}).
A banner is displayed to users in the Send view and on opening any existing Send to indicate that a policy is restricting them to only deleting Sends.
+
+### Send Options
+
+Enabling the **Send Options** policy will allow Owners and Admins to specify options for creating and editing Sends. Owners and Admins are exempt from this policy's enforcement. Options include:
+
+|Option|Description|
+|------|-----------|
+|Do not allow users to hide their email address|Enabling this option disables the [Hide Email option]({{site.baseurl}}/article/send-privacy/#hide-email), meaning that all [received Sends]({{site.baseurl}}/article/receive-send) will include whom they are sent from.|
diff --git a/_articles/organizations/user-types-access-control.md b/_articles/organizations/user-types-access-control.md
index 02a48370..d745c0fc 100644
--- a/_articles/organizations/user-types-access-control.md
+++ b/_articles/organizations/user-types-access-control.md
@@ -8,31 +8,29 @@ tags: [user types, access control]
order: 06
---
-Users in Bitwarden Organizations can be granted a variety of User Types and Access Controls in order to manage their permissions.
+Users in Bitwarden Organizations can be granted a variety of User Types and Access Controls in order to manage their permissions and access. You can set User Types and Access Controls when you [invite users to your Organization]({{site.baseurl}}/article/managing-users/), or at any time from the **Manage** → **People** screen in your Organization:
-You can designate User Type and Access Control when you invite users to your Organization (see [Add or Remove Users From Your Organization](https://bitwarden.com/help/article/managing-users/)), or at any time from the **Manage** → **People** screen in your Organization.
+{% image organizations/user-types-access-control.png Editing User Types and Access Control %}
## User Types
-User Type determines the level of access that a user will have within your Organization. User Type is configured at the Organization level.
-
-Options include:
+User Type determines the permissions a user will have within your Organization. User Types does not determine [which Collections they have access to](#access-control), rather it determines **what actions they can take** within the context of your Organization's resources and tools. Options include:
|User Type|Permissions|
|---------|-----------|
|User|Access shared items in assigned Collections
Add, edit, or remove items from assigned Collections (unless **Read Only**)|
-|Manager|All of the above,
+ Assign Users to Collections
+ Assign User Groups to Collections
+ Create or delete new Collections|
+|Manager|All of the above,
+ Assign Users to Collections
+ Assign User Groups to Collections
+ Create or delete Collections|
|Admin|All of the above,
+ Assign Users to User Groups
+ Create or delete User Groups
+ Invite and confirm new Users
+ Manage Enterprise Policies
+ View Event Logs
+ Export Organization Vault data
**Admin Users automatically have access to all Collections.**|
|Owner|All of the above,
+ Manage Billing, Subscription, and Integrations
**Owner Users automatically have access to all Collections.**|
-|Custom|Allows for granular control of user permissions on a user-by-user basis. For more information, see [Custom Role](#custom-role).|
+|Custom|Allows for granular control of user permissions on a user-by-user basis, see [Custom Role](#custom-role).|
-{% callout warning %}
-**Only an Owner** can create a new Owner or assign Owner to an existing user. For failover purposes, Bitwarden recommends creating multiple Owner users.
+{% callout info %}
+**Only an Owner** can create a new Owner or assign the Owner type to an existing user. For failover purposes, Bitwarden recommends creating multiple Owner users.
{% endcallout %}
### Custom Role
-Selecting the **Custom** role for a user allows for granular control of user permissions on a user-by-user basis. A user with the Custom role can have a customizable selection of Manager and Admin capabilities, including:
+Selecting the **Custom** role for a user allows for granular control of permissions on a user-by-user basis. A Custom role user can have a configurable selection of Manager and Admin capabilities, including:
- Manage Assigned collections
- Access Business Portal
@@ -54,28 +52,24 @@ As an example, the Custom role allows for the creation of a user that can fully
## Access Control
-Access Control determines the Collection assignment of **Users** and **Managers**, as well as permissions within a given Collection. Access Control is configured at the Collection level.
-
-Assigning **Admins** and **Owners** to Collections via Access Control will only impact which Collections appear readily in the **Filters** section of their Vault. Admins and Owners will always be able to access "un-assigned" Collections via the Organization view.
+Access Control determines access to Collections, as well as permissions within each individual Collection:
{% image /organizations/collection-access-control.png Configure Access Control options %}
-Selecting **This user can access and modify all items** will allow users to use all Collections in your Organization.
+{% callout info %}
+Recall that [Admins and Owners](#user-types) can automatically access all Collections. For these user types, configuring Access Control will determine **which Collections are readily accessible** in their Personal Vault and client applications (Browser Extension, Mobile, etc.). Admins and Owners will still be able to access "unassigned" Collections from the Organization Vault.
+{% endcallout %}
-Selecting **This user can access only the selected collections** will restrict users to only the assigned Collections, and activate Granular Access Control:
+|Access Control|Description|
+|--------------|-----------|
+|**This user can access and modify all items**|Grants the user(s) access to all Collections, as well as the ability to modify Vault items stored therein.
Selecting this option will collapse the Collection selection section.|
+|**This user can access only the selected Collections**|Grants the user(s) access to only selected Collections, as well as [granular access control](#granular-access-control) over permissions for each Collection.
Selecting this option will expand the Collection selection section.|
### Granular Access Control
-To assign users to only selected Collections, check the checkbox to the left of each desired Collection. For each checked Collection, you may also configure:
-
-**Hide Passwords**
-
-Selecting **Hide Password** prevents users from seeing or copying all passwords, TOTP seeds, or *Hidden* custom fields. Users with **Hide Passwords** active may only use items in the Collection via Auto-Fill.
-
-{% callout warning %}
-Enabling **Hide Passwords** prevents easy copy-and-paste of hidden items, however it does not completely prevent user access to this information. Treat hidden passwords as you would any shared credential.
-{% endcallout %}
-
-**Read Only**
+If you selected **This user can access only the selected Collection**, choose which Collections you want to provide them access to. For each Collection, you can also configure the following options:
-Selecting **Read Only** prevents users from adding, editing, or removing items within the Collection. Users with **Read Only** active may still see and use all passwords, TOTP seeds, and *Hidden* custom fields.
+|Option|Description|
+|------|-----------|
+|**Hide Passwords**|Prevents users from seeing or copying all passwords, TOTP seeds, or *Hidden* custom fields. Users with **Hide Passwords** active may only use items in the Collection via Auto-Fill.
**Hide Passwords** prevents easy copy-and-paste of hidden items, however it does not completely prevent user access to this information. Treat hidden passwords as you would any shared credential.|
+|**Read Only**|Prevents users from adding, editing, or removing items within the Collection. Users with **Read Only** access may still see and use all passwords, TOTP seeds, and *Hidden* custom fields.|
diff --git a/_articles/plans-and-pricing/2020-plan-updates.md b/_articles/plans-and-pricing/2020-plan-updates.md
index 36449224..c5968f31 100644
--- a/_articles/plans-and-pricing/2020-plan-updates.md
+++ b/_articles/plans-and-pricing/2020-plan-updates.md
@@ -33,7 +33,7 @@ We've also reduced the price of a Families Organization to $40/year (*compared t
|Features|Classic 2019|Current (2020-)|
|--------|------------|---------------|
|No. of users|5|6|
-|For all members of the Organization:
- Advanced 2FA Options (e.g. Duo, YubiKey, U2F)
- Encrypted file attachments
- Bitwarden Authenticator (TOTP)
- Vault Health Reports
- Emergency Access|-||
+|For all members of the Organization:
- Advanced 2FA Options (e.g. Duo, YubiKey, FIDO2)
- Encrypted file attachments
- Bitwarden Authenticator (TOTP)
- Vault Health Reports
- Emergency Access|-||
|Cost|$52 / year (incl. separate purchase of Premium Features)|$40 / year|
## Teams Organizations
@@ -56,7 +56,7 @@ There is no longer a minimum number of users required for a Teams Organization (
|Base no. of users|5|1|
|Max no. of users|Unlimited|Unlimited|
|For Organization items:
-Encrypted file attachements
-Bitwarden Authenticator (TOTP)
-Vealth Health Reports|||
-|For members of the Organization:
- Advanced 2FA Options (e.g. Duo, YubiKey, U2F)
- Encrypted file attachments
- Bitwarden Authenticator (TOTP)
- Vault Health Reports
- Emergency Access|-||
+|For members of the Organization:
- Advanced 2FA Options (e.g. Duo, YubiKey, FIDO2)
- Encrypted file attachments
- Bitwarden Authenticator (TOTP)
- Vault Health Reports
- Emergency Access|-||
|Event Logs|-||
|User Groups|-||
|API Access|-||
diff --git a/_articles/plans-and-pricing/about-bitwarden-plans.md b/_articles/plans-and-pricing/about-bitwarden-plans.md
index f6f696fb..4eb81ba1 100644
--- a/_articles/plans-and-pricing/about-bitwarden-plans.md
+++ b/_articles/plans-and-pricing/about-bitwarden-plans.md
@@ -51,7 +51,8 @@ In the following table, "premium features" (included for **Premium Individual**
|Secure Password Generator||||
|Cloud or Self-hosting||||
|[Encrypted Export]({% link _articles/importing/encrypted-export.md %})||||
-|*[Two-step login]({% link _articles/two-step-login/setup-two-step-login.md %})|via authenticator apps or email|via authenticator apps, email, Yubikey, U2F, and Duo|via authenticator apps, email, Yubikey, U2F, and Duo (does not include [Duo for Organizations]({% link _articles/two-step-login/setup-two-step-login-duo.md %}))|
+|[Bitwarden Send]({{site.baseurl}}/article/about-send/)|Text Sharing|Text + File Sharing|Text + File Sharing|
+|*[Two-step login]({% link _articles/two-step-login/setup-two-step-login.md %})|via authenticator apps or email|via authenticator apps, email, Yubikey, FIDO2, and Duo|via authenticator apps, email, Yubikey, FIDO2, and Duo (does not include [Duo for Organizations]({% link _articles/two-step-login/setup-two-step-login-duo.md %}))|
|*[Encrypted file attachments]({% link _articles/features/attachments.md %})|-|1 GB|1 GB per user + 1 GB shared|
|*[Bitwarden Authenticator]({% link _articles/features/authenticator-keys.md %}) (TOTP)|-|||
|*[Vault Health Reports]({% link _articles/features/reports.md %})|-|||
@@ -95,7 +96,8 @@ In the following table, "premium features" (included for **Teams Organizations**
|Max no. of users|2|Unlimited|Unlimited|
|Max no. of Collections|2|Unlimited|Unlimited|
|[Encrypted Export]({% link _articles/importing/encrypted-export.md %})||||
-|*[Two-step login]({% link _articles/two-step-login/setup-two-step-login.md %})|via authenticator apps or email|via authenticator apps, email, Yubikey, U2F, and Duo|via authenticator apps, email, Yubikey, U2F, and Duo|
+|[Bitwarden Send]({{site.baseurl}}/article/about-send/)|Text Sharing|Text + File Sharing|Text + File Sharing|
+|*[Two-step login]({% link _articles/two-step-login/setup-two-step-login.md %})|via authenticator apps or email|via authenticator apps, email, Yubikey, FIDO2, and Duo|via authenticator apps, email, Yubikey, FIDO2, and Duo|
|[Duo for Organizations]({% link _articles/two-step-login/setup-two-step-login-duo.md %})|-|||
|*[Encrypted file attachments]({% link _articles/features/attachments.md %})|-|1 GB per user + 1 GB shared|1 GB per user + 1 GB shared|
|*[Bitwarden Authenticator]({% link _articles/features/authenticator-keys.md %}) (TOTP)|-|||
diff --git a/_articles/plans-and-pricing/premium-renewal.md b/_articles/plans-and-pricing/premium-renewal.md
index 63ee3e6d..6e21b036 100644
--- a/_articles/plans-and-pricing/premium-renewal.md
+++ b/_articles/plans-and-pricing/premium-renewal.md
@@ -18,7 +18,7 @@ If we cannot process your payment method, or if you have cancelled your subscrip
**Two-step Login**
-You will **not** be locked out of your Vault, however you will not be able to use advanced Two-step Login options like Yubikey, U2F, or Duo for authentication.
+You will **not** be locked out of your Vault, however you will not be able to use advanced Two-step Login options like Yubikey, FIDO2, or Duo for authentication.
- If you have a core Two-step Login option enabled (authenticator app or email), you will be prompted to use the enabled option.
- If you do not have another Two-step Login option enabled, you will authenticate into your Vault without Two-step Login.
diff --git a/_articles/plans-and-pricing/what-plan-is-right-for-me.md b/_articles/plans-and-pricing/what-plan-is-right-for-me.md
index 78c50fd6..ef71611e 100644
--- a/_articles/plans-and-pricing/what-plan-is-right-for-me.md
+++ b/_articles/plans-and-pricing/what-plan-is-right-for-me.md
@@ -42,7 +42,7 @@ Will you be a Bitwarden Solo-Practitioner, or will you securely share data betwe
As a Bitwarden Solo-Practicioner, will you be a Bitwarden Black Belt using Premium features like:
-- Advanced 2FA options, like Yubikey, U2F, and Duo
+- Advanced 2FA options, like Yubikey, FIDO2, and Duo
- 1 GB of encrypted file attachments
- Bitwarden Authenticator (TOTP)
- Emergency Access
diff --git a/_articles/plans-and-pricing/why-choose-bitwarden-for-your-team.md b/_articles/plans-and-pricing/why-choose-bitwarden-for-your-team.md
index 8c5bae86..c018141a 100644
--- a/_articles/plans-and-pricing/why-choose-bitwarden-for-your-team.md
+++ b/_articles/plans-and-pricing/why-choose-bitwarden-for-your-team.md
@@ -62,7 +62,7 @@ with a multi-layered, defense-in-depth approach. Bitwarden software is open sour
|---------------------------------|:--------------------------------:|:--------------------------------------------------------------------:|:-----------------------------------:|:-----------------------------------------------:|:-----------------------------------------------:|
| Open Source | — | — | — | — | |
End-to-End Encryption | | | | |
- |Two-Factor Athentication | 2FA, U2F, YubiKey, Duo | 2FA, YubiKey, Duo | 2FA, U2F | 2FA, U2F | 2FA, U2F, YubiKey, Duo
+ |Two-Factor Athentication | 2FA, FIDO2, YubiKey, Duo | 2FA, YubiKey, Duo | 2FA, FIDO2 | 2FA, FIDO2 | 2FA, FIDO2, YubiKey, Duo
|Independently Audited | | | | |
|SOC 2 Certified | | | — | |
|24/7 Support | | | | | 24-Hour + Priority Support
diff --git a/_articles/send/about-send.md b/_articles/send/about-send.md
index 6e966113..027fb824 100644
--- a/_articles/send/about-send.md
+++ b/_articles/send/about-send.md
@@ -10,13 +10,13 @@ order: 01
## What is Send?
-Bitwarden Send is a secure and ephemeral way to transmit sensitive information to **anyone**. Sends can include plaintext or file attachments up to 100 MB. Every Send is assigned a randomly generated and secure link, which can be [shared with anyone]({% link _articles/send/receive-send.md %}) (including those who *do not* have Bitwarden accounts) via text, email, or whatever communication channel you prefer. Every Send is:
+Bitwarden Send is a secure and ephemeral way to transmit sensitive information to **anyone**. Sends can include plaintext or file attachments up to 500 MB (100 MB if creating from Mobile). Every Send is assigned a randomly generated and secure link, which can be [shared with anyone]({% link _articles/send/receive-send.md %}) (including those who *do not* have Bitwarden accounts) via text, email, or whatever communication channel you prefer. Every Send is:
- **End-to-end Encrypted**: Data in a Send is [encrypted]({{site.baseurl}}/article/send-encryption/#send-encryption) on creation, and only [decrypted]({{site.baseurl}}/article/send-encryption/#send-decryption) when a recipient opens the Send link. The contents of a Send are stored **encrypted** in Bitwarden systems, just like a traditional Vault item. The link generated for each send doesn't contain any data related to the Send's contents, so it's safe to share over intermediary communications services without exposing information to Bitwarden or any used intermediary services.
- **Dynamically Ephemeral**: Sends are designed for ephemeral sharing, so every [Send that you create]({% link _articles/send/create-send.md %}) will have a specified [lifespan]({% link _articles/send/send-lifespan.md %}) (*max 31 days*) that can be configured using pre-set options or a custom timestamp for down-to-the-minute specification. When its deletion date is reached, the Send and its contents will be completely purged from Bitwarden systems. Using additional options like [Expiration Date]({{site.baseurl}}/article/send-lifespan/#expiration-date) and [Maximum Access Count]({{site.baseurl}}/article/send-lifespan/#maximum-access-count), you can ensure that access to recipients is terminated according to your needs.
-- **Customizably Private**: Protect the contents of your Send by optionally [configuring a password]({{site.baseurl}}/article/send-privacy/#send-passwords) for access so that no unintended recipients can see the contained information. For text Sends, you can also optionally [require users to toggle visibility]({{site.baseurl}}/article/send-privacy/#hide-text) to prevent exposure to unintentional onlookers.
+- **Customizably Private**: Protect the contents of your Send by optionally [configuring a password]({{site.baseurl}}/article/send-privacy/#send-passwords) for access or [hiding your email address from recipients]({{site.baseurl}}/article/send-privacy/#hide-email). For text Sends, you can also optionally [require users to toggle visibility]({{site.baseurl}}/article/send-privacy/#hide-text) to prevent exposure to unintentional onlookers.
## The Send View
@@ -28,7 +28,4 @@ Sends are created, edited, managed, and deleted from the **Send** view in any Bi
Using Bitwarden Send is a simple two-step process:
-1. [Create your Send]({% link _articles/send/create-send.md %}), setting whichever [lifespan options]({% link _articles/send/send-lifespan.md %}) and [privacy options]({% link _articles/send/send-privacy.md %}) are required to fit your sharing needs.
-2. Share the Send link with the [intended recipients]({% link _articles/send/receive-send.md %}), using whatever communication channel you prefer.
-
-As the Sender, we recommend that you keep track of your Send's [configured lifespan]({% link _articles/send/send-lifespan.md %}). To make that as easy as possible, Sends in your Send view will display [a set of status icons]({{site.baseurl}}/article/send-faqs/#q-what-do-the-icons-next-to-my-sends-indicate) whenever a lifespan event (for example, expiration) has occurred.
+1. [Create your Send]({% link _articles/send/create-send.md %}), setting whichever [lifespan options]({% link _articles/send/send-lifespan.md %}) and [
diff --git a/_articles/send/create-send.md b/_articles/send/create-send.md
index 9d990b1e..3f8bc72c 100644
--- a/_articles/send/create-send.md
+++ b/_articles/send/create-send.md
@@ -47,7 +47,7 @@ Complete the following steps to create a new Send from the Bitwarden [Web Vault]
- **What type of Send is this?**: Specify whether this Send will be **Text** or a **File**:
|**Text**|Type or paste the desired text into the input box. Toggle the **When accessing the Send, hide the text by default** option to require recipients to [toggle visibility]({{site.baseurl}}/article/send-privacy/#hide-text) when they open a Send.|
- |**File**|Select the **Choose File** button and browse for the file to send. The maximum file size per Send is 100 MB. (**Requires Premium**)|
+ |**File**|Select the **Choose File** button and browse for the file to send. The maximum file size per Send is 500 MB (100 MB on Mobile). (**Requires Premium** & Verified Email)|
- **Name**: Specify an identifiable, meaningful name for this Send.
@@ -60,7 +60,8 @@ Complete the following steps to create a new Send from the Bitwarden [Web Vault]
|**Maximum Access Count**|The Send will be [disabled]({{site.baseurl}}/article/send-lifespan/#maximum-access-count-behavior) after the specified access count is reached. By default, unspecified.|
|**Password**|[Require a password]({{site.baseurl}}/article/send-privacy/#send-passwords) to be entered by recipients of this Send in order to gain access.|
|**Notes**|Enter private notes for this Send, which will only be visible to the Sender.|
- **Disable this send so that no one can access it**|Check this box to prevent this Send from being accessible to any recipients. You will still be able to interact this Send from your Send view.|
+ |**Hide my email address from recipients**|[Hide your email]({{site.baseurl}}/article/send-privacy/#hide-email) from Send recipients.|
+ |**Disable this send so that no one can access it**|Check this box to prevent this Send from being accessible to any recipients. You will still be able to interact this Send from your Send view.|
{% callout success%}The rest of this article covers copying a Send link to your clipboard, but you can do that automatically by checking the **Copy the link to share this Send to my clipboard upon save** option before you click **Save**.{% endcallout %}
@@ -94,7 +95,7 @@ Complete the following steps to create a new Send from a Bitwarden Browser Exten
- **Type**: Specify whether this Send will be **Text** or a **File**:
|**Text** | Type or paste the desired text into the input box. Toggle the **When accessing the Send, hide the text by default** option to require recipients to [toggle visibility]({{site.baseurl}}/article/send-privacy/#hide-text) when they open a Send.|
- |**File** | Select the **Choose File** button and browse for the file to send. The maximum file size per Send is 100 MB. (**Requires Premium**)
If you're using **Firefox or Safari**, you'll need to popout ({% icon fa-external-link fa-rotate-270 %}) the Browser Extension in order to browse for the file to send.|
+ |**File** | Select the **Choose File** button and browse for the file to send. The maximum file size per Send is 500 MB (100 MB on Mobile). (**Requires Premium** & Verified Email)
If you're using **Firefox or Safari**, you'll need to popout ({% icon fa-external-link fa-rotate-270 %}) the Browser Extension in order to browse for the file to send.|
By default, a Send will be scheduled for deletion 7 days from its creation. You may configure this and other options using the {% icon fa-chevron-down %} **Options** menu (see Step 4), otherwise select **Save** to finish creating your Send.
@@ -105,6 +106,7 @@ Complete the following steps to create a new Send from a Bitwarden Browser Exten
|**Maximum Access Count**|The Send will be [disabled]({{site.baseurl}}/article/send-lifespan/#maximum-access-count-behavior) after the specified access count is reached. By default, unspecified.|
|**Password**|[Require a password]({{site.baseurl}}/article/send-privacy/#send-passwords) to be entered by recipients of this Send in order to gain access.|
|**Notes**|Enter private notes for this Send, which will only be visible to the Sender.|
+ |**Hide my email address from recipients**|[Hide your email]({{site.baseurl}}/article/send-privacy/#hide-email) from Send recipients.|
|**Disable this send so that no one can access it**|Check this box to prevent this Send from being accessible to any recipients. You will still be able to interact this Send from your Send view.|
{% callout success%}The rest of this article covers copying a Send link to your clipboard, but you can do that automatically by checking the **Copy the link to share this Send to my clipboard upon save** option before you click **Save**.{% endcallout %}
@@ -138,7 +140,7 @@ Complete the following steps to create a new Send from a Bitwarden Desktop App:
- **Type**: Specify whether this Send will be **Text** or a **File**:
| **Text** | Type or paste the desired text into the input box. Toggle the **When accessing the send, hide text by default** option to require recipients to [toggle visibility]({% link _articles/send/send-privacy.md %}) when they open a Send.|
- | **File** | Select the **Choose File** button and browse for the file to send. The maximum file size per Send is 100 MB. (**Requires Premium**)|
+ | **File** | Select the **Choose File** button and browse for the file to send. The maximum file size per Send is 500 MB (100 MB on Mobile). (**Requires Premium** & Verified Email)|
By default, a Send will be scheduled for deletion 7 days from its creation. You may configure this and other options using the {% icon fa-chevron-down %} **Options** menu (see Step 4), otherwise select **Save** to finish creating your Send.
@@ -149,6 +151,7 @@ Complete the following steps to create a new Send from a Bitwarden Desktop App:
|**Maximum Access Count**|The Send will be [disabled]({{site.baseurl}}/article/send-lifespan/#maximum-access-count-behavior) after the specified access count is reached. By default, unspecified.|
|**Password**|[Require a password]({{site.baseurl}}/article/send-privacy/#send-passwords) to be entered by recipients of this Send in order to gain access.|
|**Notes**|Enter private notes for this Send, which will only be visible to the Sender.|
+ |**Hide my email address from recipients**|[Hide your email]({{site.baseurl}}/article/send-privacy/#hide-email) from Send recipients.|
|**Disable this send so that no one can access it**|Check this box to prevent this Send from being accessible to any recipients. You will still be able to interact this Send from your Send view.|
{% callout success%}The rest of this article covers copying a Send link to your clipboard, but you can do that automatically by checking the **Copy the link to share this Send to my clipboard upon save** option before you click **Save**.{% endcallout %}
@@ -182,7 +185,7 @@ Complete the following steps to create a new Send from Bitwarden Mobile App:
- **Type**: Specify whether this Send will be **Text** or a **File**:
|**Text** | Type or paste the desired text into the input box. Toggle the **When accessing the Send, hide the text by default** option to require recipients to [toggle visibility]({% link _articles/send/send-privacy.md %}) when they open a Send.|
- |**File** | Tap the **Choose File** button and browse for the file to send. The maximum file size per Send is 100 MB. (**Requires Premium**)|
+ |**File** | Tap the **Choose File** button and browse for the file to send. The maximum file size per Send is 100 MB (500 MB on other clients). (**Requires Premium** & Verified Email)|
- **Name**: Specify an identifiable, meaningful name for this Send.
@@ -195,6 +198,7 @@ Complete the following steps to create a new Send from Bitwarden Mobile App:
|**Maximum Access Count**|The Send will be [disabled]({{site.baseurl}}/article/send-lifespan/#maximum-access-count-behavior) after the specified access count is reached. By default, unspecified.|
|**Password**|[Require a password]({{site.baseurl}}/article/send-privacy/#send-passwords) to be entered by recipients of this Send in order to gain access.|
|**Notes**|Enter private notes for this Send, which will only be visible to the Sender.|
+ |**Hide my email address from recipients**|[Hide your email]({{site.baseurl}}/article/send-privacy/#hide-email) from Send recipients.|
|**Disable this send so that no one can access it**|Check this box to prevent this Send from being accessible to any recipients. You will still be able to interact this Send from your Send view.|
{% callout success%}Toggling the **Share upon save** option before you tap **Save** will open the share menu on your device so you can quickly share your Send link.{% endcallout %}
diff --git a/_articles/send/receive-send.md b/_articles/send/receive-send.md
index 7d6ee003..f3120a24 100644
--- a/_articles/send/receive-send.md
+++ b/_articles/send/receive-send.md
@@ -22,6 +22,27 @@ Depending on the [options configured]({% link _articles/send/create-send.md %})
- Enter a Password to access the contents of the Send.
- Manually toggle visibility on a hidden-text Send.
+## Hidden-email Sends
+
+By default, Send objects will display the email address of the Sender to recipients, as in the above screenshot. Senders can optionally hide their email address from the Send object, which will substitute in a warning message:
+
+{% image send/send-email-hidden-file.png %}
+
+If you receive a Send with this error message, here's what you should do:
+
+- **Was this Send expected?**
+
+ If this Send was expected, get in touch with the expected Sender. Validate with this person that the received Send link (`https://vault.bitwarden.com/#/send/xxx/yyy`) matches the one they created.
+- **Was this Send unexpected?**
+
+ If this Send was unexpected, you should identify the Sender before interacting with it. Ask your colleagues, managers, or friends who have Bitwarden accounts whether they might have sent you something. If you do identify the Sender, validate with this person that the received Send link (`https://vault.bitwarden.com/#/send/xxx/yyy`) matches the one they created. **If you can't identify the Sender**, don't interact with the Send.
+
+{% callout warning %}
+Taking the above measures to ensure the trustworthiness of a hidden-email Send are particularly important in the case of File Sends. **Don't download mysterious files.**
+{% endcallout %}
+
+## Deleted, Expired, and Disabled Sends
+
When a Send has [been deleted, expired, or disabled]({% link _articles/send/send-lifespan.md %}), recipients who attempt to use the generated Send link will be shown a screen that reports the Send does not exist or is no longer available:
{% image /send/send-unavailable.png A deleted, expired, or disabled Send %}
diff --git a/_articles/send/send-privacy.md b/_articles/send/send-privacy.md
index 425bbb80..c91051af 100644
--- a/_articles/send/send-privacy.md
+++ b/_articles/send/send-privacy.md
@@ -7,9 +7,9 @@ popular: false
tags: [bitwarden send, send, passwords, hidden text]
order: 05
---
-Protect the contents of your Send by optionally configuring a [password for access](#passwords) so that no unintended recipients can see the contained information. For text Sends, you can also optionally require recipients to [toggle visibility](#hide-text) to prevent exposure to unintentional onlookers.
+Protect the contents of your Send by optionally configuring a [password for access](#passwords) so that no unintended recipients can see the contained information, and/or to [hide your email from recipients](). For text Sends, you can also optionally require recipients to [toggle visibility](#hide-text) to prevent exposure to unintentional onlookers.
-The **Password** and **Hide Text** options are configurable from the Create New Send view, or from the Edit Send views at any time prior to the Send's [deletion]({{site.baseurl}}/article/send-lifespan/#deletion-behavior).
+The **Password**, **Hide Email**, and **Hide Text** options are configurable from the Create New Send view, or from the Edit Send views at any time prior to the Send's [deletion]({{site.baseurl}}/article/send-lifespan/#deletion-behavior).
## Send Passwords
@@ -17,7 +17,7 @@ For any Send, you may configure a password that recipients will be required to e
{% image /send/send-pw-protected.png Receiving a password-protected Send%}
-Once you password-protect a Send, you won't be able to view the configured password again, however you can [change](#change-send-passwords) or [remove](#remove-send-password) at any time:
+Once you password-protect a Send, you won't be able to view the configured password again, however you can [change](#change-send-passwords) or [remove](#remove-send-password) it at any time:
### Change Send Passwords
@@ -29,6 +29,20 @@ You can change a Send's password at any time from the **Edit Send** view. Changi
You can remove a Send's password at any time using the {% icon fa-undo %} **Remove Password** menu option. Removing a Send's password **will not** require you to enter the previous password.
+## Hide Email
+
+{% callout success %}
+For Enterprise Organizations, the availability of this option can be set using an [Enterprise Policy]({{site.baseurl}}/articles/policies/#send-options).
+{% endcallout %}
+
+By default, Send objects will display the email address of the Sender to recipients:
+
+{% image send/send-email-visible.png Sender Email Visible %}
+
+Toggle the **Hide my email address from recipients** option to remove your email address from the Send object. Send recipients can still validate the trustworthiness of of expected Sends by cross-referencing the **Send link** with their Sender. Hidden-email Send objects will issue a warning to recipients encouraging them to do so:
+
+{% image send/send-email-hidden.png Sender Email Hidden %}
+
## Hide Text
For text Sends, toggle the **When accessing the Send, hide the text by default** option to require recipients to {% icon fa-eye %} **Toggle Visibility** in order to see its contents. Hiding the text on a Send is a good way to ensure the contents of a Send aren't exposed to unintentional onlookers:
diff --git a/_articles/two-step-login/bitwarden-field-guide-two-step-login.md b/_articles/two-step-login/bitwarden-field-guide-two-step-login.md
index b43e4552..7630d99e 100644
--- a/_articles/two-step-login/bitwarden-field-guide-two-step-login.md
+++ b/_articles/two-step-login/bitwarden-field-guide-two-step-login.md
@@ -49,9 +49,9 @@ Enabling Two-step Login will require you to complete a secondary step each time
**For Premium users**, Bitwarden offers several advanced Two-step Login methods:
-- Duo Security with Duo Push, SMS, phone call, and U2F security keys
+- Duo Security with Duo Push, SMS, phone call, and security keys
- YubiKey (any 4/5 series device or YubiKey NEO/NFC)
-- FIDO U2F (any FIDO U2F certified key)
+- FIDO (any FIDO2 WebAuthn certified key)
To learn more about your options, and for help setting up any method, see [Two-step Login Methods]({% link _articles/two-step-login/setup-two-step-login.md %}).
diff --git a/_articles/two-step-login/setup-two-step-login-fido.md b/_articles/two-step-login/setup-two-step-login-fido.md
new file mode 100644
index 00000000..6a2ed656
--- /dev/null
+++ b/_articles/two-step-login/setup-two-step-login-fido.md
@@ -0,0 +1,70 @@
+---
+layout: article
+title: Two-step Login via FIDO2 WebAuthn
+categories: [two-step-login]
+featured: false
+popular: false
+tags: [two-step login, 2fa, two factor authentication, account, u2f, fido]
+order: 07
+redirect_from:
+ - /article/setup-two-step-login-u2f/
+---
+
+Two-step Login using FIDO2 WebAuthn authenticators is available for Premium users, including members of Paid Organizations (Families, Teams, or Enterprise).
+
+Any FIDO2 WebAuthn Certified authenticator can be used, including Security Keys like YubiKeys, SoloKeys, and Nitrokeys, as well as native biometrics options like Windows Hello and Touch ID.
+
+{% callout success %}
+Existing FIDO U2F security keys will still be usable and will be marked **(Migrated from FIDO)** on the Two-step Login → Manage FIDO2 WebAuthn dialog.
+{% endcallout %}
+
+FIDO2 WebAuthn cannot be used on all Bitwarden applications. Enable another Two-step Login method in order to access your vault on unsupported applications. Supported applications include:
+
+- **Web Vault** on a computer with a [FIDO2-supported Browser](https://fidoalliance.org/fido2/fido2-web-authentication-webauthn/){:target="\_blank"}.
+- **Browser Extensions** for a [FIDO2-supported Browser](https://fidoalliance.org/fido2/fido2-web-authentication-webauthn/){:target="\_blank"}.
+- **Desktop Application** on Windows 10 and above.
+
+## Setup FIDO2 WebAuthn
+
+Complete the following steps to enable Two-step Login using FIDO2 WebAuthn:
+
+{% callout warning %}
+**Losing access to your authenticator can permanently lock you out of your Vault,** unless you write down and keep your Two-step Login Recovery Code in a safe place or have an alternate Two-step Login method enabled and available.
+
+[Get Your Recovery Code]({% link _articles/two-step-login/two-step-recovery-code.md %}) from the **Two-step Login** screen immediately after enabling any method.
+{% endcallout %}
+
+1. Log in to the [Web Vault](https://vault.bitwarden.com){:target="\_blank"}.
+2. Select **Settings** from the top navigation bar.
+3. Select **Two-step Login** from the left-side menu.
+4. Locate the **FIDO2 WebAuthn** option and select the **Manage** button.
+
+ {% image two-step/twostep-options-fido2.png Select the Manage button %}
+
+ You will be prompted to enter your Master Password to continue.
+
+5. Give your security key a friendly **Name**.
+6. Plug the security key into your computer's USB port and select **Read Key**.
+
+ If your security key has a button, touch it.
+
+7. Select **Save**. A green `Enabled` message will indicate that Two-step Login using FIDO2 WebAuthn has been successfully enabled and your key will appear with a green checkbox ( {% icon fa-check %} ).
+8. Select the **Close** button and confirm that the **FIDO2 WebAuthn** option is now enabled, as indicated by a green checkbox ( {% icon fa-check %} ).
+
+Repeat this process to add up to 5 FIDO2 WebAuthn security keys to your account.
+
+{% callout info %}
+When you setup Two-step Login, you should logout of all your Bitwarden apps to immediately activate Two-step Login for each app. You will eventually be logged out automatically.
+{% endcallout %}
+
+## Use FIDO2 WebAuthn
+
+The following assumes that **FIDO2 WebAuthn** is your [highest-priority enabled method](https://bitwarden.com/help/article/setup-two-step-login/#using-multiple-methods). Complete the following steps to access your Vault using Two-step Login:
+
+1. Log in to your Bitwarden Vault (*Web Vault* or *Browser Extension*) and enter your Email Address and Master Password.
+
+ You will be prompted to insert your security key into your computer's USB port. If it has a button, touch it.
+
+ {% image two-step/u2f/fido2.png %}
+
+You will not be required to complete your secondary Two-step Login setup to **Unlock** your Vault once logged in. For help configuring Log Out vs. Lock behavior, see [Vault Timeout Options]({% link _articles/account/vault-timeout.md %}).
diff --git a/_articles/two-step-login/setup-two-step-login-u2f.md b/_articles/two-step-login/setup-two-step-login-u2f.md
deleted file mode 100644
index 6584ac62..00000000
--- a/_articles/two-step-login/setup-two-step-login-u2f.md
+++ /dev/null
@@ -1,67 +0,0 @@
----
-layout: article
-title: Two-step Login via FIDO U2F
-categories: [two-step-login]
-featured: false
-popular: false
-tags: [two-step login, 2fa, two factor authentication, account, u2f, fido]
-order: 07
----
-
-Two-step Login using [FIDO U2F](https://www.yubico.com/solutions/fido-u2f/){:target="_blank"} is available for Premium users, including members of Paid Organizations (Families, Teams, or Enterprise).
-
-Any FIDO U2F certified device can be used, including YubiKeys, SoloKeys, Google Titan, Nitrokeys, and more.
-
-{% callout info %}
-**FIDO U2F cannot be used on all Bitwarden applications.** Enable another Two-step Login method in order to access your vault on unsupported applications.
-
-Supported applications:
-
-- Web Vault on a computer with a U2F-enabled Browser (Chrome, Opera, Vivaldi, Edge, or [Firefox with FIDO U2F enabled](https://www.yubico.com/2017/11/how-to-navigate-fido-u2f-in-firefox-quantum/){:target="_blank"}).
-- Browser Extensions for a U2F-enabled Browser (Chrome, Opera, Vivaldi, Edge, or [Firefox with FIDO U2F enabled](https://www.yubico.com/2017/11/how-to-navigate-fido-u2f-in-firefox-quantum/){:target="_blank"}).
-{% endcallout %}
-
-## Setup FIDO U2F
-
-Complete the following steps to enable Two-step Login using FIDO U2F:
-
-{% callout warning %}
-**Losing access to your FIDO U2F device can permanently lock you out of your Vault,** unless you write down and keep your Two-step Login Recovery Code in a safe place or have an alternate Two-step Login method enabled and available.
-
-[Get Your Recovery Code]({% link _articles/two-step-login/two-step-recovery-code.md %}) from the **Two-step Login** screen immediately after enabling any method.
-{% endcallout %}
-
-1. Log in to the [Web Vault](https://vault.bitwarden.com){:target="\_blank"}.
-2. Select **Settings** from the top navigation bar.
-3. Select **Two-step Login** from the left-side menu.
-4. Locate the **FIDO U2F Security Key** option and select the **Manage** button.
-
- {% image two-step/twostep-options-u2foverlay.png Select the Manage button %}
-
- You will be prompted to enter your Master Password to continue.
-
-5. Give your security key a friendly **Name**.
-6. Plug the security key into your computer's USB port and select **Read Key**.
-
- If your security key has a button, touch it.
-
-7. Select **Save**. A green `Enabled` message will indicate that Two-step Login using FIDO U2F has been successfully enabled and your key will appear with a green checkbox ( {% icon fa-check %} ).
-8. Select the **Close** button and confirm that the **FIDO U2F Security Key** option is now enabled, as indicated by a green checkbox ( {% icon fa-check %} ).
-
-Repeat this process to add up to 5 FIDO U2F security keys to your account.
-
-{% callout info %}
-When you setup Two-step Login, you should logout of all your Bitwarden apps to immediately activate Two-step Login for each app. You will eventually be logged out automatically.
-{% endcallout %}
-
-## Use FIDO U2F
-
-The following assumes that **FIDO U2F** is your [highest-priority enabled method](https://bitwarden.com/help/article/setup-two-step-login/#using-multiple-methods). Complete the following steps to access your Vault using Two-step Login:
-
-1. Log in to your Bitwarden Vault (*Web Vault* or *Browser Extension*) and enter your Email Address and Master Password.
-
- You will be prompted to insert your security key into your computer's USB port. If it has a button, touch it.
-
- {% image two-step/u2f/web.png %}
-
-You will not be required to complete your secondary Two-step Login setup to **Unlock** your Vault once logged in. For help configuring Log Out vs. Lock behavior, see [Vault Timeout Options]({% link _articles/account/vault-timeout.md %}).
diff --git a/_articles/two-step-login/setup-two-step-login.md b/_articles/two-step-login/setup-two-step-login.md
index 26bf8773..a25a49d4 100644
--- a/_articles/two-step-login/setup-two-step-login.md
+++ b/_articles/two-step-login/setup-two-step-login.md
@@ -31,9 +31,9 @@ For Premium users (including members of Paid Organizations), Bitwarden offers se
|Method|Setup Instructions|
|------|------------------|
-|via Duo Security with Duo Push, SMS, phone call, and U2F security keys|Click [**here**]({% link _articles/two-step-login/setup-two-step-login-duo.md %}).|
+|via Duo Security with Duo Push, SMS, phone call, and security keys|Click [**here**]({% link _articles/two-step-login/setup-two-step-login-duo.md %}).|
|via YubiKey (any 4/5 series device or YubiKey NEO/NFC)|Click [**here**]({% link _articles/two-step-login/setup-two-step-login-yubikey.md %}).|
-|via FIDO U2F (any FIDO U2F certified key)|Click [**here**]({% link _articles/two-step-login/setup-two-step-login-u2f.md %}).|
+|via FIDO2 WebAuthn (any FIDO2 WebAuthn Certified authenticator)|Click [**here**]({% link _articles/two-step-login/setup-two-step-login-fido.md %}).|
## Two-step Login for Teams and Enterprise
@@ -41,14 +41,14 @@ While all of the above methods can be enabled on an individual-by-individual bas
|Method|Setup Instructions|
|------|------------------|
-|via Duo Security with Duo Push, SMS, phone call, and U2F security keys|Click [**here**]({% link _articles/two-step-login/setup-two-step-login-duo.md %}).|
+|via Duo Security with Duo Push, SMS, phone call, and security keys|Click [**here**]({% link _articles/two-step-login/setup-two-step-login-duo.md %}).|
## Using Multiple Methods
You can choose to enable multiple Two-step Login methods. When you log in to a Vault with multiple enabled methods, Bitwarden will first prompt you for the highest-priority method according to the following order of preference:
1. Duo (Organizations)
-2. FIDO U2F
+2. FIDO2 WebAuthn
3. YubiKey
4. Duo (Individual)
5. Authenticator App
diff --git a/_articles/two-step-login/two-step-recovery-code.md b/_articles/two-step-login/two-step-recovery-code.md
index 509aeea2..bc6e2d09 100644
--- a/_articles/two-step-login/two-step-recovery-code.md
+++ b/_articles/two-step-login/two-step-recovery-code.md
@@ -28,6 +28,12 @@ To get your Recovery Code from your [Web Vault](https://vault.bitwarden.com){:ta
Save your Recovery Code in the way that makes the most sense for you. Believe it or not, printing your code and keeping it somewhere safe is one of the best ways to ensure that the code isn't vulnerable to theft or inadvertent deletion.
+{% callout info %}
+**When does a recovery code change?**
+
+Neither disabling and re-enabling Two-step Login nor changing your Master Password will change your recovery code. Your recovery code will only change [when you use it](#use-you-recovery-code). On using your recovery code, immediately get a new one and save it in the way that makes the most sense for you.
+{% endcallout %}
+
### Use your Recovery Code
To use your Recovery Code, navigate to [https://vault.bitwarden.com/#/recover-2fa/](https://vault.bitwarden.com/#/recover-2fa/) (or, if you're self-hosting, [https://your.domain.com/#/recover-2fa/](#use-your-recovery-code)).
diff --git a/images/autofill/disable-counter-badge.png b/images/autofill/disable-counter-badge.png
new file mode 100644
index 0000000000000000000000000000000000000000..b0f4e48f3d622ff27376bcfa3ed08af7bed04bb2
GIT binary patch
literal 30380
zcmb4~bzEFO*Wht4+7_4M6n7ZBP^4&~Sn=Y;-Q8N;DKJ=(f#U9N1A}XE9o*g7;rBeR
z?7O>v?C_bnxk*lPBlqMa=gUtOC7D+kBp7gTaIfTKrBvbI;1gltKWHeh-|()+0XR6U
zZZr&^z`?`F$O)ZKo5ES
z3-2Ih@5}t6pEbt`!(Su7#bW)a4#tpx?-_<$r9((npjjp^bJuE3wJ&B
zJutUVUR^*wsvhevEuH;4TO@yljdQ3VoJIWykz(0cM2{Lui39pKpYq^#h{VZganD0=
z86<>TvJI;+MnnGM%|ob`u{nkInMZ)_r{=Ft&u;}KwK8V?W4mcFv_<{yp0(4SS&?rC
zB`B{d#(T~Rk<_0mLix|=Wr{got=n2^SOfpe;I^lrO}n7N<%cJI9{BDxrI5Yabq7!1
zWBb8Zi>Jp7S4Q^S*qG<8#99ss=UcdmkYVaL}ALA3Xe$>9>Q`w}GF1F#=|HjGhIwoDF
zpwerH$*Dsdg{6LOOgwk?11YMtM4a;%yT<$ElW)8YRVu*O`DHkDk{y&kR*2R;;}R2u
z!8EFo5yV3u88I+5x1(!+<_)BIS9(=-jUf#$QfT|O^ieQGoYAOzTK!Ob^YLd|<4xg*
z27&1Z_s9|sQ8{vk%v1;^d3iJ{I|8RaW)~bLqY(rlL4qx|#)aRx+h8vatpn9D7E!80
zJ(n052jHL%8I@AOdh(Y=dM$bW0af~AHrk#Tj^(tnW~>OuR~`-;9O2LgIH@4-8y!Io
zdB7$svTz{DfLIHrVaaVpQQuS1hPYy+bS~MZ=`Pk+{O+GdJ&fOw#?kqEgHGUtQA8yT
z&pYNCRt#(W<_IVV=FxG`G||a}(-Uav&g{MsBLb-Wg6TI(%DMXv-+}lk!cjlCf+M*d
z)KaPj&lDWy$Kl7SmquL
z9u0`ucLjw8YUQbjD;U8ZSL}KNq;Lo!kB^UGPZPZzBCXF}4a1br`Az}|2B^|-KsG`~
z=*REmWuCaJ3*x9pj0A@8*8Vg@V8k1LI9!CTP77SrcyW?nX!|Uo``XwAfvJWRjL1+!
zCN1Qdz$ioRzu2w;t=aHo2>l&$_Sm{enw>TczJN}rF~sFSQ6vdjG;$*<`X6-P!WyV3
z&`8lgbj1yG4#(pdNuk-}7We@8VF^%n?~b=K=hvSaxkBTf7et=et>LcOqvQHmhF^&Ys=IVK
z`TBa-E1X$K6O5}Xxk?a<`}Qj6Zi4Mhqsf=Xb$h#{VfrKOV4y>1IsA
znIaI>@S`EKA^op{HG?SaRlF=MK|Cf?>}#3z1Prer5R2rdboYe6
z)73_M26~3weU+Doe1#}ml_X19m1*S9P?S!7y{;7p82ozS1$
zb@uW^6Uoq*HBczep#-huw$GYb#EflOV%Bb3Xj;x%8BF-*NRC%duI(sHG0hZ>&4HXG
zKsqVEt;!+O(EX8_(g~45FTHxrn4Il0LXc*5y{ui>GI1;Dj@HNP(cUNL$@_8muK$vf
zizD<^5CoT_&Dh!qXy{CW`-%+99iJZmZ;$}&yM0CWj
z3uy7YanVd;?ym*c&RjmBZTpTC88*|^2;#P;;*U}K-=y6AlOtoCyF
zLT}qE!=@wJoc&wY70pe^-SDZ<=5^;vfBTqU`EwS08N3I)5JG0OBM}`*t?5*^_`bOB
zYC%Udm4=Ghn6dfS2qJHB^av8C^n1(blgBT6F?D)lNJI{{;Ex_(D2woXKE
z-x6!Qoq1bEnMu~h_n;r_BBdl{Bc+_@wiyZDV*K#Md8(>#U)U+rU$c9k_)y4mW@pCY
ztMj*u`5jcw5zez;1)Mv-#*H;18wsoknWJoeAUd=(ym4^bAYTXdJOh#i_q=`(Q)B3&>hKor@v0Cq1|<@GOprkr2EJ~N0Uzv)%&iscQzI6K+``=;>I@2qZmK)
zOX-uc+)CQAkf`^=pVJKDW#W9|S$YA5UwmsrQjArQhTy$*b`z?(;8{c3B;le
zhL4BWO-mtrc=pJ}$fF_ex{|usK4)7r?#Q_sUY#9)1Oo(_9h-VO*D)OGgPFCNJyJ=N
znmMoa^mUi(TAm)J9+r?d1BU{GRDCQnYh0>&H!TwuOxdbbwfkQ`GZhzHfODZbZ+?6W
z{9QQ)N3lH0OrEsDd`yV^M*U4|RvMSf3Qw!$gyl9!NZCN(QO-f?bd>vqIFOi?yVPtX
z-NWy#`Aoqa_@HEt)yaBmC~H!X-|^_mW6Hzh+?UybSzG^Xt9j};Z7Y2=OXzv+I&Nh)
z`FqNseEBo(NjFU4Aq)i8g=AvRvOK8Lvk2)NY3P4`vWznvpQBvzD|x8&bGTZsqZ5_q
zW1(Y9Vr#8qai6<_dO{*n#B@2$K0bb$8LUdO(@^~CQqWcWZR7jicj#X9;IF|x-a4z~
zvfCPsmaFgT7Sl&AX8Ui;yz2EEo+d(LU%8MD^C#Oq+$3y*NYknLr!^NeHLdAw+2$YI
z*1jJx2z8^+oaf>
z+6=k&7a0^8^&NPC&M)t@vflr_-@95kG;s5G$S$EM%FlH8YA%%188kbHY}OlaGL#|B-Vo#aFB7b#8idvrUaikA02uLAPl_9BAFC>;X6$?)(_Pq+f~~>
zOZk2~kCjIu8xfCwp${Hy=DNz;^0$yD%?SPUmgTFyeMNaY@8i~bWV`$2q*i{9_D96~
z?xL6?%B%~;N2$9nw{yErlPNpwZg-e>_om*0eyfcBouOvth$r7k;VyXKhzQqijau$T
z_^E!}Wdi&={JQqM*8FeaR8WPc9WoZMIw<}gY=1byh5I6NnTPA|>50u7#aJaGGNsGo
zzVWW*_}I?|8?Ff5fAs9>sqOOdF>8(dO*6Xq`RhwPH99GG{u?HhkTMd??La#zADqYc
z{dQj2;T@RX3(uJEZhzDXG#6dKHXX^PT5@KJig52?VKg{oczifSSO^~W2M13Ahx|_%
z4(<~?>3@b*;Tiv(2LTQ)%n}ai-+8{mt}mZh*cT@K?<-<_C>$#64j=Xn&PMo;-0+Fn
zi2o6W`vXgZlTeeClY?E=j2%r)ZJjLaoJTc2Qo|z9?Pax{;NafUy?o*2RB2D(;1HZF
zzi2sYDJlSr?QGbLOzggyvbo#Xzmx+f><)khZA_hwsN8L=ZJhw_BGmun0Kmd8(d^Vz
z|73Bt5~0>oRH2fzb2O#mW#eJvpcciTqM{OZG%*9HN=g4)9Cjx{ZQ<-}4`63^b8};J
z<7TsSG-u}&6cl9V;9}?EVuj^kb@H%vHgadRb)xxKA^%a1l&O=kqouvGrJXI+OSwkh
z>|C5hsHtBn`p?h5p3~Ib^1o`bb^3R+U=3t{Nnz(?<6!^4i8))E{XfKBQvN0OPrLqA
zo$yOx0Cgu*M@c&y8&g|n(f{gk;eTrS-xB}pIsYZ7V(D&bttDj%lXQZ$NmPJC;NMdJ
zGv)s(sr_G)+&morUGl%B{5Q#$CIFNjEn&}T^wNi-oWkt?N8JC+uWIUKXYKNmUES8w
zS(NMFBL5@$-%`TtFT?WRhUs5(;GbC7BoM_AX8+F#C5oZ!WTy`YCk`hkCGo`_{%{G^
zU+?2I>PY~uBxc}6+ZViDs_Yv7znE`(%Fr+v-->_69sfZ+jPX`Qf(5M*?frWyMn-ap
zCg;G{MXHaC@DIz!)=CYHEsA{FuGMoxa?5RA+ao~1ZP@la)$!QJ>7iUQpOSV#O<6>p
z!tdeq?5}Z5(tde+Tg&s~F}t$xsZ^>}S>xcOve*(18?XGwY-$y}LNqL1goo>$@m$FJ
z;u6&@pwmd%^eAUP8C`d$=>373hQ0@s>w3{Ch10k%@pG>9n_1AuB|+ulFRl78*)K@%
z5#9v6Mc~b@fhz*N2?!U570O|ZHs#M{+%T>B?})Jv*(ix`sV-~&sqYJt8CJkMbVfd>
zc~Za{hVkG%Au%eQ|9YGJs4^?mU^3VNMHNaa-|$4lrZ^yU@)z8ZT#b
zAQ^7Uf|3$G8a<(p6$7Z0-u4*6cg2|L?N{?w-6#tZy|=9Oi>goeE6-Qy^;|f@C*q5i
zb6c|psb)#uYWtwTy$h7}?XSm0wTDi6vn4%tV~7~t2H$?tWkQ3KwarqQ?Bng`Oj9z1
z5nMBKIr{-u6Y}hOqEDwWG87@r#Ol>#{S6%mn2E!D3oL-rhwBwTKcoWJIl=86Q7+|o
zyQ^=TwswT~2Zh_Xhusp+yuZ(?t(Y|mA1QlyKp`z2%UcUA%bUveDQy?|rk%)ySdmo^
z=b6_n4T=wX$DW!V=jkhC{eo)Nvnda0D`z#P7W$)}XU$A2Q-fD7ik=BF)nzToE86D1
zAYfUuNE-+QDybd;I4rizu&k7_ERYJhTF=4y5b^<&l_z9)?fj%0C*`{J*rzjH@sqr$
zd%awm&c&>O-(%I3s=OlJm%I3U(wHfu@3Zrl^|x-!>6VXcSsu;P8zdAQoJ0z`Rgq3@
z9sV^wHeVg-ac&b2HJ+#3O#~e;r|Y!)5AH+?;X@`HPy0wAd<)iU`lsQViRrdYOp!*l
z(;Cdp2UYUg#!IfE9zD4`)E~aJQ`$N->DE??38i$^W$WRLRlYpIzT}D0mpbfI+yP5iA
zbxpn6MVDDUJTj>9)FzlJA@@Dae4TaVn9IuZt#Y~dNYZ5#SaGX_AD`iIV8qnKBypZ)
zTMLky7zR%-92el?5XA$2=?@8iGev9M@gova^lL^UAI4zOGtznzXtq_
zKDZf=Ui(g#k+fD`JM%RGF<=hf*h$fR;xnPX`1HE0
zA#KgNX}4fJj(mR+m?9jQ?jM4>VTqp`UqC^5HV86KFrEVDt^-m9!wK7OdZEbd?h@bv
z;28yWRZq@{%Z#=VSy~GMIhON$?W}(DuSU+lJob(z9=GFZR%OHjj46)eDGGz#a2g}q
z>2_^kWo4x(GHFfiFi*qp^fGk@PiHB3H%7&xw>v+ac@9It!G6l-NI0ndimA|mHwxea
zMKA*5uFXVS*|6C2!?@^KVHQmw=Fo0Liq+m^TLnihwenz|&473JD}IHeor{~<_NO<8
z2LY@j;l^F;=7tM0eXC5A7iNDf%SU9>T(g)?<0Eu!dF6*o)r*c0MO&Kw`S+)~jstWw6@TRK%>^AHh+;M$DQ%!Y7LJq8gv~*vtLQk}X0{^(
z{U~!Kp408nWSu^KV8Uu=DF2H0d109DF5%9Y?KQpc<^g>~o$>V^A&36OZ$f0sheWx9
z9b5Z2K1mImf)+k*0hNL%N>t#LDc2S^f_
z8+-hxxD12I+2oeE4CN7~W%YeeBMhWajbBsVbfEs8w8vognu83+_+I1+Johk&;z@&X
zy?yT{vqHyhTQ6szFrCC+?zOc4+g6?kYa^II32o!{ButF#atBS*z{lnGG{%o?gjPsM
z@I(?&Fw%V7cCX~xg|*wf@@PBvy||PfGAxT+p7nTOzLw20J^qoL40b$oKYs?(CXEkk
zIDS9oboL-}`cA{V@7Vi6wjC9%#TouVke*dxG
z^SzOkeITflNN6?tGE79Q)!f7Jn;j+1=vy6Yyl7z1q{hJqN`Fk5fxeR&?7R8OehSjR
zu#q{!D?vgMC<;3=&-5^3;dGip^Rtm*Xj<>(6T7O639;S$!cJ-?=?5Ep>SNah8$x(-
zLFPBs@;bgpPFa{(?XackW3vvz7o}%VOdG3;rDOo&vIeIoKtgY91(qEmxD8ZeYr9!D
zuf4bPJx@myHThirBw*APJdq4dR8wL~(R0;Cih#YEmjS5WeJ%$SuFg|il(%4+4=CH#
zS{ZlLq@)X#>6OOYFL65KyD}37ZuAA>*r{T%zfcw!6KxDFMKUs>~o>BY?f-q)Y4U
zW?|(?!}qe-;A6jcH|YwI_jE|s=hxd7mQo;z3&srJXWlRyyEJN()^9k%B_;&`@$FH#U8=hre$cq8i3kYIO$kS%$lC&*5=Xu
zGc^Rg>OfIN+q$xMkV~GOpqjfWR(|P+-UMQ5>BGae7&}9Tv+61~`;?+gHM&4`0=5P8
z2Te4Z&N!+eXm~2&u()+qS~EZ|%TPHmhfmu68!C|bt8?7Ph|hO8z9&JerC8o`vG9p4
z)+{LtScWHrEKoI9m@z24vUfb`TH_!PtJ){A%B2>RITSn;ll
z4*g|^*g{-)I|iiI6%v}-7cQ_;V;i1>^P}6Z*6XZ
zlvXuEU!9X9_||DN0!SZ;FZ{dE1QA2uGupol)hyPItI`FWXL3vwz?Y?O!pvi&8t
ze0xD@*b=1R^d8%&NI~h`&xj;-V>6#yt#RxEUOPxxcMUVh&GiBC7KeWixf*tD&3S!e
zW3|!tXc>@vd$>*dwg^+mpO@=gBgGZ>-~t{I=`djQBca~w+mjfozk=LqDt#qg2k_`0
zY^YP_=$i34qHYEvaTbDt9Ov=I)mMzu_m+&paC!{UGOfo}Q5@De~Btq`?uGDmD2
zF{%}kNowzxuWi=4p)uavXqNyDkkc(VPmL?Gga*UqsW75tkVBxF8Y)n-?E)yk_SYOF
zAU9T>8v9)BR2UX?Zy>{m^0;sC3;=|g(m`Aiit&uuczO2SN|f?MUE&fpPKV_>2>rC)
zc_e;r-#3GoP6Mb8ntFU#r6LvK7K>bsYFf*wE`m(-1do7u0#!k|@9sz|F))Z1^EXy#
zm0sD=*k|aeC<;-rhl!Ulmo-pdVS)RkahImD4)c{pbTecH;lT$^Fn#pi;9;GRrahII
zA(9`oo^lg#3OJPwr(c@+jsR(9v6&DfhtU=V>z<$PQJ+jW4CSBPz!z+R&9f%@UU>G#8;Q@
zzAEw7G`$K9Z1%1(7=zOF$4Q9aH}K3QvhbPY%0bMT>GA`%boF?a1P&vXGDG85+Aa@JP7WOTAYaJpxESbpyelvz%!VO+0!~$sNJ(IHUN^EC_;(#>fa|
zB2(s+@I8F0Xt<+6Lef%7N@`)RwW>ClK)G=tEx?Od_6nW!7^X>-4ipW3D)`=IgZuM*w23WsYo6!_rHoh
zRa-NNftbab@f9|qjMct0Bea%`<$_!8$P9-)@ON6td-5_5HI$2oa#UAwm#d2ARgOQB
zF7&QrkWeo-
z$B<_Uu{~6B?UcZk^9FzGm`Dy0HM>9|N72~PS-I0NqycxvKJxhdY*Rc2Jzo#4(u^?7
zxmLdlT(dqihwbGJi5XEXzYGO9Et5s;mhsx6fGSyjrhb@@t-<+y&P~Bhkn!tu!(3`|
z(jgRp!N7cDUtz`o0C52*L3@C1{t3>*S%*@PQ$?hVir2!z^4ox@HHVR8AQ27fpUI+0
zEZSGv{SckFQ~pmPP1WdD<^A#TpWi-R)aCq09L6rBAn&t~0aa=YdpM18R5?i7)!3+vEbGv
zT?4_xeXXCI}T$)F9Eu7Pc){{wA
z!_$|3m{)pSa{dzCN{#rAo7FKMep!}+lGbA3*nUX?E_B|%H2>%T#Z{XgI%8Yt!8$re
zq+@n{m!@s63_6b0_PtVMb19ru1zpwYx^JbLORxBI>*Ur4Bs|Ip$5$N!t2I4ie3y52
zvXa9uT)3&Oa{SO$uM+>#XDp6=lU$_8f-@QzTHf$lxnHiZ3rLPOk)EGf^0~7?>2z)0
z-#=JBOR5Tte=2)Suj=R>#^DHSC&sy-L|yF;9Vlf-quvY)xC$)Yo{itUmSD2dPuFXc
zi8@yCOEP7_5=U&*fmB7FJ74&mt}zODLhwl>v&ZbEBY}Bwh%|g@hKpFK4pv&&=>%%h
z`j>lD(r@-^cZXI5p5Fkx2myI;CLV!nq;Z8SvXV61(%!5Dg(;oI+>=CajioGKw+SNU
z3XrSVPr-WuGCrCACeSz24g^Lim_+^Rbb@mZgP(IUe#0L6Gv?0dceR56hZ)eMUq>b^
zFB3W%u-mfXV32KZI!lk0jAq2mI7!G~ch
zXy1F^aGJ~H`QfO2tzL4;va5e3QnqyDHK5K(g>m`1p9>|6rd_Fk!nFDrR1!1g-sP<*Zs>
z7br9*D8&~V^RT&90W}`wi<={-*z~WSi*O1;Trr79Et)k98$t7%tz~Z8465Egt77s=
zVIkx4uFY^=J-EcX-DSt|GGnNijM>S@>7+U&FnB~4<1;#$vUR)X3`A=kCrcm`BTlc{
zi8&xyzC*m7;}ps@uZyY+%<}wO8z8kct(n-LVsp-Wz>gaAu7l&IyRC-Cy7@Er(yH)+
z>it-=N2`v9rIT}_ubJtL1!%*r;HAlaL58}
zU(UFICRD(;XU#&G#+{rN9nRfR7fY+6Q&TSz{!#%04XaRYBFPS)#>gH(CK^bDC^I3T
zSH%ydPwxoYoK1B>a*vHTs-U9mR{Yigi1!9$V?(jYF6R+t*H^(siW6&%1;7>#qX)UO
zgt)~yiZWt5TAVTxlDefZHIn>7ZJSUVZWtJ>U)XfnZ(ka{Wt&`fMPRwPKycDVqBL^01
zCJ4RVN`_0QKSTrBiW}wVPV_C4r9(-`QO|*y7V%sa|E8sGumOPX}Zr!}t$e5nW1Yp-*GIqU<`8{@ff;|+u=bFs)O47q^<%@EPqIvTD{
znZ}A*PNx(>nM+Zf#Ix`HHLR`+v@T9JKUh0sY=>QywW%lb#5h#zEGIYn4eobiWK|MU
z406Ou(jH0rM6ET(CS66(Vn05+pUJgZtM+!U%IoYp+2<(p|8}}sB7O`gg`G(UGcX#T
zvi{0DNpuE6UKJIFD)pwD@&KJyew=dQC$^BuJH0v{cZy+kww;7%wc+ckQ2^HC?t-Z@
z#B#hq`iU+K1}pQ3aT5AdQ{1xH^UR4AF
zK)d@<8~e6Y2C*bByQv&b4n6lskV8AO6771B5{>+KS(p%L_`X)>9R9snW(gbDOyffU
zxVm~yy627n#~YV44dpx2JzI>F7b%|_@51(
zIL`E2OMUN{(>5C$AP#}XlPKJ+OwGl4Q%-se3Jp}nLc_0i_{&GJS2!xC%qeM7Vu!ns
zv}e8Ft0NVl29T%}pq8d4YQo{kj@bj1MrpO~^jP~Xcrqt_wh=B5$Q1B}>r9WCQ!EVC
zP+5K|J!a}7g|cL8QBDV-a_v=aa<@VV1`D02E|qW!0R^KMgMzhy6NpkKx!?C&^FCfj
z?J$ZmB>=hUx&Su^Ntug=LZ}sF$kWkf<;XAka#eRpuG`+c=Usv1aPyZt=1fQZQA4$v
z${09qt>E_Nn5kWN*LO|xAd6*IhK3;}q9HaLy~`3bg;xQc=VcjR1z*!>kmlSyw(^=ysOQ<>##OEGsJ923pU$Z5j(aS+gveeJ5WSdC8c%~6@ZKeK+jk$>e<7`4$j8Z5HY26anGh_X}$HD{_h
z_wx}9i>C?4$Aq;BzdIVRxSnWE=#|v*!13B5KwEtOQwE^#vWXvU6%WOP5r8yo4G$u4$}U;`YB5{q5TaoqwP3nuR{)}NYmz2Pry57xO1CkezENOefX!Z-
zV|tyIl1d$~+
zP$DpBw==5imcS$d7OqHNW1zIx8>UM8OJrVBp@P~MY@0(Qx1>a_*RDB*(Y9P>GUG3w
zSnT-wbo87zT3U_67ndb2lj~dP5CX>AW{F}ay)wY5ZZnJ|S0yO>Us3R|w{xdgFK+J|9jpFMAQZ%i4jh3U{EWC8B!G%*(Hp1l
z^VxlvmI=3JKD&5!{=PQ13~Jkh5DI)3J47Z`w%_*3U1j;(!5Fmi
zN@i!B8*xA5vOKb&YWd?;cv$W1S0Via@UG7LQ>*BW{+O6KjIe1KkgoyP&g
z=(LS1CC<(+2oh_IgD#M?OHG@7p8JeX=Y-iyUuAcilg#}bHCVurR;6((KPZgcRjXyB
ziy}JZ?a^gwEA?OZ)C^4p`xfo2&!U0}U^*>#m+*Q59qf%&!DX_>^vZ#hYHClk@a0Zg
zM(rx<^KltU@?1am5y`zA%6Nm51nIZjg4HBVm|yfGx8D$$u`ZYPbf%X=t$3%h%2DyW
zTf#RIvK~x^1cYxw&(vQ>r(g001$V4GyyKS8)N{7k>dsYt@v~Op5>@$kwd(**H4Fnf
z*fBlNLG@|NUMsDfX_sHIq8V0dle`G2wj%{NDX|xMm7~&G-FIRp`M6hKPc||$_yMXO
zl5Lf{98>p)DRHYjKEHA#7x9>otytD}{?zM^0+|e(f|KHyOy>xZH%%(TI>Z->uzIH@5azIV$Q1?V!~F
zmZ&0{pOQl&sFr&^d%OA!hYh6pYJ?ZyPyJ@Z&^(7#gx}B_-4Ev%Rjs*GqYA;m-I9gN
zPF|)UIG-K!x};5AsyD%`?b?G*-NEAKW{idC6$k-yWaMd{3|VGAhlcPvn>zj2$I_em;fd(2xuxKHIf`;>{_r{`Yd`-4Ec2=6_&5E#
zK<{mbGw|_NEf#gznmH1yMU9_0_|mM=c6);UIn)k#@no3{*+^XSNR~r|XnWlki+_La
zw(eATMUh<2;+D#*T_t(NH__>IMVx3vFMy_NCMLHR>;v%F4h+!F_BTSuej=8gW?zN5
zQVg))-XAsFZMuEfDw-y|Gwsc=tCnplY3K^)#LSP;))O+wl@%$0dGF1P{!x(>WLb~!
z(U9ekS01FpGiR*G4)(YEVL&BYt@~HFZeMS05bK`@VZLG-6H78Z7{a%Zn>rFO-+nUh
zm_BX>&j(5uqv{#|gY)d1c_UaL6Mx<^GG367m|PXtU+EvX=`hlWi80t{hCZ}pflzA7
z#*czV?OcC>j9N{0)5%;}g@Y_lx_6VhMvG#iu8C5XxKQ81H_Y033(p!Y=2xjoReepp
zbkJ1-=B5KLhYLXqG_nA!!|1_$7t^_m%R-0bO%3B6L(DSh`p5rp%02-$ppgpS4?^5F^(DbRTCJ~S;kI;a_@C&-*ALBU{6T?MT)|`uk@1eUrgv^_3uaty1%(aJGfdsiSJ9$VAw&Yy+FSbIkOpmuOf$Fm5pxNt?T(kUasfmzwl>MxrBha1
z++Jx>
z#Gta2KJ?X`7Y%&%9ecpKE3LUX&zeLhuyQ*Gct&O$?-WqHTY@jOvU^djzkTN9OT2k9
z=zN=)zyPyDzT3{|Z%e;yD$C?6H)~{B*h)~+
zTc+(Fc5Yd~uF-CH)NaRXfwIEGXPJo)G*xGAx!r%AAtX}treEcQ@WiNH7f{#`Lr3=?
zOJm69^atHGm|Fjt3XU&}0T(M+;Jp{=6|Li>HnBWopd4V(@-#K6%;_$<&AJOy%GpH}
z-z6hyK7a7*i}oTy=%&x!+*xi5@j>WWb1b8o>zo)TI7t41G#yv6ADL>ws{WGgJsMWJ
zf4qOx1zfx*U;D6mdP`=*PR_t!AbFWR(2jPmCcZ@|P!@q~&R8
zsHciBfLZ+?t|`3ZM5;rO^JEm|DM%6Vj}asFvLT|%
zt>!->anT(rw|nr&iE+zl>h1qDKm~6{4Auh|l*MV){|2B60%1*7g9quq%=4F4KhdZl
zetNF_Blu6JihneG|AJ7xvER%8|0seZ8m1V=gR7weNE9`-Oi6RMi!a#}`nH=w%iiLWtvsc&r@k2Gl7=|rc
z6Y1gP_wGrM1Z7d;EbF(s#(fuUbOhNQnRxgL6uvua6GcUldd7b*Y>bD>9iPjbVW0yO_54v$Oqd{y5r
zB0mdb5y~zuE~I!+1gJ(~$Qt;%Dy6kVc`U29FfKc;#muj?b~YTP`D~E6`!<0_P7k=J
zq0`!;>vhN**WMl#I$HQSchKPZZq|hV)+--*P)_$ChqWr!BDUd?juJ
z$gyUG+vfFVYgi3D3!;3WB5UvSg4qES5|Y|2PcS#IR5yhqxD%?Db@xSZBa(X%U!DaI
zd)mc2!Jzq+Mec=&gNBJc7-?IT)~=tyz&VoKpJFi1;oUP}zl2+mh+d3%dW8>b7I{&}
zuC>;><+RWA`SF@v=(xq{wqNWCubSZ&DiJ*}vpLz5ol1dB|M*!6E(B7LZu`~ueqklq
zG)0f^M&#k78=9A(^d6My`Q5VZa}zrj_;)5f?_?t8Ue7V?RA(^5F)m1C5$40e6P`9t
zeowBbm{QVR?>)ecF(dXSz$g+<$MjmBz17(Rc4Dsa76t@aeroQ*U{2JrZOmVEo>b)K
z5zjC~9+e19tqMbsRcm3b`}?~D=2_t+U0a;dGLCZW(8OkZF^|?g0ZeKV@Td+HWH;?F
zHqvp)Wi}~{!qcLvdi%@J>mwL)&|o%4p8`o#kIt1&jzfaq-u;z0dhTqoc_#U7?~|{`
ztE`gqP*PjQjlL*mn5*g=5;pV&c=>2AeA0nvY$EaYVVK7j)=iH6&d0=t{&<$VAnkY2$Twdx-kJS>I4)FOJ&AL0IB
zaN?OJ{`_^+*S5_pKe_xH)oL>^{vhkhOH&ewjQ~#g+-+s*wNSMFPHr2fR8=dHV2>0OP-Eszl?`LVl<#~P-A
zmj2_Ori>m!G?m9%2w^gR+i6s1R`u3NI+6Y6g#P6p%@CUQhbo9<|1kfGu$gW0?ojv;
z#TqhVz}eEVuUljxusc+@O;gWhdNs>&on3KERp0+iv23LJ&Rudyn$mqW04?6k
zrGlg3uUWdyhqvyR`4J;hl!xDl;cNrrTG=~gaf@LceuP%Bfkl;J@ct*&yV8aJ%c1={
z`+RfZLxp&io{vB_ka43`ev-!f7p$bqh{A2rp^^o$C#7YRZY?qz#`b8fY{v@3ZN!L)
zo;hjAP!Y)kk>8&iLpn1|S@I+f&l53ph6(6?PB
zTmpd?95n^U@22}*`sHVce_#}G0Gw%Zhn(ZcmG9<1&=og+^lJ^WVs6j>W8yCxhkogQoqm97-&Gn2$H**yq>_3Nd(cyzS#}!;{bfWFio}EEqDkL*}9c
z@SUo8&NhhrhsG6SiYX%3i`;u25S?XwXpG3!-?K8eR%UxpOg_L%Ob~*;x}O!^!6DTF
zSF-DLNAvq(@RerTZccQNBw5MlYVB}54v<+-xWI_6+1d{Q+Ugh_pB+hPgu%nNNN+)n
z9^!$GMQfwxdOJ-|K>C9$IWSwht8Sr<*Nl9Iqx~YEy%+y;^t#Ui(l%DqIx;-A@~Y>t
z*NTqlNdQjI6I$2;?JFCewpo3zr24kY(vKWf?C;PTtA{cpp%f!CvWtaZE9PwKm%hna
z!*m6U=#`$pjL+2^Lo$3)?Lnw3j1krv3?%3m$*JaXeY~7SeS7f&x=_NKg}m_`Y#2FE
ziv0^i$p&9&KLNg1@k%o$c;;+3MPVCZ^>Ej@xzXXNi!Ue7vA403*gxlTI&3JdhtB(?
z^x?(K8KaSBdekz^g3PRd?H%Q9OKvM7$$y5V*Bs9V82VMy;Su)=AU7k{>Tq2Y~76aOMC&T;zlYP6A%RJ+>C-pa~@$V9*cBCU}QdxQuz6~MDq0F
z=hIRr;
zyUi)RYM8HP$#tQ3ITp%$2Ae_cKMWIdZJ@h`p|K{t2>uMcr5*I&v_D7lUli=L&TV6Ic4$iOJVb1nndu6hv=sl2dZ)7L&M9
zFF|abh7*)FFsGa=3TbD@Q{02>(v`@nOr3STTyK`ka*y64S|9Nb$E#FsQTbG}XrJA6
z5^^x&25dPJN#2e(82sG+V!Y;je3=l=gTQcOtNW|hu_8fy+8?+O?P33R#V)TRU3Epr
zl4Kvd0`tuqGxc+`z8GHJbE^r_D-Hm@OUH0BM$k_I*`Ce}rz62iJELIstnBWA=AYuJ
zL!`(6zX=JQXgspWou!YaUu@VzTWo_|x&6gye&tE_ikXYF`EWI)=8yGHOe*`HB{T?O
z`bm6;EmH~PCH|J^QQdT68BxnNN0`_*`9la_mbZokb-v1jfWH{afg(gJ-~(*R0J?p!
zbBo#*c=0a5hRR@YO{dAxOecDGL6HzpteH-8nO@qk)S&v&P~!vDp|7XO41d*%f^uWd
zpwJ{D1}O4?lxlw~*_%bip@%U8XuSUb=87CeX8@`QZ@`<79%j-AuK%E+9v$_)snF-3A5P*l2kYphrGL>kU|YVZu(QN~4WF=5b!
zk6oQtw&1y0yX844_BJYqSk_%0PSM8OlQG+r8Yv4kY+mAfB~X}bSO+(N~F76
z0hR6;p~OUx4v`jRFj6|CNB0N;0sq(Z{rTSc-TU9%W3cTy&+|ItcpcB<0*DLJ%6XyP
zdhO75{hY-_4e6rIir;J%Jv@@U+t!l&ke}}4Nd|37@LM?rN>ysV72U5#PLB_ae&76N
z5+5P97r`Eo;3QfCC{^ts;y|t({)%tK{puS+O!)L@0STjDR7xJG@5dL<`fWEFLFw8B
z^uMBFt_s3GJ9WLzpB-QBY04gOaWJGA+uT`(BXaQ7
z!32@Wk)qNFWDS$mi=
zokF;}cwm7f9GLz!uHRbD!9w6`gMiH)BE;VpU}GaXqGSL~A&Bl^HcrkgxF8u}=GA8vfj
zYl~F(B^o}r_{B9nMcRnB7!De$$P~ucP2Jfjo4pZ&yhI!z&u;sxrS=TJ#^A41l~cQ~
zzGald3c7c5=jV{lm%#+AG8l%DbY^JYlq21GYNwpf)s;5k0~aJ-R#{ZPS3-
zPl8x&r6@f$g`?x$i~Fx7{b;hW@2URTmkA*~o%kSox|(NEo$YG{6zCIzvL#x~Cp#Q`
zOT7|dE@RfORj_kXOWoDbShZA<{X(@;54++<6JUX?x`m|{=ffijaKj6}YFU)^XNG<{-8gD2`yNt55;XXAJf>=e}Wb@b;w%FFMG4Yk-`7CJ<l-4X>1t8{>X$6AW6Y9hDfmf3iuS!M_Y6tDL@Z@-?8&%u+Mte!*pDu_fImsLgpGS
zKJG!omus;6B9Pp09NY5u7wVA}vWL8zOky7}HW?~=BBcGFe8zPH&?yyPbU$hOr%PT1
zG&<~6Qj_B1zu)}-zAb7={QZ+1TX0W*)C|=pR0H7+|O5fIudnM#Qe!kvAaSB-$(7L{}BTsf8%B7d8*ekyr<$|M!xY=gnEX6
zCKA-MY*X_ymd6q6BK(W;SOVAC@-W;O0jH~86xgZH@!PJq`Esb+;`td6s}@t7WCxar
zN0^h>>Rm0@b0l4!o#pSj3*4h(9AKOL+7F}q*7ZWStVNK5p%%v0{zX54dpS0l;P|7c3h+SgD`ANpp8ncn@rks_0w
zC2^}vb?s)VKP7cSeuXPunVO@?v%MSk8Ezvt2^3O0r&Ul~S$Z83Vbv);xd0TSZIRAx
zm$>+BV6*8G-M_a5WXh~g1c$a7vr??8)au+S%m1>E=58p_fT>2*3hznHzWb6art0^L
z6#cs9IzSgq5eZmRT>?%tcJ;ukXHR}GDk38`)Nj3Qiw&um=mUHGqz}-RBA}$S*#TWs
zpGtXlkmufy^0O@*2Kjn4YJmd{esZiC8psd;NPhePila%;N8ZOXC&vcAiy!QCzb>tI
z+jz*p1YACd6?moVscsT}0>F>oDAk+YJ+WeDeF=~)MHVKyrRa>Lhl2y8bkbM-Gl!5>
zVLiODi~hR7J9k^D*{})8jwI`i`+cmg{F#S$_jxq?kNLVM3fnOeF>eJcm3Libmbx0<
zyWm}gF@iSXb%4T?a^s1C{5`9Y$NECRl{rR@cUqy&b^Lh!7^9xL`Eytgv2xN4`r|8Ev$_C-DmseSC~x4pOZEY
zj*d)pd=3y6krIpKEGE7U-cvuRG%FFX>e8_JH0}b2{Vbqls(0X-mbUT$+@pFV14oX9Xjb^CIUy~qTF@*q8HpcA+3(sC!
zL#cfh7#Q*@m_uxrS?o&aV&gJJf7erknutY5;ue=E!)Eon>M
zE5^E&CO?pAfBexa-74iWI+`~l=;B0SXE8>~@l6aznVEblt5c(xWvc=h)iM{dn%qcG
zo(Zx+YIck+SIg}Xpa8&o&_~PLLQ8HFV*mB!<$1Ez>b1g5#fG@}vuQw=IRH#1pN80q
zUxC)~D(^*Ba@BW$q4!)LR5mG&_;otD9taq>WH>t_`}H2-BeT`+`1oH88<0+d!;L_mUAh5Ob+
z5nt`$JOo*{z2*wQlGUdEshx77`ptdQJ35evh^L*91pr9EDv!?0zt@`GrYosg1f-?~
zrVo_?OPwm7uFM?e5|ssKFfL@!`JqCDiG6ld^7U+W!6KFj_cYihbuhTH163{+uAYxRP9MCRx>10zZxt
zGzCt54=}p@gkx$a6=`3q@->an8L#I3tkvgH+PMrU0?^pHbyyY@z*MAxO*0PTEb-8&
zQrI#Jf6)BRg+OO(xB%o~1nKEO1mb!Yr~~z#z-z5?0M!T&_uvW(OiFQC^A|#;M2H|6
z<_)=VTk{8pFj
zclw1pqFEV9uXi(w!h!8w9>Y%Ul;e+5LSHkW>0
zcoP>^b<+$wVVT$(mzDOoI1GiFny|?MZygXEQr@o8*8SxXMYX3tR}hS}n}jOMcow{7
zh_KjDYN2kvSTA!(YF9e_EQCpB2=us54F|}?9OFtM@p2zepY*!
z{FLMhB1JL?xX|y1)pq9*4wb(M2RnM|n&Rf%pCJ@%OuiMwX{Nqw1%HbNyVmWef|;UB
z^?)+>Y=YKt7U)S5zse>+r4>f!1p3yme=H_3{qjhEbWTxAXADqkv2n4{Zl|INn!l?o
zYERPp{dp8GCWi%YY8(%#ny4b}zlzC>rx3sYatz)=tJmxU+Y)0!i6?w(-NxBk*M18v
zdu}^^t|WW7Tcd3b95($hRYL~n&k>AxB3F|ETt3&dyj_n-nY0e{9V8M
z2QnKaRagMTWPpITU^>qSZ1`9Nz>-QI-;q(~l|lL>xu_K|Bo~04!o(9e!!oUja&L6Q
z1u;EZFtg}FE~c&)0#S*F=W2Wm@hA@hDqa4m$aBfR=qlOFgDUp~Wa83F&(>`3op=xVmF1Toaf-&vBQpCLKHbm&>b9
z)B(GqfkcM6t6hBT>3;yxmLdfdNna@!ncAu>0@h}II%&Vyw>K`!C1S%{PT0NyDDiS0
zwT!#(VE{l`i4atu_d=t<7-tH8F3^1$=p6m~N)Sz2t)>)?DAdFo3+VgaIJc@+p35IV
z(q~72e7iaa%#1#By*I1lnIoWbiUqg{yRxQRpINhRRk{g}E>6r7h;^p(D&jozTJE_@
zD<)^>R3lfF@lTa1ry$Kgc*5nw^+a;mx}43Se0FDs1O+L88G!PF*O73hhjfa*mFM3F#Gxs8w~m
z=SpK$Zx`n@M~B=|Fez;s$g-MM+Wg(8V^(}+yT_<8I<1XWZ%uYR3=)(J${YtalI<6N
z#*m16X^=2$3j4u?W@Z`VHQs31g`8tX`3R?;S~?D!J=riet&HR6SIL(%NzGAkVvOS&
zApg^Xg}~M1^SFE2(kRA7C2yDek^5tk6Ggk8y&nwFTD&W*+5*2ix&B1EpTRVwd&!5t
zBl(IK(`Z=_mvq9u4ASRwu6}@F=W;uJ3498=BeoPC{w2N$N@0=G<{Zz=f|T@zT)}sG
zVfoPyT2(IaA5*E<57pVh>4~1b%7!bJov2rEKq0Fh9Aci&AYRkkmFsF3^GVXRfy{}QcC}!?{dF&P>r
zdgaw8xsMEnnc-qeloH)E&fgMC^i6!MI#VPQsH{n3Z92v5ETn5>1bfLwZ1rBGtQ}|V
z_}h?iZbj|J_v7<8z7og3nodiuRO%zMrRpOqp!u${_){)8@mnGo7S6AOHhViqBGm`m
z67i`7A6gohcOF5##lFrqL#ST9PQQsMRG+8z>zfdysB4xHM0mxnJh#J|^H=tX2pEc-0=HEc(<7O)%n?|s)UGwY!}P!6ko6Fa;q@zY3053p&P|qJSu*I%O*9ESS+X*+QR#^^Mf7!3iZAsY>7a=UwrVQi
z=9=t20mC*A%BZOad4>gATFC^yBo3LxSj5CnyYPi3yONMmq}~oY&Pu3tVwGgHgXZAki*hBS}5~-GdMtY->?NsY%*p@yH%fVYr#7A%So>sdNl^sT%=NicX+26feK3wo0zLQrb>>v~E>Jp5v@N268((
z>MazUOr-{BLw8je*?0+izvHk*(0bQQfdG6V{j-g1|HV7dZ_BDp;f>8Fm=XXvtYfw8
z3K_L0>YJ_a>+52QMlQ=0#|r{bVu37n-_QFIiM`Hkq(
z?dXy!2nhTw^44oXYkpJ~J@d0xeg&3tf4;C33*W*JoXb9H^H|hGgB%Q$7deAa?ia1!
zn;)e_$S=hE`18(6_nq}6w_%jE&Sb=dBj(ta3DPb=7&CNrKjEf12_#ojJcLiaTJC*WOm=5LqU@%T?BvfxPpKeakaGdmN^*KsveR
zlYMwxD1`*0gH+joQ&}Q~W;(PuNONK^ESJW@{Hh`yt7El!R3C`7z=Z^!mfJedRA0!+
zWOa*6wWA(5VJKR-DYCrgwBzoJ+}p^9&k_POn6g9>tmdVx1!AC>$S|u_#kbV6&wJQN
zEf(CTqs<{xET0a2+TN5Xf>4~#I7(UP`4p^eDQ7|2@%?SPtkS#dqtW7
zcly?>6z7Gnf96k(;UUD}?B6z3!Kb<0-A~}M;Up>6=(MHG$K7LnfVYZ3=P>7ZnDq54
zpZD~wK8^?&%AC3G#|sbfO;SK*^{Nr~yY^e9njQ)M>{T1F4PY^Kc;5^2!MEC8$>O1*
zEGXvPct&+JYS!0g#~8y{n{t1P*oATuDaArOxl;kU9Rx45XFR?OCT+}0{I1kwpWK79
zq{CT9s1E;Uc}W<^T4hs1%>Mm3I0N+7owXB8cVlz
zZnVV0_uK@X$Tcy8aWca2uWTaSjViC}0?nV;=AyT#gExzxn|6CSi~bg0#aamjq=Uzk
zpbetCa_ix}pbL-94i`g&LBXf>;?qwd(E%I|#YWGHS`6;raL;GP#kIYlU=MC_?=HY~
zBB_vbYHSab*i|<}`2@$4dwscc&OS_(jbFMJSKaP6v!6|=EZTckDuqT*WG-2UU6Ejn
zyJzDC7zo(kM=!DS-+kd9aav3rHe?1TQyBix7qaqHVvva?B&0`T#~(;nerqw-Cdrs5
z($^=R60hlK0c0^hE?uvV)E~5Eq9lcj{t?D-47{)y?h`Qwp1k90{YDBW(A_1-QZ|Q;LWa-fP25L`4!6tZIK5q5
zaTbQqu?cFMD~txuF;*$Yg(Z!H*oq`d28Z6lUDcjWCAO2^TA1-zO{%BWm<7f&#YhVJ
zQUWCD!tKm*pv?6aaY?GO4Tw=$>knjU3%l49-g=N(MS)+^v$S22?FSXXtOkDL@dlhj6i5q0cEvcWA2t*by=R1
z{Dtu-Veu=Xr?LkF?Qs7bS`2#swip}DxE^z-yUMdP>Q@N$bY?R+oljR%zMBkwm&@vV
zvTqJ+>nvq-4+&G=@cc*t!^)-{#(pdoeeaoklv^rVUDVcuSK!Q@`YZt*(>hV-G0*1#
z7k7DPiS1PePj(8w76gU*DX6I+ew2x(@+^$7I(v_ZI{Gf;;0&g?t!-P#`6rRB3X|-CYfP1m@S1nE^UAB2
z(A5I9#8jW-+Knv+VJPCefC}5hDv#OORY<^5T{3#
zSetx{ihZT}?*z@vf~>pXs^F3m4l9mC?|qXzsj#?O6MK!o;cpYhZmJ?x2UYfph>P%_
zk<%5Lu7x|VsS+<*@12u^=QV@QDN_)eZ^7lf;+7Y;^%+HxC@JQDwpK
z(kgB%MLDlJVz;<1sXMD@E-`gZXE=ui3X9V@TOzch#$#TI$$J~+5A2|vpSwlM{A1_?
zj}zzv`?N>b3|X49yG6ShOQv7gaXZG1;F6aL;$bSjCU(zW1|?29d{o1(NN&;5t*!61
zVeaL4Wy4s4f|p#vju(K^GOz;|8u=>5jWl2jDO17aC2kj>^ct)
zEJnOk|A3E`R=LnxF^;;YbNpID>-#nUg|sFo*-Uh^$yBUQu|ctJ^+p=IKC!;9xR%ni
zYrdn{2u+F(h0TUsRdQUOuQfUo{K14m(lhbxgmgacMo3UnKbBhqzd=Zd(=n%#VSb5a
zMbIZQwOHjWf8Z}0*?H5d#n~zh3-Ei1s<0|xrs1)?`Lf4xyvFcTq9CUH*K(v(nfi_d
zOlW#?s?y%-C{MNsqBJtpUA3HZel_hj=^N`oTV`L4c@*8@UDqQ>>PMF#db8Lg16Nyn
zMQfhkFG-kg9Y-6^kqr^vso!o(yCddKg1>0U(pTPi>8AQhyV9pwk-p*iVawdqugnP^
zx5=e_{^VObOBsEIC;0M#(G-snx!+Omwzbj}>*XUT$bEJCI}2?>4;iy7#F>H
zH}aAOSL?cXPTpnD9T14Ru6AwG>|O;>FG?c`;iTb1Sr{hn_N8M3Bw~{t3YUB`
zy$XK=Yu2EfBg5cn)gtuXhFyxovR!xFSiViVXZCVU&yL|2vxS>Ty4t15nuEq{O#Hy{
zkWf?Ba$}2a7kvNMW9a^p*Rt2Pq}X#4r{#EII^$`B`6rJzjziyioHbAKoB$0ASi`+J
zckMOd%6Mj%TQOh3B7CVO3zma9pm%VO5>Uiq_K{lm6!|`qVgDYJ56-j~72w$}}VO<*5Az9n8G5o(;c%z|<)OkTkr
zK4w3W*`KrWA$j}z*S`9v=}Gdkzx?Q~g4qD+BlvY%6zNePJKbBAm6D&Dv)o?o`HQZb
zuPx|UC+74znx-9X4xE`+-b%+ot+&PY?vPc{_J45BAH~76Lpr2Fe`?0E>&z72+C4N&
zI8#~YOl{mQ<*bTG*}V#$-KWL
z(=VK#eyTR#O5bI_)3Ja~;i8+|S31yHF4zPLNnXRk1<
zj>H)_KP?_YKw|b?UjQjo$$5X$2O@mdNQDi1QNAm66YJC2_j}m!%U&U+ATECUkfr?k
zK%;G|odD{$SmC$H{p-$o4HIu7Hpw*Tn$ukpGPh?G$fe4@yC_{VUfrnyPgWV{-1XxP
zeN%w=;**+4aX9HPM19&`Ch+(*;C*2wK7agYWbBJJBtX%$3ExxRXh=h<#>HXtjJ$P%
z$<~kNmHu(RIiiV9OEtpD#
zT|OpT2JBgrShm1Sst*(MKnaTH1K{2GOcFPw*PM4UI
z(I;cQ&^Wn;b9t4uYJWd;LMmrQTiU}3(VN%vm+Vz?uio7U%PA70WUiGUtKu~)o5~m0BYc{vd-N;YvZpH)Bru1sasqMu@tRT8pIo0Sc6wkGD~z&p<3^q
z9h+8(JYy`w6pNfNHp+yl23jC13b?CZ;YG>Uxbm^$WeCVM@
zR^pB0xOiB$1FWf-$`ogQFNrA*Id|J`ot>E_sIp|v2HGBBy+1uF5GFC^>EWV
zA{w5st6tKplaT+TJ8FQs+itif5t)>`k-Thjxs}~P)nv>NX0xNDi%t`Hb3qF>>z?9Gsb>=Zr!$D1pVi^B
zHqOPqtTj92HrNUVYmCqB3YpZMH*)KWR&eUJ)e8cgcOB%Peb+kY3w!vTM7Pgerfb}>
zg9VqrLYstq;=7}-;DWPer9%Sh*zH|0sp>&3JvRNfNZ+{PR7$33japqW>8v!KKz*vy
z4#qISAg-&!eoYi|Y&zC<9G%5Vdit?{$JLHiLfLYvoc*_P;QWudc_3cVvopO4^CADD
z2=I4=Um^($Ol1@jGG+eJ08UC=Hv4&BAlF%A#_@&Icl^}|OGOLQ_Cf5+KFDPh6)(2S
zB^zYk_iVQg9U=kD_pS@xstnx2Ry_HQ%!za62Lhr@)5TIw=*M)JMigGtF6*B4@_Xc0}kZWv*pmG0{R{
zC^e6$Sf2Q^2s?64@7v9e;?Ailu>p+IFwe71r-62`>23%6MarR3)lOJTaK`7m6|}dd
zf|A1W=8BrgJXP(j70Icc3ot;SEbA5pd&vFrjHdz26PC-zlx^cyz`Z#5Z*;?u_kXHir&m2K;U3d^nHmW?}>Nj&@RNmd8ldp`;S5=h=IQ<)te`j0U6>jD8
z&?vdj-NFsu@Cj1bgrA(&!w#1t88A{R#_pVqU*BGUfb3q6!-3mnRKh2VdLU@}h#VGN%@};p|7q7Ym}0A
zzq(yRMCQE{jEE<~xsbF@SWc+f?RO~EmuOy;NOZd`tY50M@QK?%H50YcPwtmTaYtIR
zH6|(WSKa2SqOVh;dWL-(2vIF3dxf5$Ki9cw6_A00*AK6Fm)0wKtp_YC)eaY{VatT;
zRQz~41UFanVq=yBzMx&I#T-ZZb9}G%;M98b1VPjyY#
zN9{AEJ9sxPhyUZ})yWPX20Sk(#pZ6myIYg51;<&#BZl0adlwx~V5Lxx#ojgUvO-cU
zeo#_4@0iEMAjMwr2hvmQcR7y7Dd99B_U@sjb{Zwe$euOT@ZV4QaP3P
z=T9d-Y;A7D7J^7kMva*b7HHf3#bZ|ipmLDn+tAaD^*jTzcSn^Pran2v2Sq}*GWs5R
zh`)|Ev!|5qv)egOihK!NmCeoqeFJCj8P%$}<08(;Feo3TAS3G=4{%vXCbMfB9Mhs~Hw8*ZkO`
ze1lm_Zts>t8Sfqf%^cupQGTQ3?4MU|GfJ)z`(dAlPWBQ4KvjbmYS>NQZNCaS4}9-m
ze(&SIzXIm&D`Y)d$7^kc#3OSu`qn%tO_W9i2O;5N!g)!o?}VK{Ed=n?WdT_L(#=-X
zEBNQNJF5!$V>T50g6U19#5j@O#lQB*=MvRx_LU>H%9pr5^3TtwM|Mi!bY
zpUC??g#ByL4n-zU)IEiN_C6?OPjxWii3i`QZeOA+BfBc?-x0;k0Q?Q$eM<-2D;rW@
z!=sDza1akl|
zN9W=JE7k)R^sN8Gz`o}_u07B3ASa&y!V?-O4Um2Hi_#RauA%7@abvpz`l%DAHj?-B
z|6bE`E>T=2eyv&)wv^4E
zoiIw&SVK5--sLOTUtf}rbqk;O0~S#sAT``#FH>N@2ck(Z3}68km60~+a6~_rIi`}N
z>trRzR2ZMV)bZ=6kC1yU)
zC08Xt`lYLY09>%xhD!P^i@$Ligz+@=z^v1Tk6*hFny~`wE+;z-Wo*nryHpNDT($6qN9bqrakm`@2PSs{g1f@z-a5Ia-7z6
zNIA!WDO4T5Q~0f1j^j>IP_Wrx;&%HI^L}opipl^E3^GQSK<||4L
zP!k8o@v*@L*6>XM7cpk06RIFWofYAfZM8OqqjGBHFM#
z5lxun2p#DD7s#T%&ToQArKlOonsWD&NL$Q{fqw+-BQnU6k}vBY=>;>E@Z%DAp~$p%
za~6vi02!9v)7}Q~tOgRxXu16CfA{qTr>HJrXe&GKt{wEM^>DkU$kRZ=fAq70tFCnG
z6AXU@cfqqi+%{rBMmYX@<1VD3jrCrC?<4z#vf9ZPORc1IQ3YbEcH0MVz_iG_gL%;Q
zH^Yc98=bytRhv?npOaBosGR}KtO!)g1Stl9f9q0#z9mrQ&?IkQBZ$5Cr;*2z>!@`R
z@C@hyF13_r7RG_y#-RgEzorcx0V`e?@md=NdsJ?o@YuA8J^Od@w0(jh!5Wr=-R$}t
z4FEg;ng*Df-P}=I`NnUHAaT8$ZKR=!_|R6smdIvnO>%Atd3f8J4b>3Lp~YdlU488V
z8I^y4ppy^)uZmH1x%qL%^y=96B&rV>0HZjJZYK1l-EqQfp$x+EX6sM-Wdjo+7HAIn
zZ-$HFCOd{T$BJw!4i5d=s_I9$EGAGi)0}8Y8130`HV`G9Q_b@=*{hd=qjVXJEgYWCa
z$dW2O>Z_i>-gHCYmf1D)0B!%w&Wo1V=i2}WjT$E-Vs
ze;X$46=6xc`J&{`i@&d#`Uu$rC_^;%$=^B7nv-BAf5lS#hL9NnEF%z-KXf0O1q1}7ND&ke>77Ui
zQRyJP3P?>rAV5fN^qjNLKKp&|oOACh_xs-4BbjT>l`+Sd^Zzq5Gv-)}@RcwJoYGd;
zQU^##06>%Y0toX!vl`sl0RVJ$0YLx&r~opO(*THABO$&35_W+6R~-NpNjQG1t4BBk
zWPknq4)Od`h~9o${Pj%!3V+PaWdq<>e+PD(dPf
zVr>Vru@|w0xroB8-9*Jiu89KjN^m!8Td2JkkBz;fv#SE{b_0r+$JtJS*H}vTny%X|
zdnad2e-C>D|2y|={h_w9cDzc8Jo0ckxQm;My_Yo)+~uLGryN{?_m^`yV*TgGqP#r6
zns`AKcujQg^4x-X*z-tA?Ma5)g
zWks)vi;9a26I%#-`nh^p!-ZWv`TpiX)!x(A!`aQt8Rp9K)1$Qw%-c(Wm)P^KA-NIZ
z!-yQX{pS2182C;7iw9nw->&6Ut-b7TdDs(=L>7M1EPPE;SWNQX-)QC)B|;GWD~6xd
z-^ftp`BVO6;70;HUz@&JXH^fhTIaZXYhfa+)baZOT8@-H_0zidvi
za0J)qt~b?Ny|6#ia;Y0f_y90b0WV1gK_t8YDH92ZiG2V#*X}^sFg)-Oq{#$G@WDQz>g<
z)*nD$l(6v#p{8MBJ;%n*e@Wo-6+uZUX_@P?a<^2~)HO7bV8X23In%UafJ2*Ny
zKk)SO_VI=L`G-CZ3y*m6G%_Lac~Wx9i`2B7+`RnP1%+?kmRD3(RoB$k)wi~_cXW1j
z_k0{28Xg%P`#L@`zp%LUZFyz&`x<6v_s8D;0rv3dCoW=y{1;fn<6n^d0T&Yy7bzJT
zh>Y?lE)r7TpTL>O$S;UdoL1JOw01wkD;`XBRwe#bSqn9vgg%l2loVV7;H>ozrJ~q>VFVcOxr>09gKyI_vNMo=)Mv=<}c1
z{WIMkG5mg<{~5b~7yBQ5{=5DC(eC&C{ZaSNeEwedud!#--ycZ(h;JW6t&A&);+wd?
zrWxao1-=o0v45(%JvjQ%Uoo97>Z;M&y9l1({?R1htezTxB=n!)aw0DS{|yC182H(D
z*YMuS8IAg(4Q~q-+8Z%uwlGJ|K|zJ~7WP}5+U=|Xk)JE==Far97b^Em2rjq?e~uJl
zSZw!aeq9F3ws;_oUh{R+@uV;MSS0`K<~<$WS2rRrc+-8bvU4nar=f=JKO0
zB(?t-GDi(byO{vKJwm*
zMHpVWlO8Rj=!lsryB|2#OdUdTTFY@R>vZGC#uuZ|bP_hCZil(6|J*{e1bUb~;z=_Z
zf(7gDH-AHzLG<*RzyDWkxwEZ9B=pMX6>4^B+f47LIZ>XQ7w0k~kzfQZ+IGIC%~^^z
zi_)oVe0r@getP;wkGr?L`-+X0yM%mkRPCnzSGMcSLWuL&2Qw7!u@Agxt>-hY%q0xA
zQ!q_7Rfag3iF0^Vy2@Ok~}iQcZ(^C`ct
z_nD`oLxh^JlnYH}FxK@M8qA%l1;}O*l;g(e01gbZaTQ*SpW$(d23Q+Q)AXDQ(c#xih$Eum*G75h*e$
zc&0(V^2XuQ*WZb-EoClfzPf4~-79h9&^_7ZX~To1Il8nR_eSNglJE@KTQlw<;3P{-
zH1D=hlfsx?(%!U1?n4n{qYTZybe*29&EmZM?NS_loN7*_&_W;La!w@hzo(?vGJv%K
zZ)UYU1v!aooxXj{D8Te@3Ne1Yov<0I~DofvUJmwjL%YL&ELQA@mtfv$-0>_+*x=vX5R@I%fW{E?8fsd*@6#{Ju9?smO;t!#Q8xX200ug@cYO
zY32@1sK*InX96-ul;xvC3f=cSEyK`{=3<&Fpp=ma2*bK8X;am!L)EBZ`HX$8o+*!M
zcZiMoq%xGod{Vtk?Obb4&|AuEP%wmB<7($Jbkb(+y1^qgpIrhFid03)f4k4t{?eKG
z#md(=*6%Au&pNM8`O8AUl1q8BPDR{Q8ppB-m84sZK1_+@D^tkRyh>m42tc?ih5(%0
zLT-O20E421excWEi><3FFxZIl2|^+VUH}ddwW!o-
z@S{}c7SA%Y{uuu?H0@&ng`gsyqWG1lg;FW1f4(z-bCg_OgU)vCZgF*EDeKZkV#V&V
z1&+A0d>{3^nMKcImX{I8UBR
zXW#K@QHEHG+ptL=iH-GV8l_)RbU1I9#cleIx0jh_R1iglU24x6a!-=E#gEyyyDRFG
z1a+vRjEcDH-mMJ5O&5G5*rJNsaLT#{UHZpwMVBo^M<&%XMpJYKh`*qt!~?6}{Yiod
z!^Cx%8=Jm>I)&9}w*zE)%Jjni=EXv2fJ
zM)EgsU(K`|E_YwJJ`_m5aiOs?$uW4+Nr0A@ZthI%Fv)_MV^@I9tT{IE(E>Fugz-Cz
z@4*BIIgO<-+vk$4#gQ^M3hE8`LQSPojNItc`I8%(7?zkf@Y41PheSu@0$XK+lRk%Z
zUEHS@E&e!9tJAzuk2Zn$?k|o}NXHDF`)K2kMzMm~7Us^lbQeogkj>6VOtOVCE6p8;
zBoN&k*V4UAX)Isy4E(?h;}e#@YPO+xA@ZxdSzl(1y*rF8>Qi)UF@H?I$m*B2qzv*>rpLX}+ZM`L(qNch-GR%eCi`3)l9%FXed|x#EgH3!hcSK*Aag=5FPx
zHglkH6I$i)ZMWjTI0
z6S&Eg36^Ga;ir5UN6Rur1->M7#U;%C+lv#a%%!SiaT)5msHCRO6u*xu26
z>S&yk@AkRS>V9c-q0T~P&M_tz-Dqam`O1Z~G*WWYm0oF6hE;kZAS1oA&xLH4QLHz~
z5qO&|90ahvt1-sjDqU;7f(_=ZF+!nZ5Gq51GxKelHKU1Yu2u%@n_~5xTNmH+L|ZKf
z$%#_qoZe$Zs$Q>-;kiZ-N+&3~6!zN_(Rvqs2ijjv!czDuVeccDJ~Dk=3U2AD7$a_J
z=oJ~(@#irV@rCeE6?Dh@{&_FfY9=uMx8Y@_tJ;~aBUR)&u)Frc8LxttPLywwpVj+c
zD$Fp~h4&Si`<~U8neuEN2}Wo28?W?*O4cNc@6{EES8>Pka9r4b9~PHeBW
zS@WaU1y)dp=F3Pic$2cjlzGAuGb&{2t(I5PyAAwZ=-};RQc2ALy|aRaA3#CCCOD6o
zxxEKQme}nU|HeTvSY0>ZqXpB6tX;emGdes4lekzDi{l{xY(J*WTak=-jxT-uc}K&n
zGGj2CSUnNDot2sxv-|eEWSKX6pk4NK86CO`72#%#dQV~N086L1OT)h(00AR
zc#$FE*aMoT(WMLRq^UW`1dS~RNhf-(?T&YGignsm(|n4YA9>MPQhoE05@d`3&|=eX
zVNxPC{djg
zI|KLmFNIAuGnvK%N8&Zn2nojp0>Ch{%9{JFUWKV4FZ8+lR!Jy?4M9KpuJH=y95!%!
z$wIZqQI5{#OsmN&9Gj^|8S}v_=EJ?kd+d-dj;F%Sw^)jtFL!bFES2F7xWAxS7rq{|
z*CHPJ>R0^0mmXyG%_!Y9^-;RAAjf{Mz)<<%xy5wzH~#OJ0z+JLeQOSJMN8l~qltoO
zMNym>_MZ1NShc@u)w`%+b|bx}yf$^iHloKs67Ck%t##M$dY|@!yg52+KM+m-!ygiZ
z7so~@H>S$BhaYzuv+Rg-fyn)oyP5*KLgyz83bcmbh&UJUpKIw=oqF`HEa1l)Qf1`x
z#eAuALTVFRT2Q-Vzbrr3ePZmAL=s&3h1yGWTvB~mbb|8U?lqs4uG8@ioXB2?*?!#k
z`XVwk4;wHKqrxsONQV|-C#|bftw&1U<=1-0CtsC|U%sJHbCE7_+iaPWUq6G=GUR3P
z#?b49O^2;2U+sxa=)0x<1HYP>I_2gkZH`-$-n31Q@C-1Dtb
zZxKla=f9ed39N9;=_>rxZ{D=jL)t5-x?3(J3&fvwT|#R#%U&=(ygC=hbNPO*(D}_wT3lRfCImZcng&P$FyOUMP8FGF-eeDle6P
zUdt<`-o#bpcC*cd%5|I9YbI%zV~6Tm08S=zMN;f0x@LhpqEWUK>)SrzvH(vrfI3tk
zxPRhrjs>|Z6hA}-n&i@b$$fSEg78zd-){ZUwTQB4Cq;!7Gt9f%dkbct4Q>-??&~yo$*L-
zkrZ*6{g*rDJyfjMnon|OP958mQ%`;GlX_}XR?XOZW6vuU}{qD48?(CfBqYqUmkmD1_Pz5{Jf-j!11vj~S$W=F}0!IT3&f{XR}H
z=VoO#iSF{^NEy2~=Qu+x_g=$$TaQLl14^9P^Q*pvr%R1AeZpv$a!Q!q(D3AVKX1lr
zWK5aF6WX24kQs>%a9ntuNcluwc)=XZ2@f3lFcJRr4OHUkq{NKrqy}A40Mvb%YIKw=
z(d)~-7-D*Zz5OIZ$r%OU2hyYq9?eIsb8iX@9v#g*;(!h}Cf_g-`BqcafDmNXsa-sy
zk<>Z*!2#qB9Nmc|2Ek9Vn48&g7YD7!6b0Z}chF5?pE7StJdhEayjnh2-F@)PqB_K_
z?mAn6GlW@@eLavI`E)`f(yO75s^e@$b1CzZuvPp`&7_GrndBVtJVnh3WlG|d3{dlP
zY>SH_091;iQfmlNOmgBv%8*a`^Py7SI{2-GQ{9C+mu(81`6wxwMqF(>LygB^Qi)2=&?$7LE*EKGf#GZY|c&W+eUuG%fhZb3JiK0x%u_C0H<(1=W
z#M~%Gbae7i;gN60>I67Elh<%f_&kcdMd@Rs(7tts+V)c`Ja6?E#h~tjJ!Xt-cggnmO?@mDr7ZJ(#5w>n@Cqy60+FFL+D
zY%m_1p(6kx9$1P=op3N0HbQ^cTm7zsxj^jbICp(P_u#ej;-3@8K>2(IPM**E8ui$xhE)^=&PdkloaN02h{@|`m**H>K
z&V&0B0E*;UoJHVC2d7T@-GaT_?D$w{~N0zMD-!T_i_R)o!3r{JS4K;3(BM@0kjiMOG{kLdAgv4kL
zMkIA!n8Pf~I18NBS6-ETuz{HSf(?aya9A7o7ar
zbh@ZV!7nc%5teJzf5gDu>sG0d+oqu*P#Rcmsl9(l@*R?ubsD);Jwwbbo=CGkBBe~B;29&AI2VV
zN8%(f2J>AVC9JLWDN$a1^lilxGv>~;oHb9zFda*^vBuHj4!qQqJn@~fObD`O7w}?1
z=Vz_W{0eA845!RIed^?O
zNptNh{w5t_vE;Yj9#3({Z^p-}L3#vEKA
zZ=mdaR-Z4Rn#(XrnR1H#Sh4y3NjU*nn#So601L0}6Or&{WSCf0repXW*kYV9uJ_ZP
zXWA(f?GiPFXhHlBoYGp#s-SkP=pOV3_s6`_NIfipT
zR{UQ7?WN3qL|4z1a4%Cnapl|x9_<|_OwZ$)QwD;h_L=n>ha@*u%uTmTY-$reg5@X@
zq?Ltoa>PBWYh%hoDw6G`%*!g{K+kSEzO6H
zD<-){dsNv!n0Jv8lHUD_lwb@@T{Q$2ieg3>6u%8?cV8s{lQPNv#Se-GjKQ^OYIB%!ol`1FKSAD8DU$}sD<2i+mL7+bZJ#T>|i&FyHWt4Axf
zWjyF@NuJn9VOkp#DxggduWB?h4}HL5k{kKG*G`xBBgs-{XON=YXys(q6G(;3rYNSF
zis6+~dy|kwoZ3#}C!hYxD7NCt0j{YO^KjErz7GT-C6>bP#*8GUG-RpfBsuVc8PrG|
zZqsL}=_+-(AbPxwe>S32c>eUK0vpz3)o53~WqZp!nqyQeo~0jmem+37rJ1YBT$fM1
zGQ4w?9Q4p1(Yk`muqkFG`Uzm$Y7`_`7RJd1M9ykn6U<=QDc6`y#M
zn^R{ojs{+{UypIg3YUTg7#s`DXQguajT-``Q}JQ&q)^ZFHgv`I4PEoY?#>+I#|E?Gi{kkr|X{n?FxV<>DoLy6aB(
z%+y3@^5}rd8`nFFG>`S39C+5e_Uo{KF|3N_#xY7~JoL(sv1V~NE4{#f{N|gj!$5Fw
zG!1~m5d&6as2r*d{CI{5tL*n$YXOYa!b!^u*}gv4G5z-IOxww;@^dIZIyaN2gG=It
zYF87yJG>#32wikri=rg}l1hvZpE~S8z9D`9YXSqsD@cdUNgY
zkICw~1j$OKX;aa0;c=6S!!1x92kV9OtpKq4pj3&Xg@8$U$Wf>FB!463Vwqg*r&yZ!
z4K>e+l(te}oiSgl2n*9~3ZRAUKLR__h4)#to@9As2|0bQIk$O}`-LJ&BRXk&L+Py(
z{?fBGv)4t7;8W(<2g2;4?=5r}7&j+Ve=HC2q`sUiztapiWlKJn^eM0N9dvbeJfZ{7
zi53XL!2?AfJo}DhLP!;UMlK!~joaRz`czlbq(KvUtf+HOt>T9I*Ti1fOkPkx40jk#
zhVDI>A;l@dtWWsU)%WV`vMYV*f~V??6WwRpl6!h&^Bd4z5mMAJ0o358h}|#`OO5bF
zrUtO9xT-#jzNJ|0yg6TD2Y`rM4A23ODm_3&q*bT5pC3uuZkuHRlMTFgT8cE!;Ex}P
zAUDP1hvKZC~k?@h5V7Gqh~I3(P9&(+pO-3zL8udtE~lFP{6
z;#ndk=}N*~#-_|cND!>pfmhfzv+BV;i!&XH(lXK#*I9!gmQ&Mahdztq-Hws>oI-?H
zr=&xmKWOivS0eU$9*zk2QCT}<}|$i
zxNX9_vyRh&8I>@|+FW*5FF|A;jf(EKqnO5
z)rd4mX9?aegZnHGJ#?RzG`-8;Z0-{zM)qRq$_E6lqX=u;%F2z_ndSJ*AC}kaDc$r)
zGMcHz@=}x1cG|5$RYBn4H)8W>#t{fDmZK$*x+ZO?rJg=Kl)N|9KDKpK$S^@g>uM|i
zU2}mqMFapHgGH=v&J%!*UdTq*mvsoQ63>>)ikPjV@Gh6!?r4yrI<_VMyFd3P+pz@F
z)~wA+{nY}!ydPCrRvFUzzRtdT4R`%6Z%nnf#-GU$1yYU46FQr<=Z_C&a1WD
zt!*@2WioxAT5nA2Z=u8$&
zDAJl%YU{~*?*=-8FrxsDwjtLop)IjW7=shn
z`QQ?S((6g*XJu2iRbdxYX7YG|wDG*|LRS%<>aZ=5izYcwSR8G`?#d;AAFRC5>#5V4
zLisRl#A}$1Y)T3XZkr5q_f}WL<7p+*RnH(syRC1oxT=WM9Ewn!%2Z&
zoI}Z*%>*~M+nSU;EE*Pd{HTdbD8+Uo(@bj`uc`taqa&FU=Yy<|rqzyIQVSa*jG%2R
zG&s}qSUls0*2c)7PW|$OwXSleX94R=)1LFNE-)SLF2*sAn8sD)HV3nvL_!+^Tql;b
zE@XaT0(LTI)X3Rx%14K0HrlQ~5ZdFck$e;OJVP=qp+fgkTKyv>$7N?|RI@8Jyl%|Fb@k2Uf+XG5mUnwHW6GQKx3
znSV)SVoewM{J8?C0m-(k22SQQnaLX(y&TcL_vVeT!Chl;t_EGXiI&Gl4`@Z=u$}D#
z@*fLXYRtQo<$rm)VC-jRE8nd?*nMB)sWIoak!@B>7+{f8z7K`$j?UswPy~Qg{WBEr
zKS{iUSVI67Rzdoaz2hawK6B(TF*}E|;E*akT!#^Wz*zzil})cLB6Bqkh4Ds0L_o5fwXWD$C(L{
z%)EWgZ+eH+Kp_E`*TfR@Dx;8tPqR3m@}qEK(nD$S0J&cv2{&)=F1k7xwd)SS74Ae4
z6LUU$&toLo*4esdGd*r9se;#pK5jRvVQwsv_YdXlie^tqkeB=U6l%zNCNz2$6YjTv5*9-#o*pIJIVo@2QVKZ
zAxTN`Z`ABJ{=P`W{C0pmkH_LtxY%CpBs5O7r`LXCNz%AG|>zSPi@U4
Pe?GQA^56RC)cAh@M=6Vw
literal 0
HcmV?d00001
diff --git a/images/organizations/user-types-access-control.png b/images/organizations/user-types-access-control.png
index ac0b22572b5d4a0b32960bde62b5329f12341c1e..8bf5c46e59c0cad02da29e19e5785114a64ac7e0 100644
GIT binary patch
literal 99990
zcmZ^K1z256(k&1|a1HJj+}+*X-QC?SxVt;So!}7M9fG?DcX#qm?#%pi;m(77zO&iA
z+p4QqRo5y)Wu--6ATc0;fPi4cLM-vE
zj2HY}C|6Mx_$#AcA?wUUJPtOJ!~hI1V-7GU-Ukb25d!_708rpw!7c
z-N(D%zstz%+z?@bWU;y-G$BY}HkA!qH$!?;fpVnrykB-wbH&<&X{91Qhnx=*kx0?G
z)5B5erI{(vZGO`RPY3!+QoXoE1SIMllAYBj#(x>pjnIH-|B*l73f_79d{HxC86hh@
zDT#Y14?G?3f&gf+6r2I^HICuH<^jp@VeyyzWx2&PE$oQGIxO+}SAOw`ZiE3wNShjxq43B;g8)DT0`fg3z2O|pwRIoAI+|Fd;
zk@z9VY`v^r63d{zgKsr$h<)0l=*HnDcZr39gU_Bg5=lJ4xHwEbYJP)(43uIJP#KXI
zaSwe{vT84!-?I0P+uLi_ripwGR664-#(o7qjkudk%uOKCn>dK)8r9pmt#Q}VA=J3a
z6&6|2$eD*wW+fkzTuIb)8(J{L20J)gg&af2F9PE;KobBXEdYt=!eIen2LR*1e*nG=
zzm6Nyh-F)hQTaitK`FXrGL<@5u|28AAGM?TBQi0P2`Jvh^|9I&lii60Ke4v9{n~4A
z`x&QMK&ZAo01+td5?I!Y_K0Bt2IylmZlo1f39H2ti_<*qS8&q7Cq5X{4_>+;lrieq
zU!l%{xbc8M{cYhtB!R$g_%r68?&u<`!d>#=FMv6Jh5Y_$=Bxh(I4f9MrQKFl2c
zVzkn)xBT@#Cw`Lcb2@%J3_2C~@RRl$>=8Oo7g5r`UYF1nXY^~TEglvujc@!0H0!5v
z|He)uTP9C5>wt-#`3(+Ro@YcH0pJ8I@s9=JHN14P+Qqtxl;jA+!WDeTIpT7&#qNqw
zr5~K2W}`9qy!Z_!6&bOue4Y88@(6!oIfA*vxHJ3!@q%9su@+h9hszO}T&FdR_|lKH
z9igX}ODC4Hlj12!X3Voov`erHYYcvc6W&*<8(AHt>SGDbjNXFSg5CnP{MD+@+2B*P
z0V|d?j7gM3-^cBRCP_{1N-P&N7ub1!%x+0gO6`z|zT_>q&513K^NI6q
z(2sujU8(Sr8;CU!8W2z5Q~~J$_}#2>v8Ixa#6d{$p+})cz3y8=TLN1eY;0^?Y$VM>
z_8`qp_D1$1JJcgEgI)w=v7@5e`K)mXb%BmwXT*QVxJ!JAj~vALrE34h4XQcG)Au>$
zSuTs*hHN5kZ@4P4D#0ervMqF%MG@=TbOo{M;-xMCQ&}@;r9NP@cjMq%~3_eDZ
zv82IdoLOKUVV(3+aZOxJrhWb;Bmx-QWr&@vdLM`8Tpy8nY0<4lDyfm8PpOQmGug5IWIx~!p+>S
zNz$LJg%`X?bBxo_vzjGpd2U(`k`fvtG7|Ypl}>yXf*L~00vu{Bf=}hQ-(i&oq(pKQ
zavh}iK5C_o=NCxunro~9DNYP7{N?E7t
zOQ9E%6}CvWjOsFYFtn=`EJ`^ntaNGWwvV)WP#afHYi_O_Hn*V=K@|!m31#+uEeJD;
zF{(6*-zjqgyVBo79y?088yj9DpEb``%C3)d`s!5a6n=w=$$%LpRWN3yQBzTMqP}dr
zJny{g%-OQ)e0N-O3w6x0)VS#5Wa|jeF~b4Pfx+6(q0DwmZyEvLZ`^N05)ofCtzI-O
zot=T5!H^lv_Ip!*Gj7X%aOc5u`=RyWX&3ItVRMbv-H+Rr$a?QhjjW)CATZ?CA&Pp{=JL(faj-Hyxl(tl~}
zaU7bQHBME{;%?*a>-<_DnbNmYtuLPh8u&U3eBztm`Moo&lZ4NhZ!0J1
znx;*%P2b7TKx_RPKk-1)!482x7$G>z4dxCD$p};ks02C($n_)zVncf1o}#xiwbFDG
z@ncM)h=oRkmq$Ls?_euo&Ej&=xI10fqurqKNjgwcGt)c!953i+_i>=W^(_wU46JJD
zw;J}vQAo@t7gBT8M$|;K9lLUV;U<5TeMWVrZAs%w>J%>)N853=bGFyE=V~He(aWN!
zO1Yz)WU6MpaEr5;y3N;X=jce_Avi}=1lJ~cA~_R#jX}(?$1@^eBCp4X$wtX`7B41}
zL})0oD5?@YLrD$46na4)N9Ujy?(^MxK@_bKoXQXr=$&#Z3BBex;7!s{HkupQi5-cq
zlGVi5wBuT)^ia61#ahqER?bziS8k}7(yI5K?KIy#Y_rH=g0NVcJFFVh;HVq7S?#*%
zy&*fY`K7*tve&*0U;m9*hQdZ`ZNtTTeRgMLFZ{}b<%i|U71yIj*Ij11B}<~sqjD!z
zle(#rs`|YVgUQt_Zn+QXlb*iBR?>I{tcHtCk2R8Yi^eZ)$M34utVOQ2Pktwn#Mg0t
zaV{K5Cr$F^DnCp}?1~&seAHys9Gdwa8ZK#&pTjs3vl3yH(v;FmxsSI_4;N3WTfC#^
zvbwpleLg?C+ElHt^_%A%PGML|DUVHi#Xhln>pv^D=y>^TzE*t-`1A-DgkxFdR9?ZA
z?`CR&tw~aW$&KaGbQE$IyXzkQ*akxm6DZOpcQA>{Gw|EhsUg~9xZfvy(M7qAdsV?KW?=tyAk&}!{mK=BO4dsR9+G3~!+g`uAPzB*$
z{5V_#mBmpDyw|4lQ||3}xGyS=&Sjh9H~&Su)0(55X_btsj32{IOO9ik>f26FM#U0hKNnr6FN__M6;vedo=I^|dvS4mG;t$wu-&P=xh{;aH0m2a
ztu3}$U_zmLJaeDC+z0zbo8!WH>w6yFW8FL~-e1x*(HQASbu@TFJ>S|ASn2ckqSO}U
z13{wO>JtFjz~W)BfdQGL0`>MyV|Wbb9Gv-)f&30Fa=K4o1CpJF;=LCK^0Nk#)%G1!
zC*t||zzqHk&l?qJd1<)6Lo&|Pf*~{fSCnYH2ojPFf>sm-$cDvaZ?EfEZ|^)t{sK3U
zdTmktOMV~0kHtB?xW@*!@(;hio2~v%#`(?WKLq*3=yiRM2Y3w)^Gx_sD-q!M>Kmzw
z8B0k4kpu3*fk1!}fj$84fC0Zi!Dc|9f87HCeF1y}eC4ZcPFHrot(B3Z9-ga}rL_aQD;L3EZ?FUI|2(E4!29bJM++_jRVi6K0ULWGJSJ*J
zYFYwrNIX0|PJ2URc6mYJe^&?m#YJH1=xEDML*wG&LhZspZDVgjLkF?I^z>AK
zH>e!ktR3}SsjM9c|JBHU+7UEzFt9hXbu_cF#{1K*p1zHfBNqX|pN{_T=U?MAay9#J
zPu33qo)%z&G=EBH=%{IF{#P|eGvohHwLc~Qs`l5s{?#4lpT^jg9E|J*Y^Qj%O%@i$zt{X*$=_=J
znF70vy%}JfdVgfdO~*;|k7xgWpOfZ~fd3}&f34}|h{J6ym|jeYC`JUk^?U{c;;a-y6}INiSqWQ!~c)Ronb&idC2HV@jwtUZ?B)zgC76rLbNjth%0i=vMKO=
z=hW^XpCeIUsCa>hctPG=x>8?rC(~dW-?bmpDJ1hX_ae9BBlthMDTk0{RIlAcLBs=o
zb2aS)3bd~qfq>sP_LT`ZOxS{Xh5v2eydbDtz+wI2uPAsxZ(0I0{QV2>r0H0Y#(Sx3
zb}J>45?iJyUC>>u
zh);~_$~*r@O9g(s)gk>U0hWsnls%WAwKcKN{SF3%RB*lj<7FX&&hr_9&F%5`Ba&?g
ztXb08(MT=fyYcuEAdn^jD%}*PIK!S_C7C08IUbR0*AjCv44jJc0k6pubGkfLH&G73
ze5)_hZ$|u8bz8AP2tme%n4MvzLZe!*p;qr9Y{jwteXKG!or2IKK*GrhC;qp1Oupii
zLGxmONU0L^MeGkHPowpra{V)r0b$>%3b&Z@rOYoB&iU^7zsE63T3AzOvA>@cU)Mv>
zL(-JoGTYe_G9eu{l_BQJ6ujf5zfU;RMn2Pk)*x|hlW{oT*BO>cq-CaTFn^FyhK9S1
zRp-OEzbqbH+fH37!zpRqY~I^n3y+i_52j!zppe|#IM!ZimiU$I>f`Ie!_juHW9}M<
zv`p~d+1pEWj%c)c`u8n&_=UKzOtZo#zK+vJBMM8m7f?aO_s)g9l-
z%zW_z+ilv02^lL1P0}(@ZkjS|mK%>6v()gv??)s5&e-^i%f2d$oi>}~Fd5xM&%o`#
z$k-MjNjhzWxn{APlYMN(6r5J^q6C)S?^2(p>NosD7|NZve6TUnQql}a(5hEcl51iw
zpV8;q`Mzqe*wfByBo?H>L0rn~Wh~mWGE4Z)?4FK&u;NGF#>J;^O9;NG*6>%-J7BH9XqqpU}5euqml>cfh;Vn$wsdy``!gqm+5ItU^!LyO78
zCAh$Ee>%#-JX-jnT?xLD)9N1;^eCEy`0I=~QE{+v%3EG4u#i8Zay4D!x2R-c>+fZ=
z2Rk`G$p;obSRoU$=xyQ~hh?Uv(NWP@j^KJ0f`7mFFsuGfzI79PhdD%|O$00pG#cs5ojWG%{jW!OIYbR4Q(u$+qph9c*7)*Zi
z(-DkBbi^!vq9L=2R$sJWS4Lst;%eS%bCpUF1i#N)2tl+eX#E0fGaQ;8tcj;Hi)!0(
z;;$=CCiigfjaider`4qEdBT%|Y!kb))6OCTy<+YfUm|Z|{z=I2b13{QyLndExvotj
zyoiyrV=gG2%C;Udf0$j6sO<-aeron3hF#MDaN!X0-GG3N6;J7ixr#K8HP%xThwYu{
zSuys2*%fJX;YtjlFA^BU3l>Mwqr}s>u|w=SqT46LmERnd})BfItY1Q4A=KIz_MCZLUQP
z##9WUgw{_Ie!t!Yz5ruMM@1+ig=a%mxx$7n$u?PZ<2Ko3DRME^ytjZWaE6gBOiEU`
z*r_U5i|!=rEa^rJ1GhmP?7r(2u`|2JuUOrFstJNcX;M10*@!*NC7u50Yd#E@&8d&9
z@D*!RBq5jTpOgFyTovZU&0;~6JkYliWV52F7HsjO^nSG)G_{f1#abXwTWCkg!%i|k
z3mV60$h_uy;7exQuevF&O1Mx5oF;aD6S)`9HFPmaE*`32JL``Rf*vWF*x$;Plj0p^
z$IIPk%^60--g#A>grMCVTqN9ja@5QA%hMss8xT(p0%0RynO5Zpn-tqsRfb3r#SB(z
z`Xwk4e6MTlW@E)To9eU#l=a1a2z!y=;wwQ34_yhM(N2E;Lv4#eAvs-7i~2(4>;0nZ
zR8mD&tEI_(N3CASMN`bwLpzv>MxJkOvqW8%$cNae4(}z-9KO||jj$RR$&2A+4g42h
z{{^(Z@_ad+xd@?J+^>Y%IJoL!X%u=!Mk(>eGo^53hdqPE+iq&
zB@*+@+l8VSC=-)IGT*gE3JmfQC2}7r?#Hu>dd5m6X9$-%*v^4*3z#o`okdDO%C3Q6
z!FocYbt$9-71U-j1lgi|T&VjcuOaY1v=am*5HWI}WtaBZQ@a&Q_KGFy5W$$`PJiUb
zEzaPtx?1{!35FVXmmwnws*je7AK$y2q*tJjR2Y#A0}H*8Pt!ZMugIX=K-gA0(#TPz
zH6>Ygu~aj5xRw9(#S>sbgis<`BjYdBF8gV!r>f<0B3daW$N2Uso}>+jqsh(2qX-WQ
zwj~##-gk-T3xaeWV#*lx!&oLQ>nAt;s7NkS`5r#w;XkohG{+H%^e1QJX$Isje!i|_
z@aLoVem3s`$%fse>Z435*MD7t|5!)cWWZsfC0{lAJ;;lv@JdQXOcM%=h;UHRMDa&Q
znNdc;){OZfu{!R@RE_L$7;@wz$@bsj{>z%I7!>k0SOC_|0G0BjK#8nb1J
zF2`soPVapEyfy{Pimd<+aI@XEu-pE(;9mvF+HrjTU_(+Yt3+gEWYW<_)S7MX^$K$L
zo58rlIzBJN6e^XUadC04sNLP3ZcpszwOoecWw^-*g(H3%si~=5ZiUkf1I~gcho3%u
zlKB1lvh%Q)J-;KYb3&e~Y&@1mJX@xMTIPPQ4~xU8+6lcC_ZIJnh484UrJ;ne&i1l>
z8XyLw(wT>@52l@1@JN>%tSAr=5c-y=!us|5JT@_czxsW5s9UPHSVsP~mTuEtG9sPL
zUD4)#wKtJ0!~Gy=Jf1;@L?T`1_T|Kxv+;7tq6$JVL(it;rGbc;c!#ZlfhM0N7Wx^1^z$hk9&b$_
zbUSW9LEI-?&!3glZ%t$lD}-XHqF8?fIw8;Vxj#2_fB`^IMyo%Z8hY03N2vO!(d=l$
zgfTBK>*3MR_LIsmZhkl&8M|D%tk?xhW^t;u-)}*=9aS_Mb_YN>FON}hxnI*(4Flv+
zIUhbP_3HEc&gT&gz8st|a1+YVh)ScuG5q6U>O_&t*&4m$zU;$Jvd%BxPdK)RWcBP{
z-ePP{F(_@X#r6K=<#sgBVIkH>!XS;rfJ|HmEshgJ5mPg>
zn&Cu>ql@q$UCPS#*%Ad2^+xN89-Ga;g4n;G#CgS#OsDe2vWlCv+uX&(AcQk$gbc)V
zZs_ef18nqL2`m9?S5P|t;S+2^o=CL0jj6M`gwN*LA^SvF7kd
zjPQtdGFUA!K3q@B?9A)Zf>Vg(n8Jn&WRshpU#}VkP(%2t>;B^mm0KVf7G_Lw9JC80>sYT
z#$N(awPWD8?|Ef5^$Y`q`jrjC-^&v*BszM&nJL1cTh1>=k*I+&ZhOPwc%d2*1;tpA
zB1s0Y1-jffF@+im*1ex9M6uc2F7wwqtXF>snHRA-3pee*+^tu&1*W)v(C)fh^N=~;
z;cs5V@xIsN;tFXVU9?Z8*1GnLhEL#mxsKmx9f-u-b0mj1d8&(Kqz_=-ro
ztOI(R8e=U*bnS@SUoHY|>t3Gjj&h${Gm*&^V*oI14)7W`_=>KW*c(pFvA415X8Q+l
zeab(UY-dDO-tI8JQGxT%z#?6ybw^}f_gnkoe}KsWRRMM?T^x-3kH
zdaISrH$Vz+zUrO!m6ubtB*l(?TH|&_x?t|3HQ7dpkB{G(;Q2k{RHp3YHH~@F^w^tx
zbuoZD56%6!PpG2Q{5DKB%mf@%lr%j8)pavOlKqQ~LsB6RVE6+ph-ZP%rKUJ^$^=~(0TTxiQQu7+Tq&^8ZmwL7-f$3}%ccMj
zczzSx^0gQLnp=&ftxD*zpRD7Zx_4aJa>|}=%6O=E2#Ln&4!~;UnJ!j7N{+PZXahI7
zx!C&8`py7cV8@y{H1$nB!Ku0V*M2j+XI(nyi|T8w7>k0
z??kfXLIzPrF3rAg+xl~yB7)G2p^HRkGcnS!Pr{NKirY3@v?u4%7&rVS%C8)ys}a+f
z4Eo?Mk>BwMbsn3>$1P8?pmGTMARZH~B6hi1{oc{t$o(Rln`>tyUuY>c7-MBZ|I60A
zf%smL7)ybnhFJRLMEMB~r69nd*4D=i;glqj|0P1-JMQmr{@49yBws{?NDf4Lqtye)
zmrs1EsvO0f@%I{tC&X6dV4_bUKxUPoL~oV%uj8RB_~$ayh>=k_5E`kM0&#oi&A#02
zlDrC|YO@+4H_8@e*aYjtsv1b6x0v@=r>;r7)uH`k;y=4jqt1U@pnmW4Y9@e&2{BTuXm>u4$UFI^$L0Kx3hWRr+7r!1jMXCiAh8w0
z3HFalpFugPF;L0QwlcQK)H@T2x=a&&Z|)4patZVcOpqZ5;tVGY-q<-Hhy)!F9BgoK
zxa~mri2fZh*)Y4^YC}FA(|_uM5XlDJWC&dZxR_ALeqi0_M4~;KSvaDhZ|_h$w^uTj3a@aKam!jffj8EW!S4t~o@
z_8CTWCH7KdG2O>mCfQ@@EKsim1O$cvkH)PbZ)2uJ;SyjDLz9z}Be2-yJv}`$<_z%P
z%Oe39MCg|BRCWvciZ)4D11FuD1BroaiV3{i>1b}q?<3SNfF~xstl4Z|P+9AIqCPY{
zY_C3$*`0yqF1ote%l=LVeKI+Nxpn~M5mVj-|9=RF=k{PDhTPnJh6cSd%O
z)jYnndObOd$;c!F0DcL!9^lJ9?B_)jadWRJ2L+CfN