From ae87d0b6803c854de25aae38b109cd68f9ad9fd0 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Thu, 2 Apr 2026 11:38:54 +0200
Subject: [PATCH 001/113] Upstream TSIG support.

- New `cascade tsig add` client command to request that the daemon add a
TSIG key to the Cascade TSIG store.
- New cascaded POST /tsig/ API to add a TSIG key to the Cascade TSIG
store.
- Extension of the `cascade zone add` command `--source` argument with
an optional `!<TSIG key name>` syntax to define the TSIG key that
Cascade should use when sending an XFR request to the upstream.
- Pass the key defined by the source to the zone loader instead of None
(the zone loader is already capable of using the key, it just wasn't
being told which key to use)
---
 crates/api/src/lib.rs           |  64 +++++++++++++++-
 crates/cli/src/commands/mod.rs  |  10 ++-
 crates/cli/src/commands/tsig.rs | 129 ++++++++++++++++++++++++++++++++
 src/center.rs                   |  77 ++++++++++++++-----
 src/tsig/mod.rs                 |   4 +
 src/units/http_server.rs        |  34 +++++++++
 6 files changed, 292 insertions(+), 26 deletions(-)
 create mode 100644 crates/cli/src/commands/tsig.rs

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index d599693b9..05e38de5c 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -187,6 +187,35 @@ pub struct KmipKeyImport {
     pub flags: String,
 }
 
+#[derive(Deserialize, Serialize, Debug, Clone)]
+pub struct TsigAdd {
+    pub name: String,
+    pub alg: TsigAlgorithm,
+    pub secret: String,
+}
+
+#[derive(Deserialize, Serialize, Debug, Clone)]
+pub struct TsigAddResult;
+
+#[derive(Deserialize, Serialize, Debug, Clone)]
+pub enum TsigAddError {
+    InvalidKeyName,
+    AlreadyExists,
+    InvalidAlgorithmName,
+    InvalidBase64Secret,
+}
+
+impl Display for TsigAddError {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            TsigAddError::InvalidKeyName => write!(f, "invalid TSIG key name"),
+            TsigAddError::AlreadyExists => write!(f, "TSIG key already exists"),
+            TsigAddError::InvalidAlgorithmName => write!(f, "invalid TSIG algorithm name"),
+            TsigAddError::InvalidBase64Secret => write!(f, "invalid TSIG base64 encoded secret"),
+        }
+    }
+}
+
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct ZoneAdd {
     pub name: ZoneName,
@@ -206,6 +235,8 @@ pub enum ZoneAddError {
     AlreadyExists,
     NoSuchPolicy,
     PolicyMidDeletion,
+    InvalidTsigKeyName(String),
+    NoSuchTsigKey,
     Other(String),
 }
 
@@ -215,6 +246,8 @@ impl fmt::Display for ZoneAddError {
             Self::AlreadyExists => "a zone of this name already exists",
             Self::NoSuchPolicy => "no policy with that name exists",
             Self::PolicyMidDeletion => "the specified policy is being deleted",
+            Self::InvalidTsigKeyName(reason) => reason,
+            Self::NoSuchTsigKey => "no TSIG key with that name exists",
             Self::Other(reason) => reason,
         })
     }
@@ -291,17 +324,22 @@ impl Display for ZoneSource {
 }
 
 impl From<&str> for ZoneSource {
-    fn from(s: &str) -> Self {
+    fn from(mut s: &str) -> Self {
+        let tsig_key = s.split_once('!').map(|(new_s, k)| {
+            s = new_s;
+            k.to_string()
+        });
+
         if let Ok(addr) = s.parse::<SocketAddr>() {
             ZoneSource::Server {
                 addr,
-                tsig_key: None,
+                tsig_key,
                 xfr_status: Default::default(),
             }
         } else if let Ok(addr) = s.parse::<IpAddr>() {
             ZoneSource::Server {
                 addr: SocketAddr::new(addr, DEFAULT_AXFR_PORT),
-                tsig_key: None,
+                tsig_key,
                 xfr_status: Default::default(),
             }
         } else {
@@ -478,6 +516,26 @@ impl Display for KeyType {
     }
 }
 
+#[derive(Copy, Clone, Debug, PartialEq, Eq, Deserialize, Serialize)]
+pub enum TsigAlgorithm {
+    Sha1,
+    Sha256,
+    Sha384,
+    Sha512,
+}
+
+impl Display for TsigAlgorithm {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            TsigAlgorithm::Sha1 => "hmac-sha1",
+            TsigAlgorithm::Sha256 => "hmac-sha256",
+            TsigAlgorithm::Sha384 => "hmac-sha384",
+            TsigAlgorithm::Sha512 => "hmac-sha512",
+        }
+        .fmt(f)
+    }
+}
+
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct ZoneHistory {
     pub history: Vec<HistoryItem>,
diff --git a/crates/cli/src/commands/mod.rs b/crates/cli/src/commands/mod.rs
index 5e19da16d..1a31590bd 100644
--- a/crates/cli/src/commands/mod.rs
+++ b/crates/cli/src/commands/mod.rs
@@ -6,6 +6,7 @@ pub mod keyset;
 pub mod policy;
 pub mod status;
 pub mod template;
+pub mod tsig;
 pub mod zone;
 
 use crate::client::CascadeApiClient;
@@ -37,10 +38,10 @@ pub enum Command {
     /// Execute manual key roll or key removal commands
     #[command(name = "keyset")]
     KeySet(self::keyset::KeySet),
-    //
-    // /// Manage keys
-    // #[command(name = "key")]
-    // Key(self::key::Key),
+
+    /// Manage TSIG keys
+    #[command(name = "tsig")]
+    Tsig(self::tsig::Tsig),
     // - Command: add/remove/modify a zone
     // - Command: add/remove/modify a key for a zone
     // - Command: add/remove/modify a key
@@ -74,6 +75,7 @@ impl Command {
             Self::Policy(policy) => policy.execute(client).await,
             Self::KeySet(keyset) => keyset.execute(client).await,
             Self::Hsm(hsm) => hsm.execute(client).await,
+            Self::Tsig(tsig) => tsig.execute(client).await,
             Self::Template(template) => template.execute(client).await,
         }
     }
diff --git a/crates/cli/src/commands/tsig.rs b/crates/cli/src/commands/tsig.rs
new file mode 100644
index 000000000..d399d975c
--- /dev/null
+++ b/crates/cli/src/commands/tsig.rs
@@ -0,0 +1,129 @@
+use std::str::FromStr;
+
+use cascade_api::{TsigAddError, TsigAddResult};
+
+use crate::client::CascadeApiClient;
+use crate::println;
+
+#[derive(Clone, Debug, clap::ValueEnum)]
+pub enum TsigAlgorithm {
+    Sha1,
+    Sha256,
+    Sha384,
+    Sha512,
+}
+
+impl FromStr for TsigAlgorithm {
+    type Err = String;
+
+    fn from_str(s: &str) -> Result<Self, Self::Err> {
+        match s {
+            "hmac-sha1" => Ok(TsigAlgorithm::Sha1),
+            "hmac-sha256" => Ok(TsigAlgorithm::Sha256),
+            "hmac-sha384" => Ok(TsigAlgorithm::Sha384),
+            "hmac-sha512" => Ok(TsigAlgorithm::Sha512),
+            other => Err(format!("'{other}' is not a recognized TSIG algorithm")),
+        }
+    }
+}
+
+impl From<TsigAlgorithm> for crate::api::TsigAlgorithm {
+    fn from(alg: TsigAlgorithm) -> Self {
+        match alg {
+            TsigAlgorithm::Sha1 => cascade_api::TsigAlgorithm::Sha1,
+            TsigAlgorithm::Sha256 => cascade_api::TsigAlgorithm::Sha256,
+            TsigAlgorithm::Sha384 => cascade_api::TsigAlgorithm::Sha384,
+            TsigAlgorithm::Sha512 => cascade_api::TsigAlgorithm::Sha512,
+        }
+    }
+}
+
+#[derive(Clone, Debug, clap::Args)]
+pub struct Tsig {
+    #[command(subcommand)]
+    command: TsigCommand,
+}
+
+#[derive(Clone, Debug, clap::Subcommand)]
+pub enum TsigCommand {
+    #[command(name = "add")]
+    Add {
+        /// The name of the TSIG key to add.
+        ///
+        /// Can also be in the form [algorithm]:keyname:secret.
+        name: String,
+
+        /// The TSIG algorithm to use.
+        ///
+        /// Can be omitted if provided as part of the name.
+        /// Required if [SECRET] is provided.
+        #[arg(requires = "secret")]
+        alg: Option<TsigAlgorithm>,
+
+        /// Base64 encoded secret key bytes.
+        ///
+        /// Can be omitted if provided as part of the name.
+        /// Required if [ALG] is provided.
+        #[arg(requires = "alg")]
+        secret: Option<String>,
+    },
+}
+
+impl Tsig {
+    pub async fn execute(self, client: CascadeApiClient) -> Result<(), String> {
+        match self.command {
+            TsigCommand::Add { name, alg, secret } => {
+                let (name, alg, secret) = match (alg, secret) {
+                    (None, None) => {
+                        let parts: Vec<&str> = name.split(':').collect();
+                        match parts.as_slice() {
+                            [alg_part, name_part, secret_part] => {
+                                let alg = TsigAlgorithm::from_str(alg_part)?;
+                                let name = name_part.to_string();
+                                let secret = secret_part.to_string();
+                                (name, alg, secret)
+                            }
+
+                            [name_part, secret_part] => {
+                                let alg = TsigAlgorithm::Sha256;
+                                let name = name_part.to_string();
+                                let secret = secret_part.to_string();
+                                (name, alg, secret)
+                            }
+
+                            _ => {
+                                return Err(
+                                    "Invalid TSIG key format, should be: [algorithm]:keyname:secret"
+                                        .to_string(),
+                                );
+                            }
+                        }
+                    }
+
+                    (Some(alg), Some(secret)) => (name, alg, secret),
+
+                    _ => unreachable!("Excluded via Clap 'requires' rules"),
+                };
+
+                let res: Result<TsigAddResult, TsigAddError> = client
+                    .post_json_with(
+                        "tsig/add",
+                        &crate::api::TsigAdd {
+                            name: name.clone(),
+                            alg: alg.into(),
+                            secret,
+                        },
+                    )
+                    .await?;
+
+                match res {
+                    Ok(TsigAddResult) => {
+                        println!("Added TSIG key '{name}'");
+                        Ok(())
+                    }
+                    Err(err) => Err(format!("Failed to add TSIG key '{name}': {err}")),
+                }
+            }
+        }
+    }
+}
diff --git a/src/center.rs b/src/center.rs
index a86efc007..f5071a54e 100644
--- a/src/center.rs
+++ b/src/center.rs
@@ -1,6 +1,7 @@
 //! Cascade's central command.
 
 use std::collections::HashMap;
+use std::str::FromStr;
 use std::{
     fmt, io,
     sync::{Arc, Mutex},
@@ -9,6 +10,7 @@ use std::{
 
 use arc_swap::ArcSwap;
 use bytes::Bytes;
+use cascade_api::{TsigAddError, TsigAddResult};
 use domain::base::iana::Class;
 use domain::rdata::dnssec::Timestamp;
 use domain::zonetree::StoredName;
@@ -20,6 +22,7 @@ use crate::config::RuntimeConfig;
 use crate::loader::Loader;
 use crate::loader::zone::LoaderZoneHandle;
 use crate::manager::record_zone_event;
+use crate::tsig::ImportError;
 use crate::units::key_manager::KeyManager;
 use crate::units::zone_server::ZoneServer;
 use crate::units::zone_signer::ZoneSigner;
@@ -90,7 +93,7 @@ pub async fn add_zone(
 ) -> Result<(), ZoneAddError> {
     let zone = Arc::new(Zone::new(name.clone()));
 
-    {
+    let source = {
         let mut state = center.state.lock().unwrap();
 
         // We check whether the state contains this zone, because
@@ -122,7 +125,38 @@ pub async fn add_zone(
         if !state.zones.insert(zone_by_name.clone()) {
             return Err(ZoneAddError::AlreadyExists);
         }
-    }
+
+        match source {
+            cascade_api::ZoneSource::None => crate::loader::Source::None,
+            cascade_api::ZoneSource::Zonefile { path } => crate::loader::Source::Zonefile { path },
+            cascade_api::ZoneSource::Server {
+                addr,
+                tsig_key,
+                xfr_status: _,
+            } => {
+                let tsig_key = if let Some(key_name) = tsig_key {
+                    // Verify that the key name is syntactically valid.
+                    let key_name = Name::from_str(&key_name)
+                        .map_err(|err| ZoneAddError::InvalidTsigKeyName(err.to_string()))?;
+
+                    // Lookup the key in the TSIG key store.
+                    let key = state
+                        .tsig_store
+                        .get(&key_name)
+                        .ok_or(ZoneAddError::NoSuchTsigKey)?
+                        .inner
+                        .clone();
+
+                    // Use the found key.
+                    Some(key)
+                } else {
+                    None
+                };
+
+                crate::loader::Source::Server { addr, tsig_key }
+            }
+        }
+    };
 
     // Send out a registration command so that prerequisites for zone setup
     // (such as invoking dnst keyset create, ..., init) can be done _before_
@@ -145,23 +179,6 @@ pub async fn add_zone(
     {
         let mut state = zone.state.lock().unwrap();
 
-        let source = match source {
-            cascade_api::ZoneSource::None => crate::loader::Source::None,
-            cascade_api::ZoneSource::Zonefile { path } => crate::loader::Source::Zonefile { path },
-            cascade_api::ZoneSource::Server {
-                addr,
-                tsig_key,
-                xfr_status: _,
-            } => {
-                // TODO: TSIG.
-                let _ = tsig_key;
-                crate::loader::Source::Server {
-                    addr,
-                    tsig_key: None,
-                }
-            }
-        };
-
         // Set the source of the zone, and begin loading it.
         LoaderZoneHandle {
             zone: &zone,
@@ -254,6 +271,20 @@ pub fn get_zone(center: &Arc<Center>, name: &StoredName) -> Option<Arc<Zone>> {
     state.zones.get(name).map(|zone| zone.0.clone())
 }
 
+pub async fn add_tsig_key(
+    center: &Arc<Center>,
+    name: Name<octseq::Array<255>>,
+    alg: domain::tsig::Algorithm,
+    secret: &[u8],
+) -> Result<TsigAddResult, TsigAddError> {
+    crate::tsig::import_key(center, name.clone(), alg, secret, false)
+        .map_err(|ImportError::AlreadyExists| TsigAddError::AlreadyExists)?;
+
+    info!("Added TSIG key '{name}'");
+
+    Ok(TsigAddResult)
+}
+
 //----------- State ------------------------------------------------------------
 
 /// Global state for Cascade.
@@ -362,6 +393,10 @@ pub enum ZoneAddError {
     NoSuchPolicy,
     /// The specified policy is being deleted.
     PolicyMidDeletion,
+    /// The specified TSIG key name is invalid.
+    InvalidTsigKeyName(String),
+    /// No TSIG key with that name exists.
+    NoSuchTsigKey,
     /// Some other error occurred.
     Other(String),
 }
@@ -374,6 +409,8 @@ impl fmt::Display for ZoneAddError {
             Self::AlreadyExists => "a zone of this name already exists",
             Self::NoSuchPolicy => "no policy with that name exists",
             Self::PolicyMidDeletion => "the specified policy is being deleted",
+            Self::InvalidTsigKeyName(reason) => reason,
+            Self::NoSuchTsigKey => "no TSIG key with that name exists",
             Self::Other(reason) => reason,
         })
     }
@@ -385,6 +422,8 @@ impl From<ZoneAddError> for api::ZoneAddError {
             ZoneAddError::AlreadyExists => Self::AlreadyExists,
             ZoneAddError::NoSuchPolicy => Self::NoSuchPolicy,
             ZoneAddError::PolicyMidDeletion => Self::PolicyMidDeletion,
+            ZoneAddError::InvalidTsigKeyName(reason) => Self::InvalidTsigKeyName(reason),
+            ZoneAddError::NoSuchTsigKey => Self::NoSuchTsigKey,
             ZoneAddError::Other(reason) => Self::Other(reason),
         }
     }
diff --git a/src/tsig/mod.rs b/src/tsig/mod.rs
index a2b959b31..4260a6200 100644
--- a/src/tsig/mod.rs
+++ b/src/tsig/mod.rs
@@ -81,6 +81,10 @@ impl TsigStore {
         });
         self.enqueued_save = Some(task);
     }
+
+    pub fn get(&self, key_name: &tsig::KeyName) -> Option<&TsigKey> {
+        self.map.get(key_name)
+    }
 }
 
 //----------- Actions ----------------------------------------------------------
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index 0e82b0dab..3ab69b408 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -1,4 +1,5 @@
 use std::future::IntoFuture;
+use std::str::FromStr;
 use std::sync::Arc;
 use std::sync::atomic::Ordering::Relaxed;
 use std::time::Duration;
@@ -21,6 +22,8 @@ use domain::base::Ttl;
 use domain::base::iana::Class;
 use domain::dnssec::sign::keys::keyset::KeyType;
 use domain::rdata::Soa;
+use domain::tsig::Algorithm;
+use domain::utils::base64;
 use domain::zonetree::ReadableZone;
 use domain::zonetree::error::OutOfZone;
 use domain_kmip::ConnectionSettings;
@@ -102,6 +105,10 @@ impl HttpServer {
             .route("/status", get(Self::status))
             .route("/status/keys", get(Self::status_keys))
             .route("/debug/change-logging", post(Self::change_logging))
+            // .route("/tsig/", get(Self::tsig_keys_list))
+            .route("/tsig/add", post(Self::tsig_key_add))
+            // .route("/tsig/{name}/remove", post(Self::tsig_key_remove))
+            // .route("/tsig/{name}/status", get(Self::tsig_key_status))
             .route("/zone/", get(Self::zones_list))
             .route("/zone/add", post(Self::zone_add))
             // TODO: .route("/zone/{name}/", get(Self::zone_get))
@@ -1095,6 +1102,33 @@ impl HttpServer {
 
         Json(KeyStatusResult { expirations, zones })
     }
+
+    async fn tsig_key_add(
+        State(state): State<Arc<HttpServer>>,
+        Json(tsig_add): Json<TsigAdd>,
+    ) -> Json<Result<TsigAddResult, TsigAddError>> {
+        let Ok(secret) = base64::decode::<Vec<u8>>(&tsig_add.secret) else {
+            return Json(Err(TsigAddError::InvalidBase64Secret));
+        };
+
+        let res = match Name::<octseq::Array<255>>::from_str(&tsig_add.name) {
+            Ok(tsig_key_name) => {
+                let alg = match tsig_add.alg {
+                    TsigAlgorithm::Sha1 => Algorithm::Sha1,
+                    TsigAlgorithm::Sha256 => Algorithm::Sha256,
+                    TsigAlgorithm::Sha384 => Algorithm::Sha384,
+                    TsigAlgorithm::Sha512 => Algorithm::Sha512,
+                };
+                center::add_tsig_key(&state.center, tsig_key_name, alg, &secret).await
+            }
+            Err(_err) => return Json(Err(TsigAddError::InvalidKeyName)),
+        };
+
+        match res {
+            Ok(TsigAddResult) => Json(Ok(TsigAddResult)),
+            Err(err) => Json(Err(err)),
+        }
+    }
 }
 
 //------------ HttpServer Handler for /kmip ----------------------------------

From 25fdfe95dc6780e2735ecdac1e55fca9bb4cf1ca Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Thu, 2 Apr 2026 11:53:52 +0200
Subject: [PATCH 002/113] Fix RustDoc violations.

---
 crates/cli/src/commands/tsig.rs | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/crates/cli/src/commands/tsig.rs b/crates/cli/src/commands/tsig.rs
index d399d975c..e940e28cf 100644
--- a/crates/cli/src/commands/tsig.rs
+++ b/crates/cli/src/commands/tsig.rs
@@ -50,20 +50,20 @@ pub enum TsigCommand {
     Add {
         /// The name of the TSIG key to add.
         ///
-        /// Can also be in the form [algorithm]:keyname:secret.
+        /// Can also be in the form `[algorithm]:keyname:secret`.
         name: String,
 
         /// The TSIG algorithm to use.
         ///
         /// Can be omitted if provided as part of the name.
-        /// Required if [SECRET] is provided.
+        /// Required if `[SECRET]` is provided.
         #[arg(requires = "secret")]
         alg: Option<TsigAlgorithm>,
 
         /// Base64 encoded secret key bytes.
         ///
         /// Can be omitted if provided as part of the name.
-        /// Required if [ALG] is provided.
+        /// Required if `[ALG]` is provided.
         #[arg(requires = "alg")]
         secret: Option<String>,
     },

From 8a11e9dd2b6ea923e1416cb127a696713d6d3574 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 3 Apr 2026 23:17:57 +0200
Subject: [PATCH 003/113] (De)serialize to Base64.

As Base64 is typically how tooling present/accept TSIG key secret data
to/from users.
---
 src/tsig/file/v1.rs | 47 +++++++++++++++++++++++++++++++++------------
 1 file changed, 35 insertions(+), 12 deletions(-)

diff --git a/src/tsig/file/v1.rs b/src/tsig/file/v1.rs
index a6e6615e0..cf7f72f4a 100644
--- a/src/tsig/file/v1.rs
+++ b/src/tsig/file/v1.rs
@@ -86,9 +86,32 @@ pub struct KeySpec {
     pub alg: AlgSpec,
 
     /// The private key material.
+    #[serde(with = "tsig_base64")]
     pub data: Box<[u8]>,
 }
 
+mod tsig_base64 {
+    use domain::utils::base64;
+    use serde::{Deserialize, Deserializer, Serialize, Serializer};
+
+    pub fn serialize<S>(data: &[u8], serializer: S) -> Result<S::Ok, S::Error>
+    where
+        S: Serializer,
+    {
+        base64::encode_string(data).serialize(serializer)
+    }
+
+    pub fn deserialize<'de, D>(deserializer: D) -> Result<Box<[u8]>, D::Error>
+    where
+        D: Deserializer<'de>,
+    {
+        let s = String::deserialize(deserializer)?;
+        let data = base64::decode::<Vec<u8>>(&s)
+            .map_err(serde::de::Error::custom)?;
+        Ok(data.into())
+    }
+}
+
 //--- Conversion
 
 impl KeySpec {
@@ -133,16 +156,16 @@ impl KeySpec {
 #[serde(rename_all = "kebab-case")]
 pub enum AlgSpec {
     /// SHA-1.
-    Sha1,
+    HmacSha1,
 
     /// SHA-256.
-    Sha256,
+    HmacSha256,
 
     /// SHA-384,
-    Sha384,
+    HmacSha384,
 
     /// SHA-512.
-    Sha512,
+    HmacSha512,
 }
 
 //--- Conversion
@@ -151,20 +174,20 @@ impl AlgSpec {
     /// Parse from this specification.
     pub fn parse(self) -> tsig::Algorithm {
         match self {
-            AlgSpec::Sha1 => tsig::Algorithm::Sha1,
-            AlgSpec::Sha256 => tsig::Algorithm::Sha256,
-            AlgSpec::Sha384 => tsig::Algorithm::Sha384,
-            AlgSpec::Sha512 => tsig::Algorithm::Sha512,
+            AlgSpec::HmacSha1 => tsig::Algorithm::Sha1,
+            AlgSpec::HmacSha256 => tsig::Algorithm::Sha256,
+            AlgSpec::HmacSha384 => tsig::Algorithm::Sha384,
+            AlgSpec::HmacSha512 => tsig::Algorithm::Sha512,
         }
     }
 
     /// Build into this specification.
     pub fn build(alg: tsig::Algorithm) -> Self {
         match alg {
-            tsig::Algorithm::Sha1 => AlgSpec::Sha1,
-            tsig::Algorithm::Sha256 => AlgSpec::Sha256,
-            tsig::Algorithm::Sha384 => AlgSpec::Sha384,
-            tsig::Algorithm::Sha512 => AlgSpec::Sha512,
+            tsig::Algorithm::Sha1 => AlgSpec::HmacSha1,
+            tsig::Algorithm::Sha256 => AlgSpec::HmacSha256,
+            tsig::Algorithm::Sha384 => AlgSpec::HmacSha384,
+            tsig::Algorithm::Sha512 => AlgSpec::HmacSha512,
         }
     }
 }

From 52c88cf3c7768450afc6bb13f0bb35ef10864312 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 3 Apr 2026 23:18:14 +0200
Subject: [PATCH 004/113] cargo fmt.

---
 src/tsig/file/v1.rs | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/tsig/file/v1.rs b/src/tsig/file/v1.rs
index cf7f72f4a..dd875fb07 100644
--- a/src/tsig/file/v1.rs
+++ b/src/tsig/file/v1.rs
@@ -106,8 +106,7 @@ mod tsig_base64 {
         D: Deserializer<'de>,
     {
         let s = String::deserialize(deserializer)?;
-        let data = base64::decode::<Vec<u8>>(&s)
-            .map_err(serde::de::Error::custom)?;
+        let data = base64::decode::<Vec<u8>>(&s).map_err(serde::de::Error::custom)?;
         Ok(data.into())
     }
 }

From 79b330822878e07bf4de82ca225dc8c2b3eba8cb Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Tue, 7 Apr 2026 15:40:48 +0200
Subject: [PATCH 005/113] (de)serialize TSIG algorithm names exactly as defined
 in the IANA registry.

---
 src/tsig/file/v1.rs | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/src/tsig/file/v1.rs b/src/tsig/file/v1.rs
index dd875fb07..26cc0c9fd 100644
--- a/src/tsig/file/v1.rs
+++ b/src/tsig/file/v1.rs
@@ -151,19 +151,26 @@ impl KeySpec {
 //----------- AlgSpec ----------------------------------------------------------
 
 /// A TSIG key algorithm specification.
+///
+/// A subset of the [IANA TSIG algorithm name registry].
+///
+/// [IANA TSIG algorithm name registry]: https://www.iana.org/assignments/tsig-algorithm-names/tsig-algorithm-names.xhtml
 #[derive(Copy, Clone, Debug, Serialize, Deserialize)]
-#[serde(rename_all = "kebab-case")]
 pub enum AlgSpec {
-    /// SHA-1.
+    /// hmac-sha1.
+    #[serde(rename = "hmac-sha1")]
     HmacSha1,
 
-    /// SHA-256.
+    /// hmac-sha256.
+    #[serde(rename = "hmac-sha256")]
     HmacSha256,
 
-    /// SHA-384,
+    /// hmac-sha384,
+    #[serde(rename = "hmac-sha384")]
     HmacSha384,
 
-    /// SHA-512.
+    /// hmac-sha512.
+    #[serde(rename = "hmac-sha512")]
     HmacSha512,
 }
 

From 4b07b118fcd4ba52fe8ee26193edc8b41902a999 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Tue, 7 Apr 2026 16:33:42 +0200
Subject: [PATCH 006/113] Use ^ instead of ! and start adding man page content.

---
 crates/api/src/lib.rs                  |  9 ++++++++-
 doc/manual/source/man/cascade-zone.rst | 14 +++++++++++++-
 2 files changed, 21 insertions(+), 2 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 05e38de5c..41702244b 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -323,9 +323,16 @@ impl Display for ZoneSource {
     }
 }
 
+/// Support parsing of ``-source`` command line arguments.
+///
+/// Supported forms:
+///   - `<IP_ADDRESS>[:<PORT>][^<TSIG_KEY_NAME>]`
+///   - `</PATH/TO/ZONE/FILE/TO/LOAD>`
 impl From<&str> for ZoneSource {
     fn from(mut s: &str) -> Self {
-        let tsig_key = s.split_once('!').map(|(new_s, k)| {
+        // Split out any provided TSIG key from the rest of the
+        // source argument.
+        let tsig_key = s.split_once('^').map(|(new_s, k)| {
             s = new_s;
             k.to_string()
         });
diff --git a/doc/manual/source/man/cascade-zone.rst b/doc/manual/source/man/cascade-zone.rst
index 72cf80795..21c739230 100644
--- a/doc/manual/source/man/cascade-zone.rst
+++ b/doc/manual/source/man/cascade-zone.rst
@@ -84,11 +84,23 @@ Commands
 Options for :subcmd:`zone add`
 ------------------------------
 
-.. option:: --source <SOURCE>
+.. option:: --source <IP_ADDRESS[:<PORT>][^<TSIG_KEY_NAME]>
+.. option:: --source </PATH/TO/ZONE/FILE>
 
    The zone source can be an IP address (with or without port, defaults to port
    53) or a file path.
 
+   When providing an IP address (with or without port) you may also optionally
+   suffix it with ``^<TSIG_KEY_NAME>`` to indicate that the specified RFC 8945
+   TSIG key should be used to sign the zone transfer request.
+
+   Note: When providing a file path to a zone file to load, if :subcmd:`zone
+   add` is executed on a different host than where the ``cascaded`` daemon is
+   running the path must be valid on the **daemon** host.
+
+   Note: In order to use a TSIG key you MUST also supply the key to Cascade
+   via :subcmd:`tsig add`.
+
 .. option:: --policy <POLICY>
 
    Policy to use for this zone.

From 4d56ffbe89698ba6ee789a562e627d2fe38eff98 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Tue, 7 Apr 2026 23:50:49 +0200
Subject: [PATCH 007/113] Add a cascade tsig man page.

---
 Cargo.toml                                  |  2 +
 doc/manual/build/man/cascade-debug.1        |  4 +-
 doc/manual/build/man/cascade-health.1       |  2 +-
 doc/manual/build/man/cascade-hsm.1          |  2 +-
 doc/manual/build/man/cascade-keyset.1       |  4 +-
 doc/manual/build/man/cascade-policy.1       |  2 +-
 doc/manual/build/man/cascade-status.1       |  2 +-
 doc/manual/build/man/cascade-template.1     |  2 +-
 doc/manual/build/man/cascade-zone.1         | 29 ++++++++-
 doc/manual/build/man/cascade.1              |  5 +-
 doc/manual/build/man/cascaded-config.toml.5 | 43 +++++--------
 doc/manual/build/man/cascaded-policy.toml.5 |  2 +-
 doc/manual/build/man/cascaded.1             |  2 +-
 doc/manual/source/conf.py                   |  1 +
 doc/manual/source/index.rst                 |  1 +
 doc/manual/source/man/cascade-tsig.rst      | 69 +++++++++++++++++++++
 doc/manual/source/man/cascade.rst           |  7 +++
 17 files changed, 137 insertions(+), 42 deletions(-)
 create mode 100644 doc/manual/source/man/cascade-tsig.rst

diff --git a/Cargo.toml b/Cargo.toml
index 12e0a0465..9bb61a20c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -248,6 +248,7 @@ assets = [
 ["doc/manual/build/man/cascade-config.1", "usr/share/man/man1/cascade-config.1", "644"],
 ["doc/manual/build/man/cascade-health.1", "usr/share/man/man1/cascade-health.1", "644"],
 ["doc/manual/build/man/cascade-hsm.1", "usr/share/man/man1/cascade-hsm.1", "644"],
+["doc/manual/build/man/cascade-tsig.1", "usr/share/man/man1/cascade-tsig.1", "644"],
 ["doc/manual/build/man/cascade-keyset.1", "usr/share/man/man1/cascade-keyset.1", "644"],
 ["doc/manual/build/man/cascade-policy.1", "usr/share/man/man1/cascade-policy.1", "644"],
 ["doc/manual/build/man/cascade-status.1", "usr/share/man/man1/cascade-status.1", "644"],
@@ -302,6 +303,7 @@ assets = [
 { source = "doc/manual/build/man/cascade-config.1", dest = "/usr/share/man/man1/cascade-config.1", mode = "644", doc = true },
 { source = "doc/manual/build/man/cascade-health.1", dest = "/usr/share/man/man1/cascade-health.1", mode = "644", doc = true },
 { source = "doc/manual/build/man/cascade-hsm.1", dest = "/usr/share/man/man1/cascade-hsm.1", mode = "644", doc = true },
+{ source = "doc/manual/build/man/cascade-tsig.1", dest = "/usr/share/man/man1/cascade-tsig.1", mode = "644", doc = true },
 { source = "doc/manual/build/man/cascade-keyset.1", dest = "/usr/share/man/man1/cascade-keyset.1", mode = "644", doc = true },
 { source = "doc/manual/build/man/cascade-policy.1", dest = "/usr/share/man/man1/cascade-policy.1", mode = "644", doc = true },
 { source = "doc/manual/build/man/cascade-status.1", dest = "/usr/share/man/man1/cascade-status.1", mode = "644", doc = true },
diff --git a/doc/manual/build/man/cascade-debug.1 b/doc/manual/build/man/cascade-debug.1
index 5ce339d55..dbbc6b7ff 100644
--- a/doc/manual/build/man/cascade-debug.1
+++ b/doc/manual/build/man/cascade-debug.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-DEBUG" "1" "Nov 21, 2025" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-DEBUG" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-debug \- Debug / troubleshoot Cascade
 .SH SYNOPSIS
@@ -89,6 +89,6 @@ Cascade online documentation
 .SH AUTHOR
 NLnet Labs <cascade@nlnetlabs.nl>
 .SH COPYRIGHT
-2025–2025, NLnet Labs
+2025–2026, NLnet Labs
 .\" Generated by docutils manpage writer.
 .
diff --git a/doc/manual/build/man/cascade-health.1 b/doc/manual/build/man/cascade-health.1
index 39f3def64..29bd227a2 100644
--- a/doc/manual/build/man/cascade-health.1
+++ b/doc/manual/build/man/cascade-health.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HEALTH" "1" "Feb 25, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HEALTH" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-health \- Check the health of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-hsm.1 b/doc/manual/build/man/cascade-hsm.1
index 147f0ff77..cf5f3bffd 100644
--- a/doc/manual/build/man/cascade-hsm.1
+++ b/doc/manual/build/man/cascade-hsm.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HSM" "1" "Feb 27, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HSM" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-hsm \- Manage HSMs
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-keyset.1 b/doc/manual/build/man/cascade-keyset.1
index e38ab362d..30b191c8f 100644
--- a/doc/manual/build/man/cascade-keyset.1
+++ b/doc/manual/build/man/cascade-keyset.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-KEYSET" "1" "Mar 23, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-KEYSET" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-keyset \- Execute manual key roll or key removal commands
 .SH SYNOPSIS
@@ -153,7 +153,7 @@ dnskey | dnst key2ds \-n /dev/stdin\fP\&.
 .SH SEE ALSO
 .INDENT 0.0
 .TP
-.B \fI\%https://cascade.docs.nlnetlabs.nl\fP
+.B \X'tty: link https://cascade.docs.nlnetlabs.nl'\fI\%https://cascade.docs.nlnetlabs.nl\fP\X'tty: link'
 Cascade online documentation
 .TP
 \fBcascade\fP(1)
diff --git a/doc/manual/build/man/cascade-policy.1 b/doc/manual/build/man/cascade-policy.1
index 035c2436f..f503e4df0 100644
--- a/doc/manual/build/man/cascade-policy.1
+++ b/doc/manual/build/man/cascade-policy.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-POLICY" "1" "Feb 25, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-POLICY" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-policy \- Manage policies
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-status.1 b/doc/manual/build/man/cascade-status.1
index aaedfd62a..ee27023b4 100644
--- a/doc/manual/build/man/cascade-status.1
+++ b/doc/manual/build/man/cascade-status.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-STATUS" "1" "Feb 25, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-STATUS" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-status \- Show the status of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-template.1 b/doc/manual/build/man/cascade-template.1
index dc5377cfb..6542e234c 100644
--- a/doc/manual/build/man/cascade-template.1
+++ b/doc/manual/build/man/cascade-template.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-TEMPLATE" "1" "Feb 25, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-TEMPLATE" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-template \- Print example config or policy files
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-zone.1 b/doc/manual/build/man/cascade-zone.1
index 8600066dc..3aac4c8ac 100644
--- a/doc/manual/build/man/cascade-zone.1
+++ b/doc/manual/build/man/cascade-zone.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-ZONE" "1" "Mar 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-ZONE" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-zone \- Manage zones
 .SH SYNOPSIS
@@ -116,9 +116,34 @@ Get the history of a single zone.
 .SH OPTIONS FOR ZONE ADD
 .INDENT 0.0
 .TP
-.B \-\-source <SOURCE>
+.B \-\-source <IP_ADDRESS[:<PORT>][^<TSIG_KEY_NAME]>
+.UNINDENT
+.INDENT 0.0
+.TP
+.B \-\-source <PATH/TO/ZONE/FILE>
 The zone source can be an IP address (with or without port, defaults to port
 53) or a file path.
+.sp
+When providing an IP address (with or without port) you may also optionally
+suffix it with \fB^<TSIG_KEY_NAME>\fP to indicate that the specified RFC 8945
+TSIG key should be used to sign the zone transfer request.
+.sp
+\fBNOTE:\fP
+.INDENT 7.0
+.INDENT 3.5
+When providing the path to a zone file to load, if \fBzone
+add\fP is executed on a different host than where the \fBcascaded\fP
+daemon is running the path must be valid on the \fBdaemon\fP host.
+.UNINDENT
+.UNINDENT
+.sp
+\fBNOTE:\fP
+.INDENT 7.0
+.INDENT 3.5
+Note: In order to use a TSIG key you MUST also supply the key to
+Cascade via \fBtsig add\fP\&.
+.UNINDENT
+.UNINDENT
 .UNINDENT
 .INDENT 0.0
 .TP
diff --git a/doc/manual/build/man/cascade.1 b/doc/manual/build/man/cascade.1
index 1e3c7b87e..23a83d761 100644
--- a/doc/manual/build/man/cascade.1
+++ b/doc/manual/build/man/cascade.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE" "1" "Feb 25, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade \- Cascade CLI
 .SH SYNOPSIS
@@ -73,6 +73,9 @@ Manage policies.
 \fBcascade\-keyset\fP(1)
 Execute manual key roll or key removal commands.
 .TP
+\fBcascade\-tsig\fP(1)
+Manage TSIG keys.
+.TP
 \fBcascade\-hsm\fP(1)
 Manage HSMs.
 .TP
diff --git a/doc/manual/build/man/cascaded-config.toml.5 b/doc/manual/build/man/cascaded-config.toml.5
index c567ec8e5..b3e9adedb 100644
--- a/doc/manual/build/man/cascaded-config.toml.5
+++ b/doc/manual/build/man/cascaded-config.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-CONFIG.TOML" "5" "Feb 25, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-CONFIG.TOML" "5" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-config.toml \- Cascade configuration file
 .sp
@@ -68,19 +68,18 @@ identity = \(dqcascade:cascade\(dq
 servers = [\(dq127.0.0.1:4539\(dq, \(dq[::1]:4539\(dq]
 
 [loader]
-notify\-listeners = [\(dq127.0.0.1:4540\(dq, \(dq[::1]:4540\(dq]
 
 [loader.review]
-servers = [\(dq127.0.0.1:4541\(dq, \(dq[::1]:4541\(dq]
+servers = [\(dq127.0.0.1:4540\(dq, \(dq[::1]:4540\(dq]
 
 [signer]
 [signer.review]
-servers = [\(dq127.0.0.1:4542\(dq, \(dq[::1]:4542\(dq]
+servers = [\(dq127.0.0.1:4541\(dq, \(dq[::1]:4541\(dq]
 
 [key\-manager]
 
 [server]
-servers = [\(dq127.0.0.1:4543\(dq, \(dq[::1]:4543\(dq]
+servers = [\(dq127.0.0.1:4542\(dq, \(dq[::1]:4542\(dq]
 .EE
 .UNINDENT
 .UNINDENT
@@ -274,7 +273,9 @@ optional).
 If this option is set to \fBtrue\fP, the server changes its
 working directory to the root directory and as such influences
 where files are looked for. Use absolute path names in configuration
-to avoid ambiguities.
+to avoid ambiguities. Additionally, it will redirect stdout and stderr to
+\fB/dev/null\fP and you need to choose \fBsyslog\fP or \fBfile\fP as the
+\fI\%log\-target\fP\&.
 .UNINDENT
 .INDENT 0.0
 .TP
@@ -324,35 +325,21 @@ dropping privileges, if that is enabled).
 .UNINDENT
 .SS How zones are loaded.
 .sp
-The \fB[loader]\fP section.
-.INDENT 0.0
-.TP
-.B notify\-listeners = [\(dq127.0.0.1:4540\(dq, \(dq[::1]:4540\(dq]
-Where to listen for zone change notifications.
-.sp
-A DNS server will be bound to these addresses.  If a DNS NOTIFY message for
-a known zone is received there, the zone will be reloaded appropriately.
-.sp
-Unless explicitly specified (e.g. \fBudp://localhost:4540\fP), each address will
-be served over UDP and TCP.  An empty array will disable listening entirely.
-.sp
-These sockets may be bound by systemd and passed into Cascade.  If systemd
-does not provide them, Cascade will bind them itself (and will do so before
-dropping privileges, if that is enabled).
-.UNINDENT
+The \fB[loader]\fP section. (This only includes the \fB[loader.review]\fP section
+below, for now).
 .SS How loaded zones are reviewed.
 .sp
 The \fB[loader.review]\fP section.
 .INDENT 0.0
 .TP
-.B servers = [\(dq127.0.0.1:4541\(dq, \(dq[::1]:4541\(dq]
+.B servers = [\(dq127.0.0.1:4540\(dq, \(dq[::1]:4540\(dq]
 Where to serve loaded zones for review.
 .sp
 A DNS server will be bound to these addresses, and will serve the contents
 of all loaded zones.  This can be used to verify the consistency of these
 zones.
 .sp
-Unless explicitly specified (e.g. \fBudp://localhost:4541\fP), each address will
+Unless explicitly specified (e.g. \fBudp://localhost:4540\fP), each address will
 be served over UDP and TCP.  An empty array will disable serving entirely.
 .sp
 These sockets may be bound by systemd and passed into Cascade.  If systemd
@@ -368,14 +355,14 @@ below, for now).
 The \fB[signer.review]\fP section.
 .INDENT 0.0
 .TP
-.B servers = [\(dq127.0.0.1:4542\(dq, \(dq[::1]:4542\(dq]
+.B servers = [\(dq127.0.0.1:4541\(dq, \(dq[::1]:4541\(dq]
 Where to serve signed zones for review.
 .sp
 A DNS server will be bound to these addresses, and will serve the contents
 of all signed (but not necessarily published) zones.  This can be used to
 check the correctness of the signer.
 .sp
-Unless explicitly specified (e.g. \fBudp://localhost:4542\fP), each address will
+Unless explicitly specified (e.g. \fBudp://localhost:4541\fP), each address will
 be served over UDP and TCP.  An empty array will disable serving entirely.
 .sp
 These sockets may be bound by systemd and passed into Cascade.  If systemd
@@ -390,13 +377,13 @@ The \fB[key\-manager]\fP section. (Currently without options)
 The \fB[server]\fP section.
 .INDENT 0.0
 .TP
-.B servers = [\(dq127.0.0.1:4543\(dq, \(dq[::1]:4543\(dq]
+.B servers = [\(dq127.0.0.1:4542\(dq, \(dq[::1]:4542\(dq]
 Where to serve published zones.
 .sp
 A DNS server will be bound to these addresses, and will serve the contents
 of all published zones.  This is the final output from Cascade.
 .sp
-Unless explicitly specified (e.g. \fBudp://localhost:4543\fP), each address will
+Unless explicitly specified (e.g. \fBudp://localhost:4542\fP), each address will
 be served over UDP and TCP.  At least one address must be specified.
 .sp
 These sockets may be bound by systemd and passed into Cascade.  If systemd
diff --git a/doc/manual/build/man/cascaded-policy.toml.5 b/doc/manual/build/man/cascaded-policy.toml.5
index e92c90006..9b618b234 100644
--- a/doc/manual/build/man/cascaded-policy.toml.5
+++ b/doc/manual/build/man/cascaded-policy.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-POLICY.TOML" "5" "Feb 25, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-POLICY.TOML" "5" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-policy.toml \- Cascade policy file format
 .sp
diff --git a/doc/manual/build/man/cascaded.1 b/doc/manual/build/man/cascaded.1
index d06176ee5..c8f65ff01 100644
--- a/doc/manual/build/man/cascaded.1
+++ b/doc/manual/build/man/cascaded.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED" "1" "Feb 25, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded \- DNSSEC signer
 .SH SYNOPSIS
diff --git a/doc/manual/source/conf.py b/doc/manual/source/conf.py
index d0f2c767d..9f935d2e1 100644
--- a/doc/manual/source/conf.py
+++ b/doc/manual/source/conf.py
@@ -250,6 +250,7 @@
     ('man/cascade', 'cascade', 'Cascade CLI', author, 1),
     ('man/cascade-debug', 'cascade-debug', 'Debug / troubleshoot Cascade', author, 1),
     ('man/cascade-health', 'cascade-health', 'Check the health of Cascade', author, 1),
+    ('man/cascade-tsig', 'cascade-tsig', 'Manage TSIG keys', author, 1),
     ('man/cascade-hsm', 'cascade-hsm', 'Manage HSMs', author, 1),
     ('man/cascade-keyset', 'cascade-keyset', 'Execute manual key roll or key removal commands', author, 1),
     ('man/cascade-policy', 'cascade-policy', 'Manage policies', author, 1),
diff --git a/doc/manual/source/index.rst b/doc/manual/source/index.rst
index 503d22c82..dcfacf34e 100644
--- a/doc/manual/source/index.rst
+++ b/doc/manual/source/index.rst
@@ -161,6 +161,7 @@ Examples of things we're interested in:
    man/cascade-policy
    man/cascade-status
    man/cascade-template
+   man/cascade-tsig
    man/cascade-zone
    cascade-hsm-bridge Daemon <https://cascade.docs.nlnetlabs.nl/projects/cascade-hsm-bridge/en/latest/man/cascade-hsm-bridge.html>
    cascade-hsm-bridge Configuration File Format <https://cascade.docs.nlnetlabs.nl/projects/cascade-hsm-bridge/en/latest/man/cascade-hsm-bridge-config.toml.html>
diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
new file mode 100644
index 000000000..41fef1966
--- /dev/null
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -0,0 +1,69 @@
+cascade tsig
+============
+
+.. versionadded:: 0.1.0-beta1
+
+Synopsis
+--------
+
+:program:`cascade` ``[GLOBAL OPTIONS]`` tsig ``<COMMAND>``
+
+:program:`cascade` ``[GLOBAL OPTIONS]`` tsig :subcmd:`add` ``[OPTIONS]``
+
+Description
+-----------
+
+Manage RFC 8945 TSIG keys for authenticating zone transfers.
+
+Global Options
+--------------
+
+See :doc:`cascade` for information about global options supported by every CLI
+command.
+
+Commands
+--------
+
+.. subcmd:: add
+
+   Register a new TSIG key.
+
+Options for :subcmd:`tsig add`
+------------------------------
+
+.. option:: --name <TSIG_KEY_NAME>
+.. option:: --name [<ALGORITHM>]:<TSIG_KEY_NAME>:<SECRET>
+
+   The name of the TSIG key to add.
+
+   Alternatively this argument also supports dig syntax for specifying all of
+   the TSIG properties at once in colon separated form. The colon separated
+   syntax cannot be used in combination with the ``--alg`` and ``--secret``
+   options.
+
+.. option:: --alg <ALGORITHM>
+
+   The TSIG algorithm of the specified TSIG key. Can be one of: hmac-sha1,
+   hmac-sha256, hmac-sha384 or hmac-sha512.
+
+.. option:: --secret <SECRET>
+
+   A base64 encoded string defining the actual TSIG key material bytes.
+
+See Also
+--------
+
+https://cascade.docs.nlnetlabs.nl
+    Cascade online documentation
+
+**cascade**\ (1)
+    :doc:`cascade`
+
+**cascaded**\ (1)
+    :doc:`cascaded`
+
+**cascaded-config.toml**\ (5)
+    :doc:`cascaded-config.toml`
+
+**cascaded-policy.toml**\ (5)
+    :doc:`cascaded-policy.toml`
diff --git a/doc/manual/source/man/cascade.rst b/doc/manual/source/man/cascade.rst
index aa939ab49..b2923e8ac 100644
--- a/doc/manual/source/man/cascade.rst
+++ b/doc/manual/source/man/cascade.rst
@@ -55,6 +55,10 @@ Commands
 
           Execute manual key roll or key removal commands.
 
+        :doc:`cascade-tsig <cascade-tsig>`\ (1)
+
+          Manage TSIG keys.
+
         :doc:`cascade-hsm <cascade-hsm>`\ (1)
 
           Manage HSMs.
@@ -81,6 +85,9 @@ Commands
     **cascade-keyset**\ (1)
         Execute manual key roll or key removal commands.
 
+    **cascade-tsig**\ (1)
+        Manage TSIG keys.
+
     **cascade-hsm**\ (1)
         Manage HSMs.
 

From 53f62051e413021785bad84029f3dd4898207e3e Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 8 Apr 2026 00:02:01 +0200
Subject: [PATCH 008/113] More TSIG related man page updates.

---
 doc/manual/source/man/cascade-tsig.rst |  2 +-
 doc/manual/source/man/cascade-zone.rst | 12 ++++++------
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index 41fef1966..d0ceecb7a 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -39,7 +39,7 @@ Options for :subcmd:`tsig add`
    Alternatively this argument also supports dig syntax for specifying all of
    the TSIG properties at once in colon separated form. The colon separated
    syntax cannot be used in combination with the ``--alg`` and ``--secret``
-   options.
+   options. If ``<ALGORITHM>`` is not specified it defaults to SHA256.
 
 .. option:: --alg <ALGORITHM>
 
diff --git a/doc/manual/source/man/cascade-zone.rst b/doc/manual/source/man/cascade-zone.rst
index 21c739230..8b02ef6f2 100644
--- a/doc/manual/source/man/cascade-zone.rst
+++ b/doc/manual/source/man/cascade-zone.rst
@@ -85,7 +85,7 @@ Options for :subcmd:`zone add`
 ------------------------------
 
 .. option:: --source <IP_ADDRESS[:<PORT>][^<TSIG_KEY_NAME]>
-.. option:: --source </PATH/TO/ZONE/FILE>
+.. option:: --source <PATH/TO/ZONE/FILE>
 
    The zone source can be an IP address (with or without port, defaults to port
    53) or a file path.
@@ -94,12 +94,12 @@ Options for :subcmd:`zone add`
    suffix it with ``^<TSIG_KEY_NAME>`` to indicate that the specified RFC 8945
    TSIG key should be used to sign the zone transfer request.
 
-   Note: When providing a file path to a zone file to load, if :subcmd:`zone
-   add` is executed on a different host than where the ``cascaded`` daemon is
-   running the path must be valid on the **daemon** host.
+   .. note:: When providing the path to a zone file to load, if :subcmd:`zone
+             add` is executed on a different host than where the ``cascaded``
+             daemon is running the path must be valid on the **daemon** host.
 
-   Note: In order to use a TSIG key you MUST also supply the key to Cascade
-   via :subcmd:`tsig add`.
+   .. note:: Note: In order to use a TSIG key you MUST also supply the key to
+             Cascade via :subcmd:`tsig add`.
 
 .. option:: --policy <POLICY>
 

From 9b50f3c5c340493dac854146baddd8cd52e87d88 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 8 Apr 2026 00:30:41 +0200
Subject: [PATCH 009/113] Try adding an NSD integration page to showcase TSIG
 support.

---
 doc/manual/source/index.rst | 12 +++++++--
 doc/manual/source/nsd.rst   | 54 +++++++++++++++++++++++++++++++++++++
 2 files changed, 64 insertions(+), 2 deletions(-)
 create mode 100644 doc/manual/source/nsd.rst

diff --git a/doc/manual/source/index.rst b/doc/manual/source/index.rst
index dcfacf34e..be59ef875 100644
--- a/doc/manual/source/index.rst
+++ b/doc/manual/source/index.rst
@@ -112,8 +112,16 @@ Examples of things we're interested in:
 .. toctree::
    :maxdepth: 2
    :hidden:
-   :caption: Integrations
-   :name: toc-integrations
+   :caption: Nameserver Integrations
+   :name: toc-nameserver-integrations
+
+   nsd
+
+.. toctree::
+   :maxdepth: 2
+   :hidden:
+   :caption: HSM Integrations
+   :name: toc-hsm-integrations
 
    softhsm
    thales
diff --git a/doc/manual/source/nsd.rst b/doc/manual/source/nsd.rst
new file mode 100644
index 000000000..fae773c6d
--- /dev/null
+++ b/doc/manual/source/nsd.rst
@@ -0,0 +1,54 @@
+Integrating with NSD
+====================
+
+.. epigraph::
+
+   Name Server Daemon (NSD) by NLnet Labs is an authoritative DNS name server.
+
+   -- https://nsd.docs.nlnetlabs.nl/
+
+Using NSD as a primary to Cascade
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+To use NSD as an upstream name server of Cascade is done by adding a zone to
+NSD that refers to Cascade as a secondary name server to which NSD will
+provide XFR (zone transfers), optionally authenticated using a TSIG key.
+
+For example the following NSD configuration file fragment adds an example.com
+zone to NSD that is to be served as input to Cascade.
+
+.. code-block::
+
+   zone:
+     name: example.com
+	 zonefile: "zonefile.name"
+	 notify: 127.0.0.1@4542 NOKEY
+	 provide-xfr: 127.0.0.1 NOKEY
+	 store-ixfr: yes
+ 	 create-ixfr: yes
+
+A TSIG key can be used to authenticate the NOTIFY and XFR communications. For
+example\:
+
+.. code-block::
+
+  key:
+    name: "sec1_key"
+    algorithm: hmac-md5
+    secret: "6KM6qiKfwfEpamEq72HQdA=="
+
+   zone:
+     name: example.com
+	 zonefile: "zonefile.name"
+	 notify: 127.0.0.1@4542 sec1_key
+	 provide-xfr: 127.0.0.1 sec1_key
+	 store-ixfr: yes
+ 	 create-ixfr: yes
+
+See https://nsd.docs.nlnetlabs.nl/en/latest/running/using-tsig.html for more
+information.
+
+Using NSD as a secondary to Cascade
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+TODO

From 5845baf525fc3fdced14ec69cb8707a18aa25874 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 8 Apr 2026 00:38:20 +0200
Subject: [PATCH 010/113] Expand the NSD example.

---
 doc/manual/source/nsd.rst | 38 ++++++++++++++++++++++++++++----------
 1 file changed, 28 insertions(+), 10 deletions(-)

diff --git a/doc/manual/source/nsd.rst b/doc/manual/source/nsd.rst
index fae773c6d..b2ac1a7a0 100644
--- a/doc/manual/source/nsd.rst
+++ b/doc/manual/source/nsd.rst
@@ -10,20 +10,24 @@ Integrating with NSD
 Using NSD as a primary to Cascade
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-To use NSD as an upstream name server of Cascade is done by adding a zone to
-NSD that refers to Cascade as a secondary name server to which NSD will
-provide XFR (zone transfers), optionally authenticated using a TSIG key.
+To use NSD as an upstream name server of Cascade you must add a zone to
+NSD that refers to Cascade as a secondary name server so that NSD will send
+a NOTIFY message to Cascade when the zone changes and will allow Cascade to
+make an XFR request to receive the update zone. Optionally NSD and Cascade
+can be configured with the same TSIG key to authenticate the NOTIFY and XFR
+messages.
 
 For example the following NSD configuration file fragment adds an example.com
-zone to NSD that is to be served as input to Cascade.
+zone to NSD that is to be served as input to a Cascade daemon running on host
+192.168.0.2 listening on the default port 4542:
 
 .. code-block::
 
    zone:
      name: example.com
 	 zonefile: "zonefile.name"
-	 notify: 127.0.0.1@4542 NOKEY
-	 provide-xfr: 127.0.0.1 NOKEY
+	 notify: 192.168.0.2@4542 NOKEY
+	 provide-xfr: 192.168.0.2 NOKEY
 	 store-ixfr: yes
  	 create-ixfr: yes
 
@@ -34,20 +38,34 @@ example\:
 
   key:
     name: "sec1_key"
-    algorithm: hmac-md5
-    secret: "6KM6qiKfwfEpamEq72HQdA=="
+    algorithm: hmac-sha256
+    secret: "...=="
 
    zone:
      name: example.com
 	 zonefile: "zonefile.name"
-	 notify: 127.0.0.1@4542 sec1_key
-	 provide-xfr: 127.0.0.1 sec1_key
+	 notify: 192.168.0.2@4542 sec1_key
+	 provide-xfr: 192.168.0.2 sec1_key
 	 store-ixfr: yes
  	 create-ixfr: yes
 
 See https://nsd.docs.nlnetlabs.nl/en/latest/running/using-tsig.html for more
 information.
 
+Adding the TSIG key to Cascade is done using the ``cascade tsig add`` CLI
+command, e.g. like so:
+
+.. code-block:: bash
+
+   $ cascade tsig add --name sec1_key --alg hmac-sha256 --secret "...=="
+
+And then instructing Cascade to use the TSIG key when adding the zone, assuming
+that the NSD daemon is running on host 192.168.0.1 on port 53:
+
+.. code-block:: bash
+
+   $ cascade zone add --source 192.168.0.1^sec1_key --policy default example.com
+
 Using NSD as a secondary to Cascade
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

From 7002eb312e48cca314a7aeebf206400799a2cc7a Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 8 Apr 2026 08:09:56 +0200
Subject: [PATCH 011/113] Tweak the NSD example.

---
 doc/manual/source/nsd.rst | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/doc/manual/source/nsd.rst b/doc/manual/source/nsd.rst
index b2ac1a7a0..b8dd1a2a5 100644
--- a/doc/manual/source/nsd.rst
+++ b/doc/manual/source/nsd.rst
@@ -52,6 +52,9 @@ example\:
 See https://nsd.docs.nlnetlabs.nl/en/latest/running/using-tsig.html for more
 information.
 
+.. tip:: Remember to reload the NSD configuration or restart NSD so that
+         changes to the configuration take effect.
+
 Adding the TSIG key to Cascade is done using the ``cascade tsig add`` CLI
 command, e.g. like so:
 
@@ -59,8 +62,11 @@ command, e.g. like so:
 
    $ cascade tsig add --name sec1_key --alg hmac-sha256 --secret "...=="
 
-And then instructing Cascade to use the TSIG key when adding the zone, assuming
-that the NSD daemon is running on host 192.168.0.1 on port 53:
+To use the new TAIG key it must be specified when adding a zone to
+Cascade. Assuming that NSD is running on host 192.168.0.1 on port 53
+the following command instructs Cascade to add the ``example.com``
+zone sourced from the NSD server using the ``sec1_key`` TSIG key to
+authenticate with NSD:
 
 .. code-block:: bash
 

From 0750e4e293e4af6816ac3e6f1ed7f78faa5e2f3b Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 8 Apr 2026 13:35:20 +0200
Subject: [PATCH 012/113] Advise how to create a TSIG key.

---
 doc/manual/build/man/cascade-debug.1        | 2 +-
 doc/manual/build/man/cascade-health.1       | 2 +-
 doc/manual/build/man/cascade-hsm.1          | 2 +-
 doc/manual/build/man/cascade-keyset.1       | 2 +-
 doc/manual/build/man/cascade-policy.1       | 2 +-
 doc/manual/build/man/cascade-status.1       | 2 +-
 doc/manual/build/man/cascade-template.1     | 2 +-
 doc/manual/build/man/cascade-zone.1         | 2 +-
 doc/manual/build/man/cascade.1              | 2 +-
 doc/manual/build/man/cascaded-config.toml.5 | 2 +-
 doc/manual/build/man/cascaded-policy.toml.5 | 2 +-
 doc/manual/build/man/cascaded.1             | 2 +-
 doc/manual/source/man/cascade-tsig.rst      | 5 +++++
 doc/manual/source/man/cascade-zone.rst      | 2 +-
 14 files changed, 18 insertions(+), 13 deletions(-)

diff --git a/doc/manual/build/man/cascade-debug.1 b/doc/manual/build/man/cascade-debug.1
index dbbc6b7ff..437895a64 100644
--- a/doc/manual/build/man/cascade-debug.1
+++ b/doc/manual/build/man/cascade-debug.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-DEBUG" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-DEBUG" "1" "Apr 08, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-debug \- Debug / troubleshoot Cascade
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-health.1 b/doc/manual/build/man/cascade-health.1
index 29bd227a2..476a02689 100644
--- a/doc/manual/build/man/cascade-health.1
+++ b/doc/manual/build/man/cascade-health.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HEALTH" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HEALTH" "1" "Apr 08, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-health \- Check the health of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-hsm.1 b/doc/manual/build/man/cascade-hsm.1
index cf5f3bffd..26ce5a308 100644
--- a/doc/manual/build/man/cascade-hsm.1
+++ b/doc/manual/build/man/cascade-hsm.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HSM" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HSM" "1" "Apr 08, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-hsm \- Manage HSMs
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-keyset.1 b/doc/manual/build/man/cascade-keyset.1
index 30b191c8f..41992ce00 100644
--- a/doc/manual/build/man/cascade-keyset.1
+++ b/doc/manual/build/man/cascade-keyset.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-KEYSET" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-KEYSET" "1" "Apr 08, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-keyset \- Execute manual key roll or key removal commands
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-policy.1 b/doc/manual/build/man/cascade-policy.1
index f503e4df0..a804fae28 100644
--- a/doc/manual/build/man/cascade-policy.1
+++ b/doc/manual/build/man/cascade-policy.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-POLICY" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-POLICY" "1" "Apr 08, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-policy \- Manage policies
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-status.1 b/doc/manual/build/man/cascade-status.1
index ee27023b4..7de23b9fb 100644
--- a/doc/manual/build/man/cascade-status.1
+++ b/doc/manual/build/man/cascade-status.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-STATUS" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-STATUS" "1" "Apr 08, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-status \- Show the status of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-template.1 b/doc/manual/build/man/cascade-template.1
index 6542e234c..8eae7eb85 100644
--- a/doc/manual/build/man/cascade-template.1
+++ b/doc/manual/build/man/cascade-template.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-TEMPLATE" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-TEMPLATE" "1" "Apr 08, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-template \- Print example config or policy files
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-zone.1 b/doc/manual/build/man/cascade-zone.1
index 3aac4c8ac..f95e199e9 100644
--- a/doc/manual/build/man/cascade-zone.1
+++ b/doc/manual/build/man/cascade-zone.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-ZONE" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-ZONE" "1" "Apr 08, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-zone \- Manage zones
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade.1 b/doc/manual/build/man/cascade.1
index 23a83d761..34cb8eded 100644
--- a/doc/manual/build/man/cascade.1
+++ b/doc/manual/build/man/cascade.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE" "1" "Apr 08, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade \- Cascade CLI
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascaded-config.toml.5 b/doc/manual/build/man/cascaded-config.toml.5
index b3e9adedb..7aed0229c 100644
--- a/doc/manual/build/man/cascaded-config.toml.5
+++ b/doc/manual/build/man/cascaded-config.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-CONFIG.TOML" "5" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-CONFIG.TOML" "5" "Apr 08, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-config.toml \- Cascade configuration file
 .sp
diff --git a/doc/manual/build/man/cascaded-policy.toml.5 b/doc/manual/build/man/cascaded-policy.toml.5
index 9b618b234..3beacae9b 100644
--- a/doc/manual/build/man/cascaded-policy.toml.5
+++ b/doc/manual/build/man/cascaded-policy.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-POLICY.TOML" "5" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-POLICY.TOML" "5" "Apr 08, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-policy.toml \- Cascade policy file format
 .sp
diff --git a/doc/manual/build/man/cascaded.1 b/doc/manual/build/man/cascaded.1
index c8f65ff01..a6a57cfb0 100644
--- a/doc/manual/build/man/cascaded.1
+++ b/doc/manual/build/man/cascaded.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED" "1" "Apr 07, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED" "1" "Apr 08, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded \- DNSSEC signer
 .SH SYNOPSIS
diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index d0ceecb7a..02964d18b 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -15,6 +15,11 @@ Description
 
 Manage RFC 8945 TSIG keys for authenticating zone transfers.
 
+.. tip:: Cascade isn't currently able to generate TSIG keys itself.
+         One way to generate a TSIG key is to use the `tsig-keygen
+         <https://bind9.readthedocs.io/en/latest/manpages.html#tsig-keygen-tsi
+         g-key-generation-tool>`_ tool from the ISC BIND project.
+
 Global Options
 --------------
 
diff --git a/doc/manual/source/man/cascade-zone.rst b/doc/manual/source/man/cascade-zone.rst
index 8b02ef6f2..6aceb1103 100644
--- a/doc/manual/source/man/cascade-zone.rst
+++ b/doc/manual/source/man/cascade-zone.rst
@@ -207,7 +207,7 @@ Options for :subcmd:`zone reject`
    The serial number of the zone to reject.
 
 Options for :subcmd:`zone override`
----------------------------------
+-----------------------------------
 
 .. option:: <--unsigned|--signed>
 

From 7143a5497ff600b4853dd3f594923e3f334d182b Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 8 Apr 2026 13:51:03 +0200
Subject: [PATCH 013/113] Start creating a system test for upstream TSIG.

Begin with a test that should fail: fetching a zone without using the
required TSIG key.
---
 .../scripts/manage-test-environment.sh        | 36 +++++++++++++-
 integration-tests/system-tests.yml            | 11 +++++
 .../tests/upstream-tsig/action.yml            | 48 +++++++++++++++++++
 3 files changed, 94 insertions(+), 1 deletion(-)
 create mode 100644 integration-tests/tests/upstream-tsig/action.yml

diff --git a/integration-tests/scripts/manage-test-environment.sh b/integration-tests/scripts/manage-test-environment.sh
index 2b811cd19..0d1d833ee 100755
--- a/integration-tests/scripts/manage-test-environment.sh
+++ b/integration-tests/scripts/manage-test-environment.sh
@@ -325,18 +325,34 @@ remote-control:
   control-enable: yes
   control-interface: "${base_dir}/nsd-primary/nsd.sock"
 
+key:
+  name: "tsig-key"
+  algorithm: hmac-sha256
+  secret: "COzoVsYQmXeXiyq1Quhp0bbVnMyxjPxsaGSoIWR98i0="
+
 pattern:
   name: primary
   zonefile: "%s.primary-zone"
-  allow-notify: 127.0.0.1 NOKEY
   provide-xfr: 127.0.0.1 NOKEY
   notify: 127.0.0.1@${_cascade_port} NOKEY 
   store-ixfr: yes
   create-ixfr: yes
 
+pattern:
+  name: primary-tsig
+  zonefile: "%s.primary-zone"
+  provide-xfr: 127.0.0.1 tsig-key
+  notify: 127.0.0.1@${_cascade_port} tsig-key
+  store-ixfr: yes
+  create-ixfr: yes
+
 zone:
   name: example.test
   include-pattern: primary
+
+zone:
+  name: example-tsig.test
+  include-pattern: primary-tsig
 EOF
 
 tee "${base_dir}/nsd-primary/zones/example.test.primary-zone" <<'EOF' >&2
@@ -358,6 +374,24 @@ mail        MX  10 example.test.
 text        TXT "Hello World!"
 EOF
 
+tee "${base_dir}/nsd-primary/zones/example-tsig.test.primary-zone" <<'EOF' >&2
+$TTL 5 ; use a very short TTL for sped up keyset rolls
+example-tsig.test.   IN SOA ns1.example-tsig.test. mail.example-tsig.test. (
+                      1          ; serial
+                     60          ; refresh (60 seconds)
+                     60          ; retry (60 seconds)
+                   3600          ; expire (1 hour)
+                      5          ; minimum (5 seconds)
+                    )
+@           NS  example-tsig.test.
+@           NS  ns1.example-tsig.test.
+@           A   127.0.0.1
+ns1         A   127.0.0.1
+
+www         A   169.254.1.1
+mail        MX  10 example-tsig.test.
+text        TXT "Hello TSIG World!"
+EOF
 
 }
 
diff --git a/integration-tests/system-tests.yml b/integration-tests/system-tests.yml
index 2abc18a7b..a334676e7 100644
--- a/integration-tests/system-tests.yml
+++ b/integration-tests/system-tests.yml
@@ -243,3 +243,14 @@ jobs:
       - uses: ./integration-tests/tests/remove-zone
         with:
           log-level: ${{ inputs.log-level }}
+
+  # Added for https://github.com/NLnetLabs/cascade/pull/564
+  upstream-tsig:
+    name: Use TSIG with an upstream nameserver.
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        rust: [stable]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./integration-tests/tests/upstream-tsig
diff --git a/integration-tests/tests/upstream-tsig/action.yml b/integration-tests/tests/upstream-tsig/action.yml
new file mode 100644
index 000000000..1d4044657
--- /dev/null
+++ b/integration-tests/tests/upstream-tsig/action.yml
@@ -0,0 +1,48 @@
+# Making reusable composite actions documented at
+# https://docs.github.com/en/actions/tutorials/create-actions/create-a-composite-action#creating-a-composite-action-within-the-same-repository
+name: 'Use TSIG with an upstream nameserver.'
+description: 'Use TSIG with an upstream nameserver.'
+defaults:
+  # see: https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#defaultsrunshell
+  run:
+    shell: bash --noprofile --norc -eo pipefail -x {0}
+inputs:
+  log-level:
+    description: The level of logging that Cascade should output.
+    required: false
+    default: debug
+    type: choice
+    options:
+      - error
+      - warning
+      - info
+      - debug
+      - trace
+runs:
+  using: "composite"
+  steps:
+    - uses: ./.github/actions/prepare-systest-env
+    - uses: ./.github/actions/setup-and-start-cascade
+      with:
+        log-level: ${{ inputs.log-level }}
+
+    - name: Add zone without the required TSIG key.
+      run: |
+        cascade zone add --policy default --source 127.0.0.1:1055 example-tsig.test
+
+    - name: Check zone status
+      run: |
+        timeout=10 # seconds
+        start=$(date +%s)
+        until cascade zone status example-tsig.test | grep -q "Published zone available"; do
+          if (($(date +%s) > (start + timeout))); then
+            exit 0
+          fi
+          sleep 1
+        done
+        echo "::error:: zone status unexpectedly reports TSIG required zone was retrieved and published without using the TSIG key"
+        exit 1
+
+    - name: Print log files on any failure in this job
+      uses: ./.github/actions/print-logfiles
+      if: failure()

From c0724eebef01dd08d695c464187d110cfca1efc4 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 8 Apr 2026 14:15:58 +0200
Subject: [PATCH 014/113] FIX: allow hmac- when specifying the algorithm name
 to `tsig key add`.

---
 crates/cli/src/commands/tsig.rs | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/crates/cli/src/commands/tsig.rs b/crates/cli/src/commands/tsig.rs
index e940e28cf..749157b50 100644
--- a/crates/cli/src/commands/tsig.rs
+++ b/crates/cli/src/commands/tsig.rs
@@ -7,10 +7,10 @@ use crate::println;
 
 #[derive(Clone, Debug, clap::ValueEnum)]
 pub enum TsigAlgorithm {
-    Sha1,
-    Sha256,
-    Sha384,
-    Sha512,
+    HmacSha1,
+    HmacSha256,
+    HmacSha384,
+    HmacSha512,
 }
 
 impl FromStr for TsigAlgorithm {
@@ -18,10 +18,10 @@ impl FromStr for TsigAlgorithm {
 
     fn from_str(s: &str) -> Result<Self, Self::Err> {
         match s {
-            "hmac-sha1" => Ok(TsigAlgorithm::Sha1),
-            "hmac-sha256" => Ok(TsigAlgorithm::Sha256),
-            "hmac-sha384" => Ok(TsigAlgorithm::Sha384),
-            "hmac-sha512" => Ok(TsigAlgorithm::Sha512),
+            "hmac-sha1" => Ok(TsigAlgorithm::HmacSha1),
+            "hmac-sha256" => Ok(TsigAlgorithm::HmacSha256),
+            "hmac-sha384" => Ok(TsigAlgorithm::HmacSha384),
+            "hmac-sha512" => Ok(TsigAlgorithm::HmacSha512),
             other => Err(format!("'{other}' is not a recognized TSIG algorithm")),
         }
     }
@@ -30,10 +30,10 @@ impl FromStr for TsigAlgorithm {
 impl From<TsigAlgorithm> for crate::api::TsigAlgorithm {
     fn from(alg: TsigAlgorithm) -> Self {
         match alg {
-            TsigAlgorithm::Sha1 => cascade_api::TsigAlgorithm::Sha1,
-            TsigAlgorithm::Sha256 => cascade_api::TsigAlgorithm::Sha256,
-            TsigAlgorithm::Sha384 => cascade_api::TsigAlgorithm::Sha384,
-            TsigAlgorithm::Sha512 => cascade_api::TsigAlgorithm::Sha512,
+            TsigAlgorithm::HmacSha1 => cascade_api::TsigAlgorithm::Sha1,
+            TsigAlgorithm::HmacSha256 => cascade_api::TsigAlgorithm::Sha256,
+            TsigAlgorithm::HmacSha384 => cascade_api::TsigAlgorithm::Sha384,
+            TsigAlgorithm::HmacSha512 => cascade_api::TsigAlgorithm::Sha512,
         }
     }
 }
@@ -85,7 +85,7 @@ impl Tsig {
                             }
 
                             [name_part, secret_part] => {
-                                let alg = TsigAlgorithm::Sha256;
+                                let alg = TsigAlgorithm::HmacSha256;
                                 let name = name_part.to_string();
                                 let secret = secret_part.to_string();
                                 (name, alg, secret)

From 678d55e54c5831dfc51f6b04c695f28f823992a3 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 8 Apr 2026 14:16:15 +0200
Subject: [PATCH 015/113] FIX: Wrong `tsig add` subcommand documentation.

---
 doc/manual/source/man/cascade-tsig.rst | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index 02964d18b..3e4dc174f 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -8,7 +8,7 @@ Synopsis
 
 :program:`cascade` ``[GLOBAL OPTIONS]`` tsig ``<COMMAND>``
 
-:program:`cascade` ``[GLOBAL OPTIONS]`` tsig :subcmd:`add` ``[OPTIONS]``
+:program:`cascade` ``[GLOBAL OPTIONS]`` tsig :subcmd:`add` ``<TSIG_KEY_NAME>`` ``<ALGORITHM>`` ``<SECRET>``
 
 Description
 -----------
@@ -33,11 +33,10 @@ Commands
 
    Register a new TSIG key.
 
-Options for :subcmd:`tsig add`
+Arguments for :subcmd:`tsig add`
 ------------------------------
 
-.. option:: --name <TSIG_KEY_NAME>
-.. option:: --name [<ALGORITHM>]:<TSIG_KEY_NAME>:<SECRET>
+.. option:: <TSIG_KEY_NAME>
 
    The name of the TSIG key to add.
 
@@ -46,12 +45,12 @@ Options for :subcmd:`tsig add`
    syntax cannot be used in combination with the ``--alg`` and ``--secret``
    options. If ``<ALGORITHM>`` is not specified it defaults to SHA256.
 
-.. option:: --alg <ALGORITHM>
+.. option:: <ALGORITHM>
 
    The TSIG algorithm of the specified TSIG key. Can be one of: hmac-sha1,
    hmac-sha256, hmac-sha384 or hmac-sha512.
 
-.. option:: --secret <SECRET>
+.. option:: <SECRET>
 
    A base64 encoded string defining the actual TSIG key material bytes.
 

From 0c0d38c8844cf057dc15184eaf17a3abff333231 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 8 Apr 2026 14:16:31 +0200
Subject: [PATCH 016/113] Make the upstream TSIG system test try using TSIG.

---
 .../tests/upstream-tsig/action.yml            | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/integration-tests/tests/upstream-tsig/action.yml b/integration-tests/tests/upstream-tsig/action.yml
index 1d4044657..a60f67a34 100644
--- a/integration-tests/tests/upstream-tsig/action.yml
+++ b/integration-tests/tests/upstream-tsig/action.yml
@@ -43,6 +43,25 @@ runs:
         echo "::error:: zone status unexpectedly reports TSIG required zone was retrieved and published without using the TSIG key"
         exit 1
 
+    - name: Remove and re-add the zone with the required TSIG key.
+      run: |
+        cascade zone remove example-tsig.test
+        cascade tsig add tsig-key hmac-sha256 "COzoVsYQmXeXiyq1Quhp0bbVnMyxjPxsaGSoIWR98i0="
+        cascade zone add --policy default --source 127.0.0.1:1055^tsig-key example-tsig.test
+
+    - name: Check zone status
+      run: |
+        timeout=10 # seconds
+        start=$(date +%s)
+        until cascade zone status example-tsig.test | grep -q "Published zone available"; do
+          if (($(date +%s) > (start + timeout))); then
+            cascade zone status example-tsig.test
+            echo "::error:: timeout: zone status did not report published zone available"
+            exit 1
+          fi
+          sleep 1
+        done
+
     - name: Print log files on any failure in this job
       uses: ./.github/actions/print-logfiles
       if: failure()

From b44b805673b63e8a996ba145485a4a0b82399739 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 10 Apr 2026 11:21:20 +0200
Subject: [PATCH 017/113] Fix merge error.

---
 doc/manual/source/man/cascade-zone.rst | 33 ++++++++++++++++++--------
 1 file changed, 23 insertions(+), 10 deletions(-)

diff --git a/doc/manual/source/man/cascade-zone.rst b/doc/manual/source/man/cascade-zone.rst
index 6e9360c4b..19bf284a6 100644
--- a/doc/manual/source/man/cascade-zone.rst
+++ b/doc/manual/source/man/cascade-zone.rst
@@ -42,12 +42,15 @@ Commands
 
 .. subcmd:: add
 
-   Register a new zone.
+   Register a new zone. The zone will be loaded, signed and published.
 
 .. subcmd:: remove
 
    Remove a zone.
 
+   .. note:: Once removed downstream servers will no longer be able to fetech
+             the zone!
+
 .. subcmd:: list
 
    List registered zones.
@@ -83,15 +86,25 @@ Commands
 Options for :subcmd:`zone add`
 ------------------------------
 
-.. option:: --source <IP_ADDRESS[:<PORT>][^<TSIG_KEY_NAME]>
-.. option:: --source <PATH/TO/ZONE/FILE>
-
-   The zone source can be an IP address (with or without port, defaults to port
-   53) or a file path.
-
-   When providing an IP address (with or without port) you may also optionally
-   suffix it with ``^<TSIG_KEY_NAME>`` to indicate that the specified RFC 8945
-   TSIG key should be used to sign the zone transfer request.
+.. option:: --source <SOURCE>
+
+   The zone source can be the IP address of an upstream nameserver (with
+   or without port, defaults to port 53) or the path to a zone file locally
+   available to the ``cascaded`` daemon.`
+
+   When specifying an upstream nameserver you may also optionally suffix it
+   with ``^<TSIG_KEY_NAME>`` to indicate that the specified RFC 8945 TSIG key
+   should be used to sign any SOA, AXFR and IXFR queries that will be sent to
+   the upstream source.
+
+   Zones sourced from an upstream nameserver will be automatically updated if
+   a new version is detected. This can happen if the upstream nameserver sends
+   an RFC 1996 NOTIFY message to Cascade, or if an IXFR or SOA query (if the
+   upstream responds with NOTIMP to an IXFR request) sent by Cascade (due to a
+   SOA timer expiring) discovers that a newer SOA SERIAL is available, or due
+   to an operator issuing a `zone reload` command. For zones that have already
+   been retrieved at least once via AXFR, subsequent refreshes will attempt to
+   use IXFR and fallback to AXFR if IXFR is not available.
 
    .. note:: When providing the path to a zone file to load, if :subcmd:`zone
              add` is executed on a different host than where the ``cascaded``

From 059cd0ab7572cb44f30476f73bfc6561057f3925 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 10 Apr 2026 11:22:09 +0200
Subject: [PATCH 018/113] Fix sphinx-build WARNING: Title underline too short.

---
 doc/manual/source/man/cascade-tsig.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index 3e4dc174f..06ae88109 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -34,7 +34,7 @@ Commands
    Register a new TSIG key.
 
 Arguments for :subcmd:`tsig add`
-------------------------------
+--------------------------------
 
 .. option:: <TSIG_KEY_NAME>
 

From 5c38ef95d40090cd3a51213950c3a19cbf305bee Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 10 Apr 2026 12:27:06 +0200
Subject: [PATCH 019/113] Add `tsig list` CLI subcommand.

---
 crates/api/Cargo.toml           |  2 +-
 crates/api/src/lib.rs           | 36 +++++++++++++++++++++-
 crates/cli/src/commands/tsig.rs | 48 +++++++++++++++++++++++++++--
 src/units/http_server.rs        | 54 ++++++++++++++++++++++++---------
 4 files changed, 121 insertions(+), 19 deletions(-)

diff --git a/crates/api/Cargo.toml b/crates/api/Cargo.toml
index 70f7cb4d5..a7d799bd6 100644
--- a/crates/api/Cargo.toml
+++ b/crates/api/Cargo.toml
@@ -32,7 +32,7 @@ features = ["serde1"]
 [dependencies.domain]
 workspace = true
 # TODO: Enable and use 'new::base'?
-features = ["bytes", "serde"]
+features = ["bytes", "serde", "tsig"]
 
 # The API uses 'serde' for transforming high-level types to and from the
 # underlying wire format.
diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 7123ca579..f3615de0c 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -1,3 +1,4 @@
+use std::collections::HashMap;
 use std::fmt::{self, Display};
 use std::net::{IpAddr, SocketAddr};
 use std::time::{Duration, SystemTime};
@@ -187,9 +188,14 @@ pub struct KmipKeyImport {
     pub flags: String,
 }
 
+//----------- TsigKeyName -----------------------------------------------------
+
+/// The name of a TSIG key.
+pub type TsigKeyName = domain::tsig::KeyName;
+
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct TsigAdd {
-    pub name: String,
+    pub name: TsigKeyName,
     pub alg: TsigAlgorithm,
     pub secret: String,
 }
@@ -216,6 +222,34 @@ impl Display for TsigAddError {
     }
 }
 
+#[derive(Deserialize, Serialize, Debug, Clone)]
+pub struct TsigRemoveResult;
+
+#[derive(Deserialize, Serialize, Debug, Clone)]
+pub enum TsigRemoveError {
+    NotFound,
+    InUse,
+}
+
+impl fmt::Display for TsigRemoveError {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        f.write_str(match self {
+            TsigRemoveError::NotFound => "no such TSIG key was found",
+            TsigRemoveError::InUse => "the TSIG key cannot be removed as it is in use",
+        })
+    }
+}
+
+#[derive(Deserialize, Serialize, Debug, Clone)]
+pub struct TsigListResult {
+    pub tsig_keys: HashMap<TsigKeyName, TsigListResultItem>,
+}
+
+#[derive(Deserialize, Serialize, Debug, Clone)]
+pub struct TsigListResultItem {
+    pub zones: Vec<ZoneName>,
+}
+
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct ZoneAdd {
     pub name: ZoneName,
diff --git a/crates/cli/src/commands/tsig.rs b/crates/cli/src/commands/tsig.rs
index 749157b50..314ffeb25 100644
--- a/crates/cli/src/commands/tsig.rs
+++ b/crates/cli/src/commands/tsig.rs
@@ -1,6 +1,8 @@
 use std::str::FromStr;
 
-use cascade_api::{TsigAddError, TsigAddResult};
+use cascade_api::{
+    TsigAddError, TsigAddResult, TsigKeyName, TsigListResult, TsigRemoveError, TsigRemoveResult,
+};
 
 use crate::client::CascadeApiClient;
 use crate::println;
@@ -45,6 +47,7 @@ pub struct Tsig {
 }
 
 #[derive(Clone, Debug, clap::Subcommand)]
+#[allow(clippy::large_enum_variant)]
 pub enum TsigCommand {
     #[command(name = "add")]
     Add {
@@ -67,6 +70,12 @@ pub enum TsigCommand {
         #[arg(requires = "alg")]
         secret: Option<String>,
     },
+
+    #[command(name = "remove")]
+    Remove { name: TsigKeyName },
+
+    #[command(name = "list")]
+    List,
 }
 
 impl Tsig {
@@ -105,11 +114,14 @@ impl Tsig {
                     _ => unreachable!("Excluded via Clap 'requires' rules"),
                 };
 
+                let tsig_key_name = TsigKeyName::from_str(&name)
+                    .map_err(|err| format!("Invalid TSIG key name: {err}"))?;
+
                 let res: Result<TsigAddResult, TsigAddError> = client
                     .post_json_with(
                         "tsig/add",
                         &crate::api::TsigAdd {
-                            name: name.clone(),
+                            name: tsig_key_name,
                             alg: alg.into(),
                             secret,
                         },
@@ -124,6 +136,38 @@ impl Tsig {
                     Err(err) => Err(format!("Failed to add TSIG key '{name}': {err}")),
                 }
             }
+            TsigCommand::Remove { name } => {
+                let res: Result<TsigRemoveResult, TsigRemoveError> =
+                    client.post_json(&format!("tsig/{name}/remove")).await?;
+
+                match res {
+                    Ok(TsigRemoveResult) => {
+                        println!("Removed TSIG key {name}");
+                        Ok(())
+                    }
+                    Err(e) => Err(format!("Failed to remove TSIG key: {e}")),
+                }
+            }
+            TsigCommand::List => {
+                let response: TsigListResult = client.get_json("tsig/").await?;
+
+                for (tsig_key_name, key_info) in response.tsig_keys {
+                    let zones = key_info
+                        .zones
+                        .iter()
+                        .map(ToString::to_string)
+                        .collect::<Vec<String>>()
+                        .join(", ");
+
+                    print!("{tsig_key_name}: used by zones: ");
+                    if !zones.is_empty() {
+                        println!("{zones}");
+                    } else {
+                        println!("none");
+                    }
+                }
+                Ok(())
+            }
         }
     }
 }
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index 4f8bd82a9..161ffed0e 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -1,5 +1,5 @@
+use std::collections::HashMap;
 use std::future::IntoFuture;
-use std::str::FromStr;
 use std::sync::Arc;
 use std::sync::atomic::Ordering::Relaxed;
 use std::time::Duration;
@@ -105,9 +105,9 @@ impl HttpServer {
             .route("/status", get(Self::status))
             .route("/status/keys", get(Self::status_keys))
             .route("/debug/change-logging", post(Self::change_logging))
-            // .route("/tsig/", get(Self::tsig_keys_list))
+            .route("/tsig/", get(Self::tsig_key_list))
             .route("/tsig/add", post(Self::tsig_key_add))
-            // .route("/tsig/{name}/remove", post(Self::tsig_key_remove))
+            .route("/tsig/{name}/remove", post(Self::tsig_key_remove))
             // .route("/tsig/{name}/status", get(Self::tsig_key_status))
             .route("/zone/", get(Self::zones_list))
             .route("/zone/add", post(Self::zone_add))
@@ -1105,24 +1105,48 @@ impl HttpServer {
             return Json(Err(TsigAddError::InvalidBase64Secret));
         };
 
-        let res = match Name::<octseq::Array<255>>::from_str(&tsig_add.name) {
-            Ok(tsig_key_name) => {
-                let alg = match tsig_add.alg {
-                    TsigAlgorithm::Sha1 => Algorithm::Sha1,
-                    TsigAlgorithm::Sha256 => Algorithm::Sha256,
-                    TsigAlgorithm::Sha384 => Algorithm::Sha384,
-                    TsigAlgorithm::Sha512 => Algorithm::Sha512,
-                };
-                center::add_tsig_key(&state.center, tsig_key_name, alg, &secret).await
-            }
-            Err(_err) => return Json(Err(TsigAddError::InvalidKeyName)),
+        let alg = match tsig_add.alg {
+            TsigAlgorithm::Sha1 => Algorithm::Sha1,
+            TsigAlgorithm::Sha256 => Algorithm::Sha256,
+            TsigAlgorithm::Sha384 => Algorithm::Sha384,
+            TsigAlgorithm::Sha512 => Algorithm::Sha512,
         };
 
-        match res {
+        match center::add_tsig_key(&state.center, tsig_add.name, alg, &secret).await {
             Ok(TsigAddResult) => Json(Ok(TsigAddResult)),
             Err(err) => Json(Err(err)),
         }
     }
+
+    async fn tsig_key_remove(
+        State(state): State<Arc<HttpServer>>,
+        Path(name): Path<Name<Bytes>>,
+    ) -> Json<Result<TsigRemoveResult, TsigRemoveError>> {
+        todo!()
+    }
+
+    async fn tsig_key_list(State(http_state): State<Arc<HttpServer>>) -> Json<TsigListResult> {
+        let state = http_state.center.state.lock().unwrap();
+        let mut tsig_keys = HashMap::new();
+        for tsig_key_name in state.tsig_store.map.keys() {
+            let zones = state
+                .zones
+                .iter()
+                .filter_map(|zone| {
+                    let zone_state = zone.0.state.lock().unwrap();
+                    match &zone_state.loader.source {
+                        loader::Source::Server {
+                            tsig_key: Some(tsig_key),
+                            ..
+                        } if tsig_key.name() == tsig_key_name => Some(zone.0.name.clone()),
+                        _ => None,
+                    }
+                })
+                .collect::<Vec<ZoneName>>();
+            tsig_keys.insert(tsig_key_name.clone(), TsigListResultItem { zones });
+        }
+        Json(TsigListResult { tsig_keys })
+    }
 }
 
 //------------ HttpServer Handler for /kmip ----------------------------------

From 80b6b3d6fee8a5b54c498ec79b9dcf5b8698ed02 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 10 Apr 2026 12:30:27 +0200
Subject: [PATCH 020/113] Document the tsig list subcommand.

---
 doc/manual/build/man/cascade-tsig.1    | 7 +++++++
 doc/manual/source/man/cascade-tsig.rst | 6 ++++++
 2 files changed, 13 insertions(+)

diff --git a/doc/manual/build/man/cascade-tsig.1 b/doc/manual/build/man/cascade-tsig.1
index d7a91a060..17001c96d 100644
--- a/doc/manual/build/man/cascade-tsig.1
+++ b/doc/manual/build/man/cascade-tsig.1
@@ -38,6 +38,8 @@ Added in version 0.1.0\-beta1.
 \fBcascade\fP \fB[GLOBAL OPTIONS]\fP tsig \fB<COMMAND>\fP
 .sp
 \fBcascade\fP \fB[GLOBAL OPTIONS]\fP tsig \fI\%add\fP \fB<TSIG_KEY_NAME>\fP \fB<ALGORITHM>\fP \fB<SECRET>\fP
+.sp
+\fBcascade\fP \fB[GLOBAL OPTIONS]\fP tsig \fI\%list\fP
 .SH DESCRIPTION
 .sp
 Manage RFC 8945 TSIG keys for authenticating zone transfers.
@@ -59,6 +61,11 @@ command.
 .B add
 Register a new TSIG key.
 .UNINDENT
+.INDENT 0.0
+.TP
+.B list
+List registered TSIG keys and the zones that use them.
+.UNINDENT
 .SH ARGUMENTS FOR TSIG ADD
 .INDENT 0.0
 .TP
diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index 06ae88109..3519556cc 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -10,6 +10,8 @@ Synopsis
 
 :program:`cascade` ``[GLOBAL OPTIONS]`` tsig :subcmd:`add` ``<TSIG_KEY_NAME>`` ``<ALGORITHM>`` ``<SECRET>``
 
+:program:`cascade` ``[GLOBAL OPTIONS]`` tsig :subcmd:`list`
+
 Description
 -----------
 
@@ -33,6 +35,10 @@ Commands
 
    Register a new TSIG key.
 
+.. subcmd:: list
+
+   List registered TSIG keys and the zones that use them.
+
 Arguments for :subcmd:`tsig add`
 --------------------------------
 

From 5c5ef7ee8bc6bbc269b03ed6430d211851bb67a3 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 10 Apr 2026 12:31:01 +0200
Subject: [PATCH 021/113] Commit updated generated man pages.

---
 doc/manual/build/man/cascade-zone.1 | 37 ++++++++++++++++++++---------
 1 file changed, 26 insertions(+), 11 deletions(-)

diff --git a/doc/manual/build/man/cascade-zone.1 b/doc/manual/build/man/cascade-zone.1
index f40222fd9..f21f5aa0c 100644
--- a/doc/manual/build/man/cascade-zone.1
+++ b/doc/manual/build/man/cascade-zone.1
@@ -64,12 +64,20 @@ command.
 .INDENT 0.0
 .TP
 .B add
-Register a new zone.
+Register a new zone. The zone will be loaded, signed and published.
 .UNINDENT
 .INDENT 0.0
 .TP
 .B remove
 Remove a zone.
+.sp
+\fBNOTE:\fP
+.INDENT 7.0
+.INDENT 3.5
+Once removed downstream servers will no longer be able to fetech
+the zone!
+.UNINDENT
+.UNINDENT
 .UNINDENT
 .INDENT 0.0
 .TP
@@ -114,17 +122,24 @@ Get the history of a single zone.
 .SH OPTIONS FOR ZONE ADD
 .INDENT 0.0
 .TP
-.B \-\-source <IP_ADDRESS[:<PORT>][^<TSIG_KEY_NAME]>
-.UNINDENT
-.INDENT 0.0
-.TP
-.B \-\-source <PATH/TO/ZONE/FILE>
-The zone source can be an IP address (with or without port, defaults to port
-53) or a file path.
+.B \-\-source <SOURCE>
+The zone source can be the IP address of an upstream nameserver (with
+or without port, defaults to port 53) or the path to a zone file locally
+available to the \fBcascaded\fP daemon.\(ga
+.sp
+When specifying an upstream nameserver you may also optionally suffix it
+with \fB^<TSIG_KEY_NAME>\fP to indicate that the specified RFC 8945 TSIG key
+should be used to sign any SOA, AXFR and IXFR queries that will be sent to
+the upstream source.
 .sp
-When providing an IP address (with or without port) you may also optionally
-suffix it with \fB^<TSIG_KEY_NAME>\fP to indicate that the specified RFC 8945
-TSIG key should be used to sign the zone transfer request.
+Zones sourced from an upstream nameserver will be automatically updated if
+a new version is detected. This can happen if the upstream nameserver sends
+an RFC 1996 NOTIFY message to Cascade, or if an IXFR or SOA query (if the
+upstream responds with NOTIMP to an IXFR request) sent by Cascade (due to a
+SOA timer expiring) discovers that a newer SOA SERIAL is available, or due
+to an operator issuing a \fIzone reload\fP command. For zones that have already
+been retrieved at least once via AXFR, subsequent refreshes will attempt to
+use IXFR and fallback to AXFR if IXFR is not available.
 .sp
 \fBNOTE:\fP
 .INDENT 7.0

From 1908500729c150b9d0d2771e55fb856afe5a7a2b Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 10 Apr 2026 22:46:58 +0200
Subject: [PATCH 022/113] Remove accidentally commited sphinx-build outputs.

---
 doc/manual/build/doctrees/architecture.doctree | Bin 15652 -> 0 bytes
 .../build/doctrees/before-you-start.doctree    | Bin 18567 -> 0 bytes
 doc/manual/build/doctrees/building.doctree     | Bin 26743 -> 0 bytes
 doc/manual/build/doctrees/environment.pickle   | Bin 227026 -> 0 bytes
 doc/manual/build/doctrees/faq.doctree          | Bin 20886 -> 0 bytes
 doc/manual/build/doctrees/glossary.doctree     | Bin 116311 -> 0 bytes
 doc/manual/build/doctrees/hsms.doctree         | Bin 40050 -> 0 bytes
 doc/manual/build/doctrees/index.doctree        | Bin 26448 -> 0 bytes
 doc/manual/build/doctrees/installation.doctree | Bin 34971 -> 0 bytes
 doc/manual/build/doctrees/intro.doctree        | Bin 29817 -> 0 bytes
 .../build/doctrees/key-management.doctree      | Bin 60097 -> 0 bytes
 doc/manual/build/doctrees/limitations.doctree  | Bin 18851 -> 0 bytes
 .../build/doctrees/man/cascade-debug.doctree   | Bin 14744 -> 0 bytes
 .../build/doctrees/man/cascade-health.doctree  | Bin 9255 -> 0 bytes
 .../build/doctrees/man/cascade-hsm.doctree     | Bin 41243 -> 0 bytes
 .../build/doctrees/man/cascade-keyset.doctree  | Bin 29628 -> 0 bytes
 .../build/doctrees/man/cascade-policy.doctree  | Bin 13594 -> 0 bytes
 .../build/doctrees/man/cascade-status.doctree  | Bin 9253 -> 0 bytes
 .../doctrees/man/cascade-template.doctree      | Bin 10669 -> 0 bytes
 .../build/doctrees/man/cascade-tsig.doctree    | Bin 18287 -> 0 bytes
 .../build/doctrees/man/cascade-zone.doctree    | Bin 61204 -> 0 bytes
 doc/manual/build/doctrees/man/cascade.doctree  | Bin 25350 -> 0 bytes
 .../doctrees/man/cascaded-config.toml.doctree  | Bin 62568 -> 0 bytes
 .../doctrees/man/cascaded-policy.toml.doctree  | Bin 104769 -> 0 bytes
 doc/manual/build/doctrees/man/cascaded.doctree | Bin 24881 -> 0 bytes
 doc/manual/build/doctrees/nethsm.doctree       | Bin 49900 -> 0 bytes
 doc/manual/build/doctrees/nsd.doctree          | Bin 9600 -> 0 bytes
 doc/manual/build/doctrees/quick-start.doctree  | Bin 33044 -> 0 bytes
 doc/manual/build/doctrees/review-hooks.doctree | Bin 22569 -> 0 bytes
 .../build/doctrees/smartcard-hsm.doctree       | Bin 25679 -> 0 bytes
 doc/manual/build/doctrees/softhsm.doctree      | Bin 18007 -> 0 bytes
 doc/manual/build/doctrees/thales.doctree       | Bin 49865 -> 0 bytes
 32 files changed, 0 insertions(+), 0 deletions(-)
 delete mode 100644 doc/manual/build/doctrees/architecture.doctree
 delete mode 100644 doc/manual/build/doctrees/before-you-start.doctree
 delete mode 100644 doc/manual/build/doctrees/building.doctree
 delete mode 100644 doc/manual/build/doctrees/environment.pickle
 delete mode 100644 doc/manual/build/doctrees/faq.doctree
 delete mode 100644 doc/manual/build/doctrees/glossary.doctree
 delete mode 100644 doc/manual/build/doctrees/hsms.doctree
 delete mode 100644 doc/manual/build/doctrees/index.doctree
 delete mode 100644 doc/manual/build/doctrees/installation.doctree
 delete mode 100644 doc/manual/build/doctrees/intro.doctree
 delete mode 100644 doc/manual/build/doctrees/key-management.doctree
 delete mode 100644 doc/manual/build/doctrees/limitations.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascade-debug.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascade-health.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascade-hsm.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascade-keyset.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascade-policy.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascade-status.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascade-template.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascade-tsig.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascade-zone.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascade.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascaded-config.toml.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascaded-policy.toml.doctree
 delete mode 100644 doc/manual/build/doctrees/man/cascaded.doctree
 delete mode 100644 doc/manual/build/doctrees/nethsm.doctree
 delete mode 100644 doc/manual/build/doctrees/nsd.doctree
 delete mode 100644 doc/manual/build/doctrees/quick-start.doctree
 delete mode 100644 doc/manual/build/doctrees/review-hooks.doctree
 delete mode 100644 doc/manual/build/doctrees/smartcard-hsm.doctree
 delete mode 100644 doc/manual/build/doctrees/softhsm.doctree
 delete mode 100644 doc/manual/build/doctrees/thales.doctree

diff --git a/doc/manual/build/doctrees/architecture.doctree b/doc/manual/build/doctrees/architecture.doctree
deleted file mode 100644
index 5c416205accd84a107a847048451c434db92dd84..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 15652
zcmeHOU5Fgnbsqi9%ubIq`rFBRSJvjPY^_G}Opn9{Ck$&j8->N%S&cR`@*);YtGeoT
z-|DHZD%Y*jOgmn%9X4o^8!&8z;HR*$F>xT|B_WXH#SlpHkc9jZ$cvo>f)|WQ9s&s=
zknh}Ex2n3;(;96=7DpCRtNYgdIrrRizVmZWeQEkvpZ(O7{-YMW$jwqekj*gixXjg4
z)X?W)n!lT0`f~nuzNF?7XGca^;__Tgp@%E{z)N_Te=ZkOYF2VL^`o%tFQ&zenEhP7
zgoo3qp9Z}4NF946!T1zovV`Z<58aO5=DW1u$kTUnB0$Z=4pvKZaZ<J&)o{`@@!MGn
zYKgidz9&J6nsoz5N;Km8bm;WWx2L=;u70!~cRS%7>XWJ2)alZrTr7y^#Jrkom0K4_
z)QsKn>#LrVI;$e;^VMCyABC$jaaUbOx{k-~|0`)ferXlsSNl$wIl-zKz3S99+e~Dd
ztD}J*@_hYp))o!J--=%+Y=b&>TX6P<A9LMXb7^s;(J%*;uYxP$ELb7Vftf#!e=p$Q
z$MEk0wka;^?JbKXaYS4am&GU6r?K{wngdszZsNqEemuWV3tu;zV{t(MOR`Wh2Y;FL
z!*0M?+Yg;&z?{%yVZ<EI^GO7pfDy0Sj^qs)b<!Q28}lVg_~$b};a-!y6@{F+!U?-v
zvVw;!6-ktJ1(W<9PcVnX!Em|E0-mN=t}%!*OmWZWJ9<GUj+5vfXHLqv<6>CK<255m
zi|U7#{_;3K{jlTwRB?>6ID37p`Z#AgewQ@LYHcM|&_cftj@BNjKW#Rd8L+m-{C>BT
zV|(OHd9T}GjIHhXUMkku)hkyn=-*D@cf&R2LLqrlw4`fn%N4xuq`u4aIYk|Yzv&oR
zYS5Thm^^5Iw&SNl&jjJ{JHCrWqOg#WX2YEOe$ua|HTlpwqCZzhoB%3#>A=KdM3(ru
z`pAAP%2mUK68I2%4M*zG<y^Ruv~IIFrg<FGEqz3@t`m<SrMmIhSYb8bG0s@Zr2jCP
z>=v6nX*SDCJR*3$nmePgq^7kT0o#orX`H%Q<5(fswTX^FnpUiMRx>JUFOdrEHQ<{A
zHS;6DHvx1{z8dgdzYTcXf{X)sEK47JP;%y%AI2H7E%$3QoPj7@vp9dJb7*SHqOBJJ
z6T>LAa0#?sgO2sr?taEeJdLF=wUEbj!1|GwfzGARY~8$cm!%PlVnAogn+-b~VAr9o
z;8`X)yL&6<;nvpc>}8Rrv0PhS-Pze`VpJ$)(2SDqwYx2iu6GlH+_INTv&yC)t(tGE
z^mvszmjLf3gE)<}B^l6iT^?#$U@J5i8{2#UVqhxpu+|x>90UX1i~a1zmfh^;rsOGm
zd6OFx$~L(hB_7-2X=6!0yL9cYHZ#irfr!Y_=wMg%m|o5gSro2#zT5`R1=xW;%O$a>
z&RPzQ;dfr1>(^vkoshBc!`&v#Tj3lX1HU}1*xH2`QODC44|Y;Upr+J}A8Ny11M6=V
zM*jK9hh0(lTceV<q>gH`)Df9_aMSR)Lh_UIQHS6+A(P+8CU^~M2K$3I1Ba~c!Q^lS
zslD&`VJ?18&Ei)&h~X9<)eEV4H1ORx@LfO6_w;kfZJ6KJ15+pIa^Ua7wn*st8wD0D
zg4C};Wfs-P4<hCjdvJi{<Pbq{9^txHyjCASh&EW|pDi?}n0g5W{iT>zW%EQn9yJc;
z-)n|yQ}WC{`lk`_&x_qcLJDTpsD5sL-8HmYE2w4*y{@5Tt*HRWk|gn6V)#F*M#(EL
zUq4jxeOjyTFk}D10+?DlC|+209wm*f@$%onOVf4`M*g?>j(Xm5a6C2*G4h{ELSJ|&
zrj0Ps5LH^Pg2>Xol<ezG1H&~3#lP0rw)yx0a`+6sUT*CZ1^65UIn5@&WykiO1@Q&)
zOzZLGBE7SC^Z>?)-#rk#^qwK690Xy+x9gzNyMS>I!Ik?pToHew&W^DZtgsYX79NC>
zmp+L7sGEk$Eg5xeND!=pPS~YQf8FG(@4Xr&g}IIr3HMgQ$iRjfJMDxFHhsAa!Qfpo
zHwr_<%gjRz<)*=)fxhcEZ@hsA{TS{rnRyIC#Dtmg?2Yy7TOYf6b@VYjbB7^}Z>%AH
zg1LrcQAA)XLiShMiSKnenO2S<cbV-7AHfye2tPzX76ja5PL=}u;pA(>jd&0tWZEEK
zKTArAW5n1Lzf~6Z%OCoVE1`Zx3$=JpEd)qHAlhunG>L#nHK08=kwF&7PCv-JYMJ#h
zx}#<bz5|wrBlO-4bQjO{h&XNQUVDtEVC7cNF53qa-Lo~(MS2DjTIGWP*#Ei3DSJTC
zxpuzDAt(iaJiP~bQ|t(i;JpYLn+8$}<YF_Hg=vx@hKGA7{KQ)!nHoTLJ){mo>El0g
z@P}3aA6+hGlie1+Y#>L{M>+y-D&;41o{ECcI7$(t`p73}0dD&^aFemf!WhX2-$kYZ
zngfnF_k0XnZa|`Uco0yggXYxROROK7Nl3L3>dJwC;yJPSBy*rtt=<@QAJOsBDljNI
zg?*E(BdkczBTO&}I}EXgq*7mXvQvbsD@CAHbN9+;HVB&>7*kL>AuxXSXSj@`ZEn(c
zZ`SfK77Qo!D4Dc(045<??)@TdyvkO-Sht>c1Rj2tl8|f-@yXg<lNVeOQM4`ZR%TOX
zaU3P7grO}GlSA1fzyp$sN#hHYj--?&B@@#f3QwW+FmFYEX^o8zBP>EP6p<|ei-s?g
zd)ye;t=6f@ZiK8IA&~`O1WpZghk2L2Bw9NSzKaN7;|}aTym(+NY&z{G@Ufr-eQ`==
z9!XF{Stb`|EH!xwdR_$Kf}5>nno~Oh;D|@8&nfll%RZ12nOU2bC7(fJD%lxmwg5UY
z_n<Q1Glt`pdHXeel%jG$&x|>ZQCIUlI#<f~Ba>Y}wrbk1>uHCR*-NFzIZFX81*PNS
z+1{^X>?D;cL)sCC^S3ds=5QX-QSZKSEd0%3+R5Lu4kkjw9&v_D_?=t$@*{a9sCazx
zSVD=BzX}T{dEs;_7E*?w<OQ72n>8%68EXv+q)lyL0|7*P09C=A6RseDJAR6Unst1N
z$cu(F(!>cRvJLFzw`i38iEI`8l{9jrfOV3n&ph%ypphOsZ`9yC(>GK+fsRr@06!?S
zdAw!D@f(vG)wb(u8f`p4c(6mjRd{3iA#~bgzoKLqov@oUiUJ9g0O&;_rQi%&vYjZ|
zrb%?leI#x6)BjsmRciicU_7!j6?$Aa5F1DF<Zm!dfhWg@4xn1;@AOLh0m|eIS?{kf
z_=6zIcQCGoDC1INBO&bZA%PhRTAPqw;um3x`lBCeNh-D1od3bJm-atSd)3Y@3XJ<P
zE(z&AsJLy?T4L>D5hlPw>l;H@btp>0d*;5HLR&J?I<#%j%`n-)>&4Y4#mZ#s3yX_;
zfmFvNMF6n);jLe?@xR6h_kK?2OZ&0$dz*$I(0WJvGweJi_Rlkct1`lfF}J}Tu#p~+
z(k(+I;aeck($Lt@2xp={YUyN&MlUbg3H2CzfwRnTgU`VGXovbaEaW=|<z#i7#)-kH
z0EvsU=76i>Tmhg<S%}<z0cAinCPkD59_u)MFyv%iD$ni7*>EW+bB7;H<n1RYpWIJS
z{$UHIGRh?5NkVxm1pFie_B;`wla-WNkkTWEofo*YGGfH6z}U`|GBVOOBtA|!C<UfC
zW0DQ6+Avkxtl6n>4@Na1+WGEeR7*nVO|l~?qk!YDJJ6;m1ENC|qB3NN^inkbKX0)V
zhG!l@7}kb_p#p66Y}*8cD|99+b<nNFpth4axRFj1ZfPmtn-GjH+;l>xOM<bL!i%yI
z=xB4f;VTE&Fom5f=vNCnKRx6tUIx}$(?GY55FsD%h{R}0X{zD7MrwF%>(&OzJ<_Fs
zx&fTNjzhZPq>X!yQKTR;@f!)O2kb-g3cEr^3K=jGZR6fW$)L$L9;L?S70{Krg04q3
zb&`n;3b2xJ$I}@vO3-mf`p^e5d%)2wZZ<ZMFJmIwp-6EV3IdHY6KF?J2aI$%jZ7f!
zKrzO^GA^P~l!2e*Rss)j*PK{|y7MEhQJ8&Tu9YHt?EoTcFBx8`iEdqF)qiZEVhv_9
z)O9{4QvjDoM>N*Eu_6uQ3JLL$^+e!8C!BN~7v%-lU%zn)as+9j+$fcKLG4KA@dMrI
z(xJ(2X$wDoAxH(H9qk;Lq=E+Qdh%j;Tp??io07IkhRQ;$NP=ZaHP;jRE(6UCP)L%P
z@E~$1gUtI@`kr70l!Em7BM8!~`w7w)Za>KWEY=lI8U$^fMI9}Wx$=Pw`l3i@$Z(y+
z!$#?E)0qKB<K^Pyic{_bNZ|?YYUoMQ@+dz{5=v&i^$5&d-;bHU19Y~c9A&Awu8`%G
zosGo7o{5)G%MHXM4;HYvbS+ZogU&FF(=K@L$V6&qJM@qpkTG|uu+A10d7P?TP&47z
zFYzuNnD8q67Mf$d*I+#Dg|m7LmuvBugXq19MfST_BRX^d?f>8LtrQ!>gvxoEl&jhp
z5}Rs_S^zw2r)NcLS<TBTpBQUBInPf{%>>t~u^F{-6$f~i)~%{Hm0Nmu%mIuB6y#EU
z75!>1)mGg;-MLwFsbH5Vfd$Wkd?yGe+XNjH=+QkjZuhz@K+SN58#n|SI!6WhCp6I&
zp&?z0>p(E@w<$t|`k**O3JUmT)}f@F4ov&F+D6&3bUGY&fxeU()ftm1qx?UXm8b`A
zq&^I1wG6pRm;iGIx<DB;P*>r1Nr_OLMphOv2L&o{hj?NV6DUwmWP>a%?d76m=kIp7
zlV~!bmL`C42US@LGS5xA30<MBQc2!w8@C#(uDJTil`B_PYGaxr?FXpAJFig{fXU&I
z8L*@Zw;x!5c{12q;mvzmE=5(H^mC7$<yJ4A9(R@nC6sag7K#3}8sBYVR?(D<?K2YP
zPd{nPpB_<OY+Y23xCBkCN~6|3xC|P0l!a&IcI(nw1FP~m`K49^D#)s8s{Vjzq^dMi
zQ)OvhR0|_AUt*Fu`wB8A!R%*i*aS{Ysb^%?mUvYKS8q|+LagS8a9W4nX;Dp-%zu&e
zv&b`i5w1%dz)eO4{m);d)VW0I3%|I=ZYLRk+X~8=anDMs|5i)vaDtkU6qS_KN)?0X
zUihy`vM#A(FXMHR7LWZP>R!w7R>$F?O;wCQU0;RjRXN*m>x6I|s9l?ExE{2cZnS-5
z!Xq^^fLC80+^{X%F5kNmm(|ny3MJ5?OH11VGEDT&&vY80Bq?8?Qs&kLeK?91r!tb6
zLu#SO4z-MXm2aqHwndlSZlE~Uyjy}7o=!oJ%o|WJ5jwa<Rr;Gw0Mk$w1*sYMYH^n4
z8)9KY%@wuAQG%K0v?H84{TM&ylPF3-Dg<aZSBF+{j)sI5*4;)2ycR?6QMIxpz^~)D
z6>3okPESF~G{XL5kgL-jOoOnI*B;(i$LU3@FzdH=DX)N<+66>Ne%zwq4Fe@6JZoBb
zz;#QDE^=D-y(p|#3@Bcd0$U)$xF&CrVFNo4s|KZg?ayg-it^s5kaE&YR;|+>Z)aUB
zw?M_cFwRs%#hpG{=5S;#r!5hEeh8km;7KABK#7%_%hJxuPf@u-u0A^au%*+AEnH7~
z0Z(uOM5>Eo;S+}QwOOY1EV(*2@?>O+-t$Lr53^wAt!S{LKRWziWUx9(dyrt1D6~9R
z$E^zjj(eziK8!cu)ESiIp*$U!Q8~@v!;Epfi6g#e1wzcI1uCIyRZZ%!k5cX9Ue=FW
zrAUIYx<LoxxSybtJ)v97ogz-ZYKkS#yr{L?CxJSN;_FEAR(+(F5;tw#^QDi>70uPc
z%^+ohuo21*plQ~s3e@fxHUlt3MHL|+q^9WB(!n{sUiV}44T~VxqXCnLG@FMbpU10$
zI4bjV{g66E`Uc4fyAVWOQ<dL5c~LFIJZ_cc#<Uq!*2j=`&`zqMK4Og=nq@N{q#_En
zOO&fc>Zu7p&sNHD1qAI!y*t`hE?oHu@N*&QxFge3OEvwAc6zG)Ad%fh*2?E;N3Q`u
zSS1e&>N|%TF=!E9fy&pPQs*F({Z^@*<px?B`BCtGQVzn@*=><;i1(xf<o9Sm)rIPq
z?4z!&_4y21Ey1WW`nUPnqD&zCLSpSXRA_)6_>M;3z-7%sjNZ;-EI}`9>X#}D7}$gK
zM6MrpAOi(1oF<@vMH}g+UjoBgj!{N>5pg?*$n@LXg9Z;kf#9gm-&2b&dTqDxLYE)3
zko7^jlU}U6uTB;3dO}u%j={7&b%cla@{O#mo-$|x^@Sw*cu|7NRa>TzU2pExsF@`+
z?|l~rt)~s4Iz80Eytn!Gh%watB`ww|JJ9P2^cpDo&QhcKzSR3Sn)(N1Fy9eh>HPvC
zj^3B>A-*r(@13Au$LQlS^}0wOzd|3sL?7?d$G_0WAJfOT@sX)HnwwsD&{jy#z9-(<
z(-ZHB@88#R-q-W(>ACjwJbQYM`<XZg+hxd^7he&}hL-!{eeutRkQt&z6GB&>h7d|i
z8$u|W(uDN>5Z}ZAZ<VRzbz#)|KaN)~jKu^`ObcO-?Pt!R-a?9^TOqvtb`+HIts9>n
zX)Jrs4b3=bSJi_~56utrk)(K|KrN2WRXl+e2O{biilBcUl@b9Y2j~NvID4I9E405$
zva$?JUq2+@$v2_p$ddyvaGgVynP%Y<Acvag%VsT`^M2?CnFm~ox}<Xrk1)J|J91RA
HcJqG#%~O3%

diff --git a/doc/manual/build/doctrees/before-you-start.doctree b/doc/manual/build/doctrees/before-you-start.doctree
deleted file mode 100644
index c16dc41ad0ecd4c9e663a7dcbe5abca74024aaa7..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 18567
zcmeHPTZ|p&U0-Lt-rcj__1ew`H?EUOL*fg2b`x4?SsVw)PGaMFZM<n~3gzsaneUvL
zvvWC_%U(*#<snj5e0@MYX^~I~Pzi|WOQlMPQVDpdTB#B*6d@3O0K@~7ioCUm7k>Z$
zH{V>&o;|x8QWCeR8t<8JzU%*f`{p;sUVZ7>2>(yc*rAmst`{!^p)KN`oS+6@1WE5R
zz4O1>`&93ooQ%wkI7}l;^yCP7SdQ!2kqCO9=s6>DJQh~shC$xn8FP*}<DclA!^^S6
zO*~P0C1;-ztuPYCFNUeHl9*A_qrT{R_yw^^iw@}Va*sA5k919}iUG56)08zcNg}tI
zCfGIYa@4hB>`0DVo*Bnz#P6}d^wqBkJM9(^P19P7M2q^Qay&8H^s48~I1f5ga<Y+w
zz!{ZC^vQ28+Gb)dI-xHXH(fsr7URfTw9MEtZK40x6TkcZMT}qc%^)?sMKyY{$%n3Q
zg=syeLoY;e(vychHxRuW_oYpzreIyb?wD?nleaz75{wcC)m*tnfd>0t1WcUM0EBY}
z;CvYWJ%axp#ea|Ckj_~?+`Mzn8FkJ(7o4BCF@{w~<RoBfwj;Cal#q1y@k1jcSJcT2
zH#RmLGoin0LAVhZW^9<o`yAJ{MPS5kI}p+P7L4oM!xv_d7)fYEsp?p>h3#5qB5WfT
z(YlC?4L5O&NW?&%Ma`yVi8wYAS|c&nL~MAWWqQUZ!vMd-Nd2fq!V>N}`nRIcH_X6D
zyO=_lzR`_b-;A~lMlY{1&)cFo!&qb!nSpKiJbmH_%oe9!f`hD^u4gtqL3_4wIyL9K
zaXm;x6o|xVnU)*0jSHaiFtD-Ch0;Rt0#olfXYTIIyCCZWSudx}r(+_u3E_7gGj`(=
zrOBxhV3i~QdFQY$rntTrc|Q*xcp4-<C#S0jD(^xJ<&dW`&KSp3%qh$v;~QoafCS3B
z{^P5maUlqk3ry#lQ;0Ew9h5_4?^<G>_{JqB0ZTB~*hF(?5O07fOv7`1m$@Wu#vr?}
z1?m;X)#Vk?cbJ4$=qVO4jaKS;H8TZqM{Z&!V2aX#4L^+&BTl>B5K=}#^inQL?x}r)
ztK=vET@XPVbaX90%ot-p6U`{lQS=P=LoRJ5m)G9uILrwc$KM|T9|Zwh=^pyP%&46@
zYichj<-4~6VRXYdc1bu^sVx)aEU~RH^=zXlj5LO9PP-szyCg_K$2H9!P#~+zD_4z+
zPLg!vrNza-gMfwfh3(-j2C;o<wJ~o%p<|9MBMv>-C1GG#;Hhl>8dzc7g+@`V0B*_%
z9il!0C$&Trk+4>(W8F24yU*R>r~Ey764Ti=RwLQgaw#r9@&h?`L6@IqNjM4HL%@`Q
zL8Xl>XG}h_Cv<XJ2N<(C&jEX%!{AYB8isOtSlKwQ$s<@jjoh9*wHqSXUU(HVf0`xW
z5m+p3Q5b|+?(`5Ws$FVRM2-TpJyTmG`Y|(1^36DZLN?0l5}G*!jorI(DBHrE+<3bP
zBWFHfZhy=-Tkumc0CrYx#1*ipG?q-YNlY=-XQ~Y`5Ra3w5)fNlPHmUTDl-%ZyvYyr
zH+zXlvWCA|+QkDPhFn10{b1GJvC@cab8iba91#l{YOviP6^!PV@xq6%8evyNW)eoR
zLgj|*d4^aIJ*ck`c3~}XeYV2LSd55ELnuIK#_UM(f^nG)&p2g!5p$!<t*!{5B3GWh
zGH(=Ore=A<jIb3~!-ZyRfvybLaETkFZnDLK$~1fz#xKj6t_i!8_M9Ds_KwZgNFeFC
zdDEsB>**kVMC4)&{$MC<ep2);Pi(qP*VC)eL^ZKVT?sjvR-StogoKed3BsI=|7kBW
z)>hpqP0lRSCS9K_BzP-j5&Q*>Xgh@Oky&`+#ngqvO6C}mGb}UHxMoH+>_TCz2#^a9
zUAr0DDKzD|Yb!U;vo}O~iyRI;C=BYh8?PB_V#{c`9_EJ{nm62*LH1xI@Eg<DZr`}F
z^5~OKGI`#(dHps>)(2^_8phn2$5Ak%yl3`I_S|#@z=d9XW8aqD_xHj#IRbC6W%t`~
zGv8sj%gGi8F0_MIj%9aUlkGz|&VLS5?4&pUBeUhGGmGrBG`l>m<zQV4(~>^UU*?h)
zFNf$N(gH(t(d-Lglbf*8V20gBpd;2c%gz@X7M(|+O7_Aklu_p)^egG3N6Y$1Ue=Ta
z5f2{|zCF88kr3cQ7iJ{b2oZ&VoPL<7V9u~havza~7Ghh8v!r+W7R;0%ZE+t*)0lp&
zbVQa>Q%!h!B58OyPDx4?(X~l>(}3IPmtNmBuqI()3Dz={o4>SbsZfr+YS^Yg<cigt
z3aDsv8E+C(#Z9QmP2jJ>N@nL3&m{aZr&WbcSj6Sl_YxvrORJGscg05C3B$D*OF=HG
zkz}@0jE5e(ZdXv$3)6dExIs+_ijgiS*@~agrECI1Am%;*8SUiphCXZq1IB{eqL>nS
z2brIo0_O-s5neG&{Uk2{wuTBfcGD(+<zT&<n=I56t_y4C;df!i;2Q!n1{ull!$e%U
z=<Zx&5|_u~E}*-)VA^&TNuGfL1e4EeAf^^p<0mHv(57a;2~DlV5-S6^NRDUZ4RKYC
zbas9L-N8$=G1dcje^6v!>`(!ra~n&_qcBQs5L#msgj`}wd2#@os8f%~BW}RK;KCp5
zbm$lq8=sR$%dAzb8lXqN;5;V}^SW|0PHaTO@oyd6*%SRx@@V=8I}ZK~Q!nhH(FAg~
zKZxB!W<a!TaHSjcI$M}Xj-w&j>LO7v%44R8mp8kfYq?2pn_p8nt@jEK&HT!~<3XWy
zTC_P8r#@Ro<>%kgVx_>0qKExycsk(KJ+MG9d8P`Jr|A*l{IuD*f}eR<Y-^zGUnK<y
z|HMY15s@9T2qJ{GVX$8L@b&Y`?}2X=g&y9wS@v@u6S*BcbI_iYzyQY0xNC<{m78zZ
zPIePje*iee&CZ=NxK8Xi(W;h2<C!EX(E2)0P|dS+eg%!Y$sk&hWzh3)5&Vn23_8pK
z<?3I&>Eldjr1$S<e<WWA$$y?fQ-x)}j4F{l4cU$4zjYY~0s`bn8+ot+3XIyw=a9pN
zi2CY0(pawLP#y~=3~WIa+9Z!3gk4jznVd6liP`3Sn{g4(_2T)`D%l&Ep$XS5uslR3
zh+ULzq70H6O+t)>kcG;Mxxsq4M#f2O1VT`t1~HL?a?{`b5FRpT)S2qx3aa`xlW3J?
z9~g{a&9+k|tQQmg+d*laR%X_Hcn``c*2p&7#>iY8KfXW0;>~yb(#Xz#;~~@kGgZ1Q
zR{S6I*<k^6Hqp9Y{r^4m-IxCFyiBu}HU8LrdujYvN*cfOTQr_dQsO9zG?$hA6X5b3
z@VDM#ZY#hxh^h`KJ5S^A{g5B33i4wOkezBj`;(mnqJP)}X?^Ab4cSe0{yHh?3)&aH
zP!gV*_NzOwUvEaP-4@z^EHOkFAkLbFS?t<|gOY%h9X->~k*rbxOYs82SV$kletc<l
zr_u0hZ|{C`iPY!iJjLiPWglw=%(UQ{&`>N0?b!iT(x>Dc1gttVJqw#dCC^H&S(SZf
z3fVURKYAx8cD^h2^sxbZ8cMnO=6){I`fnQl#U`?|RYc|S9po`UDz0JonN%DFAr&+F
z1CDj>K%&rPB<yaH<gU<8QMiGj!=0a<qVO=WK)(R|K!q3<isLDO?N3C|BtNsqVfsV_
z4Jky#?#sv{Dk#;Hhw8ldryz<-o|=x)RRWN+uyyJ_2L<b>H$qUb$br#2L%lQfyCLC6
z3i=HRKb~4ql@Bnnt_R&Ti5G9B3H{Zav3rL+X7|Mbgw)To6pnly{Yv4;4`F8`@|Z1J
zZs1aEYH-{ReeUn;(;vZ;pUq6nJiWbCs~dN?0E(<l3etcR6Vsp+_hrg)!-&03f0y9a
zA>hY7bV@unE`A&%YDS&}zXW3#BRB=F(-NGLSim~B^GI2BjZ9QiRo`J+r5xEfzGK50
z-UHs`fd2a4fbM*afUE)mOMv-b<B{QvA{q_n(neHhv~vkGsSU6!T3Ypyt^YGHHE?$a
zrGh{nVwC@HYf_Bvv3(t|kS_nssOVJ0@#DjYsW|@t8T}nXnu=V_R7tT|@w>cYRoGU<
z^#nz(n9z0$UHv-~Lv@NWqYjbR-^0+7yjBD)E77W*0(+X+C}*O6$^Ek+PXZ&W@l(4o
zSOEY9^4%pZ1hk`512p%y_c(2zK&K)9$U~~6|KJ|{UCJ!JXV<QpyNC41x%|xNPD8nj
zrSdtS!lvJY{=*!SzH`zLb<W*E*?A3s==?rG1MWsiV-b-4ejjlCJM_t<5DigMX!rGK
zmA@>8kl_02K34fkb%@q4AgDr$ygCRcEcy}GfTd0PAr8Y}!MK&>n^~~4#fJ1WisZCX
z5q8Z++Sx+Q#ym!5Wn3nTy9JfmB0|B6Mb#meQYw_Iq3l^{dR@^V-=Vw9Y4Q32Xz^)a
zt%QQ_XoVvG>p7(5P(PBzd@RoBbG*l(iU1K%Juw3iI?6<u@q+Oj2bq8&<gqrwXsxJL
z$y_HSC9^VU02hTZMJ;od$5ds^oZf=LRD-32R3=*j2r?0lFggBD_|0pY=T-edoKp2d
zSX)9YerXjo2wd+xX!{p+Balm#GB^}mw0=eQBYA#Os(*HmBEHZ$zr^%kRr4QwlXNja
z?+Z+y>HX6~=&aaJdjLOHi~vqwfo^wAUs;%8n6?;V1H6c#B^zLrmf6b$II)vM`t5*c
zAU6okYzG`Fd2kB&L$yY(@M)5d?Qt|xoVxIX`WM2gSVNx5a`eKkyX+9v!^|NnT(F`K
zLfY&!6@7-dV&w1)am7xqY{jTdfZxJ3ICOs{_reCg%cb=1;o$wDwSJ3%9I)R-zmfxX
zt)eLZRl6jRiu!^FT}t6hR?Bp$K2X=(U%CAemaIOCBciPZ<JnE5y-=jphUCQPNYqHK
zZlNr{BwML25OpQEeG*u17rGT=g+WtU_<><m-@u7AegTP1*$J<v>LB4Cq6^Y-{8BB<
z;+iiB<b~JJwO(izWetW$)s@+um|X4tNSrk%k1y_nJhb8b^CdC?dBAl=kwUqcM*jKL
ztWE_tl3+X)nz^WGMP*8?qnb^yhVlL<o_C+2;Pjo#H&x7&>?2MD8BfwHc6!M0Qsidx
zsGs~PRGT8bimDaR2j8c|4-kvZlu$$E1WgfzY1;vDKKVqcyXu7m7N*SB+M$>4^^?rq
z%ecs?^REs-oy(xkucH4j1xCKaS4hyQAP5c7a<3xq{_u|5b`ltXD3#aL7<Z9v)MlaQ
zt_hG8Bnoa*m_{>9a5FOy)><Z`kSV1SEJTh)R`m=+6B3PVTBJa6BSX#R(<KZ}k3v)h
zoW?AQx{z2EmJ30*g>0+N1=Qd!AXJ-+t9xOqIX=I20DRur4LM)e%7}`B3&EnV&A`{n
ztK&0?kw7s3Be?A)HjLOOp8%NiahWppYq9&u>{=ri#oKV$ys%3emM)96AzcWEbla>b
zSkLT$zJ+Qirh^_NrNTmsFI@KRg^^DZP1hdJ$sd~Y<Y@kv1EBe%yP^3xjb_*!s(74i
z23>v2e3ol}b&VDU1Td1Q*3lMSFWe#=Dn22HW2!V?VKl$NTP>xchFpZ}e19M3q68F8
z3VAXof12%_gYP+qq}pC#f(|Qg{&*FVBl5>$Tz|x!alZQ17#QP~3kwUzOA+7(+Kr)2
zUxF6p+cir|#;=|w_d4#Pvgz!S@j{e}Pw80I$wBY(U7t8S*ye;oP^?s`jPA^0h;v>Z
zy@<Qq4bgSIuzjhAi`Dm44pjg`o{ZTdu4g{KvWN>aJbSIPsrvO03mg`2Y5JY@dBxn>
zJFd0m3+R=jICSA?v}8)-M*6U@YIY^wxghW7IIzdHxD73P_&WYr5+<hCyD=hbx{tt>
zu91}7mP2wTlY)(Gu4Q>tw{RWgvYbHC4q0UQCc$yk5~`0BAZ5XKdhjuTkD6YJyZyRg
zQXWxGOK;hkS(cM+s5ZWC)WZXEC9v*Hzl(>dC=3&973qUbB(WCZ@~JH#T@$RKLoItu
zBM(p0xO&^5&jrw1Y-J1#8g2FDi58}TS0G9+Uy;-FErcNT8=G_+2vv?Vbj`inpxQh3
zf0pHG)gnBlLL20dH1sD6uwFJG`-TC)0^-I+m4-(`9^VR(HOKVw$1!;vca0L1*qTWi
z>rP{G%ofeGjs4GLx0k617nkMHG6{58f{sM{V~4MSYe^v)pQz|elUDshbyyHR`QGZw
z25wh|QNw}P;)w_tpsiZ?jKMJl`O++7JWEfW>3h>RMdz2nLUKmUTkJuPesA?f-(b|E
z;tVkW<z)Qdlhd9Vv{O`X0pd1_Q18P>D&$FJWJ8)zVJ?<&K{m_s2qIi?@dzTWtqH<8
zB4^0OZxl`PJ{NVg({}228#ze=u-w2klDI=a6CUFhl^6l`i>7WYQafyH`b1E(D2K&Y
z2^!^*OeI#*Sa)L=H{@upMixK8L9$(rYgPf<9mQeDU17dM_vx%#gM+>F<%<XC7ZyPQ
zKj$K|s3cH6g|B%4RUD+m6-#-X_zjd3v_XjM5%+G+o|Q9Q(QSZB)IC)?4C<P@pmyw?
zSfjW-ispEsyM_Dc!9p0d!BKP6lQ)2#4Fmxoo)e&B0`2w3p7;RZITN+4zUir@nEr8n
zIh7KfM6zolT5v_u;x!-;7M;ZRu-If`Ho--9;`DAz$TOfxzmYR%et-t+1e74p##=#R
zZZ;g4%O07`^cfB+PnSnwW`WUOOu^ML0Ckd|)nkLdNr7g7_KfAgm&dm&BE@fjGJ_DK
z*U~PQpl_=1cTX}gunp=7@fC>{XdsgdCrD60*Y$P7hb%z5<nc2z()U5uP<So;rm(@m
zTevmm2;9WomU9+*tu+K{ue}C5M`iP2*T-pQXhqPf*HSWVTaJogy|<h;<%E(ZU|&$8
zi!yae05nt`HXrVIzXGO@t8^X$pLSS9$`h3i9H*vlvsBb1_m63@R^EYb9n%+D(07~~
z)$eniMVfk^ROvUIuQ^|KzSKF5>}}^1{qsjih;+U{|NIWjlg_L3&spmK<M=0)lQa)i
zoAU=?c&2UV8{5v8U*S2ndHgny-R5!IsdENjNKwm8VYzwdOU|G2TFy7sLR7z?7NT$(
zFU0;<DyPdt#pjqtQM=N7IGbuA*`fO>c$Qm;;JFn<=r=<zr&DgczppXxJz1G?Qm@K`
zI3TItlN!JWb->hf{c~k+pp7BfknN%RZ(t3dmGBh3K(~!w$=W{yEWO;j11?3>3jB_5
n=)@pQwO}sbD$P@QGt<_Ts*NRDZWGTSU5^k(CazS~`ojMLDJC2O

diff --git a/doc/manual/build/doctrees/building.doctree b/doc/manual/build/doctrees/building.doctree
deleted file mode 100644
index 84fd25e26825600145262246e6d70a5af56338c3..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 26743
zcmeHQd5k32S>I!3ccy1=@8sC*I^~$Kho^h&TsXtV#@Vb{v);9{N3xNV^i+3OPgQSq
zRlAOzoy3L&aI%wBF5DbB1Oi2b90Da0i4@5KiNJp(5<-B4_$Lwq5%E_f5JX7)zVDsY
z)6?C1*m0t)v_0Lg-tm3k`>yxB@4foa^lyj$7XDZ4X~oSv3&OM(#Vs%G7c*4Q^`fl*
zeE;}|`_J}|6|;%En#Ot3^!mjX)M)xa*h;*p|GvJzrP!Hz%`Au`UEiPfclbNs*FT1b
z(^-&(p7p3W`1TyFgJ{KhG>N;;MbR(SNA;;o-gO#ylUmR937}#}&&B9j-`|%u+@j)U
zSrRnz4A2v_+k;jL$cmlK&`nbm;`?;ucEz`uR^Br|8gBDy;<c$xUhK@=6?)Y7_xOkW
zxnj1iN#SoVb|?y*S!}tPyXePVZ}EE2jibdhX)ZS1wCT1y^|zXJdv9Ds`^Bys<!-nr
zS}!&v^0g$*`o&ZjL|*^ww!8t{XMvTwlDIwJCf5s>d@u1FAnas*;?XB)mpW^4?nIu~
za<bUrPMuQ%f+fdwPN6goo4y-F3(gZgFS>Z~@dd|?T9pfVn$?{5pmEcUoFtD_GbfHv
zVa<tqUgBmnJ?UDSd0lGdoO<#yAi%U|nCd+7Dys|>!9d-#^ROL+fXquhC-I)ngTx~a
zN^5<d*ZJZn91FpBV2T<T&VLQK%s&EteJ%dqga7y9|Leg){!xFyKklFK?>jq19ONJK
zw_|E6LX3=9>{SKDu6KBtot76h1F)wgR=H4*{qVT4iEB^Nm=cCrj9pbjT{*jT%a%*A
zv*Kk=nz>2lwH6E$l~{(STyl-m@S1LpX~pC^&19{Y#mu5Xv(ig~Zjc4nywpL3meW|%
zyd-(R2_&z%VHyi=CH`BmI(4(7DfNxssN-&zI4^XgmE2vSLETJu>bof#dXcl51X+f^
zK~!@dX|(`D9Jyh*X7H)FPTN~$A=m(1%{ddVde^*UfyP~9$qFKnBn(-aKp-%;vl?W6
zMT!(gV*DWwJ%S;OR~2XfjI5GIcZ#f<-Or6<cO`0bitR^>+T1DUl2VFF(n@7|<oAyo
znFQ@AOVAFK1Z^t>?IMhW6StXb!l0433FKRIa*KsNC6%irr7VD?(@7+tPa`2hiBiXq
zlZM*}*Blaul!o!#bj?|H*T@n`M&@xLN<la8Iw>SRZdZCRb&x4Yn=%+}vcIR$30d~E
z<~$lFj(6Sd_Ck+jBS@WQ+=cmSK^VeN^<5#^Sz{|?^an6`ht~+)Xz_9*kFtD8QuxZx
zh(W~AtQC%9EydIa6^ntjwiLTVSl+}9>y0pOUbWqW*SNh*&5ZB^svex4C=1+BarwwP
z8nkCdfmY03?}ke$cnB`w3^QhO4PU3*F?ogS#f;L~aB3QE>i3I1ez4+)_@C9?WQANa
zvX38-w&~Rte%eMApM0#%JVoA49;NU!z=#QRHn}QGk{_3ro6Ti*STu){BUN+IoRqic
zfOp*rYWG68K$+t<;yiP@L7I|z38Ef;!DI1KVKQhqEmtdX%udxxEOh)af4;bTG+btW
zKa)0!y=f0F+Vz^-YDt%RkD9(TOX6t7p1<8CoYahMYc@@vUl^Pic(y_=`|hCo@i~z7
zGhmtdqWMzLM>7xb_9pU+j+l8j4T`yDRXeOeO8QkOHhwIMEjMcx-Po=UY2XoV)=ufo
zDEjK(8iBtYB=R6-N$0;{>HK?2I{!R$KAdW;rCDKy!BvkH^)>kKj?}*n6e`qk0!D>z
z!}Z{K#H-BrMuS(B{{`1WI5Vu~*#oILPbhWEu9{G}LSuvR^AziiaIIoE3l=C%!)nXB
zwk&*qIjnNZOwHcam1;AN+QG`Q1JQO`LE4N--&bJF<bpukGlt^=oTf9t<a7iL1(y)6
z;;{>7PCtH}5#oWmahf@j7_?-m7&I-B#=;|#P<r9Ak-bm9+~{f~^Sf!o|GaXri+Mvv
zi{OgoDyGbI@DCff?n^^O`nxRB^Ft@k^tLHD)~sr9OquE6-){<>_DjPd2D~zUuQKE=
zvyMV>cd6KP^S?KR<<^>M2>^`JQd-JZOUioRtCWSUB#P5oY^x*<&f`IpUndb0;R~!{
zQmmMq)Q|HJ%PA-gcz6N1WAqIMFoN|`p4FY|O=-Z+0jRJIl-Xo;d)&hBgIWOYv3(K4
z?vBN3a)moVO%0bb1}^_&{>S}d-T#DiJp50UJ&pSetY-3xosu~$Yhx9Sur#FiM_8IE
zTHq=U6hAa3zc>aH@{eF<IuD|rWohoWndr(q9$vy)oW>#Vrw2DCA?Bdv1jl$(DS7%R
za8?oz`Z>zG4OE00hfkD2w|CQpN(NS2@tr7!iv$l}ELafofj@*O4p|W=&3nC=q6IaF
zhK<|ppb6j7S!Mv9lzmk$ifYbDKg)XQ(jtYvY6)Phl4Dqlla<AYe8F&SkxHA33W};6
zpyp@Y@S){8)+t!{!yCI6ARGz%=8*ll7GOCq*HhQ9n2K|Vh8!})f&}49COSE5zxi??
zk5(F;$9UE$zK1{~eA5X2vWl$w)5Vn+i;#*5=Z8*|gzp&G?IN+;bg@ajd_=&jnBs8h
zKvPHZ0^+p5I8TCp@wVII3R*aH-bqj%VroJjwiG)M!$PRWCgm^PF82wNsqkJg&-^>c
zsFudy3R<2NLmE$26QJV(dcvZOzePneLaTpvt3hhMc<Zfmzt%E>-;AmoWvAX?X&YP1
z6#w;Zg!nxXUyyF!fSrn(VcwEzi0qUI7ONn`f{Jwj*N{RV2oSgkc0gSqU<kDmL7pMk
zDU2S;HSy?z)65f!>*Mh=M0)xB83&Fi>U&A8@@@`9f_^bnRGP0Ko{_=frBxjkeiV$3
zqo4`(#7r-vAs7>*Tnk))K+6nNqgY>MNyZ$PmT9!SXE~j}_G8B1sE-eUW8h}a7k7Q|
z=xUr?<u&-xCFfF-d(T=@O!b7(IPc$g9+Np=TzRnww*fli1n=KKRHcV@2qK%dpJvR;
z;q+psoD&GqfbW5&ZHJI#)GV)z3nz8Veql3)PajFsoP*D_so{pOnJtR3Vd-Wt0)K|f
zD%zsr=d=ML8Eqp+@%oH;5z%q><<=Z<xR+>8jx5%p%?CH+`m$gIL+ZT)fGI*x5tydk
z*N2d~^LZ2wr7(@c6h5qw8iuFoeFIcC!2o}CYmgloO;oK21!$8g!jombFh1==L`<hz
z1zTd(dQ=#)qbSJ2^x6ZpH#pVwV%t&XE%n*w$$Qw|bDn`Gujb@-yU|Gf^AMWZk}}R4
zez=UN3B4tcgkZ}^>gNTh%M@!7QmVp1S@jwy@G9EDTU}ipaPUaCri)S*;L7p(Fh&=N
z;w7PpyVzlgTb9T6>P^QsjP?UYymJA6^n&B9w+xz^mt8EI5;r**`9wd&Fz|`Wk0)`3
z$}KuA^iv#F>@kL9wx2`j=8evZjqZubi7)Wep3E-Ny;X&#39xawW6I^a$M`K%+l=4R
z$pH-eD*`wuE@$i%YsMAxH<>h^Dl_SpVtW?!EKl#sX+ZK0c$OT@<*hrxSw<rYW3wy+
zY}hXBB2Eqo7Qrn9mWj11%gawba_P)6qGIRbR)Ccacf(sG>Jj2~@K&%u%3Lhjy>=Tr
z;D}8lV?uZwShUBXS3%qjyESTG6%GqY4z@+X`l%Dfa8z0jV$cg@k|9^B(==~3X%im{
zH25SGz+R}hZ3tpXViwfm-wKxzf=%cl=_HX^Dgo4Xk<%f!aR35=W5?lO-_kgeyO>%F
z{EV=|7raA+CEI>*7@r!o_BseyDT;U#_VWa{Ejv(~TXq_WE&FT72*n2Akm4gZFf17?
zW|V{|T{=awWEwv-1UlPN(Q@b{>Oj^tXm<?}MAM_7Rp)JJq)os$D4x6pC_bsh^JO9P
zg9NZb&WB74bWk6tS=l@A!1UG_Mw+4VXEQ->xkWXj&48H0$;`l`V2!&0<S4sKTyz+9
z<hCL;QQ@=P3f2}=L<Vc=u6~b*^datM;4F5DO?#QCW0}x_@_`OH2gu6D84)_1QHgPC
z>P&$q-}A%fY+#{8A;eD;NlYftIS9T{@@HW^AB*Ig+r`cd<tHHXi+2A#Bm*M7fFp2}
zkAp>a)2HyWPK7~M056}hm_E@&s+f18Ryjp~5v-$q)VvV}sZZuEa+bM5S_@(mn$bmz
za1qHs$smFZ9Ux$^LJ{$`8iq_(kkTNG*9FYq;2s+6B{sh?u2|Odjv8Q#S5ro=l=9H>
zkPax!evmjShG<V7FDtMIC7c6TWUK_g|Dn$!F6xFzuShGDIz>T@9^$D?BhI@sfydK#
zgs4V9|Bxpev91|-FG%+YQd|G-l+;(;GR=fFt-m^+RXSfLHaXOxf!H)0+I%Wa#{#Uf
zCw|Y^nO0!V>iL&FlDqu^!7*J}&qm3-3_EuI8m)wfeL#8Gy7NWbnHKn!o$2|Z94VmG
zezOFq8pM|Bu%Og?(#B){TcV|m^cjy?Q}{bS6&$bik>CZRCPxJupRn|jt&fU-5`y0L
zvL-S}SqxdSw9<hTrcOyzk<<~RqOGtRK?E&Up<QbTZlc4oHRtVXXxw)55bifccT|!T
z=RawVK~^HNLg+cCw8lwA=0ZXIu~A-X<T`23Ytn+j`DJ+XmoHFuZ3<`*EJh*<ZQfZq
zf<MIwYDV~1u>GXFhnF{FgvMhc4^xG65iO?pt};ExC>6~t@mi?7OdDL-{K^6(!f6g!
zI}WQ*p{Vrm-Ba?*@10;Qqw{{q=vkhZ6?|hjlzN+@U#8uUhLB}*7oA37J$(O7qopT8
zKsuR3zNb79@bf9L2=PhV&YYcqP=xemAS39HwWjBgv?(gx(LOcm^V>)BAjQT=HQ$AL
z7Ut4BdoRK*2k}HNEncTp1N#`8aub+olBycadv6QO_YZ=3_>`D45nzy^2}$&pBKYV^
z8ng#)3$*$mXm7365O8UERZd%6T5>X+?x<9n!mk6*z*$2GgK`=HeN&uYa9Dz5qQGtR
zppkm`wvcK<AWb;<3!A`Rt**chC@%!x{k&0wFfB%5<Yl4TNY%j*jiyAmwHZ08Rai78
z21qovcbjN0Zy@!&oSR@?MkRK%EEz8O6Mu6FYYNh2I(4~pK!zO*WzI2cGH{mS<PVZ@
z62$jnN;yS(9`gTr1(Ky+*v2}EjylkZ8kx(sy!>-#o;Y`UvBpfXi0Pt8;%T*lz{13I
z2YZBZ*fF6n33gVst3jEq%ESdwzpVgfFI+S0ij|iLA7i%O$5T^|v>Y6UuF^021}S0s
z^2SWF6$heW+5VlqlVsEkC$O5#GzOb7S0Ph@S6$>4!wIFcF|PCE*;5zqec%C3y+I6_
z7SKz`fLU5T<0h?DT6bQ=${OcZ)+o}P<MFXG7tb9>KtJuK4^fyp^A!`oklGF>Es&+I
zsG@eYkpwMd$WRNB3r60|u}Psa^YSdui~reT7o9+Y%T>RQeRbRNFWd|Yf)kLJ5k!2b
z&7`<=)-jUQ=XZ~$hk@=B3|%?4d90XX5R2_;*24Kdd{#l^zBd?F{5TDGsPj?$8M%(6
z{1ob-m|+D08uU3!rxkbM#`inFhYpIJsFbbsknFyl>(1dfIr>P0%KA6>F(x>|S4!}a
zSt-R7O)RfLpCe$zp|CE1BC<1&KX}WNt{GZP;baU=W2>mppq(D=9muI0T}i|AP2e|b
zAu!qrL-eTZggtyKE`%i~N<rOrKN`XB+!lga$(?xow%v&#sNUI5HQs+W0p6p`bzWjX
z6OJtY^HHqa`S@N#<n_o*SEUcxP;w%<I`7(~j7CzsbjVNHSjsYj!B=PYaI8@5_3=Ru
z1QSIY(x$2fPEF}!tV*4yF#hteBd5Vvj)fi_QB1K52<xuAxMh(Z&xfRBnBX|{HrA&r
zUPK3I0Ubpr_%Ia?qEJRX17cM6pZuhtZItr&nFY#j!R``Ol(@}mN}1OGF@}LGM}P*B
zN|NF^w?bykw*u(Nl;m2OM~&bAaQ7;>#?e^8Y3JkKSkcfKBTToP<A+S0MNw4C;;uf5
zb=&=Dw6;x+*R!L<@mI^J>fM3j5qO)CllO4QT?oPwos`0nD`sNGW?4BtBu#D)xiL8S
zLDhS1=399k`v$u*%y59gFSF8JLq<{zHD?WPdO0+N2*nh^Th1TD_767caWst|S&T+t
zFr(c)1|>~*0r+I>^c!UwkJ|gWO!OuPL|WS!U7$yPa0s#ko)4#wzZvzcy`PW3q#i+F
zNyjxFzJS~|$P`>uI4n!cLSuzu$|>|lYojFRI~`KzBy$3a;ia|%+*%;kB}RXD&d_*#
z-NSq_tNS*S^eYT^=Od754a4G14$Wlg6jm3Vi*i_azeh%*U?927kPJALo!>>Two3`3
zZ0b_J6Fp4iQg*&by^=?$oXI+x+Rh{mQ*7!?cD_RGXB6=VJ;{%Ovxu(DyF1myXjTy<
zpNvVVt4GJ6MG|A}vfe-w#btoN=#JjtGDK>TnAuH+bFH*rx$Ip)N({&NvH0d-R!bZb
zW9;SjU?3LZ2<onSVYncYe)VCPmwsSP>kor=qa0q)PTvYqlnH0-%Wm49&U;erDkU&b
zs)zj4m?6g{0e-3shMB+jUY0jKEH789u)IwVj!xX;{AsLp=_CeSz95|&Y}1muQ1i)a
zSW+uuo|Pj;S>F@@HlELn8pTNFA23E`b1-KCp(wIbf@NBMX$&naWlw{!z&v*6aME)k
zFqll_o-fniu))_hT@UbNOcDrGj>*8^5n)Ev^{s{*f3kqq6ZRKl7{?MK3S0LF&z1d7
zX%fq;*89fHqnaE$YI{>{G#1~R01FZUx#yv@whTyozNEe1WS?^9GZhj}Ymo`XD|9*n
zrzQji8+>bxH6H&m1`k_{exXEpD>{E^4B01$qi@7msh$_7b4`FBj3I!<j(oquAUpnk
zi6~`ud|(V+Hb?pvT561bGyz7Nv*sU_vagIIWHPVpvU1jy4s=O2hYLLF%;sThhx4M^
z*MFBdoTM*h8eK^veQ<ibH$Vwm`%%ww(!W>|#BU6^QEIcoHE9RR=;G|uDY+CC$DmHp
zmc;_6B2a`9_W)3Yn#?kpQ`t;gb;>yAi<#(@hh1@l@vn?D{>Hdpeo<gI_WpHD;IgNH
z7=(qI64+T?W?G*ZKRr4r6;;_=I4r$|p|mnx4+Cs67v|(G0Cn8BFym%M^QM4sG8g5K
zEgl6GjEmA8qe~{&vG8Va;huAU?Sb0;RX0S2+Z)wJhx)7cuV3O(HOVfGnVNB0`70$d
zmbLQ9F_e^A8DvtzZjnkc`R#S0@oY_ir=_b0wAY`OwAb6t(MbuBMrrb<TzhX!Aq4F;
zkk4awJ*zj>jgiBIQMvh4oevBl!RDztGzx16`y`?mdNKj~vl3^RHT0Fck)8Vp@*?Pj
zY#VWIq@&{atWoo{nMm7JxYUcz)FO8`q6}Sxp1U4SM7QKY*X3RwhDfG;I;RvWeQL`}
zO*sEJQWGAh)C6fk7O4q#BaxNMS+umcqkOn5u3!Nd;8-r-#pL5sNV-nRvNx<6sj3R2
zQ$@>KNgyc&2zL(99g)2lr^#raT_xPv#s@&cLJ>-&*hOP)vQlGfPTc`I8OHf7W`J^D
z>&e?8qmt2G_EgC6DC_le7?2K`l^&0bF3I!u+yX@8x$TP-*b_sNPd1rhJ2jS&Mu4z%
z&a8S<>>{w#DYFb)Rl#PwwKB{@5@)|kkZeet74Ttw@yw5tDK{`l=?uy&aVhhxn(=A=
zZCbs+tW^#?4uo!%+o2JjW&tpLNcJp^yvvpkHTaAY8PoQAw=n*!^e`ZA+Dr%-CR1=<
zFDp3XK|D2R_clpxGTbXIVT~#(<Zwm@2{p<_%D>uQcu~jD<oLHSWF6-ne6viV&(c-O
z9wmR+Sr{LE6gyyD+Le^c0CCh&MCItzAubi6%?oz%+52}IaeURB6-Cy<z(HM}0Blcj
zh7@I{VaZUHz4JXR_sSntISOpTVA#KSS;0j)F!$XAp$tp^AJ1V~>p!*p;?Yq_DZ-<a
zTSikQfgzJHy@O4H{csY4VAmJs;H)wScVPBydqLzHv=`^^EUyh16p<fUWkMNqBC{rC
z>4tO5uK*o48WRCLSjBeQ1OrT_)4q)<`X8piXkGr_s3T(!)I_<<a2U4~uT1j>0_Pbn
zU5}$W4kqB5R{Cnod<|JI<ttF&F@?B%6FIcQt^tvoh9j;B0TgcmO@?h$U=s?P57H&a
zzNv|&blyblc)Zwk68nC24_8gaD-ZQ?yY;pbQigWLVW~LaI#$&Y3AKDltur)My$vx9
zs%K#Ean<8sJO|MdYfO{8W!S?mEB7UC<(89!b8%Kj2UQkWl^oToyzkv~s-JT%ySz7d
z1F*P$+Z?>Z&F-6XioR0bKT#aa;K!%fIU%OtJ5X?qD_>_noyEwL?w`fIL8^|2dxN&*
z;BS9xu?J~|bZJgqf_uK$rAjyt?|d<X3xH{(26y}Khc*zG{R2Z>LlPm4ZpXXa5Nia@
ze#H(r_qZUnf8O77zL=HyEOFAu56THZ)^@jtA9G0@X8;upe7#?6UBqUl0HKa?ucAUl
z{-oPT&KJA0xLK#`_US1=nFh?sTE95ZMmIQL?^zFT6uar20=TlQejS0RE^_Pk&?R}j
zy4W7fQgrwlQG(4SzG}Ws(dfFm@*m^L2J#&MAPX%zlB~|xh2hTqqT;)u{yAOj_pS$^
zVulr0swzzv(=D%&uVA=6l;j60q6RXFx+s~&bTmCeiQwZ)W$QQ|ii-p|k1)^L)d#C-
zfSf{bI|!;D*1aT&le&)u4(@Kl3=pVIybfTmpuDaKDseCU;>f_0fi5~XAgIM2(XW9)
zwLV;aFwnTzM>v4@QoLV)wM-uu4$CXpLGcz6C$`~b55--yJ)5+kv#dMo&lfvHY6ejx
zXeoy9cNBZvJd5k5sMr>O-FCO~Zm+Ic5`^Uf9O$CkM?#v}y<Eb~PP1={da0MU;ySJ(
zMy-8F!i-a|ZntDEX=Zi4yo6bHZyonm(P2#>LP=O?xKoJ=#BLXmp<PUtJ3QMhtJV2-
zV0v@JE9e^r!Bq|{n_fh{wJ_y#cq;~`O8h*#wb)Pc2F{6Az=$E;jo&}F?`W~7=k@CB
zrP0-IgbWgHd*F7!PNGq~N||aDr?nog*2cvQbYWh<n5UWy0BY7%t`Xh9?DeXzzyD33
z=boh99O#}(O!q&px~I2R5X)Z0MOuNEwRsFEghje}4};C(P%EUUmHGX%GsO|`WVfz`
zQzK9pmq4!<`_i>2bFbI+HP7@q3%cF7*p+tieu4VaIixxTq3+_};%6O)JzQM8Or$-6
z7gPWqOuUdcP?<@H)>rc$E|sQtlkodPq#9TU_r%R0YJ&%)UN}IC0v2_kTF}KUf*8vc
z!btDgxY`HH;10wVBzO%F_@0+xjQJ*NU9EdqPK0$_*^Foly))!Sv0uK{1iTuyg-%;9
zwtLaFK5o}4W`s6@_<|Dy<WJMNfx5{4W#sk`nt9UZowq|yg&{5ulq!f<k~~WpA(k=b
z`Y8?8))gpenci@Mx;v>*d_UHCin_i+AD=+BPv>L!@W1VUtMg{WlR9spkLRfT*XiSF
z`Wey39{M>)9~Y_Vll1YA^z-lOV-Nh8&K!N5r3Yu|<Im~mH|WEmpGWYK7qbKjWl6Km
zVp!H0j&=Xr>kPs=55LYs-{4_y@Q~{~97@pRIuEnXL)_r*Z{+?FylsQ=^5+CnC;e~v
zPccUR3j!TF@h{Nv=^LXnP4F{1l=Upo`7V89bZ8$`phLcyK<8`pjnL`5l5yH?Ge6UN
zH#Ss+g~l9+64G(1o|t#LgangIAuQcS9BO&u!h-{ay7p|T$5}NhH#$)2ALc5_aEV|s
zKiHRi0<QrYxEbS!B$*nd(c$Vlk=h0RIVH=V2RA*}zW{B5chEpD;axc?y(@sE^ng~x
krQ$hV%rY<+hzkKBb1T%Ug7fw<y+{U*?Rj#Da31Ra0gFOo0{{R3

diff --git a/doc/manual/build/doctrees/environment.pickle b/doc/manual/build/doctrees/environment.pickle
deleted file mode 100644
index 4a0c1747d867adc281202cabf68f9a16dbf35ddf..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 227026
zcmd4437lM6RX?7|)=8(++4o82B|S6g%%r-r&P--wLMNFC$#g<GGb}ShO?B1luBud5
z6}4oU?I$8Ii4O;u0v+~65fs@$P(ctyQ4~c{bQA&k=pRK<_$lZQ@&7&N-uv!-^<Gt_
zZ}sb#&nMOI-R0bK&pG#;bI)DgPb_%-+&Ndxp?}`WYB`%Lo*#0HXLFTOamp>$8s75f
z)^ml-VI%43#*UXY9&ZeK^HSw<W7J!c%#_l#itA=_m4>%k0;$(>g`s3QRm&D~;|*_7
za;#Q4iMPhn4R2&Pld7eLv!y9__<U}vR2;5W(!=RgHJ!@1>TjYpRo*)c(8E)yVm(zD
z9w$U7f!eAzUeP$!@OqM{N$qAAd$(CZt(NMQv@4)3OqYrixygpNRCYqWFB}mWe%E{5
z^EJ0v&6SGP#zP>*GDW)cwV_%mQ)+mtjFjAj0<>JDCTpqj>Ja@jycIGjT`FG~uh(j&
zV#8Z&RxZ}uig<5$n~aQ9y;iEa=^BtIq{iJs!&_M_)h0^yVrIxk4-Ay>E456rmUX9G
zpGQEdR>_SI<zHHND;FBBx2TXRPS#VCC^FXt8cPbLbgJMcL15~p*CXDmjTAb}bW6I$
zbSaZ7f@X{BwTZ+ni7L^ruLx<VCMDLRUSGC0RoIt2SIMC-jf-BtXfj!^x?o@qDXXbO
zvg}r-QiWXcOf{JUb`5XdcVGT8v|Fx}^5`j^Mud<wyoKm~wgiFOI(oe5)|}%YrgOWL
zp}UF&q=72cp<>}q&{zUU5|Jyp$t*yv+p}xW{%`)o)A)1KPDcYlPjsp5Ua#jY$PXH$
zSG$IG5A8~%3gv8SKX9qI1vgc78`+z@1z>vWLc^Pb+WeTDn5toHtcN(&D{fK|HaU?i
zxWyDPVeO-pQmOX%(4#8v@khb6#~YqA>DFp^Or{Ej(z)bB{gFp5Bx{vav06wGv#TK2
z)y8`gotvz<)oL<bNL8yC8W+7q1e?ZX!&{ImX58})uXid{1@$>Gdly7pFtA#mn8=;S
zc=qNGRjM@L0jgH1r)$7FLwGc*-g5VRx=_!!G@b#2h2C49D~1#2-f#n?qc7u5r0RuQ
zvQjFzM21u*gN_tgSOKI0)sl4y)hE5>ls8q%)FEg@8A@AOE2WdAapE~73_{AO*Mw7(
z)htLP0AegH%#@~5Ik0Lo>P#gkKm-g4H(7BfT(p^nw3SmB?H9d1t|(-P2-aV|Fi8pz
zLR-54oV|r=$gRvmUJ4{LJ{Q4z*+Gbw&MuV&dqB(nnmbhnyWA?PKpH&DR8n%hlFML>
zje1MZxNbRlE>$UF1Q8Z1s`YZ2S?MRD=1Rs@rX*_@%1n*5pc%6kLOlf?3Ndhrlc>-O
zMkd{Iu28~Q+|@fY<UCfXS8Gy`A9E@$a7(+l-s(KM{amSXhKaKMR_Ao3?mpft>qDxj
z{wSD1v?RR?!AMRNQb6@d5DclQ$^~QylFuze{+Ek^@2j6G305Bzco|xynygm}0Jx}_
ztCe%<GZ%>N@;RBCES4%RVZS<<1m;abevz@TSf3*Ge9>Dao{~_1cuHp6G7QVHtGuN$
zeWC<CQez|4BUL1NH71m$a~(;F7?|MXk=*1ECoO<JCeAN9O@BG57s|~|j6?06LH*;o
zY7LB{oVvGpDh1Pp#-Z?vDH<$EC@%cC#YrGD>Ma8X*(4Ae$DqSdCiZfY`%*9pvdJjI
ze5!KPwI}s!)h#!?tA@~Stx!#Zce#lRluvJIaIaFUqLp5#P=KE#TMbxMu%!0VI%J-Q
zk@1>L@!*3>ed!@|a<!QyM>jER&|9qZk+5uY^C{?%N3zM0QStZm3&>KiF@|CUU*HIU
z!O$P9EL@OA41^?xKsHs)LC3SWWlMz&)xh9$%k^>U66@8w?^?wE#~iPh)1{G`PcIOD
zot88Pm@JyBfn(WWZwZ%@CLz1q>*sd>DCDYHm>fSTpxT#lsayuc%T44^%<HKa&lF4N
z&>I1<nr4fceXF;K%hq$523|z#=@Poo*dgC0k>}z~HVt_oUC(w?v{Nq8@KI^~Z1B?1
z+J2Jgs#3Ln@{+2Xs-&|+Q~|nmDI)?^D5ZX$M3qwNWk`r$po-3dI`?~`eJF<{hAhS*
zSg@L*K!!z9@?0)MLuigfpEV9fD~*&~kpvq$jWH&ZEi4LDHv`GI)pRAtx{qih5~Xhe
z7X`$BtG9wnlKsa3B5e<Ny)fUoN8p2`;JWlOaKZYl<1N##z5?AkT(4G!;Y|*gFTnH{
z_YUpeH(Z5Bk$_G=!~IHmD~*a;Tu7=*lcgj)B~m)eGPx>5@`5jdPhvcf+E0?=suWWN
z8p~%ur@BN;7==-9F@q;q7;Ws;Bqvg5*;j!&=ghpp(dC>{t-)@mRX+y3eH}Y8EPXce
z5Qjx|I2JGrY_q|X+b$af3A}JChhf?X5e#2JUUasSQfPT=MAzUXB<p4P=PoQZ`!E~A
z86*VtS{kGjeXc_E$5R;F(Dnijj5>H-B2u#Ir<_#`NZ1RKp<J4^lt4zieh^_vw{js@
zlfrgUrcrm2f($4pyhavQkw$Do`dUGErWPe7rI!OArv`^cVnV&Z2q}v3)yN)@ZP3V5
zHAZEc31w8)=XSM1dD2@inkAP+zyy>jGLpJWoX68FqzM6{p+asJlyCMEB>U-lg&ZVb
zI^kdTNoAR=7V4AaaIQFc>cpY@Mou3+F`7Jd;@*Qtp`Dji+!RK!3sYSkDpg?n7s+Zu
zO)muh*}^Rub}{ARm*K`MF~r$Z0bMvlyikVg&FA*K9_d#%ygr&nC=1cZ4tPt`sbZ;^
z!#shlJBZka4oxJ%CYt<#*5({eaA_DVP3CG@7y&Y05N&q9$%WTBa8gQ*?03C>SyGt`
zZ@%z1`qdy7`5@<#Q-=>8I(^UKLnlVY=(S!YWg~RTMQ?G@JttqD%sw}J$XiKtV%3TX
zPL(K=fk3a-1BM*ysd6pJ+(E}Sg|l*1;hvOHbE}a}iiRf}3I^ndg?)ojsNzn+g2)nN
zugwOi99huX1@<c_`+B1;!9xQuT$mfvKue~xsS0d78M_1CW}_(VAEt0{s55RMH^nnB
zlvr()V5^X<o`qx`@KzZaRm^bGq{6)wncUeS-_>>CYhngtloaj^`}mC)KGr*Dj`H>$
zScg>EJ>^awK3^Wh%mO^w;XK;w;9tds-&Ax&;*j)82ZtXRy5Yv>yyV(PA0OQD*aHtf
z^x%UJ4NvZLwm<mbwbyUoaho$d>|A@jGv#7J<bb)(IXD)s11}1;IwOJgKHl3qe8UaB
z&JE5frgGJhb~WP=JDmxz)=4>|utY;BMFsD|G$J+SJW6SgJGE2=^Dr*p)JhI?0!T|m
z{c-~B#}!~_WNge)1anFgP7!c`VM!Gbl|`Sc&Z8K$V@!?5ozp%>4~u3WcFtjV2uy{P
zWT^IVuTNEh4^<o#Rd%Xo6mcOO)tZwol!~r%hwRP}zfuPWF~xI1OroYJlVV&kU2<q*
zF>!%uTgaVt9bn4r%1t<fl8UMk;vygj92Eu`(RHpv1sMJi2N}ksKpiX;d{9G>ox`bg
zc900>+;Jz@hBVON7~HYrHiq-KDKG+Hu2^&{M1k9w+r!QXyzFtf0+0x|2<DP_I>Poj
zxhl}WoWsowIWNc+3eLFelxemMd4LRY)3t1>=9~i^WXWFi3_8AE;4(#LvXUC-(kwx#
zVn$7*oN~^EEhDCL76TGBi`#3|6x3YC$rYVay;iQ*3^wvCU<8N?R-!i}WDbh8os7P~
z{v_)mDzOtC!BBF~m%-DCRH5qbbV%0_1X1cZDH>up_`6dwM&#&JBFte@Ey2R1Q>b;N
zQbwRr0BPH{oet@cL#6Z~(jc6q1mG-+@C2<a_(bnK6mRQgj)8=SO3pdg!QcdEz-ot@
zLFaTk$djt8>JU}8-E;WV;RG~RooD3Rp2Ls`GRR0M6OzDU>((fY&BFHxw7IO=1s}IG
zOlHlMJ)p4)T}5*_C^%C6j1D9bF$J3VQF9EQMuK95q6A60pahzOt%2fUmACyRgWH`O
zBe{v>?K=jCZrHJX2ZMz!0Y{~B>;NyIR*9j_qOv0dUGy51hh7kZNW>(uc;F$;J<;<c
z6h=f2%b3obEY%DKgflh4jXcpJ5%2C&O~|6rCW*wLE}{kz@fgEk2#$KLHn{!4;`SXT
zrCG)Rg`f`c%b*~>pd=BGm?Vll_LyTLE?y<7CQzys?7o0GM3Ij{YDz<=vVkrQmFv~)
zpiw<omaq{zO;DifTz|dUSTi03-(Zq}&fR%n&qG1bA+e#l^e<FD+y$XmMR6xUB}rSi
zn5n)1#)!L5Ofj{?4(EDvOtKIwSkz(Wjtmo42h9;EYbquLY7zwSOUu$${pJ^xou*c{
zMrgoha&{nv0j)_nf=k>B3W5#paPGL{4rlxJ=|UHy+t)fr$vI%KRcYv9f`sHiRYLo4
z5T8s<(a9rlM>KXYS)R;cJ|*fgL`7nMSPfONq%wGxj3|D9DqDFITe44bXkql2RLPfe
zMKR8l#pO1jz)!I$hC#)2F$ZEyl6oVekitxzE#)!}twkg%^&+cDHoq{gG}rg>G#bVN
zla#4#4;HrthP6=&=oxQARakF#aMw;Jv0F%gz#}k9!Wlr+NNYsQ={Zb|+0YOnT`W=f
zPRtxd|BXeA1-yuX`aF|EU=^VS#C;L?BL`eeZAH+LqIzmpId{lGL`_Wo#Dv11A^CGf
zk*-4$vI#X$Oe6Top1Yj7(z;7V#%6#uO=`t#aU3fS6h?)oezimrb8m`J@;m{(lM(Ff
zhh-B`8d=OzunIs;AZ$Sic|?B1{Oq=DtyZqyIy{`t6o>Lvnk1a93}N|XxLBUT+8dX>
zYwxgI-9HR6C#I$fi8Qs0!kBX^U`EgSRho<(QHXHvgM(O9dT<8?A5^xSz;Ot1?t>3d
z{zJ(3tHUTzOjL$af$?6N@yH~#NFsRz`YcyTv`R%&BBGf}t5f9eqPJ4LlfWi9h>21g
z{Zt*b5MDKh@7AeoEU#cTC|6=im=$d}a^Lae&gj8=4?DLX#w7gsT?Y>xI(2w#3~Nqn
zbS<%{hIwRa3UYG%;OO1=9lRS=jvv3PkfWJ8iZ7#S_j#J939pB!f@PXDa>469%#-is
zbx;^1tmdqe=?-N$B8Q@!3lWONVrip>NMWx4DWg@(#T(XaAqpINK}da*NQ8dDq@LQJ
z!m16zS%vyk5#-t+5^JS$!9D91DBezl#kdAnR*TGVJV&H+bVP&@=N4%})JUd~5Q5+o
zi0l{1m>00KM{%OHBFP9L`LWOyB8x*8QqD=b7LAumXDC?4i+6=mrBXUqg(xkN#W{$Z
z-;Z@}g$73j%z&~ak4Wc{0rD)Tp~s%9u|Ba$C#qPj$u-c_uf!{O7{^#i%T+)-4v_U5
z`E^7{(9Q;(RB<s;f|z9y%b{pF=&{1gg&jg50c#ybYArYALX|a+Z81}6WrrXfTVST9
zifP1MNt><LU}d7w$+<7t3JD@xBl{mLLdzE%@7dv9t;<v(LeN5pF(egAci&a{3`h6P
za!i(Fy(r@KxkotgGGM?#=%?bts3ucYteKV0U`ZNb90<4!DT4EZytt&c3}m3=Wuyv^
zOAn2XjU66wXn}@w>+WM$)gUYD0l=@25DEor_K2+`CL&gsGr{DIYOIOEb#xPhfI<R@
zuJ1m!APlu!g0;F3f*MHnp^8)nNAn|SM;|KIhJ0Kp7PdrTGIIQ=-yy6j`Gpd&1qcvQ
zRE{@OsQ0T6QMxk>6JElih>O9AiN1v9Lt1G<f&dmMe%G%+sf0}<Je8wqvq&PBy&2SU
z6I4xX3Q&N=>+*Y3MW_Mi^w`n6oipx*s*eT?gziwb3Z1z`RTXct<~?Kg>Pi9J37m^~
zrjNTy7(RU7P1iBwLlaPw)UJbd&H}tE@l37`(rHN*Q_&XS1;-5VDq)$#jNfUTDxnKt
zM`8FnRF#jNO4vAt@GwUhL`oE4R|794z6rIY3{9mdq?4{aiC9|=L75bmqIt#*(@7mQ
z1WscZU>H_q5Z~)lFy*W49KES}uD2BUh*fyj^%uR3lrWV#gAlr~7PNf?PbGxGu>=Yu
zlPgY?LWXX|h>%!q=o<NbP}tes`8Sc?c22<Ggo<z-W4(z81izW~2@FB#@6A=yZUMd*
zv|*J^;7Zk8(CjT&$pN#Y5<?cvN7}Gyi`3=<Sb9~lh;F$x_{cD2b#!*U%1BpASm^V2
zA&~YZm^DQr3V=W$dTzKQ@x-<pA4XR=SGw8AnO`qrY2RDL$+Tg@cS6}ORj}l0bHFd{
zJx?2J5O%E5GQ_fUGM7nW7Y8=}U>vZ2vy#@P;2<_7FHh5Q7*>cdNMK7a7+`2=k)DFK
zkd9iG)*F%qcw5k&J=nK{CHx8C3S&$O<e3%7R}on$GR_of#v}%!fDI^OS&V{km0IJq
z4ey#X<fi?i`nq(vELMcVyB=0>UUTPGQ)*QAwo*o?_Lfs2)~V=c=?vCavH3u!u{_Xr
zG$aq^Q)eN<v=Z78>>i`6npAOzQs|uU!PuMEn+u4|8z|yj)@ex!c4AXdHH+rAibYZ0
zQdKX$6v~a3v@^V2MDDA(=v^xdb?WwzEO+_1ZId<Bq6{bl3y#o@TfxeZ*t3GsPxFSX
zTPOqds@w;)IyCU%P08sL7bQEZrdseieGud?==9|;g+T&f-a^Eid@$3IY3$Tt_W~BG
zQfC3$Og4Q$Y&*)7zyYzXiC&28{hZ3JQJ?{|7Uf*>bNqceP<+OsZ4yQV<ILD4;ay{9
z%LS(-t^XHFDc(W%WONa@wb<BIqP48Xli43<4`l!6VxG2aKAFFYf9LY=Jp5)4<mZb&
z3&fv=_>=FUpI-V|f*)^<F*OzoKkV(&$`8y197bN9gb0_*)a2tB_46|b88-6Yr0P4=
zbdl1Az$)5er#IWt$|5=4)!J}l^c7e`#PZ@wWk+DW6LRxY{vQa~JqnmC5dlxC_o{F6
zG?0k4>fU;@6SQJpz!DplWhQ9Gyw1$TCYr2tSII{X^j^8Iquyq-idrWmRW4*2&ihrg
z<BcOA(%|uKOj5bD<3ddhX#CQoGf)QOQ0(Fu^;Tfzg~L9WCW@_NP?t1M68k=|vr6T|
z3nhKeoLNxg9WY-1NphuV@rGfr63#%$zUcPs?mL5dw+|z!xA#66;YtlYc+D+b-~c@>
zbkK6e1eWI63E_s|L0l-+MOcbdAY_8P)FH%BG|Ggh*wr|1->!WaVLr0t6i8AuEiZdw
zqfB52%pzkn4r0g4us08zks(9bUGM|u&z&;|k9)8wb3SPSO5c~=o9_|n`?EKxA~);D
zTWC;-0=JH;r)}8*^>}UeI`w#4_ICAn$3?G4&flq(J1?q?gW0>(<8$=mbF(8Vb$fPD
zJs!#4tsd{m9#xOWd@PPXsnYKCpGN(s6WNn0`}uzJr~Id}>}l2U`?B||k}t@<P(8jV
z`(jn#fl>AJpkM!?>`PS1q~GSl*_0|do=vO#jE}MFmz>B>s_Y%3*#n?aHk;$WdB60T
zi=0r%PVwJjw#0wSJ`OKEc9jBB$yU|lV?Kb#{gO}kY5&JZ;U}^$Q&oP_Pkgyw@TdHz
zSNOTF%)Uxhc{1w*e_B1sty8{j$__Ka4S$DP_6_Lh>$7j*zdxJ(IsW?$ic$I-v%Bf9
z1mZ^kvjd#_CXt(cb9OJkza{%t{`)rh_wCuYD%9SwLp{CIe|lH;=T+h_WZx|x^K&5B
z`K$25px&GPB~|8q$L6WWU-5hYek~^-P+iV`@Yozx@<Z7V6C61(DJCR0dNK5mN<=><
z|9(9CtDKH4D@tZQnf*2O_#4?z$w#%dODL*s(%L)bUTQ}vNfEYF73D4<_9Ud9n@08Q
zXML&vE&u6r{?jjJ-=lE-?d<QU$IoYfS3Ukg_KWKA5B*wybWx>!Df`Fj@lUc}R*!%B
zq<Z=@|7mA7p%OphCw|2T^yhxsU-(a7&HkmT@>kGbQo%jzqw&}N)8F`YzUDvut^f4(
z>^EfPd>=UgOX){I%lG4170fTAjO9k|3OuVu@+&E0m65v|&u~OA?DK2z=!03y>8gcw
z^!8!(wjOW(ki0>4KfeLV`Hl1=@!CYsR~reN>3NHhu$7*-841_nSt09(m-qO=Vg>nn
zqgZ}BUY^XaV9SsnG+%b$<)X^Dfpdfb$=`^V{7(9j2?=^0q8|xpn4Wj(1g}p-Ah9VJ
zQ&)ti${B2+hWUm!0^;qal6&yOZ#UzCb!q+<N<W~|Z^Z+vQWYeop@~^E3_K_2Z}ThO
zj;ALX*d2Jv--#c7dk!8%*}EwHph|x(y^W~1L-cl7z1>4^6f<QAN9pZ(>g^c49hYw^
zhKo_mClKJ7aFu(h(5R|%g5FN5x98K_DfKo+Z>QDUee`y}dV2vLj$Oq7Ur3Kz`0+*b
zxPTvDj7QPu2k?}C5I>y$5<KkSrzD>IKqRL;j1)nSl>ao2r+gYeT;gZ_^q*5tIMV~~
zr{I$Bfms-)g*0pT^+5g^0`Nu!;BEBwcJ=lSdV8mOdlw!A%0Ex(zo63JjR%3&FZw0k
zLnYozKT_y^iJpJiNO&Kfm6Ff@3T3?C$o+ts`$5Y1kdgagdj5!!@KJjHl#%dhJgae=
z|4qvHjFJ0Udj2gV;dAu-+eX6g;MuSLdAx`Y{;vP@duD+z;KlFD?^7Ao?LRPIzG&9@
zL$l5w8O6Ni8TV{(x(SyOXE!(zj$QssD4qXf{4me|1P@A&<iBjZc+2FJ(QplvR{2w-
zT>j7SlK%?*NNx7#^!yh_!dLO^>&w5yi?0d)%6xg2s{A#67_q;>gJ0=u#tY2{Wm7aQ
zl#R|YO2|o~%$aNE%)^UcUCkV2!3BXlJ&%;xy~yV2q-yeS1LeO?+25caDYM@Z+4Ak5
z@g@iFzu-~myzf%+f2AK;>U((hMdABYPUZYxD)sO5BhmQ}dj5ft@FRNuZzJKy^!z_M
zA$y~uR=qxsa5=9l@&;){4zap|U68cWC{sirjAoDvu?~h)LXFYvkk>D!%0qIBia^&%
zc}~qgC%Di*o|x^Y1B<lr^c9#NVbedI(GlBWRS*MvQWrsoibGIOQM7Fm^ZqJF%jRR+
zivZd}Y%QZh1zsRrD+20)7_$o2FX81F_N!1Uu%1B2QFJI-E*#KV9W~X)8p^zh)Jrje
zHxd&nl#X*{SWG~ttEGt=$K~f0tF-LGCri?)N+!XnOI}*XzPkjXeTeckt-gpzv|J}?
zvoI505$MYy{D5^N;V}j=6v6W*8i^S8@^KfFS2uwvt->hKITgrn5oKS9KnHh9oPVMC
zh=0DWui~D~x#tpCS;5HxuaC}bApFJW=-^X>YzdGN6J=WGY`n%>j;JIS=CKSddCn91
z9!lgBvx`q6=5zieUg^l}auXaM)FW}qAD9QRehz-T)y+NAh4%P``Zyp3v~}i9er6AN
zt<$gb)BBVZ>ddSC%ta)ZI%Bh+v6$x$I_G9T2j>Pg>vVx(zW}O2vUJXNKWAl-in_?H
zevxH{!0Y_2etxfDq0ZXxXZ1jSb@~oJeVHM_I{!vLf4RwdUEmhKz>2_-&?Rp0ODvIt
zNaqdudA(xH>#Qw))*5qQ@(9+Y2K-WM%~C=!=wgmvY*nCGbxM~R^2-E32~D7jT_0Uc
z4sz%_K4qQX8(mC{S`BTNU(8et{*sq2xX&*b9JN?<)P=5zE<{>E7uxL?G8K-_-{$9E
zZO|&PTC58vS`;>Po-Vx8FKjAyLmIC|fjV@C)D@&QIBbjXtWW~aB?vsy57QG5>wD;l
z2l6p`;!!(FPdrSYPft87Pty~RzZcLGkGB`o6A!D0=!pl=!}P@CB~4E}LMG^m$3l*t
zSm+D%#KK*oCl=)jJ+b80>4~NDJUy`hK1xq4W>3%)OVZ2eiG}5-=!xawRrJIRzeG>W
z)mPIKv+gzY#7ugco|pq~peH8pGxS7s%)c2wF#Fm46x^2Q;}LqMZNAl^bmQ1OZ@o0_
zeqt6U<8fdadn~T<)-`A5XeA5#jgY7AQ1C0_iiBf}{aX=KvIwl8{Dvl2dSQsrP?rd(
zYP55zacr))rm2=#d}$n;A8MaQ9V#@VRjp-^oZW!`n=!dMee58%#K{vjFb_0!7U#EU
zwIh&@9dS7OffME+25s;YherE(KNVIyMAREwxv<^JTPoHU)B=Y$pB7PI%Uqm^#S$i+
zxWnm85cMKfB~a=N4!mIXG>HXHIs^?r=Si=xj3d(IcJp=<I$|Yut0B26m#Jt66^<13
zQ%Pfu73)8hiL_DodR3QhpTN=<P6Jeia&B#c0bpbe)69+_QM~}9{#+6J_Vq@=?4Z|=
z3LKS6o`*{@MTDZ*eziUxOkE)({=5i5t9oZpv=?q1md9vQ6|Ft2<uxuyA67ykNN7hK
zM|u(xpilIQrB+_EWluOeFZ+C)z*CV%Fb&5laU`pc>m=1N;JUX6juL4O<`t`pOFd8a
zE`Hs*6AM{oT<ZDcR`Et^<5JIyZxwH(Ixh8m;e>c2^>L}^<xh$?QX!Xm{_2;-8>x{?
zJwN<i@kXlTQqP??^l}TNPA>J#dyaS`m2#=)jtTKbYUNVT*$d*0hVG@FUw^H5BNcI}
z=lkyvZ=@zJ^?dz(;*C_rrJi5<WAR4n;!;oXJK~L0#-*MQEnC8^liIk{^B0@N8>x;<
zJ>T3R-bj61>iNCf#2cxQOFfUB5pSd@F7<4Bxp*U0a;azHQ{s)($)%p3S=PrbkV3rF
z^NriY8!5$0J>MA>Z=@J6^_;pW-bguK>bd)k;*AvKrJfglP`r_nywo%IGvbXD<)xmr
zU+1?v-KRji_Hcs%Z7RWb7;IUAtU*-hP2NR-O?@?T71=k%&_vce(pXQk*%f92vkKgl
zvOYI8shs>oIakJ(PnbbE|3yyaYgl!Ql2=nn?Y&@2OoA5uF>dl@SsLOcS4=aF{1<?C
z{)_nG+gX-k!zpbMNEObdu)pUiZ0$?Z!GGG?N}~r0=X8`k>%#T*){E;wC?lM?XbSr(
zXxPdoejiO>SyJ?vJz<*ckvd;ks^HW)?ft}F1+lxf@npS<nG*$|^$6hcOPADO{gMu9
zHS#|M1b^bTxRN?2W@j|(TLf3W0G(9CX1)ABa@(hA2@cfmJ81g(uV~QKINn0uaDXM#
z@1SgT99uDs9T$Y<yd1VuVC}F+UD<)>1!Cfdr$so(tzT%BAIgZz*S(%v3fB$b{t!mD
zJ}ylDKcN|MDNp`i@Q6wMcku_feh+_eg%3}9oEKpoZ;Yp50?qsnkegpHpHa;J5HI9S
z{FkWtBk||Q;?Eou0=T*Sr=FjWzX}2NG}<Gu`nh$G55~edLdWjL_*^bzjc6s1SlJ~K
z?BujZV&f6sT3M`Nx$|HZ2f>`@(?&}kLnbQMbcqUkS?y6-bhnz<n+@;mvSD`W+BfXn
zgK0UoEV#}Xw!z^v{sre=zImnU4AO489Ra2s=n^6JE!!jH-{)fz;z*b6vM1ZV-M*v7
z95m4Bu`U~D=ed33D-RZ(qcp{(^Alo|Y5;|YyF`J#_Vy_BAH&ASdv!R%B>z;G&GS^D
zee)}h(Ip$saoQ>@V^byuk93IvPXXFv5ZFm;w*9Iu+vbT)`?l5QT<m0|&AMjmjV@c~
z$yEE+)vi;yc{kAfJGyM1XK?MCS6g`<ildobe}9*4^PI7L+kV$Y<RZ}guXouzPgF0n
zc^PFid;fb~HqW!;%WPi8N6qHH(q;2JC2!xn+M$e7U2=buiNH6zM1Ug!?GaGhnH>(7
zn~i_B%f>nQaG8yB9NKLBM_o3~5smhZ_p418hf>(zUJS_n;sxEge;j0K-~5IVUQ1Eu
zCXQe~r*lLcbTA3Awo6Pn$kQH^l_&XNhSLg#fi6+t*jRfMw!!kdxJiIwC*tsD${EeU
z8Guf5M%^0RumFE{b%_!O>Dr^TI)u{b*r5OtcXWxwjhIE`+as~$`Ls+FF+X`;mu+)I
zvVGfqr+Decxrdi-OqqN^myOdLzeC5#6>JuWF$(&O&=Oj+IApp+h-0zssj)GH&=^+u
zfXLZB0ik$lm#A<sxIHRcL#UkQ^-pJ{P^xE~X5u{29Y(n93%8|AHU$cJ4lkzJG*uRn
zb(*h=$U03IMP!}kZz8fz6DJW_r>TsHtkb+gMApf@7m;=Hv_)i{JYEsGCjV1J$H^BI
z(Q$IiM0A{-BoQ4ae?>&c$#oFXakAnfI!@+PM90atiRd^P8WH~{oiC!}q;o}doK&BP
z?UTk4v3(l$BDPP1P{j6WM2OfviK2+@lO%}PK5?Lqn*hyNqX?KR8LuN|CC*YKZW0--
z;K<5iI&GcA%IQ>#V*0jS#EC`h##^C|Y9sKHf_5#_qG_8p{NQe@VjMV$itUJa#XHbX
z#C4_-G@&RNcGu$oKSEOr(LSc%V*M7uAwHAIVV&#&8C`iB(Ub!;Zzh^ft1SuQjXsDs
zFo^tX@F$8WgZbCD$jQH{RmR&}WeCch#_7P5GO`%Z8lOSESSaT$9l$vcKb+YJ(eYDg
zxl20!nk|S1Dhh7?DubADf-gUUqgFY(w{#50u;5z+i2iqIG#;X_7?_X^)6LJ^aES0<
zx22jE;J>j25j){GJlCz3;k-F7#!|9#KV8#`%kX$P&~zjgE{ux<8wbV(1__#4B(PYg
zF$l3@9?<A=49u|w5j!jTIiN*;HKN=#y3<_;n0LfR|78Q%3qYqDCuv6!nhg>CdRvNV
z`5&+a5j)X)PnE`TMGcMw)0O<1;KySl_>zH&ZZbsdqqdaN#6DsRqM6w4H2eeEk*A>O
zgrN{N+X95f;<dI~ldw>0ORb!SmL_b_)@f+JPW4kWBv5-WCF|sJz06huv=BYPAZF3!
zT6~i3bmz^5<~V#;Tx9cl2XKe7Y%w$p-`+h1-(m|w4}docCd{;VyMm^rSdPy)2kV&}
zeODl$`aT~U$yW~0B!XH_q*Tix(tpmDZd!OhV+$g7(l4ip#l5AoWaUpHND?$U-;Ry)
zD|m8&%R$J_W0Hx6Lxlf(TdHZo|D7#}*a^RW44<aJiD3x+QQ8Yt9X`Q#nFblq*E2J2
zZb(Uc8wTjx7>q!IH)B;3xblb)2{U3bu;|juU1$p;c1ElkyMXVwOyO2OY)i(Cl6)M&
z)cC`(@nH2pmD|Q1AfxTjIM``RJ3S6|*n(&#zlHy#T`*z8EkI~29<?3N(gow)HM8e}
zb>68nIYZJ#9qZ(VWo)HD3sQ<fSh!)<UTohXbFZE`FkcxL=@9w~Y!D2M$d`9d$e*w!
zr0r~A$%u0r7YX5NBz(}xB;&hdBV*q{I#Ki63{ml2-Ba=Hwji`dd5d7gO#8GwC$PhG
zZ0vY|)L)2=)QblA%Nx}~*m{57mPUHif6f*}>|~yQ3c->9jlUBcjTa2iSHHpp{<bZ3
zG=cx#7DO|FEsU$S&q60zfY4Yx&K;TgSjHl?<u$<TP59E)OvK?s#?xCoppN#1`Mn;k
zcIghUVGtH()K>d1x{tm=gvnNbez(O)KmO<uH5k(Sw{%ax{k9;qr0x+cm}$L#wcH6y
z6Y8<Do2JDBTE-CHHZ|?;OJXDbW`s2mJ1^iE0)prg30lbzNQ4;jfGst(0(+q?h-QXZ
zXdkV>#IUjep|KDO%mReQLiorQAT$;)v9$+sn#23|XK$Kwxn}|1IYS~(-Rm^jd7G_7
zYN38JgRs!j){~uehg@3r<?p0K9E1@o8J~@dir#w6d#L>c9ZWJ$$cL5qr@JTbuiKK>
z)(CEYLH2@^!RHm|20pg$xR(!KGLjcg&<BOcoqSHfMt&nUYHuGnm%WexK74%w<C7qK
z5)vQ8<?s!ND39}N-4p*=TM$}FeO2&prY-0`eBkIPK8b<ID8AW>{YSW7nvSZ`p;d>@
z_49!n9QDBWG1NWTL6*&5JTq=#NX>Zr1~R2YE<wm86mkiLTtXp-NiTi8BO!0$3=f{G
zfMAy%<d6T?^6z@hKQIY*YdI;}SxAR-T5@cAY#h7Z;278fbP_4LNTnl>uI-*jTWvwa
zKE{Sf6GHQ0hZj!G@VCX)HRi|0jt#$f>=>IMx&U=#>{xJgJufz14Y5Lm0;G*+60L+d
z+>tm_J(G9@|H(1|twg$dCOoe0wk5c>`G;&l#Llz5#4|c;Xflm<x#MPPmoC_qpKna@
zrv|xbka1J7F>Wt24!8w42iy`qZk&T-%k=jGe2a*EJ$YNwYwk_jf@tQRh4-!}0K&1c
z0HLw?M0?w6?_e6!Q(VE}M21z~9Gjr5H)p13KhZkM@{BDjwKTkeLA3PWTSlpD{Y%`Y
zij%0)vs7n<_{*cmbK?~k(cs{K{EgV?ylo(zD#B3_PNnoi5`+pyBv7eF1&Tk}J;gt6
z3qni&M{Ggp@hA8`1LMyEgvLV59xXs<T0CRx<jF7qpPip}7{FHiqmSXw!N-edB1TJn
z=``p6Z(G^XI^(}=L1?c1z!rq$8ecpxZLV3Hgy~&kaN`WIlRDXnor7qr%W2Ye45Fn8
zXnj({nw;y@Z3LM*-zY=#9!!6N`+A-i7Znl0A;nL(A;|V=qC=MoMtIBJllM@2^3J%0
z?Wc((?G~&|V5?-1ruo=tx@>?ZjI>oyHXDkdPj*krj4cSQcv7|?w9yg_?aF8!WGq^;
z-g;myR~{9nfZ-AK3|gHDGZWHF-U|3q;^S{L_lzD&Z?L7jHat%YvbECttu>Xcx$f6H
z5JURuld(~AnX&IMnwB5$o|Yf61);~%2L(H3I=H!c%;jtToO&7GMi*j5%0+(0$6O!$
z>)3d(Wk6mwn5dUkkdk9!5{r;}`%7DTYVrPaTM)6c<huLl8u|!si0cHT)(NZ${7-DG
zxqhHd*hFwe%-*ETgpK)+Z0W06^q;mMnptFFKC}fAde8!d#zI&i3lJI$;Wt`<&{%A<
zC8wMQ@O59U%)!i?*T}2GMwZNsRi(ak^7ijSTU~nlcQA;S-u}!JZP5{|1kr_p0rfB*
z7uB#WX+kv^Qqsxp>GxoJ`VHov!9h0MnJDg>)Mx$W?TGTOM83`NF@T!JaXqoJ&0^An
z9r*lF=7$=CqjViS<}&!U#Hbg(Y@Sks7sGRk-2Ea>4O5D~UY_0pH|W0-pSA9j7jDw6
zv2-ouVE!Uu|I_sIYWjJKeqKvIPvgh+7Wp5V!(G5V=~S7|Cwt58mc||DW$9!GJ{yO-
z-p6r2?ZRv>gX>0dRl!o(mQ29Kzv3gKD18h=L|m33zl+$5OEWbwJbG1a<(~l}xEX?O
z8f_eVzPC_buIU{frsc@tY-!3J#<xF9#bJChL0wL&{w8Wu<-NnW8FUzDZSiT#VNrWn
z-!U)vae*2c&p(bo@}7g4<aGX3fXhs7zRjPwB)-tV{50=_ha|Z9*Nckz58!Y9L-g|z
z{J8m_#qY7X`JcldZ~h2AOwh=`5ziO%Z^G}B`8V_PTkwmIbiI{d-iBXX#Q6^V$$uO_
z_53^Wd+a6ocTvjE(+^)7F)Ngi{R(tr;oWt783)&?PNO5A(;dlPk&cXd{OyWYHd3lf
zUjj<0K*!dN;@VYQ(2Q+q`pO=<fOk4Q{j%<9`HJ)u8p{7*2g$1Xpa?xTeYu0P<p(cJ
zA^sW(+1KgkoAmQ7`~)R=xe9vlHCNLm(LVs5l<M<WibVX`6Y789^C^^|KgnW}<oiU3
zf2W@xgs8FjlskcIkm-=<bR^}!G#OrdrN|KYTnzO-_;nacF~7|a_z(hHz+kTN<pa)*
z`2Gxm41AD9e#eH=mqGXY1_5(Wh7l+%uXPLok@qcz(&@eieC~(RgP)F2HxyEi`9X#R
zUmX}q<vacG;lvH$8L}g<-1E}v@_AXt`ct<}RFE@q@s(KMurmUO*7xsurFhXwh|ehT
z7k(6q+8i$I!-!c#KfUzRM?d}avz&fb($8x8SxZ0b>1QMTTunb)@Do%!efP3&fMdb<
zQp07AwZXhYzy=r?8`bT2l<MbA(c{iylBMTq!eg}nq33BYBF$iPAC$&I%saZm;?{1k
zfRDzPG|%2_u}|(J2;a<e5)7Y-KrD5r)0FXE5-uCo>7d8+7(~k{<IIO$mpwOE#3#rw
ztkP$AWSKF)Qe4FImJf_`yEtqw+YL=13*A#QXA43P#|goZnGU>0AAosXZ1i3{(E0$(
zQ?^vnV(Zz0XeP9U($acQ3?2&*8jHJaJ0hcGd_Vl`>Ag;O&Hw%k2^4j!llJ>vTheJU
z`fUa=i`sA1Y3w+?KUJu^PH7_Qvi@(!ML=&gUpaD?+D?=v5}6{th?EWo(*M4Ds{WlV
z2t6#mE*R5F3)(ND-cvd!$?m+MRKb@OP4m;YbY^UKNP4k|nk}7^G*6u4hC}veF<S4^
znlEG!vnbE2Pq`v?hWkU(rAh`L0%^KKXJ>3QT{D1<eEjVfTp&V?C$Ov+vCm^i_jJA9
z7KE1Q0l}J95^cMRy@KzFl$Ufm$6S0D$&~05u~C2J0N)QOZ|UUExQ3O<aa+1+6@Ane
zMC_zr4r;6GQNxt4#76lQ1GKZeJ>g5XRMUhn*n)_i@Eg>wZ71c7(0v|cOHcDrF;n(m
z9~%d7M`~SsfeMFd_(l=3sI}<BYOk}Uqh`fZwjg3>MK64r99CTDbCo9TKM@=4mkhv#
zQB8(y=*Mg+rHTDvTM)4md(r)=N-jm83pYvqY;2@n3{uMmLxldSEtNE(zhVobna~y!
zFg=G8E|UcajfHSlEkI~2#6-jbgvR2twqCcKN%CjDW^X3h?vr8H^v{eRPF?CWi@X|b
zb?J3)U=XwDb@v~|Cy)55zOd%KGcMYB%La16W<yHhw(e<pi!BH}5cUgpwDPpA=Z?L&
z(uzK`Lo1M`0#3z7@g;Ptm1;6X?U&e+N~_=p1gTn$`k9aZuDBQOS`GjCewfg;>Mx6p
zlq+$qy5DlEo7JD_o}!Q1g3$7NUNEJV{MybGm#Qm}!gH0MkB#j8ei*pL4DlVd^wL87
zR$CCwB)2fX+JcLrWC22B(Lr(9GJfT#dyYRRQRPGJp%}rR#>V|s14Z{7e@CL4pu+>0
zw?@Qg{@9j(S_J;k7Q|%}-`Z*{rYONFd|*3hH2xztqW5xmpu#PNY{vI(38iWMuMEP%
z+p#9$s)O}fX$qD%O{yz`m}{5C<S!y<o>Fa-^d?%6brlfk(urKoAX<{O<=$Out#G7X
ztK&9>L+)9(P%4Km`oAeQnywm{;HGiKg>E_|se8L8=`LFkS}P=ML1@Du7~7R$Sjt$;
zxCrnRj8qdoaO0MP`pHF;GqH^!GzG&nLJcIiVbpAh_2afg*GejB3qrHL1JSLu*;;I$
z!j^8noe&><5SpzieD-8))L%D%EmW#`eD%R^KE#Dr*pg6l;U^hHOPx0J(~AYX^E@y+
zdrxenTsVLYf0c*}aetwE%DvMTgqGj83F6Q6G-BZ?mp+>ipz$BXM&ll=@o{q@@%%ko
z3Tg5D9a|9b6Z!D@GCsx-Ao9P&NMu(u7b5aM*-}Uo`Tw&85j&CRAHoOj0wi9sJT9ZR
z0N1dgu@Hg#(PEd5;}TmC%>=e^QM8vMRJ{cVjfF6{79cbhVs2sqLSxZk5^inwDP{}3
zNpUYsVuH@r@z~^!W45B%7PIf8w&J6Q_z?y%i)McH$@+Lf&IYmio8k|!2S#!sHj1tp
zD0AaH9mEZ#sRSLH3y<tv_jH}G1)-%mEm$+tPJkmAFnqF-JDbA&q%<u*naWk@3fUuk
ziqH&@KNTA@wkl?n1tQFpG7!OSCCrzI*@b6IRW0xrZ9&A&n5}IXlPZS3aQ@-gIJ2!C
zXK+Oi9k>Zu!w=ZfRkP-Owjg3>&Ega1inxM4n=1!2)mLI;LGM7xZ!tvbFWb^dlln`x
zAeu>SVXw8x7skf|gvLUcd<zg73$X-j0YYQ3);2UtSl|TARxEb6w81T7N7nw#iep8H
zmvcNfmBTV#Xi;>-ikWexsaKtr@YkZPE}iIA45B6ZW<FA}4KqA9Eh*<rlq!6!?ZHAh
zo5EJwf{V+(18U-yxajE(3}E)>qmlqBd{=FXP{GDpfl5e!?C+lDdu&1IF*7XKHq-9S
zwI@q(FE2QUGr3w7?BK5xI^Y;mb2Z{mDU}JZ=YiPRbKQWv0oo;G)Ta^?;29%B93o^w
z40@q0b+v-O&lbdGGss%|Y&evgkjJ2L?Q_YYuZ<lV9UD755@5>{v9V?2Kt^LgcMQ_^
z$6B4Kc+{4VniuC8#4IYPKFn7urLz$q1bu64L|sZdjC7+RnSN9Ebo@D65L%{RFIX|t
zN@w}KxhmhpHR0kIIgU02B>A(k5q-tLlxR5NHyk4Tr){aG1^Cx(K{ONI!pYKpnixhF
zAT$;+*_?GJa5H?xIm2F6p@moVudzwN`hgO)pWya!Nw)UtLc;LRww%<$@Q=12n%Q8%
zNi7V*>9YW#u~=@~5$UvVn_Z`U$%wdf(HS{@G@xDvSI&&PPW|cRu3v|?x^&mKF^E~T
zhKt576iel5E~u36j*Duz=&Y(542{1--P7-&EeI|7cM2BFv=v-}FMy>hIdP+y8AQy-
zM(aNM>X+YUh}@I5w9@J>V+$g7a`)ej3))fz_|M@f{HtT5__6`I7cNzR(=3_|5&e=a
z#Wc}hWeXy9qAwaLP2t*|Oi-D8Fg9{8#-0z^V2IGaVoN1W=wGr05kH~FT-P~RsFnh@
z?oVSRbk)W8wWz@mq5s&HN}AArXbYm5&=xL__L_w4wE&^9xW=|4(rX%+U9V}WyaNlL
z3LCEnzaYG1)y()!)T2&*(;~FhrQfuGL0oaa>4vzd*4A&@-aY-UwFRMNf2&}@tocp%
z#zyN7e$(@8X{8n3-L@cNCwDu)sT>={JNr#jwiMGu&)b5Co#@ei)6=n$yPe<k8e1x9
zLciJ;M2v(U%zuw8QJ<U-@WNEUdHOh0JO7VVs;7{{Ct*^B&_&n`V>Me#2iGGMC*4G$
zG&zaAPXSoJDLF^?W_w$1t=7lWQ<+;Ij;i-?BhS}re+pHiuhky(=AW;)6Af=(wT7Fg
zd-0nP5OHDhkI@3IIi540|IFn-;#S5{zLarP+;U8vtB+5|wec45XK{)k!js-Yv|q2}
z8u^el_qO6BCr@>FeT{oa7e|<s33-ekVQf;--EGk&CXyDh588r=QN)CVEsAu_zXN<{
z;?zNy0SKtHbj`nQOC?R{zqbX^Oz7zdpOhHwnhW>N0))n5u5Cx8YwlpAwe&A%eiuT&
za?Rz%zGlSe+SM~7Ow^@LzWG+P)unH~g+a8W-OO)6h>mHF#6`8XzWH6<)9(&j5L)<e
z6)c!F-+UrAT6gfx)3&tI8t-9S5V4cHoo{|IHi~!l&0lFtF-`QB+k%Ll=+XB4eX)_d
zojrfAEtNE(-)#$`na~!-Sle@95-dPyEH>G8MB4MAF6{a1`{rCVhyKZrr^xT)$Zx2;
z9orToGkEr}#5e5NC~R8wZ_SWMQO7!2^>5e`PYcr57{nE~>hspjj4u?TT3f3=2d#GL
z75%p@3-l29FTsLYv+CE!M(Yk%eV}`CJGLNVCwDumel#|Uced(BY$>L7#E313*oht;
zaVx||?sgHkoGq0!p(kuX#7JlvaqB-=nXJ<#9My2l?J1^r{?nM62R}o`mU0n}(l}LI
zFC8$GZ;(79o9nIgV{5AHWyI6+zmN91iKY?SGZ9S-+njX+DMc-gr=eE~ra&l$=Gk&w
z3(ZAa5HSi(D_Q6v{-!d)z3IPWio%M3D4^(UNWyPTn}pGE)vzQi;!l%Pk3+2g&1p9(
zL1@<hhAoH~S$`S&;@_Cz(~^-Na+Oq`)x{N&5kfj1ZLu~&TSQ9Czu2-{OUysng1Bsn
zu{bi(aZ%^mwKO}JmcZP|Rj#DK5Yq7o%<8~m4H=h6aoNfUbhSRSg+a{X?67Byzc_ho
zz*jgedHF;53XkLKum6R=SS|aJ_!G5ucDd@g2dgghh0CyZet!4F8?^<Y$J#ML|Cyc|
zt{N%i;L1586&GK<t>v&IEJ*Qlu~B^0K$_c5q;=b2>ep;Zr#0P6Z9&9N{cVc+F0R{{
z$ffCm0^GBeB~IW4M^%H&cw=nL*yb}sqe6FX8K{JL^Ru>u)x2rgf{2|r_&yAO@peQL
z#JS(C2sVW{^QqW4<4DDnNNYqAP*gr5VZQvDEm1XJe$^I4?0o5$V}_4&Hz}*H$Hs+z
zH9q*fQN&#xe`8B9P4mC91ra;Vm(Z;#$5Z2OvvruaF0Nqh625z}z-@*ld=A>}He5SX
z)V5gkFxE{N3kwjM=P?D1qnF9{#K!P;%VfjdvwNp4h-N}t@Jh2=tg%>t&{#ZcyUZY$
z$*za5+|rGYaoY>7QpHEl0^WRnhJ=Z_)M<fi(w6^PKW7+3OWMuWwwH@>QLXI)*(<xJ
z-^*=5XyN|}!Gf8d1+_fN_rBO@-C=?3y|%Q{;`(k|5V4cH-2&N{VxxHH1+p*NQcM&5
z3$`F)CwlY(+4o{2ce@3$@7hvH6Z$*0AYvr6j9#uKZ<(&mcGO|U@Iu*|_3h%AYtB^9
zJoX6wr|~~km@HLtwQO*6$<+)%Mm4YTmr5cl&c?zCb!aAHoFQB8?bNrhD|+%$8oHVQ
zjS`>{4l*hlg%(#<GGblDK9|{oh+o#)Eymu%BGM{WzCt);PQ{(V-8pm}WxzK(!Ih<a
zZPN0^UYt>BHe`!B5|3;-O$#o9Cb+4}r%6bj4%-TY)?LrF1rfhIwLVVsC<}z8H2ox3
z{@)=@)RB0kX-i-=<}zgIysaQ;S*qKDh+mf4>8AIyK(vykUa6ZVn<k7O<62UTRyQjp
zl%5T3M5xCjKO3U85m6zehJM+W?^<-;V+$fi(P?+&>Kl^#-7fxxU5s|Ir?1&kNfY{6
zTM*5Jwg?>Q*pmofSb)%2q->pT8GG7$g<?<QUdn)fvth%`M6RhzonlXG(N>qy>QxNl
zipQRAiHmA&V^90Lr{5l15L)<$1q)^^_Vhq(wC)gldZ8_?w8p#77DVjiZWnucA~uS5
zjy*kUOEFFK^R^&jCwg@3=^e3=yIt(*t+rIsgnpAPi1-N|c~<?mV<dFzv+AF<rIIG}
zr)@zr6WYS-(T<a_y%r!e7RzlrA|0n)SIBX~XX9%1;N@>WnjvALE_HI8{?nFhT7>?C
zL0oaiY177;aW_L$YwI|zN2^^ro@;DDXyISUAX+Xh+kO_d<)Yo4vC+DN<8+%Xt+cq_
zVhbX6a<_AwQn69Iv*Yv<TZ(C-KVS<YcA`gb!uhG#$lWdw@-ka0X+l3?3!<6O7RFfH
zb72xJKxiz!Z)=#OJ>NIG_I$ZIqF!^S$_4B)4unE}V}`_uI@QUdf6`V0v=DuqL0oZ*
z{%l-SYirTJ+CBZgVhcix|Ca>|W-S!*<Jf53!J_{^TUu#x{h=+0*vZ|_qHo<aGyZBw
zC*Y&%oo>|Lg0{Q#S~uB(h@I%sp^!tdk-J?e<e)8;v~=HT3nG3(M}|TsV<dFzP)Np>
zN}A9qTM*5Jw(xtj>m+Qi1qhABM{M<>be*o5UDv74cb%%a;GLjvn;}u64s~*y-fYW#
zEkMsOh%4?keL60xwRM|*y?gq7!WM)U{f`M2%$nQujo4`2!EO4QEv>Y;K5Gjic5=6K
zo916VGj3BzCtQZxbQRj}(rx<j|5~C)yG`3;BX>Ku>DulIz10>(jM9A>*L6IP>D_AA
z)}k6rWav(p=Sv<nUGJmH&c=={LVG55Y=uW<^YuQ|tLQ5j?zZK)R*8pfLBuFD?e=Ru
zE;--reyuRs+l46~v89qG^f_A)&4jjal(nxd95xFO8jCmB>T~I9@4iC5_9LZYFhu#W
z84@MxP$yse!?xVl0`vg}am9V@KZ}cMZGG)O>7IUnWD7!z{vQYy%$l$LgV<=@!Pox3
zwzSgX`fs)%VkdVyUwh-`nenwlI^i;W?R99oOJ94nEr{5O9_?%25gWPN`P#SIQb|kq
z&9)$7By`7n&K_oJxAe5hK!!Z+Ny(umPg|9p4NsfUo(WGoJSNu!&el+$qW$cLY`Luk
z=Eb%kuB5;`&CG8lFiThn#Id%(+V2~=nmkdn#y?SG6rT;TA>`u`8+<I>_?i)mjif^8
zM9ph#*{&t$)wUq6q~v^_MWB=96iTV!U9Eq})mljo6`u{sA>?OKa+nGs$@!cu+qL9;
z#umhtl$`%$5ojejeXK-M<#Gk*ivvn$&KBXhv7uTUR64T!Y{(9wACK&82x}chhmi36
zhb`x|@O<AE#FZ4Doh$^cghv^yyqgZ*8MN1woshwz;<F(-gnT@r6KSxR3L(ka!ANv<
zv%&SYAg-k3Bv}MnNzPJMJ5V{5N-h)BI}=<{nyhs}y`w73hV)Pe;*p+>Va2057Cu7!
zpe^&Y=6R7Vh$|^SuVXQ2B|k#*L>zp0hO0$8Jfiq)$POVNkL*Nf9!Z6e=6TAN?OJj?
zTM$=La(;(Jpq1qG%2`wMHFsa+T2gTItp&RDY{(6v9*^9t3+tSUOEd_H&2QQAT#L<b
z+JcBtY}&1X{ZR70+cmIoK&0Io*uUFSNfY{ewji1bZLxr**TBR=iUkOb#rtf7+j0%;
z+Sy$L>mNx~)2WQ>97^F5qGDj)wCkFgiFi|&I<0~w&{mfb?i(1y6<-BA5f|0ku7Vx!
zo_<GdL1^JWB3LkMt6-JbXx(8ItYk|ot?>%BAYvzXkNn1cKpDI~Hc~HA20d)SUuR1r
zP3EU;LBvkx1xIoPH+b0j6R{C_;lKp97IKn4W=kJU;t$(`h@HgI=NX@kjmqtuq_5gi
zNfY`jwji1bZQ<c)CrQ{@3lJKM?Y13}PEulaoumyTrQ$?xvR>hDq&PHgog<~nR4N!N
zT;<G+zeK(3<S#8pTV47~OBuv0`b#~B&!=!6G#Dh?6Bp6EMFXyEFQoK_yQkhxTM&8_
z><|oS<t<r!&rD1WBklKnG16JCd4}!xDO)0Gop(YI=`}6Bi9PeT;J4cYRF92_osTJ2
zx~FBy7KE1Bf?!80nYF!KV{pu^)pEtjDz5r1xMx%NL|Colq>2}u49`m)tm;ixQd2_#
zpY-QqW5*!Af+P^a<-7u+M6HwnLJ5ITLLwBF`PbVLS<C$EY(d1%r;YcN&N(V%kgMXx
z@nVgx9(OZA&is08oY^>l5BetLDY-<hn$ReOdGQHbLTX-o%oarKyjVlLpr~%uNmX2j
z_6jt!;cKz6VGXl^TTh_%glIj?foE;Wr#bLdTM)5xU<+|T^xR-X#XXyI&o#5+s;x0O
zhu#)ug+L>rIik=A^W?|21l2tGf3_fE=SkD3zyX<JGb^r*jTOzKLbM*{z*b<;rT4zY
z7DVhE;87uZ-f>ji9UCjes1Rse)~GmSOHe&34%&i<ohNG#jgE~S9&vEdxigh2rY7Af
zeDpJDv-7d>V(mbtSgpEg`szbMHy<7slePrZJjmFBh@A)PgZ8>yA1~yp*=FVR>e#rj
zzR6_!2!#1?$(D$k53jNX(aZ;nK$DJDiP@tC2#rODS-S0vCnEa$8?mvzW%T!xwp`MT
z{<tlO*h#!7@=BJ!jg89fqQ8G_OC?R{zqAF>OlXVYphuL58d`wRSoGRDk23nZb9SS@
zD^HdRx%7pWVc&JzX2!FpZgmR#u0~s3I*uzC#FY;F-V_(n+J$}hc2B)swji|lCj<jp
zh0ta;?E9h^>D)5xd%rD_w6Yr$MEc(m_Pr1r5j%%{&vsACsx1gDvt_}KRx)er1T{_8
zqe573j*a%sll4|1tY>V=r=|G~wjg5Xz;r@bzZn}VrX9li4O@b0o_x|4MC?4doXPq(
zW8=kTPuBm|mVlZEe{BmQb{_0Lopp^!iBp<z5JJJ~RJv5jRGsk)P7MWgIHeMdr7ReT
z$tU!751?Tqh>|ExBoJM}G8JQ%7{8F90y@%C2~Y3m0=q7~$p86Y%ei$FW<mGGs>q~U
zbg^xtIm$8^8-Lbul!e;obrHY)Fc+@to(tP-LBu|Onk;)%82(snJZQG;t-|p4*pg3c
zu*0?>V&}jRjf0F^%%uvXBi!@3YRxUCU0;XMqM<LILG@LPjWt6&JR;EY6&S51`e=nm
z%^6#QYo29oLB!6p=`5YRHZ~qjd+Fq7YzeA)^3%2;V&};<G>-gOxv`>Ebt`9^?aD`E
zW6Cu=aC|(BB`twRc%*#DmZX|1@3#ff%oU4xp$<8USbzlxjYWr;i|zb1B8dNYu}MJ7
zApX~FxuhBWH?|;RCvkKTf8n)p`Pc1&`18<emwxjcTM*5Jwiph2M2Q%%1qh8rzwHD-
z2J!dLn=_|n5W3~ZyR3tw+m04%E_M*oCPU|3u9kID&S(yM*Juhi>elWVyEm}4@Xi?$
zFzRNfp#E*PGNH%sEexV1J!gKG?55+XdNG~lS+F1<?*&ZdFx?6e@}am0>0LcgU>tb9
zTXbvL>J)DV6gY(Te80GRD!;%MgdR4h1*2v<kh<Y$5r^js1?I=eid%7CTF+H;wWjk$
zKM@-<HV)(j2F#6e0D}-K9=D~V7WhYOLB!6A0d-i!H3!GZV<Te&yLUU8N)A_r1V+fa
zVq?m+1K1qP2UlEkkd)7)tBKva6B3sYd){tKTg{%g*n)_iJu6P)ekcr$QjyuytoJ`3
z8#7i8(9KlbGBX3}D(tg=&X#VP^q;W>5j*L(>5(B!#`dan`uLcWb}O~qL@wR@p}23y
z#)|=CU`WeRP1Fk5Om3hO8W(?WOIgjFzq17qJ9Aba%w*sbVGB7kBIDFCuMFs^zUyYj
z=MK3<-kO0_CX+}d{Kga9c!&XufkBu4_d;6`u`^)kez%gFP|m1>!xgD?+O1Y|<2Y@Y
zDrTH&7J-Odt?E<@rCRXZ@NjIb86JSS0$K?<OmN^rqlNP@nFOJg09pxwR)}dkZ7Hrt
z%??`-u`_MMaYR*>A%QxZa?{yVF;|@m^5;}+{Mk5wO{6ttP!iRIfkB8BCv54cS#jJJ
zM2xJEw;T6r^AgZobtZoPnFW}M^%vk1S5k#!6;r?BWaH_^j+ZqaZw%(Yi+S2Z4RL;Q
zr8-?iGm3Fs>oyrYvibxAlou>*zEz$CyY=C4HFeX{W2ljjypzZ4Q3uIV`5y}$=FDeQ
z=JKC<{+&za%o)wUi+_KB5_#&+OkAxL*29|(vl#A7*juSECSBbKSh58XqdW;IxM8H?
z!XtrA9FbS#$bEpdY^p}qvFcnX)hkZ32l-y~s5(9!qIipP2u@UrsY2sPZ(+rqs8@20
ze3(5q4x||+SW3m6GH*@9@K4pqW>yn~QX<l|e77y7_27S(Er{5eb@dp|`G8fYU8v(1
z({1G(;}LFVKpT89Huh{Dpmjzt2ea-P$LAA-gtVOD(enjcYHEgj-WEjc4B3u=L>afE
zvTfwm_)HF46l#SFj+}W#@aDU*@n(?16NC?2N?x5;_#{e2P81GKm`&fYrLktyw{1bh
z&ZgdD2!9q*<8C47u&lg3E+w{P0Mt*&CPN;|GPK*Jhu>!lB6eagIg*2pcZ#Lvu-yLG
zsNIKaf6!(^v>77z9$Q*z*&en9(M)cO)d;<yA>!W_AT$>HZKvjPL1PE`X07%s&-{YM
z>d=D5=-8ovrJI@|siKZ`TEfWNN`V%nNe0o9f-}E_vGu+xEe3&XP70H4TrrWGN>#A2
zucSP_06D$5$mwkxs1qiMViiFU%&&2`1Y<%sPDn>DY?dx|Pw`jUg3yEJ<$`H5y__-7
z#2TC(Efq6unDc?ym~(A2b9`LdvgduawABORy|y5l*<+y=wPqE=(gK9WB4gVTsabEF
zUCp}W`So1-j5AhCRf6|>{lg3i8TF@=Lj9I4&9wY{gF(!qLS3Z-Fr-%Hq&c8M7jB;!
zuQEhHZ?zw}AVu0zY0d)zUAmWZY(ePp@ZW+lGp#h&lSfcVrS%qvC?4#HjRzYr$MO*n
zQ{R@1xZakETD%8rLB!68WrtjN-82Y9#3(QZj>ks-<pUYnZbF2G!cN0cTbgOIAF%}y
zJK5J!42Y=yA_~hL$yH=1C_w&FY~)|h;U7{z9D|#n_Bjd^W<$Z2hMEmITM)6cVbw_1
zO`jn?&<UASZna(rn$g$A#sXLY*)~UX@L2$AJ2dNk%9eJT{GKg{*va2J>YlH`d2!3Z
zh|b4iqxzD8BAQI#bOD+S5&Ofol+wihfGvn-Vq18z+7TA+lm!Tl#n)_|I_U`CGP{m&
z-zmPy%(<sjIujJ8f1V*>q7HTPg#Xc&`&xkhfkDioC%ja7!hB(HzyS3P&WsNnBAwUo
z`@o{r&`?~Arn~fh7utf*gJ2$mXc-W*-HN~T-c+%U=&F#}0Lh1ABsp%gLaR8uM0fs$
zwck!#dTHU^VGAO5l1JX>d@43#x4F;xge{FUnUC9oXeP6Th0sPuXetX38jEk)>Pu;4
zZkSyo<AmbaDQ66E*xE>{l1Vf#u3wrV>7q_{GCZ%cl?W|VKgA$s(ePa6KJfR(MMiI0
z`@rAbJ%!(83qlW=w+klCd^iTDT(PfJ+!R344BLb&dV`xPzZe@Q5RQ=u@MI`W!wK6*
z2!W7i@C92cYEl2ZEr?lQL@`&xDd^lIVn;q}7a~W%N%(G@jPMa)R#Zv7F#;h*e8-lG
zni1c&1ra+VoH5$LN>KsoJa$Xcj!`F9oZwGsU`Kv{AuD&xjH4V<_1@M2-m^;AWbmjE
zTUQe%A|b{s12$dy&V9BZ;%AJ%i<QR)V)x7*V=L(^8njI^&-)Me$H*9eGb@h~#U2BZ
z5M%b(QdN(bVOtO}GN!|x))z7l@{eO<k;Mkqq~suf5WUL{toe(;;j;Ix65cbhcQrhy
zr@MFcK3k@1xjAJEB1XCCZtv<vDHxGkl_U2jNAFz?v!}bgtFN@Bv}V@JZ9&A&tbypg
ztE`Gi6Ne^2?~9E~*S6Tg>U%8FTZ`XoOIyvJciV!9ojo+A@^`ZOObKoK{!(mA;VG5B
zceMj6zGzEF&5AGBf@o%iMHoXzLd4YB0))omWwxHMjD!r%ZX{%5C=xPOnxKmb&h7~~
z#yvO8jAKmQ>l6c-kG8sWd#_>;vls(efdR{B;iJiSeO%=8R{Ce)t6&@sVSsTVe|4aH
ziaNF+^w8KWm@;!Qj}HFoQ6{>rzj~5u&&+|V>G`XK_e}V!p|R#o*Izxtm`vwbkrX|x
z*hg$Z#3(nyU)|C9td$(h0ZsUbl#6cN)i8H%xQwG#a*&6I_&HlTYgW~4LB!6g%`LoD
zVX6Y`c}r~U+0x2S6?!+!k~iAYQ?uk}Z9&A(l7NRQ7~#;tp0Qe~5<I&4nHX7Op0JW*
zgRh~jG8Q32_$ga@YL@((Er@28Sh$(mQxy)51qhABk8NFU>8Wm+T~Bpu$WuL?P2pSS
z&PbtD&xEE%Kb#?<qh5A$SpVHtB(zk0k3r0$!@BWc8n-p!HdYFatBZo}EoJIWpGsbL
z<IFhzAv$`S22uhAUY}6+15F7OLL+xI@aS?<u)-FE9y9$6V#fE8Y@{Q^YWHFrX51Ph
zGw1*@Z6u`?icZY9*_M)8;P=^rh>;m`KCwy8<%l742a4KPMehM$;~{2;?F1tunK}Cb
zal(5hCK%x{J)~x%BuR8p3yx6nU10PsH|A3~Pu*}48s;yy6$>p{FR%p>zho^GN6Z33
z^fN35wnFrJu6-qDsf2fZTuh~|qw|Ykb&(F=%L5>kM7Bj*>E=x}qTADPV4|b`VHvzr
z9-a$}8y}t%So*?<<Bp{9aG3>siRei4PumKVmdPh=K{U(cbO<H~mv$P3lVJfuWAR;E
zS4TLFb#Ga%luj1wQ%USospN1~Bwd7a08ZAih50?=&rS4aQT{smvp9b>{kbZ?nf~<T
zZ>B$U^TYIKUVc0MS)9L>{;bY#r9VCSZS-ehen7lA^k+eSi2f|kUr&E}^Ly#f!u&3g
zw@<uXLw|bmyXjAV{#uck5O4IEv}4QodKCPj!^vo!PK2QXZHhfMKTpd~08P_+fF`j#
zwxI6yQ+IKC6FnYxE7V(&1f^&sEk~(Z#dVXpV!BYzFjcs#4}mxrm*9-|Pt(t<>E|i>
zc`f}sO+O!?pAXT`N9gBE^z$|P`8xf4lYYKMKi{XHf2W@x(9gm?{4AoMUi#^ypMLsT
zPCqN@XEpt-rJwcmvypzTrk^eNajV|)i5!MZvQ|n~-0^y@kYQF5wod_TV$^FGZT&|0
z>o@9%exn}gH|m;xqdw|4>a2dFUh6mNzJ4P*=r<yWek020HzJXKBU<S<BAR|9>ghKk
zqkbcL>Ng^+ej^I&HzKuuBbw_sBEEhjF6cL6hkhfz=r>}Jej`rlH)5IpR`-@p7E0sb
z91C5w@l?ZGA*9jG1X6o5r77HOn@QDD#9Z&HH2+yrDV1u;>V>KCQla6kua>j9;`t#_
zwmOs^^0O9>i8B6;SG1R7)a#@B<=_z<950=98~XjZZlQDz?+bVn86K8o+;kyD7bs(&
z&ZyUuDW!|4DO3>`RC&vC)l;rn=AySEna)BMD{e74ej&-FG3HhWQWY2)jLB57RP=K}
ziu$<MQyS01lF?|*?msrC?k%PZ)+XJmTjT!s$X9;p+cmU%XjdXtC}&f98Z=<vflhjh
zN4Uxusyq$K_2EW4y8jb*4!W5}p0(2a(d+?l3$8$PGuV*i$P$hTZ>UkjCYb!Dopa`d
zV6gU@E{uNJis(V6@%jUEu9`#tgu)vpl>Shl-V&)>9f5Q0LK)NVYAsW$*TiLkHEi^&
z3^}Kf;gEI^7b2Za73wHBoN><%i_*R1R;zbZ!QQMQ0OfF(@VHCYTxFbbz?@25po>eK
zbEV1|+>}r%yA@pJ15#B>Q*JNpyIbAqxI>de&bh2xbSm{CAH}N|freAPfWtvknE(Zw
zd!J|Z{?Spdw@|{&CsmmQySzW?uKz$LhfAul-K$<eKV*LpsH$NjB);j?%ajQdg-K`<
zMZn3Fd>ZsN(*SgvHVv92kuBSsN4-VqsZ1h^LpKfYXj_rI)fqWBHgfRL;pEuiQ}-V}
zl{|V<%#wnsCr_L@9iV+vyKFUG61QZB<_;In=5TKweLLJao2ukexSJADpI~#HkZ`>v
zVqA^8wbX75)95k9J^+uY%`LFv`l4g0y3h`b(z%*YQP7c;1brb>*x)Z!Z!nY-lv4NR
zrORc~9{D*K+1|!x4O%YyIy65QC4%}hzYs~I`5yZ97PGEAQ8`hDg6xOHmkYQ+?j)2Z
zu7iYXRVfE6lX%ZB=BmB?D=zt4g6E6gVyyx}o8?G*2%3<0-$*5xy-W5k|0<Y3!kxS}
z6eh0?f5>aYAM)BBY77o~3+Z|h1e3g_r;d!==HSP<W!Ejc8eR_!ihDk>tC2l0S_7E-
z(3n~1rak-oLc2vFm%Ts&+g$p<z5@sR(m{|*4wl{X&LCaPwu8Jbw=$KWqy(ijvOkP!
zeBZ9Udwp=S@lcz)ckR^}?g?~b^>a&;^{O+7&$iK*?{S?&jT&FajdNZ?WF<H&fW<nW
zPK1Rs1`7m(;p}hF#D^$$bFhCK%<}vF^81F+163o~g}xCojXp`1F;<)wriq4r^WJ^?
zeCWG}cKgux9|-h)<49?099Qw<(pY&W8kcT4gCk?dK!MGoEm<NVOK_+j1p;)?E#GwW
zExY}e_ZltlyCu-_N=a^cSK{EIlW1`bw<xJCauSD523pb-zv-5Jx}`n3hc^Y<xkk0a
z7ariNR?I|JOlWfqjcyAxDvJqTQ!yYgHcbp}4q&k59_-CJhp$yRm{Z`!#@Yo(1WcVl
zOt68#Rz^UTN~lr^QHpnUnUa6?QAie5!G&G8cCuM+uVH9`GTq2;aI9!PL*84+@7_S~
z*C8-R-3}wVQ6eg`yTI|Lpk!SJjyDBI!73lej9YLgg<bI02k|qqOm1j-+;?FAO}^x7
zdEC1{K#w)F-WC{a$9S-b){q$(XUGf4p6*-gaTb*S`J+&34R0}bhM!IBHN1fS+B>B2
z-xHK(qrXt8et)4{rT*Fz<i-MO6WXoUM*#8>smJ&4-mmrMo*;*`J;JDmJ(6wh4Qf|i
zDgbM5P@}Flb+FdiyA7~Gq3=IY#LNf7SE$H_w~G5BQWd*ebZXx|SOA6Yp5V~vIZ>`9
z;D<NJ;=|CXSCc%OePpRiKDnV-hxQoC6&BF6%$lt?@7{C3ueIN-u`f_#>4{2i5?;D8
zy~_ngoESDVS_t;+Hq`x1z8P+X4$QFb1fwH8izaN~3z6#>#6~2Bu`znv%Iw|LN>Fy)
za*G!An}UL(#VJ@SC>^?#@G+!l-V`K3pp+K#n}YrB^SOP?Zn#JaR8WKTpOp8{@%P*+
zN*rY>%m=<UR|$xtCeZE!2Mir$h{Mf6L^Qg4cJBpSB_=lqG0~+0UB5Y~fs9gUUBe3M
zm6fN+N>uUD6MT2FS}IT<qz~rj;8>c>F^7nTzwf34H~a8+2jOqR1tYlb1r7kf;nTbr
z6p*h|rw|{23Esluu8Jf?kpzk)xI}=OErcITm9pH5NHkXbLak^-cGWKw?1JuS08&uj
zE+6x+z*F)eyedE4Rzia9Xk>!CZ>6_^vL0xdQkd$>fMrSusAZN~gC0cr5yEnc%x=7h
zAV>6=Y3b?Q6lBkOiQi!a$uHnWryMD;vBTuoZesD0C~|&+^ApGp$krxb0W{h7J;n@S
zUn?5#y?MWu|NX6K94r;2vE~GNt!?`LRw|FM^hezORw^$DE2wFfjKQj6{_zM+@H}C5
zM3T4@$sFl=<N>0#+*+>owCZ!fYuMAO&txq9-s}nXx$ktPj(eg~_?B4-nrQ`dl+&<g
z%4yTW6t0db+w)GJK8}_JP&`J%3K-j4d@a#R9567orGa~6HmDgbbcs~(yMv_B;z+Q3
zKLYNdVLEmP3Du&`K6os8lDj)7DtfR5y13tPLw5(oM&lpsWst18)SkV&Krq$I;80(B
zUy)opUkFz+8&sl=7zS|-h^?lgA+|xRH8ldN$E3!dU=LQ^k5kKt_#=8_SWlrCbyl?b
z>{SI2uE$CrIif~Nv>*oY^69!as1O7FjvB6egC?bAzqQ=#Z6)gghaWQpQ`S4;u`ej~
zT571De(&}L<-7&9W+-Q0P|922VYCpGn?MVieu1D$P;%yTm`qOgLLoB^k4&~dn)eJD
ziayAZ<pjfVvCf41B6&eahG-}~VWyjMqT30~S<LYdpVH*eT5d<quN)3Ry_jdk8(1E>
zHJQudCu9axq;9dvY-;1QFDRQ!xy4!~Rjf{srzyrfH{>UpebO?q|A65T?+(&Smx80M
z`3hg2d+YLwI0CM;(275_B91?_B91?_B93rrC|bG~lLX~jO2JO?x;g65x;aN~=a*AC
zbYoq*G=-anG7e8zOJ(BOZBC-v@Rne$K)mBk(*83EL~%DqS5aPK{<l!bERQ`SQB5Rh
zHKyR6b+Nj*O1Gs`O&BfE%m&cR2GHEpqS>rlC^z!I--Kj~2JR0uaDSkIEiD?5i*Jqm
zmvkE({$Am4R&i5>T6S<Z96jM`2Qw1TE=Is(naX_xV~8t>aDtiKRK;&eT-O=VlE`RP
z4Fd|(oQP^7qp6yYU=2eq0zpb{s?x8J$2KvpA%>HY+Eih=%F19Hf@owl5A{HLQ>9fZ
zQ>~A1QzA~^oTaL|yr;w*BHP3=D#<GX9+S7JU~IKMj-78T+TbJJXmKrAHXtu8L=56@
z47Ea_%GE7IObna+zi9#Ek$G*4;!sd&?0({vPmJt!db9;|VjXe+sgQMfVH~=Mw(FRL
zUYE*bqN&>}sfz-VKAzNH>*>Oc=t@guB`VQei*AExUyDivcoD6}ZddE0hwcmz7PQ7(
zO)Q-rnl7AWnn47|cTSke*GDq>_M<10_na6zojh?WdF1(rMuE-dAe5#80i0ThroDPy
zGZeG|t(0-OgqzU4evK(7m~wbcWOoz%9Y@~y;jPrQv8ezbyTaa)%Yjf%Rjb%^kby1N
z5d1_F!nPJTqzgG(@1ak7LIY?ZX1WPyYkN3QuGqv90z=6rlvWhM<^zs*1p4DAnh;v`
zN5p@^{V~%`IIS#T8lMqknyfH7Bh$?K(W0E7{lv7%G*Qb<xg74^V8Ch0GvVQy%1BRx
zE~nDK)@opZ3=>i-O?nQianPg+FGG_Cb4*w}T3|JmI!_a<atVA(j9;Kn_jp%p+#<3~
zsM}jWg|vuoAmLjdxU~Cx!`rA~hB8fvH*|zZC`m*O<)VS=e1_}tPRxLYKT|yut#*}$
zM*%79O2e;vq*EOfXs(m)R0jo`>TFIGCQD#%b}Aaf<;n)BVomk8RNN`-bff7;G=LQn
zfG*brVI4LmMORhSp`A;DWr{jma3H->OH@jQLUdKtsxH?AVF&FuN{Kbh-Q>`e3s@|U
z26naVLS&UDxZBbx+?kzl&zErkDYH8opzk&X$~HkVG2AnK40V+zxIql}OantTu~%H!
zO!QA=;GahWQL^I~lbGb$qHl~Gc()%r{32L!LxqwrfW$!ERvsd5K1(A!YIqVN#T@Xh
z3<=aP0z-9FHw>enXhPT!iTMMkPCbOktX4aO_^DF@Z<qIFn@VB*w45<Tay!RwV+FfU
zQ!TvArTze=G74SVfeB}o_K%xbgK2c=C7Ry~k|-k?rZC?q=3eb<iZTiZ+OcLfJ{?b4
z$XK*NyZ!Xo(Yuq7spROvdk;g}HU*g$$d=s@@LG7o2an%<;?&X8_uL!yhW)GnoakTz
zyy}rthff2D;SLFxn$i_nXcxaNS$u8?b=;mCqKrgb)wGk_X-nXsYHw4j4841{g^KA{
z=1CN4!WFI3X6H`5q%uu4uSSa%e5trav&&?&s#H_$jW9d4dbNGKqD)iG4RDQGnZrJR
zprS}qy-it6+)9-eHds+f7Ls*^NJooeA|Y0R0}4$hnX0f;ZDWofoX@qYC^dkoM@^+L
zD3BhE)WC^EZi;47iE<r#@YCdz1jcqa*X&9ww_MhOi<Y3>%?;0R%bWA20T1q5OL%_X
zG~mItYYETKn+81U@0qDwxmABTZyNBZPp#njdDDPLeQE{I&okl8_-y~5FKf1cyR<Qe
zQ$Z@7QUl{KI#!@+8y*eS4vwX1RrS|!*a?fC{oIZ~gIw!-44Qx!{a}@h*$*M1ipT=?
zy-|K;JB36Mr=tgtN7+V74>UflPBl^1Uy5S#OpCJn0!TzFINgn=cKrpa>9eH?lD}j$
z{T}#hKU}qyql{g(DJa5V1j$b{hupNt=PwaWA8&u%h)y<=Ya}G8RbYfaYDD1{c(M)8
z2#f?W%#O60Z;%ZS&NoDgS+|AWNe2Sp>C2EEjt~*b`GMhJoH5!hP0YkvQ@c2Q^bC%h
zZRBrk!m$MzAVr3cpyJ$uf33QeNg?J?#P#Ei{I1Ju#Xh9F|MD8>YQ^kU)rQN5wzL38
zi=A3&Gh?r$k5#%Ue9>cAcvJ~|u^mSogL5Av%Y+j>lxS%V->JeF5U`9m9wF3}ZNiJ5
znDLSsUvHEsr)pqYlf`MyHzDqdbP35rNTd;oLBtwY*5hV!x;#lj-x2J3yRv3W(V893
zW>rwZP$)zNKf{C(ZK4<h8Fn_vIuL<psFVr)x=31Na7-_OQ!M!GuOz^hAmC5|6J~VO
zTd!N2>uc0)onu0YmPab9PAE3XqmeZ|I89bD=rMIhqp5n(YnpcTpobG3KVpf`XOu3G
zHY}R#S_3wdUFVqOiWb>&E+eN5O(N@ObcP|miBZEus|kjmVZw-3XhN2;4qz-MkqD`D
z6GHSN&b9|`y><6Px9;1&_rNwpttw4K?9glzuY)dNhX(iUq6W`()nL$Z?9||HYVfhH
z8Vov{of_Oj4Zch@=;rBI?M&LJXyL55e1{kOgC@c9Gfc6Fh5_{^&;2&R@H0#p(d(3$
z2M?X4ZG$+F7Fbnc-EL-fhJ|@<YgmEI&ag1YZ4E1sX~K%O<J8Ag9oNOc=+L5WlO1o$
z?hKE*(gt2rc4v6hoi^~AvQ2o=tC0ShR{-j^pf!vvWWtX2VSHj$T(QjG<ij-QcZTSb
zs|Cd7{LT=4g0+CyoNq#m_FS5XrQkMsF43h-=pAS(meoRjp-)qp-x;D$vlbAW^E*TI
zY1RT_bG`}jvS_N{wx?+X1)}x4PcvG-3xr9PV&f6VxhAgB(0qDDLJQ`0hUU{M5?V0V
zgccnZZjw3yb8Fkd9_n?pZOBw{H;P<757~x5rio?rw3ew|;l=bo$d$NZ=9!SzNBa4-
z8Yb;c3#gQ4*1RdQCME!wtqf7X59=40C*jT}mp8{IN)r>b>fj9r>DIZ1+3McNR@0ek
z+a`Ago9s~BY;P#Cy%5fY+=NS;TN>W>U{kG2nyuUz*-8*i-Nd!QCR!9T;qQ)wAHof?
zgZqqlmrldGA=paW!e(316bm95XsC%|txKA%MC%Z`J5f$+b8!2b7G;CECbVep9-HD4
z&=jFbg-SOeL{GAep>6DV;_>JYdJ{@?uh1g|9ujI@tEpGPToc-GB-h&w&A}kg+Y~k1
ziQZAAD{IMhTEX{=m~f+QnuZ&Yq9&UbUCM+WJ%y%Qn*!T6h*_Ly){T}IZ2A|6%$p{m
zD&2$-?WH_GXuFjm@$F*l1!?BBnH|u^(X$tSqGRr7p&kWe8PS!&D>?OPn%xE?8PW5B
zs*CGQaXS@0wuyTsL-T>AY^IFM7YJgaNEZm=4_zRLKXerm{?G-2_(K;6;tyRQh%0#N
z-rPK088nz*iEDCjVOfv3$wS{wHh+qufJTX>*;F-&i6I}d@ylf=b&>q)T?9+qUNo<Q
z-OM^qCgPqhO7xasU%{j}>%nM@dUJ8+<CWsHNS@Afyb`wzEy4nrI4a(pv&0OrtIXe(
z)#fI$J}5eML7)~U5_}9pl~w6;6ZiXN>GTAZU7YaaxvIFznwuz4ak>PO_rg>09^k@<
zN}4m4B@)5i?yA6l$cC1fd%2NG+tc%XSlT48E5aMBRgsml2s*{{9F@LNruQ0~l~vwm
zo#*d3R(X!hTZ&~4V}r5E9+266em1S{tK91~V1Mhc%G;p<OY6eBbXE3FnGJ%c<z`)#
zH7v7M@XAYIZ>}n`M;7T%@V8+7J+dl)zsv_4f?H)(fm>vO)rmyJ)>l>PHd$(Ag3omo
zQsXX6irDF@%G@c-tTD^zy{W3$L0N2p*lCAkx;Qjnm&p($v1LwWoR=Bkr@t9a<vl9%
z=JVb+mHLECUDmwM3I%9OSN<)sz>?ej-BEWED>?J+GINo?8%pK8OXc{RQ;<WOq4HnS
zInvImoUh27RZ)9GRH3iRLf~`rh7MKa*-#P8X+-c;75Q4I2;7fgk#B^GU=}8JF(@eC
z3KgM-c%y?V@(-aR)KH+vKguEt<^BOx^?NdXP4o)CD)#?mG2($(byqo8Aq+^00n*^F
z_^P~BG7n=Ru#k#;T9?glmiZ7du}Z2k9GNjUktQ+V!nDLm4MF|Nh1%wv1!AF5CDVE%
zRhXN|_&{iNkkX*3bzEFkP?<ey-3%FYXJY;?S*zDr3sZR`GOxdBZA;}Jk@?G-m#S2O
zqq4xJcB@UQ@Nrpqk-vtda!$ycHPK5(s@N%6Y&j+X!L=V%;yzhov0krHSud1X<^_@}
z?*W;I^GLAJDwP&5h~A3>)MldQWY!{oZ9!Eks2qRAK;@KVPLI&rY?~Pv#rLV5rNOwr
zsu#}YD80(2V12OmK8mTUYznP6Wm5!PWm6!WvKRU88FDBjp1&k=@<Z@uRNAX$={^d#
z_+ey~`x=!?0g_Pe(<+w&9--Vf$lQKEkRyV(3idN9-w(b7^WUuU3AzznRrTK{^H=-R
zpr}&sl%<yWSjf<y0`m*1fR9E~f%m8aJ|0a4epwb+(}YM<vG*%DJ|;30rZD-CD&S+%
zRN$kkfR9O2fnRNbNmH?3lf{<$m~c2r;qfVz?c)*1{*21@u?S>;PG+xaqDG+5=VhV3
zKnzMD@CBK>#0)E`%rDB!c@!~HiC>b5TSIY#P=H8P`Le9CB^VKCS^g`s{Dx2y{_IkL
z{;DjxHV8UY?payx>JUhC?x~=DO(7738ddZgvgp!aOhQ5Wmdx%^p$3)l4>Du1&pV&O
z|ENF)0|Kh%Kg;ZmdS={`lK(2puGD2ir1`!qvqqPR>ga#SV)J<pt&sUoncAbK#wz1S
zGGkfuOjs58A6cNkX$GnC7h&%9N_=cg%m=XroX$Eo@(&AzO1I_bQ{wsjZajb4NdHqK
zeF0Bx_+HigLh;Py$BgvTM*9C4aON24zhabszma~>NPn)8{y78AZyWd&jq)X<{4X2j
z-)EHnsFD6LBmE0T`tKX*Z!^;0Zlu4%X!o5)yN?^`PZ;Ts80n81>AzsWf42eu7mf1o
zG0LAe%3m<b?=;FMjPmyy>7z#a69%0BW5D?-BmEUd`XwX%r;YSC8Svk1z^@qPt48@}
zjr6}Z(g*(k=Dt17?y9<1BO#N=<T)X4I3WZQ@FawX!We{*5Ew{8$OHr`hRMtcbB4*x
zFf%747A^FOiuZ@bc4(znykfP*d!--os?`>6p;x?WwZ#^^Vtqd<wrZu?s;%1l{jRn5
z`t9HE>~m)3%o)=Bu`=ho_g-u5_v5$sS^=Na0zSVR#Q(h@emTJV0{q?pe`|pMD8Qc&
z@U}qi(m?Lt>fbbO(f4$Ke<8sCUw}Uw;9m;xF9-Nn0{m+M{`CO=W`KVyz`qmVe;?q_
z1^D;mZ&*+k!vTB*Ew<#nnE?)na<K8kT)da?5j+BAzxS~0Pf{i)$YXbe()mT-oAROZ
zsNJXiKrZwpn5D^BcELOIftaH$@XCB3W@roClMBp_@xpvxF3KDXx$fztvAHf6=Oujm
z=(W2s7dS^&bn*();=CpoXKDP=qGx$97abNV!sm;|_E0Wf$ToOs=-Kw=qG#EjV{8X<
z@n)w_1wE_bT$B^_EgM-#Tli2uJl!tx@mk;8^5N+TfrQ_m57$~T{_oF)&vNgPEW$@~
z5ul(vDDnzEmJ4sOM?*fw<GC0oa(i5n?T%#e6S?r2@<_-O_*5=<mVf5s`F~a-RFV_r
z+(^zkla^aba3}!N+hcv_pTpb4NvpHe-apt4e?j<ycwj%x{=noqjN|Mb9z1#s-X1pI
zHP*X7nT5o#bcD~0GigBi=-8Xa4!#Knpm2VxJaM*qjCPszSMP;=7eI!j?Q6$h$-Ld-
z3a=2RK5?YfHQe1h*0)3S$tRiHDZz!kUAL5+yo`{(4$a1ry~jp-VOu;WAz4A@c*fq%
z51Z}bk1?_Kp3KW&$-Herd<e`jp!=tx@=%EegggT}TQV$}x1ZhzeH1WQ6AEZQ)L%LZ
zS0SmnT-9Qs$IW1FvT&!5+KDd+u*E`cPR}qq$OrYemc%+Boo$p4mAlmtm2zF-BIuRe
zOoU{`r7rP}xCl_VE=&wLt1@z6GpUQ#VBpY#7vGine2=<gon-!QAFWfOfz7fEo8iHO
zFcLUW8X0jc<^)JGXI~nOq-zhBa3WbM9viIa{iJpU3IM1FE-Z<i{$yc3A|9_@DrpNh
zAS!f0R4`nbkJk>r0^KDVF?XD1r$91$uLUCQsa0uVz7k(cU=**b(gV8~cz&$fEb;;P
zdhY@fcv5$fw|Oj@K{hT-4J_y(D2-C0BZ6ch8<^s_z)L(?$VRqXqr&blATZomrQ}Fu
zh==shvOF+U86DXS`x5-$F<x%r_~K8TU&16jS>9<$J2dIlE(n57s}>}lNnl)0F7L5O
zy^JO5v;@cGK~S=!Qxoh9QE*-(UYAe+?f#F#q2a;9@Qy;;wCa%|Y4c%4hS`h7wo5B;
z1;E1F$t0bc1WcFu`0YKVAy(QzH@$R;dxvCR221Ac2%{je32X0$`?tY<tXs+hF74cI
zd?xcyGIx7nzx_hWg(enWUIs=+`dupQpY&$}3)iKA&dyz|yjF`%Lz*t?3G#Px!ahQX
zw8$d)KU~BX`<=90>WU$opfaQe5PbssowQu*gCJqOXVi`lDx+Qf^l4NW87g&iXz~7h
zeA%r|;}m@y|M`mMJvverot^~-8afS<27B_MuG`uVv1Opazzt3puA%f4@C$x(7)3m9
zBrDSxMTt>NV<angrpdQS@@p(Pva^a3;Cu`NsCaY<ha<;+nFbf>+A$NHEZdPL+?Jaa
z&LZR6dyf@*$~`h7Nx8v0V0naYeYg^!S0C2j#ZJ)ah>n*6Ju;$6bhzj%kKlWbL`N4a
zYIUFSs&V<UL0rrVzCbcKSSS|;N+`RL5(WsmJ)nQ9gIyz-X5hzKyeq(WA-oCEy-s&m
zPsuBFZqHz`Tx42&?$oq6GuO1}S(=tk29ee~7#vH^+c8+^n5e|<ULw>zGpjCi!eL3F
ztAG;~I#-M+xIR@7TJUJ4OT2C7RXROY$+*IQgy$M6agMJ$)YT})(Vo(wu1f!CL05<c
zYz#JI{V(l>u9~pi_oY>26{5<J3g1B_mAm0lM5-cENi#w!y@RreH5r!z*9Dtlr_rRq
zWr$Sh%e`{+h!JXsZvik{s5h2W@7v)^3Ng@chOIu&p@#UKQ4vXtmQ+HJl>bZAvE*E;
zIaztWcco(h@^TBDT<IV@rk!_L8jPa3rD(wkJzw|%h6ykA3BmYu76Kh;m6e}wwd#DU
zzkCoY;gNn{D{B!Gjaa*sw{&+qY}+8y8WR)vc5v%(++1T&Zo3!<gRqqTB6yJ-8No}L
zcK^qioF`%3>;kadz1;r^P1mF4j<omIaA5+sISk)8CYCLelYKn&HFb63oS2B0PK=lZ
z@8yKnN7WaKu4lmrjTwv}a<zzL;lPqM*3;@!2aTS%leCN_5(KjcOK`Gm8_FRFVFw{=
za$X{wLCCr^d<d%}&u~6aa`b32pPdVgJb>g&CAq5rY1jmuMrP8G<E-GxLSGNG$eGo_
z7A9e)V9vlTXB>n1=_17^KUH+Vl|?c3TN&~#N5+hUu<U?cgjU8H7pYjmOEDdy!br)Q
z&bmyH-!ny4WrR~?H3w~74tFxwOXP^SqBK_@Ia#kxb!#!*uIjSNX2Ymgcdy)F60@lx
zkhJW?xPGv!`&Ox3_(m+^SV25u%la8lc{R<FXwU=ji3JHQ41`MnlpF1`hQB|eG3H3}
z3cll^vL#Li`9B(K6=Ts{ox6>}#&nCC&GpIZNBJA&(?&ihd1;L~1~tOIt0`NV5|<}R
zaGt@%q^Oz)|4rl4eJO5c3{-fB4_i;KVgx^9o|IFoY<e+j$^7cL&+<Q$SwW@E*Qkel
z?YM%q-`R?5v89?=#7)xQ*`?bGH`K}o&@bQIZjh#QlX+nTcvW!&utq^m`{kT6&=-T)
zh;-ko`4=7w>>;6plLeQS`LqxlbccY`(oj-+R{y>k=du-ri_Ya}3&Vr$en{hxgl{((
zBh~nCve=Ji9L8Kove*w~jILg+*vwH1<i(j2-%cwfcqhy<TY{jX1mSYCaa*z<39j=A
zQg$aPI~dh;T*PxDS_7>TCkuf)7Dak=<j(90MAh_#R|y2ARw@_FTIyqCSbc0@1oE8P
zd>9%i{cm7~Kv>eY&nHRUa>!7Pd6n7Zbp-EthlZg&yG43WLC+23DJnJ(ve9>E35BZ|
z8LGJqa&^H~GRLxj&qDm|Pb3_hg-BV*b2&xT@v}Qtbh1xk;g8CqR?BOJkAOv-L|_$Y
z1e{0s?ORu2J2zQOEFJ`?=0X)9pTk|7mKvB7AW3Me9cj?bSVrPtQ8uKKqQ!nEE!WZa
zB7+cnF+Ypq;vse(a^nd{l4^818j_r}9d^TbY{?SaW=Y9u4GRrp2f7V+!tMA8zn}i6
zV>&+@3EHw;cc;-JjBrb-Us$>lph;}xGK(hjJF);6t;h;%r`u8Cf%YOy<^)JG2isB~
zjKpjYVRm@k9F`!YsbC)Ad64i}6a@Gqp+&oc$esRFXmyUGA0S-I6K<^@bj_~S4;a>R
z*XFnklx~-Uun}2$Akb%SF+$`749_;O_>hof@g78HkI?8>x$dw$#}q#ctYyz@Hp3N2
zW+PEyp9G?qPR*tC&8eHY%J5iXLDa=_TjCp0H*=Ws&1dsag(sQVw7{15;E<kPNr^4i
z5Nu4+kYw>rjlLrQBQ49Th=aA#kk6|$QRWr3NmQFCGmJwu0${YBIY=9KJMRiI344Xl
zCOju-3pptWmB%gG-7pB%?o4et0kU#&{ATKpWF}gcp7AZs#deoPR6I`T^=aOT`}7a!
zpHJZKbhrfWS90QIV%L!wUXqg_7ceyX3G#Px!VbQyiWIV5GE7HUsWo<A9MJ)F4U^qh
z0c+{&ax&G<m9#4ilU?GM*cC}zY6A-kBn-1^yQ*!kn8uQpB}sPDq!o1B9A&+EXt;cY
z#|Q|;3ZOj9vkY?bO{3t%xOmcz8ILkGUQ$qzo8fp%SX~8HdmSrEm*#W!#KmKEfK{K%
z=Gr>)u~=ZlWNjS<zzjPE7C^qk58jSX93#CjfTfi>I|Y*2S6d*fx4(SY`^0U(bpY|O
zKR0Add=MmyBmf)HG$2`Yl|<eZU|_c?h|`XShZ7_nq6;_%my-bT$Bi@A{t^y$9RE|p
zn7qO(+k1(Lm4wDjPDS&rX19&*y$kzXBxrDUsDV2SDdGL|h(FgYKo|_Hl}D)rjYeu7
zPjeS0C9Xf{r72X2OEnlbIc@JCfMbQrgrz(AEkHG82}KwUdaMui=qVp^3w9iO3>Gj?
z4fwU;T26l}f(Tq51`(1KJF<x}uMMP2J6JTdN@+(gq_shJaxI+aWiTw4!zfU5b(sEe
zc|`Vshf4B-4*f)UEOdC$@MPicd{ppS7xEg!3U#<pt3@r7;9{g*ExWo#LI_xfF?zGx
zjQBlD0T=G|)dOttxE(MdoMh{-!uDMqtdO=a@yM}(!J&~da>xq^NsIkXS~`7DULbac
z-NR*hQRoGRP%;-Mtrh`^SB3&{@^Y}NA2sg|g+=UqMN!>~Ci8JB!)RAKAg{K2R%L42
z@1$kB+R>H)DVx<2&L;au1}&>4oIdh5vWlQ>{1b9c3ADxR3y%#}!tzV6HYBaSj1{!s
zn97lajKXX?Mpn9VJ)&l5uc=lcEMQGMH-xInoJ&;SLY(k?$@7LrGLe#xWW>tbWyF4G
z%YSRN7OskA7;M-3Bkea!nQ@aba7)QwBDvWWv~Mah97@Ezql&~g6JZ+TRjWFzMMzn+
zjKo{S+AtTr;{U{&g#H{8w-C4n<NBRL4JbGOtzuP#S=uZL^*Z6nk)&ZGP$lZOi&$Rr
z4MUWeNW+Nc#mdy>C0?f4q$7vZ0_CcJ&zI6sOy++-rpdAa<+wak7+{bVqNJ`hl2r-L
zl%NU@p{kyhtpy0q7oYH$Nbyx=!FrJvK#Tp(_Nue<S;uoiIIY6YH`}XFZUx?{LQfK%
zPO^B?mk?Z(D_6-$+cFG%I`*1udqHlk&oUOSb9v^o$d1>$68^;yCf_^>RRd;At2GtY
zORE)ig1Bq3@eT@LQ!G<Sb%_LGmbge(93o_in{*^;ke6`M<(jlzk3QR7>Eh;#_@Yf_
zb;=*@%>TN)TKX!k5EwJ_=@)BIXy*+3lkM_~uCP5dekOd+sl^wrEA-k3=DG?N5HOgg
zcSyXLwO&jblbg37CO@w@sc9S@iUe^)iK=#}B~akYJg-D}OU0{jipCQ^8!jHdGwYu?
zu)!gP7GYs~z$v`bBI2t$qUKDO?IT`TtIMw}$++uvdE3S1B4VMEs)hvalk}FA=Q4*o
z8+Y+4naj=3F23H=^i};B^N3q%xS=RM24?ye1mKX+hC%(Q7aDCEkv%2tH~5K0j#vQX
zGvSz}Ln5y()?9963eqJFhd{YinM`6{aXj(^qbM<vfiY7dj+u>xs!gr2@rtlxxTN?`
zPHeo%j@&SbZ@qWmTkjqCGJJ>K>Bq1p>Yjzfa;Ae*#KYi?w;0@(`R~I>6B-XW>#C@z
zs03D8W_{$ewV^LNbZIEIYW}vV*YFfepqfcL!Zyvv!-_ULYF2TgChd`Oiw>bxsl6U+
z!ogHyWwclm4y#pMsKfaY9V~Ov(!d8WFMhej42yvmZ<FQG{4=Olzp?)7`ppFTukM<y
z|LRY@%WU1%-7X0FuZxz~!!b+yFRw&TtpB>Cnf@!OC((Z$k9_|XHk0nZj+yU1u1IS2
z-%Qu{#bDLpieUoPfwM$hzP0MmpRhE`a`dC89Bbo-t^sl(5<tE>9J91KgiWm#W@b2b
zNi)?UsV7k#jz_*aG%t$Q-8pB<)aS*@)a4~!rt8Bl={*rzsd_*?jKJEz+x{4CP{AOS
zZDxDx1A_HCZ*<pe?3s<NCC-$uq_1DTnRS_Q$(OJ&nn;6>=O}IRnj`z2UCzf7r)vmT
z9PtXuCdN0vv~uu6U*jk9tYV1S&jOz}v$3zp)H0c*O`XsAYgWeUs)U(}khJwHB6He8
zeX6!o!ek<qP@M}aa4|}d)EaZPROQ0vlI*NQ{oI~Mw90L$<h8hLA#xikpRPt(TUT^t
zJ%O6$2Vtve{?K<6R<-KK+kUFU`Fu?aleDJ!N?~F(EeSI<EomoF)50O&-Gs@cYg$;P
zHLba@-`TE~*^WxW=o*J1uAYTmTe!4gpl)>A!WE5A!#d9F&c+d=3pK1_MAEV<N$w#_
zvaCv&3z@V$9?aL1r|0`IdHzWM+_1xplRx*+#tU3tl|la!Cs|&VLmxEhEb_vxml!Kj
zdD;^#QVD^)^Cpo+{}jkeTv3%r9|J>eRVFQLlDX80+{>)arH12ML6t-o0(qH{Z=8z6
zl@?iTOFKQODvJ_~Z@*R2GyuXf<Fg1$=Q!=PHO^nd^-GV9dTO0Q4UO0e&RGcIHs5{p
z*dcBP*ejO?RoWBGaI{oXbKDE}_C36NZXY(p!pS(h;_&-Jk3W)fD)ZsB+>7VK0sRX~
zF3u?FKGKSYGu@ZinfAFgmm!-*T!!M)NH{jZ<+HfY*o3Px{ruPuzZ4a{D<a>AIs4(G
zzFJg)$D}ZVd>H0dixH9)_~aiXriz7~8iq`TYqqS+($OwnZ*dZ4`Jc(G%UnR+)V>78
z;!6@Q&@;jU&Ez*f{m>}MguaJttH}~Qgx~)8i4}&ta2JUmIlBh%u0UEL-xA=C<Kay%
zzi0UP{HiMP`OOpYT{Grm0>&RpHgryuGYTvmp0mY`!(e~6l^5Ajp>n;W)Z;Z;ff#n7
z6<6ca7-PxGE0EfEt6XYG-BhzwD3$#kcXM#ng_B4su#EyGQ0}>FAo?n0Ri}ZNm)8}e
z>4TJN#xIq(hVnF4AlAnkOHQWXI$S1^Q7je*Qo*^5YG74HeVTDIsu9P_sK%<D(K=k9
zLAYAVwj=#!FZW4M9qwkFZ$nEpRBn-^p_m%nJxZMY1Q+NwacB<bp{yiSSCC1$Co<BT
zmg+KAXWD!$9EU!v$g~Anh{y}K=vjGg#Feq2dc+M+Y_sXosZ5gA`jptFM;g8bYP(a*
zLrFYrA}!LVbk!Z@nhjH~^{fA^OixqAb*9k2vr`0(Cnbwr_E?HGH!R+(H%01B3L$$x
z3y49cWFnJ7nA#=<(P$!*LYO)~DF~B^>`Ai2U&u1sgmr8|UlGo^Q9%Q%Mg^ayYE;OJ
zsWWh?ye15P*-;_Xpw_4$Ic;E6xUyyg#HXlW2yvIfG3oNI^+@5MJfsRnr(s{*XCq;7
zztLS8$LuQ!;U8S?TVa55k>FWr%l;}^7{}_$LN$e-#(Lbbul60b2A+P)T&OSb@uJr&
zcoN4m2Fq+{!C1v}IE$r&u!%N3?e1PwuIXuDRnzlnAm;L#)xkXB9WE^-;|4fh#N&o3
z-eg!IaoV@Mc=<4Fi`(|qsjN1T3NKt}q5uViT(Sfr@oPyLx3kn4{esS-v4S}!w^pdb
z1sYsXx6Eu(3MMM~HfrtRWEPS|3$)N^__o7Ru?P`9P$E0qg+12IcG5w|o9)7M>1-!S
zYt42W2TG&-P>vhs`Zx&Ji1{?C&{Y^HW95nVjAy5e0{a!5KTZu|>LaSIqK}DZtr9ai
zwWFHd9?x!1Y1CZ>J=F>C@2U)R_sW$^MP%8Fi|nOgCv}xZk-o1{WZkP#l2yA>2Fg8P
zfYNn2@K1C^5RAI=A#-^IrYdkpP4ea+^oW>jgk*(#yd#PCW)effnJy=O|D`WUU1o-E
z?H*aTWlNz47jrE~FbJ*NF?~7eGR3IHEnA8%YO-#-k0o+l=JsB-y)$44`OBSr-l;^E
zV3vd9Z(3`MEI{(cfMn6$Ok`IlzCoCJuJF#lZP0$~N7B#zzCl<_SN%mi*M$SPFea`m
zSUxllV7Gr)XNDcJvC3rwC$wmQ*n{w91YTL=6|!#$Z3x3HYYXEGWy}F>+hR$;@_ffq
zZZG(@%$-$NHy&G#h-DByhvYSz0<YeV^bhipkTi%*n#yMkyR9@;kxv_#s)$rYO_gkt
zD-g#Dn#u9SKtbO)X*|i-8cOGIiFfVF@}5&0CnNaULm3AVk`=prV$@<bF(hnqMPL<G
zXm`8T_M81@2egQyzShKXmB@qjcHcm&BjGY`TBDI*NZsP4;=v>?w&Q`4JMPg@3R&$M
zWyOy0HUDtXR?o!E8>HZiCHJvPQy}kMqpa=`KIk9TJLhNO+KsZ`?%40urEHG9Yu)Rd
zQk)W?61x7V49Gg>X`s(P<3I_<kx^YoI~ONe-Ki}0lf{iZjh10^j}30V)bTQpcfqA<
zWpw~=koXPj3$B-Dq@LlTOGV2n!$&XTnH1MXUV$?(Ak}A_>as`^$-^jjMMf(*b7^MI
zRT%7DFe(tQcw}lggy)9+1w660adNIeG+YlTnY%NHfON|TMtZ8}6M$;7K546(K^T^_
zRm~ZDI(KmAxt{#=(J%gj%?eZ;o<SVu8%UhpxJKfbuhj>?hzQdas67{vhc-T9vQ{7a
zf_)V;*N7<gjEGpgkQ^N7i3(nq6Kqj4qSxg_TP)@z5N_YUwG*nD|MUpep}2eI`Y7MH
z1j!e`R)V}2^Vb=~O+ZowCkuAChz0F7%=j|Qiru$56F~B}xBf$41IgSV7?pnwBd0ch
zP6<NoxRToW(pOEEXb$k=9?x)mP|fU|7BXe)8ScUxe7{oh$(1vow)*hgBk$#GVVR^s
zk*x}4_~LUGDzy0fK6gH{A1kqSVOkCw)J;aULuGhIkP*gJ;W8JjLzo21;DTc3fWm~Z
zp)_3BDG52Quu8I}+FR<rl@U3`<LDliG#v9KVh$WZGElf6lxmn@pC$m)lR~WrN=HZi
zTQsTWIYj(Bv^jeiY;Vw3=mJ~(UW~Nsk3#R@AfDrjBZ_2R7y)0i_mz&6@%rxyi2~6p
z!*FXR?vW*3S>Ud|YuO4Wt-ht}?<yWx#N*{Sii3ij7Oe_mw<2KDx?3ZuHY`^>0%nlQ
zh#hK(2Ju6UO(Ph0M!R8tLhhHcvB{Ho-x#|JnF#8UBN6isE}maBXX7OWHqIQYPRiO&
zS#J6|Ba^7!dX|nr_%s_IlJK06^Twpsv!~|-VN*vZCDP=Wc@#8`h_NOUIm^|eIGvb4
zkQ9y!PnLItNtqWsfRdyr{=5|IBd|e*ziE+UDwq@t7ddG-q*#z7?evwzO3qc8EcDoQ
zs3+D+T)Cls^fL*swrZYaL73)8S9o}Bm&U^tSgslCv8tACt31)(>kzEvoOE04Njxpn
z?3%A&Yd*;>hJVRUzzWjOm*i3-Sm9YuD~-1Tlxm&o3h;uQaKBP>1GYE+lUu3DrbXmW
z=R$BxRyU5ySXOYY7pw;}aa_At$EelI!fe!J9S3tT%&iVP$M4X#q%)4XG`0@S2-)_p
zD`9R>EwKsmuP#reX(={=su9Zt963kb28rneKM?6ymBvU`R*h1f;ET}-$<f?aq*7$y
z5o1`8YRqA*Pe-JHCye!J<P59Lo|T^n#%;57dIXQEQ{1(f*l}B{i|LAO<M_K4pCH*d
z{-&i<i<O1C-m6rjk!r;{HP+N<o-PuM?8F;pL>#Kh+LKd34s6A<yBFsoX@gWD@>NMA
zC2LT(#>C}G-b8oOJv?)_0o@;OldIdM;&?JSSn1I&KzCNj+Moez^VEoNW`u~^71ma@
z()}W&uw9tB$#kug+|`YRkhA^ek7{62wZd=SB66jRA(`|iG%iN6a$AtxAIzu?DQ3?L
z;mG3GY;hqjMqCKT5udzT$i*%vsEpLWR}as?<byvGj<e&Jd}4O<>E&=ENblF^EMIp{
zFqRZixuLx6fjl?Hhw)JwcrPoJEqkT<I?2{<aDdLB{N8~OXIo_ww26y!?^P{R_Fl@w
za)6y6S1HOw+sj3|E2~Z)DzV+2FE}OkYm3shR7vJ^4Ga#ry)zx5(blgs_zUa6ujH?b
z#cnQs(eAD@zKdTpr|WF$;@2+zx)2S$Z#Vt|u-AZV6xeUTwF+Eszzqt#+JKuBxY>X%
z1$qe3)M;NyfnEd33iKOrSb-q}Zc|{?fQkY~4LGL29RyxRDX&xDP6O^z;0*@ct-zZN
zxJQA+fO{3V&w#fnFlNC03cTHb2NZY*f%VkmK?UArz(WeW$AI@L@UQ{zQ{epuJfgq{
z40u$54;k=b1wLxP#}s(XfR8KiI05mt@Pq=NAh3p-KB>T`4EVGHpEclf3Or@N=M{L`
zfM*o=q5;n;@MQzOqQKV)&^TA$Hx&4`0pC&Jy9PX`z&{x9j|%+2fFCOGBLkjS;Kv61
zM1g-b;HL`w+<<>m;FkvcN`V){l$99e5~Eh=9y1L%5q|-gZNMA_S`DBbEW}tyfR>5+
z7AeqXz)}U48?Zuw)ds9lpkTmS1x_<yy#gBy*r>ou4JaybwgFodIFA5rl=Pjizy$_e
zsK8bOE>hqU1GXu!!+^^axWa%A1$G&*TY<d>T%*8#1FluzdIN4y;ME4)q`=JvbScnd
zKuLjK1Ih~Y8*o^GAp>qxVAOz$0!IxvrobHryiS2T4Y*5zHyCiY0&gZjQxSdlD3BO%
zuLAcO@HPd;47gu`w;S+)0`D;3K?UArz(WeWhk!Vcc&`Ev8}L2_-fzGo3VgtTM-}*x
z0UuW2qXv9TfyW4lTZfM;@VEg_DDVjbo>bsd27Fq9&l>PK1)ehC^9np|z%vSbkpSP4
z_dTn?mks!e0$(@a8wz~efbS^qoB`ic;QIvlIJ55u3jD}`=N0&g0so@F&kXpv0>3ce
zmkPY-JkRvS_zQ!<2?oqmpv8dM3d}R0Re^;DEK;D&fTap7H(-SVs|{GAK*4~u3Y=!Z
zdIdHZuu*}R65wOEzM=wW8?Z%z^9(p&feQ?{P=T!mT%^Dy25eJchXI!<aD@RK3hXjq
zw*q?&xJH5f1o#fD?^*?}H{b>ZUTwfl3fyc!mjXQoloaSSpsYYY0ltjtJFLKv0k<hI
zYCuJSqXryP;0^;`r@);A_?oBhE(P9Tz}*VG*?@Z#NDR1Ff%^=2n*w77+^@jf3GgLJ
z-vbJ~!+-}Bc$WbWDexWx-mAdF2E0#!_Z#qt0v|BoQ2~-R-nDZt>hJ*-Cgu7|_$Z_A
zC!%5KARi(ZM(O*ovi+z5A5-8l13s?6;|4sTz$XlNQh`qy@M#4;Yry9ec*=m!EAX@d
z&nWOk1D;jj%LaT!fv+3z4F$e!z;_gQ&VcVJ@O=W}7xM=S{K$ak75Iq(|DwRp4EVVM
zzcApJ3cLv44V3AN@fQaj0^(qCrUESn%vNBY0j&xwG+>beZ3Zk=V7UP+6j*J*8U+dl
ztX1GN1J*0B!GMhlywrfA0%serMS=4SIA4Ja47gB%tps=prSBpElI8Auu3m+6$MZ!v
z(snoQYKNojE-`M~l>H6^E>qwN13DDgWx#F)_8M@F0{acPR)OmcxIuwe8*q~XHyhBU
zK#u_>1$qrAE6{JiVFiW^xJ`jk11bs}HQ<;6cNp+G1@0uk5B7a`DewjZ?pEN<2Hc}S
zV!*u$+-Jbs6c{t$eg)oczyk`r!+-}Bc$WbWDexWx-mAdF2E0#!_Z#qt0v|BoQ3XC^
zz=sw1r~w~S;4uPph2HmZ1s*rx2?ai3z>^AmiU7ZH^?h1_&l>PK1)ehC^9np|z%vSb
z(ST<a__6_x$JY$_y2kjH0pC{Oy9PX`z&{e;x2L}EEAUSS{78Wx8}Jhaermwa6!>=n
zJS*<|g#!O!z>8icgU?IwpT;;rfmsH$C@|N6c?v8rV4(s_3}{nenE}fcSY^O!1x_)b
zpujo;JhSaPO@T8E*r32!2E0^(%?6yUz_|vTr@+e%xIlqd5a8)n-&O@KHsBHkwi~cR
zfy)iJLV>Fc*d;)P{_T^Q_?8S~>*C<PYp8Uzuz^!3EYAn-6O-1#;WGUAWW&^jVzLS!
zXz{7nE@8r##Aso|@G$=KT-2#zB0fTuuewuA7UK#@1%5q_$QR(jez{jBg4M5L(n@7u
z3K)*1V9n1d^~dV#Z7$D<ajS|^T!?yCOy=VZ3%BmPVPY4kE*6v4%0P8Ob+ee9Fd)XG
zMFaJ)n9L+}u4AFz73KYpnogIP>RT~cf^$b^hc;IGOSibsz!F2fEG7#jH>ClXP|~+g
zj;%UdOhTK)T1@I~F<Ih`72^byr5%)$`dt)rq&~ZHy1fCGKz#A5560vqk<PsHB$YQJ
zH^3N)kE9M6la+YS3RB&52@*zx^${OYJv1iEU0(4;6&F~B2FnAeb+`iY(bQpMGEb~D
z<7HBJ@1U<g_1Ty#cDJ~78ZB(-v9#*EF*(IYkjoBeU^u453wlUoWO_%C!c~`!sgndW
zK<5KN54Xjaf{(0z9+MM-Mx!ns@q)P*9w@R+T)jLdt#EK6QklwgQcsV`QdbTeoU)>$
zkE3266FRfdmJyAmJ|N*SXz-Q_95%!lsXItoTE~JH9Tr!Wa2YKcRXs!|^Znf-xxed+
z{&{f|nJk1l?gmgMSiMCii|hzlOweuEg8T$tBa;O_oaK>*s_)1&wN`8zu0ABwaNY|m
zji%x1OETro$LwjSdX!8r58((u4g8i431$~UO!K9|>RmEf;`R1+7}6N(XR=a(581(<
zK@Nv*bi^+i9pyCpCUt;?|9BpZ|9BjW|JV-kACEloACDmMAMM`bKOWKHKOTtTKOWiO
zKb9u`;~5A3<Cz2g<0%3D<K`Iuap#HuxHZIo+|1!W?zZqBH!}E-D}4ONB{=@$+7$nB
z5rzM_n81HrAmBev$M}ykD*oeih5tC8+%#4}rccB*H2Nw?7CWbYmC<tlrUQCu8xG~L
z!=eX<YX{1=?I?GTs$;(meNTbGZ{aHe5Bl#*+I;DHpLUx@j@&}8gHO9?lztxu4u7jb
zzRu_ki%oq)j9MYLuf819+~0xRcQBdN)9-GMe*r+!x&zj7x!$HmBdSKSSSP2h{sWSW
z1GtTa`h!7`$}oHFfu6x`u~|3P3&Z;dwkx{BgW{ub52wFb2hh!V3wKYl-~j%|9gYJS
zst>}fFZnGvfXhR0z=gXN2k7aDm{{Zn{{vkExJ4)<zQk>%32Wlr{atWc2XBe<J>ovN
z(Sc(30fdeo7&&(MAZ*6(LB}{CelFlTp>zP_2>fr{1i9VRiy5(q3%ZAfkS*FxmlR_g
z5erb3-4a3(hKq>jS<ZKEi5%OpJ-t`K4dWaP7rhtuUQ2BU5B444t7Mf31e13c-KJ4h
z`ieV%=ed`^$o;FlaqM6+7fv${V4xXA$+5WFP^@&7bwK=B92hN+vKA4rEE~Wo7sVO2
zG#hppPxT>`A*-?>!tOv2zC0U_8$^M~Tw>J-r94a*Z(x2>HZgKfr`9!sOxamlD<iB;
z%!p_@L%rpJqX)!ID%fu5d+x<(-QNYd@}WQfVwvr(bz~H8%@6nJb23Is<`-dk6xZY2
zD`FHv*e}ZiN1*87@G(3-KhWWSbYM_(9Wz<%yJGmAbMD!jwrn~ZM#Nygc`O;}9UUDS
zY2WNk8E!&z9oaO{kK3~N{>Q&y%v&6cjrb_RSJ2I+fz9yriO;$6NbA<a<)L%<J$TEO
zO}(Rs``1}^a`||1acmR~qXqesudEm|FAz_k8~RScAAJRor1ynV4dXE6QK7j-_YfMl
zwvMY#I6Uw=omedPmil2&{5Td7+^c$ZW)^8L_qb{U#~NN6R2Z}=;w^g#XrzROUZ6%4
zXyJ96UG&Zjqnf=?&HK8vv}P3XBT`7mMHP7GIgYA8y051hMfA4gs7lb+XB5%Xj-x6;
zKc7*Icc>SttpuI?1U!<$&LvVVzdlX9+f7UIfHpsq!BiKmF+m~UfM)Y?7~Fh~#w+j6
z<D_Jum1(MGL2Auz$4k>dE3avbUcw$d7OnT+I8H^HDrI_N_gcH^kC&dQQl=+-S^nqK
zGgZp#IXjq0BOU&Dwa`E-ujw3O*z(Y<Yiw+~>o~R1P%W?P2{i|&qsK|hE$Q&tG6bi_
z-0MY)@pyHiR4HGGvv4fUZGTkF*B_^HG@YE5m1H*ek#cua_K+>GXdt`VsM^;yOKmSj
zX3Mc;W(Q6vkIE)*jYx0rDsXqmE2#d$FicQ&#fSI4W@#m&bpr1yQa-QH`a91mA0BNB
zSMBcDOU?XU<b9$UH-vK1delEn;(__#aNwgjGD4N7LHFP$GfaVdCx|$l2(B!LdQo%u
z&_oTii?<)~l8v(foLj_3s)N&@vd9&G+bTC%fZNh=ON0l{yZ{YNsN`N%68^GE{X9dm
zyU|^@;81I16dw!<6&%LET{%8Q_=ZEb%zU-Ffk!LIrM##Yt~j8MRLOsvhWwezb`#sF
zjML1bscdb{sf;`6s<D;KSaM~j<$k-nlpW2zZ=CgV&oW)<%G5hMrq3(=%oMNvTc)FQ
zym0!{^1_q0)ZcOdQ)fKwV`DW3&9qww54wZ&n;5CkL({5qDmz({YMi1}c$F$V3bO_S
zu<Fnc!-W+*rB<toF_oLPZ4$vcq?vSBzDlJhOZP{$qS^~o?X(ldRDJa{lrAK)qoCU-
zv#-SvfR^rt0I|Uz92|yQFMHu91)DYh6=@c~*(}8m!?jBdmE3O7y$un)CTy6JH6V7t
zYw(8KK4+XVlDX+R$O_9_Gv~EPZDLY!u|!u(arbd1qV~WGRwt@M;;fZY<umKlW0lqK
zi0-$)V7jXjxY{=LnVY&Dg%yJj-t-4l813etY8Mo?uOb<H;kG8!3%;nSR}p&AEj3?$
zVHj8;i!P_~{_T4Ml_!^5nDOyk|5N1_MuWUw`P{-(kPq4<>!7-$g4q|0)Z_~{DtIkY
z<H4*ZnysrfRJQx|TAJ5bV?6eP^)kQk_xjLil(RkMA+3(n>g6gmMHZ=#+g`BD#7tMS
zMt0QKy_UJ)QrBS^@WCR7=6~b;=)M;)Z>lCP)8?!ci<%R%Qk=^Wi)Lf4XuM_b;De^K
zn;acAk4#hk-IBsthe|)ynrZPBSUGjW%0#HAvog+XiM8@zX3iQ7k2KPztwnR?sTm1P
zmS=q#Qduz}9x7XV>Cm)oX;jVX<$}1|3sv(&UToCrnbyYOC1(d)F%2IoSa&EYO{<2r
zhM#I3y;I*<DNeJFUUcAEm~F5Hmv3Yv6z%5MH>=!+VARzKlAZy}LA&K4K8)k|!?C$R
zq!(J7C3}yJ_F~YlQVNbGc|9kpPiM1AM`gHzncFE6;o$w2k}QapVD}GOtTGL#?JmCU
ziHv2_aTE}foh-OqwNc|>(1tB(A){h=fw3lhT;bKZn2z1eDzk9!pBIeArS_m$hI+cz
zRvE$H?Kx+gF%7$#rJ+dFc_1e?nZGUL&{N89fogcL)Z2BWjN9YU;%nM@M4((MF`0d-
zNtX#qRXS7|mh(z?xh<+#(<Z1uF((%*AGuVAdw)A~no!9ls$|v(R;*%go`#CeN=;g`
z=3}YeTvbnKwB(vL#s(#)(vq3iveC13Rgzi!6oLzF@*!kq?IC|(vq~xLpt#If@4Lc+
z+?pg>N=<9{Ibm+lo#e7IJSd8)J6+4lP_S3s8)wmj!JYVc=)J$N{mrc1@|srFY0Jac
zuC&cn-Za+tE#B??<~VmdaXXB+NMN)#EzINuT>6J|n|Wt%I>%qp+yXl@zIie<azQhD
z36qhW-(DSv(@U5p(0|gz^*M7uo2t>*aUn8rB}mfIkmz%IMyf=o-+PhsZdk*`otdb}
zrsdXz_}tEdV7Z8$j+9f%X=Ml}{-u0QyT|S?9ntI0c0;I@lFPWQTRYpfu$pQmX9W4I
z&oc#ZH6&W>)-jqSU*vf4iy+<^E*dQ#E)7=VRsX7nS{u%8s_Gyw%qucS6u}W>CA@8r
zwt~G))WAvcqS@>REATxPE@V^5&1?2vh!?yVg3X&d7Sl9U7V7~vDNnftR7vxypa;s6
zoT&T;#u~h~fE~|#?FSbs(eYq97!EP;1fhI1Dz<?}CvO3Zy<H={dC?hRL9StEvpZhu
z4dfbKD>A|!N=Ml0E8}T9yL8emJfFwlk|>51JP$;J!clj4Lp>GO*sv1GUMR;GEPAtl
zQWve-ruF7jiWkkC)BJM&i*K6q-IFfpV(oTSPAhk5QA`rb4Ik`1kHU!z9$-ZC|7(+1
z0c|TXo&qga3G_vQ@g)tf)6tqXzEn%|s<aiQM6jwF8bo2%DViIbRWz)DygaWCMjt*2
zLL=pUk7yM&Fzv^e9T`Dh0nEFCW1Os~L<2)$9VJ3xUXg`R1UBn+4aAdyXklE}tV+qt
z%Bf-VQ@q<WRgF-VR|DhL5FP~H4(CzPa%kGPl}hoVu?iW&ohd$@i>(2gwhA#JUNGjQ
zp}`tU{$0(gca`8pqWj_X^AW7kIY348+d%gNtH=nM5#$xX`#qlH6zi>d_ctr=SxH_6
z)c0^nUo*z)yMfh5e9aX+hhVO0_Cft}#k*JoxsH!GSxG+Em<PfDXaW}t(FV}KJTSf@
zUS5?tu&V04mAxS9WaW8v&=p6z=w`vr)2C_Gg1YxI@zhiAdPJo*&<x|X5J*JtcNb4;
z9yK(r_h$t8ETfodx}aGZj`uqZYhE5+W{!@AkG9fUZCd%F(Rgu~#IUFt=K3O<#imVS
zsT407$5yydbZ`*f&f>%R)HgXt(u`sVwOjU)9y4`W!3)g=#p3P5*jUt^GVId+R5$85
zQNDQ5aMdnKB)3g#Nv}-{ct#PgL8dILAEm*0KC*WV9-GW4o-@6&z}}bRjN*CID+}yX
zS=*wruA2Pvf);;R|M`7C1f<fgm~LqhkV@-_N^77k#s^WbPi5_j%4%XcLO?3*>gkpS
z0jadT(=81GQfd39TN(tU()LfcGzdtgT|3><ARv_%KHE=c^`_1|Gm1A(ca|U^%~DrX
zS_54=KIDUaD(heqW#OS)eqaRqR90x#Ag!v#@)g-<*0ftNC0X%dF*rw`QH(G0nm8;%
zKw648%%1XsfUBb#3xeRRJZo|xEybyKuHc+}MiB?Nkqk}O8S#wbtx<W6HN!}g2m7?L
z!WXe=0X8NpvU&siRMucLUrlU=5RgiXf756nXYmdO_NlDlXwDjtg#j^AV_=`kiXX}}
zO;)fApHUo*=4<*|ekCfei7f;I(vrkJG19N6K6nKC&l$z|Cbxm=iZ{dH3}HqQ`?5%e
znkFmQ_RZe9{p#Jjx9!>S%BaW&4rk(LLNwUoB&9VsYwM1ycW>+16BXUqN6Sd3qi8S3
zx0w^RcI=Jkc+aHvYO>$0o#T#RDc-X6s>^P8<)%&HyN-0AZs0hf))tZZg{Y#4@)@2@
z={q}iT^7%E1NB^E$*008DXr(0t^4-vzhQ3;*$q^5?Gjf(spxrIJ1^UJ-DUeaYnFTi
z-`(OpnC0$-Wy^l%*8QCwmq#1<<j&{DX>BUS*Z7HBZ@hX>jUsQVSc*vte2$2%-O?KP
zu2-+2Q+T$q&H1%`JGSlLc2g63TAk)bQJLD#U3hIVLlLnN{bds#Y&;v;_P~1Qr4<-R
zrm=>d!-IzlonrJ`ZgW@NuuaF9b0;h<yh6K(OZY<OG9<5e&ZB7vnDLa$7tyxeJ_&It
zE0@7}9U*%PY~cl3>Jk+;@sjjxoFKjJNda;lIM}a5<y<u3OnEus?g!4zr8ITy)Z6!A
zJj`BAl<McgKq>`P<rO>JCQ9}D<v=P0WTol|+AOKTc<iM*0hGGLN;tjR6P3Je@^zbX
zbj@jj)Ncw)z89GWekhB|zj*TUJwGSCRit|`SLQm3MI|@Ts)I4nm$?&QH645mXoA#$
zo6GIo07~=f!RGX(fLmT_rY}jnrnTyTTSjWWRckyLkUv*0LPkq@a;-YY(MeyBgVR<m
z0oLGRbKK-wb%vjl-kJe(HQlsUEkd%bI)Es(%B<JPepYVxf527}3?cDKdacVn6TfET
zc}gj)^S_FaP&5h2(o6k9fReBElGz8>_#~-zhqzc!4<XUEGVu+%=bclI0*X#Rokhw*
zpS&G5hz1Uh#BX4|a>C=GXQ$eDo_x4l8o0D`hcuZpe5CdvELw0E7$pHe(&a<t?gG~`
z!<FvZ_edwcJ@Zmj6)&pjMe(j|Dk?d7uh*s1>%xVP=_2!&tVw(y!-Mo%H%%MZ#Cfi&
zZA?%y6HDC7I;98;*$6DdE`1&9-%7^@0DJz%)DwF-Q%|jk)MUlgmC>QfC=5V(jbLy~
zYm+6oDyz57&OSm+<p%ET)>AnvFlpV>dD-@JGaAMW1f~o3i7#$3CxvVGnH~1XxlQnP
zmPFwWca`Ff=pb;(gu7iTYMqp@zoC)T*fYS8U%Jq5hie-ekb{SXTXU~=)0|&930+dw
zZcq~bxa8^hCkrlBiF-Z5wgIbWX+m#fu=b|r@+l}3O2Ydxc68f7QI(Bh1g{GBcz*CG
zxB`x!98dfpBb1|M<q!x<M=BGRtahqW7aOOpQ$w8k%6WarvVFLOaj%=PIfE8%FOT-h
z&=GBJ6Cbrg8LGAkD#}z%K}EL2v1Iu^(_z<+J)MCLENR$fOv}FAX4BYEuzd;@Zj6(b
z%*?z*wDluK(?;|RS1q6n<OC)2FB^aZu~OmcaEQ#t%#K*Ga+%x^nc*H&Eh{iKM6R$+
zl<uC}ao#4rWa7PH;vF@|SG7x-C$qPiAel^Z@oQLmNyo4Tj_t#<)%vDf#O{m?zOGdG
zHyw)M8(y@#O;sDPcPAQt+vkL_Y{Ys?s7<{|_Oc20tXzp}4SCiP^DLnTBi{Z<tP$^=
znhM4{XWJyxR52w_OH&2kNi|jK5w@jRc{J8IOp}m(wbh|aQx$DoQ^ns+Y^td?uBnoJ
zdhW(wRZSHjb|STx|BW?O)5No`(^RQ}HK$nBG}cs21>>D-s$we0_ZOVg!P@6xbhjFV
zM`KF(6Tx-HJ89YO#jq~cgdJRzz&i@~)Z2`WSvh_-*;q?WH4y>WjDda9y4{QG;BRWw
zR;^LS=6E`~PyQ=2htEI}@J&wGK8*h;IMYd36k(r=wTmehM96-eE-Tu&E{ngL*k!FW
zf`%A$Sqfv>oRzPXLzVvi!r@B)Xt~J66wGcOF2i&l`*Bpe8yXt!O*@J!hT@8;xMbDN
zI?7P{Q}f!x$Xvl0TP|#%MX`-hrT0utX_~TgQpET={0d&txx3(ODi=1;0_a95-jnkR
zmJjnO7nkvDu~FqFewvkIu2YvukUjwyY8@u>DvD&eZOx@@w?qXP2P%|~mPbTKZ2@P%
z5Gk5MU8T*kJ)7Ia4kW@ZYx0YbuP=!p&b7cI434UNm!(Z<mLlqY^Ueoy3Ny=@^#ht;
zJH!`;2m3RYxYHr1v8ApxYcMY=^JF$ky|7ONMfFJAdu%A0q8=&pWcF_B$J8UUtYmrk
z2{oogV{^5YhG(6ft2gBvA$&HD!YSosMjx{z)L64~5^D}XC-1GV5)1OAd^WVxM7#Em
zsf|01b8=#*jLg!Ns}>u!Dv4F(6c-!DJGbIVJC}Y<Y5w9|`A&Rs?(_(!;#he!Fw=*c
zgzW3h^j;gz^!j(Sc}!IsF3uf$w>WpdvK`)O<9lVSTpH-`%2jK~v(9$-w5d7`tU1M0
zXrQTvDj4rvQ%%>!dOSj7C*w5NiGRVdp&;cwUXwi~l4jfmY7;J*)^ECEw_8?@X-@Q<
zJN+GP!q-fGgiASUS>?pSQXr8+8coK%bWxuM)Sbf`>0I^|xL&hf9jifWezB%K@e}w6
zYgNVg=bCp~ESxO(+HIW1-9WK;&f_)hbcx|pwAcR7*1(A4xw>W}-|)guYiU>aF~{v#
z4Rm$S+i3w0(!*sr_P}myNAQbdaN5~@D(zJMSF}qt(AhmdrxWJ|4`FLA-N}B}&`Wxi
zeNT(E;wkH;9oOcH$S1sXUE$TO+r=ALEPK9MQl<;Oa;Kj<(>=0}-3~)<HNK6;N~(c9
zvX|ua5^?Z`<3Giw9yP}KOuN!X5YMsxk=PZJAHO|gRkhZ@lvbsD!5ME@YM?5WuWC{I
zQ^O@zAbCCbrMm!EO$T9Dvi)Y5l)PDPo*2>toBgAuo1=Yniq<wvT~;y8XBK%QMFox}
ztL<ZnsEA-u%muUmrlY>gR5-iGT4V#GeptLA`|44yS{u&anm$^3Q`Ls!n`7_Rz3vyw
zCS7$Z=tq$Ds45LiL&`QcfV8*)q&>Gub2?ZriB(PmE8kED<DFX?*p12h=h2h9TgJIW
zvtH{U+Kzq4oqQ*M?5mRNx5ifA;bp3gR{AR@J?J^X$UF|3Sq4(g3r&=tNMhAH@he!K
zU9N3qCa1Jkt=?lo8?9Ainrlqb$K?w&j=Jz&bll3FTptfOPo$2kv<cEjYkZ2@gzS^5
zE3>lh4WjrFC#uQh2AqIvy+$EpUJ$qboIknoCSa>7OsI+QTU^*rV{NptO0myzA^RGW
zlGmNu1b;^>W{TQ`?9(O!!7@^0nh3S2H()f@M66sq>&RhDpyYHk5mRCOCgM(n!a8hH
z6A2H6LiY8Vh|@-jNB?eC6A85m*}Ep<gmK-HHW8<dug6%qG|)ssO+4#bO~h$n)fiKu
zfl(w>!FcB;8rd>yN!e-4xFgBrwx&7m6Pa-2d@PqvN0jt5D%xZwcRrSrpqk}CoR8%Z
z+Y;mg>W(rEjCW~X>rF;-K9<+Ssyo({CU-uTV?EJH$!}YmdOjw)c+RSc?d{+p);4mv
zNx-LQ+WA;S4?TLr`IwxOv5Cm}SSIGU9cyyuV;SCB8udru0$045RP80bSLsKnSaaDk
zspWfyy(*<L(leFVWzKXQvdYSEiuU#f#v#vLHOq=fBCmELdNup#E~A9%HNm61Ov<{W
z&*aW~GJI7d-$1fcm>hp)V%J~iOz!wA!&ud@aV<BEr8^XN0uXkDSfg%WI1Ud1LiY7m
zI!+tOiT)jJ$WzoNWbalwPFQxO<FxU087r3tRyxYHUNcGeOHKo;#+V8XtaL&ZjCZby
z#Ju;V7g8>q@E{j>-jh5}!aZMe#7)BgUMlds3FmK04)#)k6CZJcCpi=Mpx4T%aL!R0
zE)CT1kTLOBq&W>zw#n>$CW2jQaYm}V;E49;i8tX|qLp{jCNDwu4-Udxb*dIrsU$6Q
zQU+HNhs8^oe8hFP+zT7F#P8)zZkS2W9w|j0sW<_&yXtLrm|*Nir&llpL<Qp>)bt95
zfNH_Ixtd17Dj*cRgf$X4`=}{=a_gd4J*QibPyu-(XP-K2il5vnHYVP$(n8_d&~&7)
zDSGNHTm=MzD{#$L;qxo>f{~%#^1#sp<$)vc$u&59j9ss9`2{a}5&vI_|NBlRIgMmJ
z$p(^*Brhd-JsqT-&A+ygoJVp#$ps|;z|gJy>-2VzOZeBz_}32p)y}`J;9ooW*Dn6G
zn`AG^H6;5<t|hsi<OY&gliWmdGf5Xo4@rrnm!wS6PjZ-Kh~zesQIZPDQIcaMms80r
zNOqI#A-RTRAIY^O*OA;nawEx2B(EXqA~{G>A~{4-Cg~$NOfo=n8_6(9h2#jyF_PDk
z+(q)6BzKd%k>nndw~*XR@>Y_!k^DBv{UpCj@&L*2lRQZBPLhX6-c9mel0PJQAIbk9
zd4%MTNggHnAjyYGK0@*_l0PN+ILZGed4l9GNS-A5B*~{qK11?3lD{JPJjvgXJVWvY
zl4nW2MDi7quabO&<eMblA^CffACUZz<av^RCixeVe<k@j$-j~OlH^w;FJ_~eK{Au%
zM3UJgb4XfA=94TUSxmB&<Rp?6Br8eQkep1imgH2DjU;E16iGIbY#}*^<RX$+l58Wn
zl%#{?N|N0qdq}P!*++6M$#o<*klaXe6Ul2xx=0R^lt>Pdlu7zX4wDR!+(t4?QXx4)
za*X7)B(EcRJ;_}pze#d8$s0-TA$beQy(DiXc^k=ZliW}8yCe^g{65KpB=017h~(WM
zmA*UBUpO$lp8e+3SAhH%{`CfuH<R2$axckSNq(E;cSwGZ<n1KyAbF7FA(D5K{2|F7
zk^E1R_mg~p<WZ6jlYE5aPf7la<j+YSC;0@)lO&%e`3%Wlk^D8u-;z8{@<ozoNxnkz
zRg!O#e2e6}B+rq2pX3K5&y)N!$-k2Pl;qz@zPA<RMQnpV<X<!S*N^$v9RBq){<VOA
zEhK3pSxT~kWF^VTB&U$9BRP#^1Ib2`U$MadgXASF;uA<(NM@6?lFTPrOtOSz8Od^z
z)g)_3PA55o<SdexlAKMlh2(samyxuSyn^Inl1oT-kX%O6L2@O@9+Im`I!X4ETu*WX
z$xS4$Avs9WO>zrKFG)YiVUpWOhDnZ)+)ncABzKV9Npcs--6U@$c?-#ZCHXCq`$)z}
z?k9PG<o8M5N%G%G{($5?BoC9kkK_@OKPLGg$^Rnx6OxaTJVx?yk|#+1g5;AV|Ci)1
zNj^*R6v^jFo+0@H$(Km}j^t}3UnluC$#+P;NAeFOKP34lk{^@&gyd%=KPUMm$*)Le
zu=%`%WEM#a$vl!)l0_toNlqeJMzV@zHA#VFEy;S4(@D-GIg4a7$=M|5k(^I*AxS&Q
zD@iUU*-o;9<O-4wlHDYGNcNF*lDvxKdXiU@+(gnva**T@$t@(elJt`dk=#a7Avr?w
zT9RKU`3;ggN!~zmH_1IDZy|Xr$#0ST4#^nF+escEd649tB=08q1Cl=?d6?w=B#)3h
zO7cOHkC6Nc$)AxtM)Ekx6C_WPe3IldB!5Zr*CbDoJWcWp$+IM1BKa!G*GRra@@<k|
zko=P5#TS9h0IBp9(Z@N6Zf0M9gx&l+{&hadg(U4HuOzvc<c}ETVUkBlK1lKrl0PB&
zGm^(h9w&K%<VliGl6;2bFG>EI<SCM;NuD8jmgGw$UnTh($+t+pP4XPc_eg#~@<Wn;
zCiyYRPf30TQt3Mp*<yxTn8(>9^GI4r7LqI?X(L%mvYccE$!d}{Bn6VSAeBn8DqNY;
ct4dF9efnLx6<)@Xn7)PkcA%6hm4lo9KM1E4<p2Nx

diff --git a/doc/manual/build/doctrees/faq.doctree b/doc/manual/build/doctrees/faq.doctree
deleted file mode 100644
index 4a2a8a56584eaf4a04e32dbb9404f6b859c21dee..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 20886
zcmeHPdu$xXdDn}ic$6r~60P_lbS=XcY3q)9Sz>9$u1ra=Oq;4iJ9gV7r@gzm+g<MM
zp7$a0oVajeI1t+@&^Q+$1q!sN5fo?uqiEd+&_`MzNYDZX3>a|R^pDo48z5~_v@TG%
z{j0xkW_NaOb-X*#?!%1@SR{96zWL^x@BMwVFO7Wt=dWxL|MAJ1UyUQ%4NIP1V_}Ey
zqz6srMV+s8X1>&Uu`|ub19LU><Dkkqd<#ZYE!(XH%<FuvV{PGMA*)8V@2T<Dh&5`B
zeXcW&mm`rKxlDV-@4OhW=VQQk+s3(Yh1HBJF$)Pm*r8dNwBu>EM$7jd`$~t9<D)GT
zm_!|GZ&)#T!HlB7uEY^`LYQy2Yay`YV^!A-Lp;RqBc9omzwNBWt?ZAASzQTOoyNp`
zEHWGPs$)%BcUlvCysXG#ZRevYH5O)TW@OG<ev{3v*-hV@4TI`z)eNg<jio<}QL}Y&
z7V~GDrWc#;teibtH=i#BVbtL}T-#%v#cgp#P|R=HRgGejn0PZ$iCvdPW!J`}^l)@y
zkJFp79kFKb*C3VI2+Wps(`!H<$KDx8i9^oAwx;;O^DML*o?&`5<6Hm+h;Zm}z&i36
zK%>V%f9oy~-8uv!gYd^YruAbu&wKFyz4-q=qCFO|YaM<NtOjsJfGe6hxY#;k{RE(W
zI@X}&!O)<GF=!41J0W>ABg2{Q2iDo#-{*3FPw^wqT5Y3d*NnCw8<iNmZA6wG8m+*0
zuuH@CjH_`NJ(}&+%<uI?pS|9{YPE|1Uj+D~0AD2V#RPoO_KE?(chaqYeweNQ%%DN1
zL7(S9pIax#sq?;Z$?zB?Gi1av5i^L(D`v=y(62|UkT@gqjUe`n1<C3fZC=jP=42n*
zoUHjpyGUyl)3u7}TE%p&V&sEDUNI3XMW~ks(SUg5#X*BMPpJDdLV+4FsAC$BFF&<0
zX}*~!&8a@5xi2FP_7CVqvuK6QjfnAUgZ4?p_?1C}HcyNa2@!-QvcN5@ZpLn8w0zgD
zwvEN*#o3=;UKF~+^CM$nc~Rq+@8yZ|P#>ZcNtPfxSf!Y(Qk1I{SHhLz3;3T@3RWpr
z!xhCT-x;)TBF>)<8nk)hoFw81snMvj!rF#w*I8u490|Iunr-?ihH4c0VV**#`%vfv
zQ3y+QkqAo_)l%XOmZG0xs3Ox322p^>^ml^>C1hgC81z!##{miIyZ<19bn<2$Ha&z+
zKX}OtBh!UpZGi6@#$%+`@rTmk&cUr)w&V$WrVn8c+6p3gtRXcyK}__va{vGb(FO!`
z_K9(M!?g)TeR#q2psA(BN))lNYDbpwq+JQv^74}z6FH}QY<I5DcJHa09#pfmSBd5=
z5^yjQfQO;0Hhyx*jUO9g9FE*64lxe=lMr$!7V1BUn6YF{TidOfCF{W@{Se{o`d$PF
zGnBNN)*kQ?*RPsxhmnh;JvUQ#hdAS?HDf(sJ-9f6H6~~c;pB}~{brYsZH@3h*BoP0
zIL2_3rDJS_mLJ0{sW2mZ7FlLwnDD~D=53<^#VTf%3K#vL8M|b*A>mCtg<VRg2_+1+
zF}-k=1*O6Q+-|$Z0t^K-j8EQ>Dz9L5Ia|4gWZO(=R|_**u32T|9MP=QJ2uIYFG)v!
z>i^Z2Qb*Tm<s>Pu-uU=h)141npbogA1zBOibw<+Sc$k{<LBbcizz>CPmvq|NlRntk
z?-rrb5PrGy@*s2*pWIp`c15(~yhK<EX%L({*&oB9z2^kup~owNe|^9XoUanXPKy4k
z-RSQF`YHx^?hIZ&#;PWHYpKcvtFH!j1SwCsncRJH{}C)Tn`A;<X#Ci0u%m{JcpxlL
z@M70(=tv4<U8qBt@)d^PAt2Sj3@yVCj4-Yvq%!J(-!z)6=?85iG-2?`Q3@g3B@tH?
zOgHq6rnv$y0MMBk+9Z!Yz+Ptv*n}7xmfawstNQT0tA6Z7hF>?D2-yP<e>YnQd4sSJ
zS%DunEaULCIx_=-7xY&(4k)l|7tUHy)C%WkDHttL&{3p~mHePFTk-vs*{XH?bn)1+
zqBf^wMNRjSYvsdIsHYJNzW1X*z|2v2O|YM(;zoYuBPVXEFAwxOwFHxCNanYQwMTgG
zVY=D6Nhj?P$&3wV@=+-GIIuhX%qAH``2s{NVc|w2GiWe9Pr>Im&wr9YD!ZTvpmS>G
z%xthtWtY`{oj)RUp_u;|KY2l!xmss&E6AN}W{PhE_bYWI`Jul@@o=Ku_XA3*kKzj7
z6SgedTPvBhT9R!;@{E!EYdIHQxhC|_Pip$-$wdDctE>_t_hKkX?vi52X~8gzbDrTt
zbzHaEDrpIVb|f^wTa>XuP#+}*dJEr!Aj<Y^GTOb<N=OVH$c@P-n0Wa^;X5R<luX<K
z9jB+Z_}LG$vf!!dOs<`OCh4LK<P^VW;0b6_`7bnYWSBX_i0BYYJAX**I+e<57Yis!
z{3ncwE6%s^LwOUQ+K6v*@^y~@sTn|FC&&O669&|TO$_d7EmLmA;4}f4Y8q$DwoLMz
zH-V&(IEi#$*>e5?gA?((3*z+yu}^SEA>&g`nv(3P@&NeZAsG%_Fw9V;7Vf}?^msC_
zg2_Ee)xzDt`*tEg|0Jh#0ArG^(iFMX{?vJ|n>z0b>ST%89#}bl(>>*{hnVtL*_1oF
zRGfxfOQnDL5hNuBWLSyg9?ckqs5K7AIbW2Vxjx?V=2Dl5%x`Y8I{!-p&R=?|JoQp9
z($Qv4w$bIK?gx37{G%eWO1;#U-C|THptLI@ItuDSxTY>MDz<0BwWQR%hw!Xc6Z+hA
zRo1qUW>P7tqw0$tuv$s^zhMNYl6=q5K+Xil1u>oPA!Qw|7<C&?Bt3Xy`SMbsj>yuC
zjv5u5W|HGW)Og(tY(ItvjA&TYag5lbkWwKiOEh4B0O@pi!6g)a3SnHej;0HSh83eY
zQVf_`Gb`8=ZH7Eyc+^yvK`uIOrD5fBpOB|Fc@!@`JAfB;U33^ymNFyk#rMH_%3hqA
zN1!l&O|Q^g>)~J|ED9e(mUZMoIe)8xl4{ubd+iZF)eCw~JNE`X?fjz-Xnzkt!lF5U
ziD7(Ki+Pm$E3d)9(@cXCkPOO_<EZV4B3xGb%HB@#T{;CaPw)#p$UMz=h-LWpFhZeg
z4F48EM42Q?%^>LSv}y4>o$L6~&kP7(l>qSVs26rbnXcwHP21}@U%^~HhD}B77IF>S
z#jpwTV%J*8yxUP{UA#uY#_QY=QxmT|w<E$QB79`7Y6f_<2H-_gG)qiVTrtI&!jF`L
zZnD04-?aDn!uAdxsJQ(#EI6#?eE@j=>JVGgEH6!wThokNuCPhe&@3-e!yaN4&GOO|
zHpCRo@*csIOma2kUd=4;shV%t!xr<ZX)#avYuHyWGfdX1j~O1eFqRnJVTY>&e|x}z
zOH=zgAy4_Nw=i5YwZ$$|y8;bCrZ!<jBr;*|s7jUCNvi3YK~2;=ml-lCHqtjw`L!5E
zY8utP8Oqf7EhK6pRw_J;&Is5~$`Mgk1`PpljFF?YktxMEbV^VJRt?&%h>}Z)2CD|u
zfnZfxV8dj`WYb~&sE~NHKzJa#o51&jP*xem+suArEnzdU0Hw7qL){_wPbPF0NvHq-
zGY3FhTI8x4%oC`?mq11fO9LB#gY^Y8Z7@<@lx3z-h4V|x#?`9`BZY%OHr%I0gtwBy
zt4Tn4PePgSPssj1OLiqY?+%b15}Gtjnbm}+t5)|$reN;R6imW@rhzgwu@ChJ46RZ~
zD*LFETP-gqs^wOvDKh=X05VAx^H!>2{=HkpobFOF--3!+gpdcm>%zrWr5rPkV922x
zguK<0wkXtZlHY`8kdrLtwuq$63rT^b#Tq!r3~Gi!VZkv^^#qbRrdv>YhlE)u63<|3
zRn`&}nnE9h;A|tjXu?0IpDjNOZF0%6ym{S6n@kg3MwG2C6`t`B5k#>E?d7&*xPn(+
z4GPo18~E&K<{;H@ei`}{x$9bJOfQ^YK5AUOxM0j3J2N*!niAL*R#An5g0Y(|mr-Sm
zx=&!bJg7#mO>6|UY*H(MAfsUcGazJ{*Qx6QV^9SXd2rvuWN1$GZjru<D@|nf2?Zj9
z!iP#$3MV6}e916Hsi;qmEhEv#;n<Yyj%^>_ADn}VONCb#TK?syEfnsII*d2j-8xvG
zilj_+vxIQ5Ba%N+OTw?Rf|H7|K^-qbcneB`hy_y)hJOGnkAf~-2MVjf@1k6j&Uf1>
zBmSR2MG<%E7Kn>RzTU+B*NaG5z@IoO$U$TwYLO!()g86UB*iPz2WzD8&})`bv{YCo
zrPpFUUM7uK^pXI1R5X)1f=&xCj}}(pW<i&c@{)}<=}JOl06zJ2Xd1<uCXIliL&dMU
zLdkRK+T~R0s)br1r8iJ~Cv}S69-9=DEXk{l2;GL>HY8hQf^~}j2<}|5&b_z5ItyK_
zqs2DwWUfbvvWhStbk1oyDrq@GGuSMe!6Zk(iAFQn;N&7%?LIEZrkc1CKV(yL72zHp
zKsf1)yq`KFa~Q70JD0lj+Hapznkfx&C?{A<{eL1REGSZS#tX2eqMHO6#zq5DMGrzU
z^B{WS#*kwHC04^5$PFT)I+f8OK`V^GV*xO#L|Kq45~f5VrFgpjYN>D;{l<_a1WIUI
zLM^OGR=(l;H6fZPoI|dZ@O&(BSEqPsz$xmU_afLoJ;tu%YoAjVBs;#mTO)%r_)bLc
zB>9>hrZ_$%T0`GEDo#RpM*=Kb1?V)|=p7)zGO+{=qv%o{!v7)$ij>dZ0x2(dk+M6#
zc}yk_5wC<IuenjA5BCT0csL`8Ffg%M)WHr1Gndhv&>+Z6W{e0U&8j&8_D`C{d7;-+
zWY2ccma;_UY7cr%JFj5!uxZK&5Qa)qI<FE`x=fH}DZhlN!)Ga-Z_s>+KO{m=OFn~>
zYz@GJrf6wNn&OHn{nL{740lRY86G@RvFR^k<zW+(p8=-7G{ok##3W6To73!L|HLHG
z!yaN4Eip+`*bq~+#N;xjWZFwZ?t{#DpCsdbt1Z!k@{%xh+G<y_)sp)r!XN0$<>w*F
z9?c{VKA`h$!ye<r=x_L5G058k7(^I$$3Xrdwe4?VhGyG;s=v!JOowoS>@Y(W-tP^C
z_oEu#?{?$;S>32TcPPohrkTr=r8P1?X{C~~5U^y3#^6eXaJLbT;U*MC_pKK455@&b
z&(^{slB?HQ;k@0j(fVzuZ0$L>fdpk_HI3;Dwe!p8X2?O8Nlx;5L{|)DR?{5jh1#i8
zbA|*qjb!KYg#~0`Qy9lj&y<YEkdlDQf<`}7L(^_+<C;nyw~-tbxrqeDtn&%DS#hO=
ztj%oNNIgrNAR9X?+X81Fdguf?c|-<9;3CZqwcdS)Qq>=KGG%t@eZfar3l3lUXi1nx
zU3YAFFj^bWe-ew1@IGVv8o;E(uFrJYwlkZy?F`8Ys-cI7m2c=daqEmFX`))`1is?J
z40yIkJX=h7R%`L;vni!Ov!=R<9YSA;rn;=PN1_iNp3oUvsT9cyn)bfgkg2@%=V4z`
zg`z7G{tHrcSD`S{Jf!^sGAkk%3H>21M<fyr_xK{K1TnQvoH%y;j4?frq~!dyxnpz3
zuFa68C{U8I!bGTl^}@pCr=Gg7bpFD5O&36Az+rwOM(_g=KdwNWK5^<=;w+NXe)>b9
zm5Ix}AZ%EXMePwAJr-+PH9IM_rU#pE^x<QO>H=F_e4WMxRwz5%%jLVV=ZBMQ?A$Tb
zs|DENv5qym6m?8;ryj(rAUG|aW53*z&OC-Fo2%Elsl8Hx(8PVGOao(KVTHB;uPE?w
zrzR`I^W2yz?SW#RMM0SUT~3$eHZF*5bPwg*gL)P0uHRJMX(I<6AWMZB`Y60v(H?su
zm0h}{2<?x?l%Qm@s4iNlQGSPTH{Dr4BQ6rH(@K0L{lE>#d2f!nZeoO^*h?A{<j$h+
z@jG*vs2@G}RUQ5DO&xs*h?_WiT37@!PiR|7PB?uBl1Uz*2kOYbj0ppLYbQDKpT*F;
z>UKUW5dJ7n9O!Lu;@hAL6yj2dhf{RbE=AWJyZ+)lxN`nla?edU1!u*LElBq~GM65%
zX+0t$TkSer>OLTCnUtu}=_PN?lW&E3Zc_O<&nmWw9KkacTsMdX)1tZfD)i~&sF++J
z`Djtz6Aq9UuMHU+|J?9se?&O<M>rRF&kT*8<lC;W{5Qc<f}6X-^7JYAcu(%MGOqZY
z9_)N`gpL#6u#xDudT@D{Mk6go9YQxp=-<XvJwm5tcvm0M4XuwzM(BI<d`5~+kJc^l
z?&||^%0=rm<u}BX{?U5M^yILA7;f&*891;1{)LoU_&)YMK%Xi9#|EALVhGY|xdNIZ
zN!wTR=uJ#?8oxfoDq609ro1-96fIX!#}v(%+rkf`W{X>o5k5+SO9?%Dx_PNoGQLP1
z!%0B+MZ}8YI^z7i@r5I+ey}30-yNAZo(^L6qVz7N`2Jq+)Cp`G>3sr_glwg*4rONx
zrdTt4*I9hVqs&^i>o*?h;Iikou1#eWcP_vYQf87LrV^l?T;NSQC8Up<hK4<g7P$-n
zB54i&{ax_2E6dQ{4Y?46rfU<_-_@1%Ku#fp$nVSwl0|X9w3uEcO>V@B%dgrfMC;V9
ztB*>W|0#z-i*45u82IK%w=dSMvXbwtSP$?6aJRe=w_1rS#LWa;x)a}c8Hs#^`<+GH
z07%C$T;SOf(|TL^Bm#N*LQFY<wZwO&PejM(65okdCTbDD$8YvQLCUY;;L;x5`$Y@q
z=x0n9m-UoS%18Y;!hO5Wk~O)+$CHjHKj`2O_=UJMYc^Z>V<PbV2&m$Q&02?VorOx3
zDBz}zw}Jua%A#-Tl;gm~U%Ml}TBcrSdJ9xW$X{=F_-%E7L79bVFK_VO^wAwJZkE@m
zc#P)GNiyNBGFfy?3<2;i`Gm=Sim*(<PdWV#4%SO1Bp=2BSs+75M3m{;A;`InBmQyK
zpCf!9)k(|PT@;7upb<V&W0kmp<tC}i6ja0rR1KPVGEN>cqb(7Bwg;M(aShQI_wf06
z9My|+RCns|ySrbOSrGU^88zRU%L1GLp<2a<a`s5dYfwf6lny_Xdy@m<T!p0aNeMT@
zA)S49_lw+QzL)j@-V3cn%^+?{Z-j#4HN;Wd@HHg9U-q~_X;H^9mZ5NKiH{;xRL3?!
z5xbT$gf+@1sR5{*J>uKw(>S|pakEucED6Gj2WdD$0QZO|g4yZxvq!Cv#WlZ-`^Oly
z7hS-9$jbUm!6ntGeBDOvTCnV%GQ2-ZK4BvXmSd@?K<sv5GtkCJl0ohObayhWEG`Dn
z=ag=z->?X7ISbijqFhwNkx$^WQ8+3BP8aI<K9V<Zj@JMqx;7efI#2CA!Y5m-Rfd$v
zj}Osi(6HSCw*z+)4gRS#>cZo&)M`f-u9(xE)efJckpcmXEaSsRumX{|cFkJF`;MIg
zJtq;3<-pUE4E+5m`2Im1TCb6$gA~;wtFyS19|BJ{%St%a2Fmj0_d4Gjw!O$)E7Q$g
z7ypBQceoVX@?BxmgrGeiL#jg%YQOkf{#h2^6u@JU_E6Qr=Xa{`v!%R&%7TQLy%M(&
zn9|3)#0Rz#HLwou@vAnvvXox9jT8k;YHpa_#APn5WlCYBFHo&?z%tDWt3iU>=)SNR
zu5YgMsVYXTlo?vi-7+qh(6=81*82!DY2%Q&b*a<V`F7@A?=0b}<4&nfAim&4Bo)Nn
zkFsn(7n|FcxAUaUok_^4BP=n$t!se%PS=a%mul8nj1OtCx*9-!E`9b3W5?*B{C(QF
zk3b)$f2jG?snb7iQqJ#+vw)hD)pGuf9(|YoDd2%KM*qA?uU>Wjjefl0JVfK)alT7G
zK5z~ZFfzH$?erTNcV`Ojk8>OOKzy85r`CL7r^Nc}V(oRY?z&iZU95UTtawALwk{T1
z7i+DHrPjqt>tdC4vBHhmI)qPciS1YuVlViD#T9v7swJ+R%8mR9;UqS)Rc=HyjK3j!
zqTi9-IUk5(job)%7jh%yl!=WvyJ$<4+i}j)KNRXaG5)a@t;a0KGA(YsY`t!M(|XJL
zp7p-<Ls760-&b*{1Ry>=67$`<sEE_qjT;Kmp5w&i6Viz3ILRgY6B1+b6r$Cv_^y&Z
z@$f+Ip&C8j1#vuGRZP0A3qFin5Rs~y%EL<Dz{h~T7WePTFilj^(kZ0?7JF=g?&ah8
z*NBs^fh87qhOcz4LI<G;4{e6;{DcrYxv)~-`eVA~IvKV@XtMON@;lN`oMm4#NOC??
zy!be{EFc*+q=XrVlRVyG(Ssz~*%JkeUL@u6{sC|t9CY02{65C@b<{=@r(rAZ=!&~2
zJ1#9<yiAr`el`%6B>Bi)m14f%74V$j!;f74O5M{Oytm{1_x8?^dwcs<_vXBX8U1(0
i_=GxMp#dk5D0br-Y1{^BcHC7(H*8{5$sI;X=)V93snXm4

diff --git a/doc/manual/build/doctrees/glossary.doctree b/doc/manual/build/doctrees/glossary.doctree
deleted file mode 100644
index 9d8145f10975d27a528e11aed72c6cc9879a7b0f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 116311
zcmeIb3!G$ESudK`JW?}xkff6k2q`*ZdSJRU(>>1wgdvlVNoOWuW@0*E(o<cvyQ^xd
zt19)#Ohb^zMJ2G2d!^+FilT^m&H+Uf^@xfd4jf;A3I~;=2pq)g^%q_~IeO&&|KD1B
zt-V+6y=&L>?qq=BNA`5>y<XpXeDCjDuiEg#=bv}}dHkP$X{A-}_iByqRI^p_x~u+X
zzF78}z126bZhQ6WD^@4`i#w%L-B!O-_E!D#P@-I|H7Xsix%%L0^*n!5*DLpGt)?ko
z-B8_F-Spt<1U_!))p`vt^vU1+qDHIREp=8_Sq4QeI_{ljXQ40Ox5|$FjqMV8>8(~T
z?=F=5LaEp5)E4?ZjFO|euvY0}1pcOSqtxx<CH~&fEG?_QHdp#>`(vS0KH2dWS*GuA
z>XnxGX|;N3^}6a7|KfQAa`i%gV*u%$H&;r%(#_S@vUl_8+H$LTbGK8zxm@a&OBFBp
zce1zKp1B$IZ(c4n`=!Rss`kxG8px?mx3}tF)TlMR)!7UB3xv1X>P2Scq2twBx7aQ%
zdBsMp+v^q&9yvDI@fxL`S1I<q&T_Zd@8Zu|v)HS8#oN>fiou{uoc!%Y)p4b`*l8^n
zZ#jC$ZMU4*zia>g6H~!FUyRu-Ep<xmYG^sCJJd>z`A72~#j09IO!BVof`3`JU9B}w
zPn9Yaz123<nicPKcr>zas!zl6R<FnAxB>q?6aU?a|DMIA#%}1;WPvBJP_^a~_LhGM
zfW5VdN09)dlr%fJW3{^RNN=^&uijLBF2^9Vzp+>9EO~Zw2b<M)I$Lu4WebN*3m0P}
zdDxdY4Z#ViZtypo{`I!r*zI*%&83twW1&iBrcPk1+p#zkz=1r3fxM*e6!I_ZES6VG
zk;&RzYhv>>OO4gX{EZlMzf)WFr>nhQyL-#cvbTF391E{ARr7j_Q?1UD?Bi;0xp6aE
z<6KVh$0~cB)8LQ!=TAkJ)k_`hbah+x+12OFUWDpX?x4e?Wgpu^g|}2EsuyCxZuK_@
zM=3Ou3cuhiT~_fHYt0%@z&y{+KpEnotDHjfwVt;eTk;~Fw$K-U%Yn9cx;XKYR@2)i
z=V+oj7JX?J?ycR0>hl!B9NbgRIz~2f^-#1$|5A=(l08qdW1x@aQmwga_p+MP&6v}-
z_7_46@SfP6`yceQviz!?fr6co5U_euX95`Je&vGm&N~i-({5oW1=y$8@w{TGS1dJ)
zty4{}Q*15r?_>8Iz(18@xz*`--FB;4!Qm{F`n_taQ|kdmJ>nIQ94j6@+Vy%<#iHOE
zAiYwf+bWhzjRr9tx*C5O04|mQ`uLPaV!L+C%$!go_PWIydhQm-S(YfABjMjdk#6c1
zyS0iZBPvQmploOdy`g1kv{1%aflL?sjmAoG!9(R%f2rD&Iv7roD1Q<ywmM#~RxW}f
zmOHgJ_m^sx;1_VR`{iE0<82q1#{uF}tvOx<KxSZ=7XIDkAj>Tvi*~Pgs_HcfL9JV;
zEw>vUsjR~5GTOyj!|UqdR<N0CO`)r779<06b*i+|EpjjP@SjvH0G92=YU`Buh}Ti0
z;RF&&oQn!U<(M!_7{g+tR_+zM{e>Q2KUM2h@dZP%n*n_*!m)G5%&rqbWlR$GBj&u-
z#yHgc5;Tr^oU2hPbXS_K=E^dsNX_&1BIva0SSo7}PGNb_H>sI|v+H5TSGwCdSB1qI
zh-I<sHSv}$1=BiFT4+7uZBuhC%UA?ofFeCiC)+9rrYl!V%_Xn2&{$C<k4N><;~40Z
zwSO(1{J<J;gQadf35L4ubg0`0aI%jCM^_(ZLq|Uzix^1KSnYwJnxaS2jS#W<qz{^M
zNlAkMKa+)WeR_ZhJe(`l;*g?Lix7^@)xhqaLn2QQ63Khx6CIh2KRv?6uW!JzkFxir
zr?|auKj^(LFM_>azY6_i*#7m)QEr`200$Ox0{jnrGvo7MqN~89A%@3ctH?wK9A^Q@
z?bj3&na)rDieih>Tm2yvdJ|i#ZaY$a&Jm!LHwU;ekad3~c;R35!q!s1TbzIxckK4t
zipRkIgt*7}uK|GdgR+w{bCT8nL^=CVLZALM!b-|`Ce?5zWjL$VpLf{F!!JF*dY$wh
zW-06UCmkToRjO(SWLsB%HJE~6PAo6^Jt(1g3u5RSwaQ>}_X%)FE8Sa)<0RCNlo~ZK
zVBj2!U?N)$@HE9L8H^$rF0clrW*O{cfqZ5Od_ox<7&x?sw<IDkIMhn5tf~vk15OA0
zU=6AUVe808b!$stoP;|mkcUycD)^1X5>z0?UMm;_-n2T9slmN<yi&K-yrsBY>r&#B
zHcI6Fy4wrh>2|FHPK@p9ccH%(lhto_`|WnCLsqZUSRy}MT?WfTRx@Z6gVCHU<bLmw
z68P;S+&f2)%KQ|&U{f0vGOTU%3${`5dSIS0%wBbBTni^>Du7&LL})Hg@tD%+6n8@@
zqlD?bjx=3gP)nY~a@0FX8wXrRP}wpbS5SI(x^~cTVv#XF?vpuCuf{;KpypQyKn||R
z!kj!evq){26TANd;X0U-vAGvv9On)NPukiKh1mq$tr;oD;RlHb=TSkcAS@F5NxU>j
zY`0m&T~jj#jU8wz8CTH9scNlEAxrR#LT3wJqXt>6t6+mHsKieo9-M8+E)cd_MX%e#
zpS5lkXbw^h^nR2k1qD*9B4$!e*LnpYwSF_GSZM)eZ7+JjFhHG^zO-g>lM=`r#3rZ@
zy%sd~g<xf>1}INZ)gX$}1n%fj$mI(6LN<0W)szzUp*Qs)yRMj$z~+$Nd(c3MtjJHI
z4KOVMcF3%?rG7`DcdygI$O5bkC`8_rp;7D57b$(snDD7#Ot{-%LaedHg^ui1|0(Q?
z6!EM6K73E&LW9Z{7ha`tVYG7x8>SQ*^W#67!|*#8P8N*#n*!DuV8rhl1tabjW;J}6
z3{KSZIyU!uj3mH`=T6v@e!|R7;sRwwtK}$KP3O14l-CtgnO<%rzI^L#v|G8_+~`{a
z+E)d%k@@gwYyM@ze@nkgmpjOJ@8!I(w+P>T5p=JyC?nvzrP`OIn#*@r4aM?%!dHV|
zto2rk&|!8wph~J*!EKVWCT$9F&{}C(X;I0jEJ-L)xL3?@Q{%<r#EbhdUPX*dduMj-
zGN*Uv)Xo!DQT{#a*}G9P)GxzatwF(NF+M>t7$2Y*jK6z-ROujHreXXWla`O%FUO0@
z4#pqoJPzZ>7t$Di;G@~h(=tO2CJ!0bv|Xt_B_ngnW#NIdV|)%Wit#zo+Qbx04XjMt
z-1SXI1X}Dryq~9OE5OJo`q$MFN^g85EOXs$t>pz#&y(?@z<APIDNfvWY}Ou(v@&MV
z7G%*z#z1Lp``0Ucq(?ZZM>vTQPGW$AT7lVr#&mKZ5#-dzi!|gUwdSQ(GH#lCIgr=*
zp(czKG*ZAe0%>0GQEgG|tG$}y`xd<3DG!={ew#fuD`tR~;9qT1ScWxzd!aVvO>NhW
z0Gcka8!S$&(rJOI24Y)i!Qc_9kJ2bmYMcby-2zu#DjdUNHN45=D{ZfMOt0OsausHp
z1k|@@@4lS|_016V39n0@oSK7P4ZaA0b*oeyFUM?*aWb^yn0wl(4$(AJY_&bb@s=8e
zHY~KTL&3&F3sAe$>b1(P2F)cv;1!RniLEBH2Ut6h7hvQ^g?^*dk$s2uN(Iao^aTWd
zJG(0t(Vw-E{Mt9`B3KOZs?m;$Yksv9fGcV!09MpcfL;3>3cxPYD8Opc86gGGl^qH&
z(0LpMh%clmz`#d?Ox`Io<Y4v~3h)yGmQyZY3cx`|DF7!rpa6Pm#{74GQynHV(P}HE
z)003){dH`GS75@k(kg{g)7u`2R$ZYb_<LJ04TDG>yw}pGxNio^Psnx}nKs3>>5mCb
z(%NY?lF5Vj4$`8-MbdWm93e(u#EUdyq^kXqR7<8t{#y<dp>=^{2$*GsUdQ38&{g_X
zAta)3CLi7L9_~Zy%aXvZP)4I-vr_6*s6Z}2j}tcTQ`=IaM;Fw&LT|x6({k>Tl!8($
z?b)}>l9cHXFa4?~dwdq#eid`M27cS>nhC7Iw$ldJ?%w0zT6UO*Yd2h&umy-~b!Cfd
zMO*B2?O@u(B3jq%)HcWBDhwoxX615}J0mk-c3m@v7{#*F2FL0tiE`O$Rnw76z-5o~
zBz_62k`;5Q<Cos}NSNz}0CQ;uNm<$C@B)h+vuJE+L9=)VW${MFX+t~k$0G<%4_MjZ
zIA9>VV=>t7S)5~zDT3|p$BR^KC)Ex}wPb8JcRqRV17Ii>d)Y0*->3|iRk5gP|6hd#
zsh8FEE5UVCQ_BnGz62gM@I$5MnhbZaGMc8;7Ev5(aPKsITem606%^lsZNaCvPO(-2
z?z3=!l?4Q|UMeoZW2~vXxC}allWeC|_A0c!$zY%$hLa@>ci@Ig#cFM-T7dP;YXG^%
zXexLl47(o2t$+7zG!+(&FJP0bD;nSHpmBDXhQ=Sk_t?EHCPP*E2|?rECo|(P!7<G8
zt7S}1xh%|bK4@IeXB3UARZYjV0UE!FC}ti&WJTi&ucS9V5*mNTonV_z(VNe3SIezR
z9}@e-oyQJaEIzE9LE`V1r5hQE4{P6lrr_{kw3ESTC)H>tG1wRs{v6IPM-)Nfzl#^K
z+dNS1O11Y%wG<TobfEA9#ctax*WfnsGO(5HnpYN8M>UvKQ4>G~KqpC}=Q4a5dL9)6
z!q^r<ra|(tD8V;Hs4coc#!xH3kVxGKy-NcUL5&vCe7jS7L^n27fEq`k{q03e1@Lji
zKa&ktTTs0_^<)rKODJp(HAPpPJM2hVAv8#V1DffhM~@wPkyd64@`uW#)`Is3tczGE
zSTegxzX8v`bMvH>{)zKs&dw*~>^SJmL3;t}nB>;}BUH$WI@Es75p_KM5Q0Z|Dr@k(
z0lv^|$FZolReC7{`d0+>k<mta>;4UbG$P|1=7m+`ymB-VlyTujLr{iPdt9oyC}SdI
z4*GH9y^!F7g<}hJ(F7wGa=5~=1%Gu)JdliaUfzKdB>q{%!J~td_LAqJl`sJ`C5X}!
zXK(z%|M?Lf=cRt5S1_8+BG4!#;&pdoa(qYYmttPiIFe^1%{w^~UD@GC*2jry5(CL1
zSZ))5oFkksN0R2mq^D%ee=M-p9~ZU$lewqN8Ry`#8mmw87;ZrYh2HEDn%f7mYfjOb
z`2fjm^a{plCs5<le1YT9kuw6P8V^E}vGtP*(sNN8Z6N_Ehav=UNN|XD9cnEwHbh!z
zf*X)P%RnMSlfgk`fJmzh2TJxS#S4a|DG5Io>Oe)G=ng1yL1;Am+N3JZU>r2j0i&R(
zI?uWBWu(HZyXNz4)%4hdQSTVzra0rs97p6pBt}NmAHw%oW{f9XSGFfS-m%6}9;Fl-
z>YB4Gd(=6<4hcp8V7(?_IpwmP^X!IN&T&+ML?5U?O|PeBZ0?yj55Zv{=9=^EyYUSY
z;=E-=LaitgO6Q&EF{2oO^l~GKXV)A;ES9)gC$LwE1q{G%7l23RtP&gcuhUGG8rU#?
z>M-Y!V~Frm@5PJQQy++6QtfS0Erp+&qj$U^1_>-x;89Mw$spB1ulDT)*Vj`tWq1JB
z(hWW2rXvAui1-$gK%E#gX4-WJad?yPN{6bA0m^&}<HIp6Dh1d-VB*M)v3dB(!=ypO
z$3llb_K^G(4JoK-PjH3k<Pi`ox^Ehm?m#SPR2Yi!y;N+p5ZYO2D@7oLy5&;mq!_4S
z<W}L4+S91pE@7}BZKm~g=LPq;2Hg*+)lPJ1|AVAGLrS45TS^h<lJ3xn#3Dl++CPnf
zWZ?xrB><fPjmWN@O5+9fl#I>2Fhn814#sYpbLU~`c`z826PuNU+(Y#DYp5{5$G$R*
zy3UM`J=tuXQYfSVeLj~Ef}`<Q*VqYS`Rwfvh_)Vhh_2$2prX`VQ8FeJQ?LX;c7(sb
z3e*LnAoC~;aDcG}`Bk{?Fpq=wwue)_;H*-!fN&dy7bT_|)>oi1#C0Q(+k?UYIPRt0
zTKPf2jEEi%7e;4?$P0s|rcaUtCF}Ny)X)_FA-4@9NWhP)IOmXu|EXG|p$i!nA6#*5
z5dZ@$){{t~CxRW`<N7WBtKfuWc6iH%1j0xprz=||m%{1V(BYIqL)qc$Fq|x??rM}f
zBYSFI?697ivAJpp*$rcd&z&C?i6`g6utp=CAA=G({aI1seNmK{&MlLxR%~E;xskZ)
zD-Bm|c{-C^B=(~L^e#CNBXiTSjr!L{IqC3V-00BRU%*7L^9URLAYP=g(NgP0Qp@F{
ztwzOv2du9eWlKsA(J&yX3;1Q?Z4=%(5#$en4VhTCfzTmU=-{z}Pz%Kp1Je%F1x<m*
z!(e-GyeU37yY}zi6Kf}a{n;~8YsRgPwk2HON9&D4uw%S&W_CL&6?T}WG<`H_SCEG2
z%9e&GE;!nCETbG#Bw&=IpUh!-gUpP>0LLg(en0?n%4JcejKC;kh*4#V^~TXt5;fzh
zRZT}afg9m3VqQJKkku5UPGox9BO$c0S$Mef2=m;*xLBNkP0t!{6F!@D`hcv{$Ve@r
zS&h~(q=<VvMl@)loqZfr$L=F&?PGY6iq=@`*Q8boTB~S-lo(q@&K_?yAwYAUgyJ!i
z4OO#bj|F`xPSrt7g-|{>dd?ceB>v`xY}}n^Zx*@y`DjbyA{VQ%9q>#JG`723XFqnC
zhF%^|S{<SnUD=`+;XVgCcMwcUp`nh||0Xl!AdeU%^DhFHQ!WdV$<CstJ67wdiJ}>`
zzUinSKr>&){C)~hWJNRTgrv7U5}LV)DG|($SHBDr*}jo1;K)cswc=katdMGdfcJR=
z0B7?NB=LN_NJSE?wM}ZdNFrpBo%>G63lb$K=^k`=9`d14vM#ws7Q-Wxok40fNV80M
z0nJ&VDM>I8^3w6zKr-|?)=}WXQ{iWiVJ%b-Do;F759%afkV<L3S@xJhtJV$jO}f1x
zfCk1XAR6fe5_f_RGqpk?G&OyKVl^yT9m!gu5?g3Usa8ZzFu)oDr-DRHO*pksMmMTV
z8?W;F-#YVU5$#>0ZQo=>%gHxf+{~2qs-AY;@z`Y=qJ1c7hZE82$_}C(=sXV5#uu`>
zfavhe0biCGau8??qOA#7PPu#$Eg^_<bDZeFG^VF!%)dRKeQ#z!?U8hZ8X)U8VvSye
znHbRfF;i9e0I9UG+CZT5&-PBi5zJ${Sl|}u!<tLT&_m@_6PbDoD($17l?i1gV7|dt
z6Q~GBwo`$w3v8fP@ROU_hPp5_Xt@q9UO4MEE2JcF0Dg+ddP)-*2z<(CShQ!*__Y=x
z?Fl-gKd@xO3DQ97oH<AYX$P5%q-@yoE}bQpDFgrg+k18_O8P-LaG5Epi;_ZuB{Gs3
zl!QcXI;GIGYk^^hX$a}3@I98~5+Uiz79j=Zm2lS%I!Y`O2$s=-n}hg^GBXZ}i9tp0
z5rCX>Sy0gkf@P5H%@EvO1`+8g0mo-k_R2hERF%!XIf6ve5f3$Girq;sHxkFUfd?8c
z9g<9Z%-287I($ynA@dFma;52J{DNWn(8U1P_agv^9Ynakf53~_EvOC0v#j+Qsg=g{
z-2^0jckQGKP!4f^%H$wG2N+p$;>5E_P>zvJDumgjTWvDfa5G37izLa&lcv(P7QH4?
zyz9I=@cb<V5gzxndz1I{k)b!J93c-~3`#=ZV5;r5;CIYa5K{8q14j=WE|5QEmUumO
zdK;;B=v-{e;d8W{xC=`fTC`Vd>QK1dJ9qE4czNz==jJRtx9*%-y#0;QPKArNZN6D9
zfW_9XDT&>rVe2b5B^(uEYhBr5Ye}Cj9XdGL`Jl6JN=btU#?e(4Gto0p?u^Vt*|Vl|
zV8R+2EUZC|VqvvL>6kKL<=%$*`ZrAW04q0x6LAFTSQL9@;zxI=WMtvD9My^9xcFb4
zA|u8;+00wWYyo7b$XijcJ4SCG#<(5~g23)5E!QAW!nmt)VK1Q8!b&m5>t*MT6XR0_
z$?U!Cm70Nb34K=rZx55KU0Z>@QU{jX4s-YG;-VsBRtDHk8F@gg5ulU68xq)XL3~kQ
zh7G|2aTPCESJeMfok<@G(uP4nR*)>%$+M^DHrY#=X-e|xLA2Qpb9!dn^oi^y?eyG_
z@3Dl2r$<+IPLFgLcY5pxeR|}DIX#O4vBRara5D=sWT#vfZYKNb;lQG&M}vx_`{HD%
zHuXBJmLQaXGo5i0ybW8eH;%qq(qY_c*$=U}?#D8&){m_JYH_3qt93Y6WRu%^UmH&D
zXY~v_LkHCj5g4}g9~x=tuhhByB7Hl%Ai2z#AN$Rm<Uh%{H$HZzd*gYdB=&PuB$(tt
zLt+l~yS_OHhM8avJge~ZjtJRKC-oGbl+=)3ZY1I9(tDb`b|^5+87azrZ=kzi^BJko
z-S+$|MXpl42R67E0c!<7v&)EpHHH_lbT1IFSnC_Ie_a8~x)jXuax2ZD?Ai-{NXZts
zHw5bM@SGq_9PV6746ClRp-{&y6DYRi;bs%bBrWlXfoT(55|Wq(;dDr+SMd<GUKtM(
zPw`rkF7CuQCEOA&-~g|LKgoYUHe%+z;Cc^mS-jaw4NR`Dfu_5Swlo_AUdE0=oagiy
zp!!1S<92CNsl`OD8XQ!>=A3CpXe$Qn!W0@tX4(y~D9Q>Zdz9@+T2L}Fy0XK_NQVwm
z6fwYl(4<jbnEm^Fbd^O6xK)O{u8a%^7A1`u)G_}bzdd)OStU+HRvh|r?2+qHKC8)5
zA%+}r=q4&eAcq*_X<it3S^`gIfgw;rnTGtW3S9;r4Je}Cg-Kv15j^=Cyhz29tksZO
zDR}Z)q;L^+x7Pa<?`V{kpn;J*`moB`fHa7X3eiCIPA}LpZsh40hbkEC0ynJzqo5WQ
z$t)TjC43jArX^pVo?nP<<&(JmNCZ*l@jwT>2@is!gd2!Nhl3OJ!iaJ>bOqr8Dx*@d
zct3;L`jR_bLxjY6Fl}nA%Bb{ktx$Utln=e-Hbh_ANVz14D{kmK-4f1D=M5S+9syPt
zrwr4(ZKt~p*YY)Q>H!~XMOjnLo5ufiBCY|h$TeB;{s@J$LunSQMijMk5TI7ZshCPZ
zh}H<q_vlOw3Emh>1A#kkgj2<d1C>%6s=Kgj$=;pQ`_1y~j%0Byt@{qK{QVn8J4~+h
zeZArDx!sJ-L2oxh#BhyL<Z8e=yG@hEe=_N`k%;NamWWZxD8>%JA!<Vkj`_(24ElMm
z%$P&WVx;$X3y4m+EYkZ6GxPjL9yA*%nD~J4*Hbk%_gXM$+hm_p$#d@T2mIR;efV=b
zdDhd5n8chsU=n-kc8z%I{&b{MCr(@gojWHkrI2<&7-+$qv@d2nX`esSla}4ni-Q#Q
z(wsC-w0p`TNt6|4O=pb)jq}d}tGymjWM#V)pON17NTTZ{_sETkZmM?YwON^~FFqr|
z)oISZTrpzObwalG*)dEFyNfVm+wdZl8Dp(0rIyQ#g?z#M=Ny-038eG%z^DXykk!Rq
zbm?MjlHA64i!h|{Rv4*{nXp|lVGc2Hh(@p(uEE%MqP#Xgoab*@KwRg^`G=VaK6HKP
z95Zw7oKiPA>9|gD5>c5#+HENNB?k>T72YKY-mat)yiL?`yHlZ9g#I3mZ^Fvp=1!&S
z4g65Z!fE5BV!psd!FmB9dfU_#?-=pefO2+Iv2+su#rZ-#xrP&>IR6fp(c^@73cj!b
zR-*feYy#JHM6<HfJ40@`dnD;I#D3Ne?y^L$xTFcX0>Eglu_TA7ZpSQ61jbGQ7&?cJ
zRJS);g0sbD4Bcp1m=+kpT}o<xfq~w8aKKSl!2}ue<lboBwi+&3(z6fSs)iBQgR09$
zUnHsy-iF#`lI_5ur-lAc%eAQE-*L~;LoYgXM6?{d&j!Gi*bM!7kbDoe<Q{L>qHPD9
zF&a>smz~HT5JpcYpstW5lUDU~FP9Lg+>yc1XK}g2%VF=pPWMiicth&;BGLzP(exnL
zIrCy5&niZ6;)E{7%ZsN@pa&FXv|qSc(f9E1jGsDnO73XI5Eq%k0>Of4L=B$>PMkoA
zsc4f^1$EMJ)o@@l_bSO(4PVSlh~4{z<w_@EqQh&F^;oR!OoTW4=m%mAr(rEeA>|yX
z)i4)aoSWJavCOckr3c(6z6JNHWps}T?aQpMaYan))<!a57~MVQeo|MqWPfS0<r2Qf
zG7pq3b!97Cip!eQv%}*i7SUd9PHn>!JR%d5&J-~BOh*86%4LxxvwO91h*AD_kKu0h
zl#KcFOb}1PyI!cq%#7MH>HKZLE<F`9bWhw2McJ$RVU*Dqv$M)wQl)+b{{)w4&MiSm
z280nxenvE35dRtp{+g+Mm?n=%>eo)^vk`eqRu<1qz2dUged>*7{in|Ut!|0PPvV@8
z5N+fV5vwgBmu!fLXiGLh{qCKfbd@FSF^!D8AKw$nh^}nOi0DBE`gRCON+GQ*8EC<v
z%>O16<PeD{3apZt{I-DQl*>X)vMWnC$S5%hD@*j$jQMvD$R}&SSOYudJbzQ822rQf
z2#L)8<?itc#QLpaDa1DRx#6=~|0|Ti#2UDsJGxY4v8C;r?R6LGpT$1`f%314lb8Y!
zE_a0~+t%No0T^K)b~To4^!NtM#oN)}fZu0yGluCgt0;P$+=aiH;vi${R{f0#lv${i
z@dv_D7Hg-W=JYpq`-}XOzW30})$ha*(ConsBY7c<ZmT}K`kYyE23GfyJQ`~L=tFX)
zG@o8>G)3IKqGB0P#6@45Q@^t?5?Tywp_fFP(~3CtGC>h{_*SOzV1E%!+(EpE#ezX%
zH>oxy)m&9v$baNVLH@%+kkPV0zfe@SNJ0_O@s^lp4Suw)qDXtN^R7Fi0+Fi`i?=I}
z*X_mewwhTH&{g8hsN;z7gWs`lA3`XhJE41t(q5_Z&~`v^C8@J?L=}=0(JaeyZKTIQ
zGGCS3Gpu(|xz?nrq*^hFxtrc8&1&*4vI*-PtMoZCi~?O-S_{ZMiln6>M_}OCT^J)Y
zTvqvWVrrZIwQuKsd~D#hat@Z+>|ikNmOC}MvNteRD$NyqldH8hG=b{UH#JMpIHBn>
zukVD$FK}%c^Pjh-MY0I#p3(MgGC3c(f-!I@-Qzj{v&%GkUQXJ{6bp4_hn^2~9!JmP
z3kAjx_X13FvO6+E4xNsoP@(5d0m~_uFFhv&QF<P}K~hi6n1A!O(GFW~yTN)+@yHnS
z*B;lYc-Rhj>qt959HgW}XVsk#+H*=un$`WejH~<8XS%vOGaHdHWwN+N-Zu;S=#z;9
z*L`=me#gUh$H$+z-SL@>yW`VO=I*#+kTk8snvu@g6YZ+{hOOC#EeYI7EKZk$D;>t2
zX!}8*XnA2y^i}98i!bEmC^x_wXTjImgE}~{gd@E{==%DslMP+l<I2***6G$WS|{Ym
zLY!*VW<CrSP=B!NwA(^_SH^X^;|W<OC!9mi)0lrDSUEdpzFvd!W2<q}0$*qklbdF2
z*djeV(jsl5PZs-g)+qXZ%s0QyNqSYr6?*hcS7-#<xKnw34ARECb7ij$>}sXc<w>ph
zKKwiiWOrk0Wc3<RQdoN9BMGaQ-rK1m#WXG1yoW%Rn)WRBy#epNvb32^L4mmHwx<Ig
zbnmzuO7-qK@*eJShS+CBWc?6cq>8Lk?LAU0MP&UPMb-mw1dV3b(2^pw_lvb9+?ywt
zJTXiXBBBn$hL3_62zto<-Nnt@1=_;l20_=-<rbV#UJ4i77B4tmc~DO+oqWR=>}h#-
z=l=bn#EHtkx3gU}5?mC6+(s+gjU&a(o)dCGHj?-D;2hC(a)V?W{eihVj&iVv_^+fB
z0R)915J1L_ZWqXybPuMK%F7V@UEY~xgm4nE6A+6JG<YKx{F52FiZEHGC}HrbTyY5D
zR*S!wh!fBcU^dm1!>^fc6Zn5|T&We|PQf(@0zq&$_%Z@Y`n-2bNy*jPB1LRCI*;S3
zE$-`aEBL<b$y;hm2R=61@ky4Nxo?aT9Dd=3DC~79H@i%enm?a(n8;!2%8t}L(78h)
zlos3_p%e<V;O<9*V7@9d<VeFYQuE^imQyYZ7dC<x9D|HX&7A1KWl&GenEzCG<;EY`
z+}7R7$J0A!U^mz4VD`EUz_7Kxc54FSj9qJC#-u}MeVq@QOOujj9dANcS-9yNQEr{N
zX$~yPO`ElQ$Jvfb*I^5Z)MK`gn@e)o7CJKe7LpF*wvhc`8U0-r;s-Nsp$FD~3vr|g
zTj<6NB+kOb>0N^$U=aavutfxJqPk(L_}VjAMRpjwisnPGihN-Z!J9L#;+vj;Rm8v&
zR*?xBb7wuw9H>=K=i39J;1ROCe}HY0RVYw=ZhGS*2?bXiWlEDSJz|6OnMN>(`)0uW
zkSz7c!a-b{{xz@?El-+}OxlsSLc;9*m@sx7kr6(H7iltr)cS3y<%$Sl2lG!HFms@6
zNAQA`Ycmj>tmjBBVw8I@RQz!RR&i7cJ_iFYfSX0YvRBqDYPp14gM^`l3~`Egz=5Af
zH4pRNElwyGWp#t(atV2_@U>J}>^B-BE!8Atl)BJPCwG@Cj|Tf?9;>BlPwv-{J{3z$
zr^RnY*vw}9oNPviL39|&zys|8?4Zw}ymr_(PEGzxlyI_Z&;Gq9aQRA2Nf#!}fa$!9
z-7Rj>MOg<KP5c;o;S&`ICOHI~V{nEN>~tx?m(><eyrbzG_#S&s$P((xmi-sbkFya=
z3G4?=3FL)YkxMVh#u64#Zk<^|4lGIuG^k_#J$bLQfuCJu4dZ?=vLn-xJKY!*CQC0j
z5)pXX(IDg8QAxu9VY649ILa$FZJPSjLI&>dl64=METlH>KSR?8rI8__K(2^M402M&
z7?V8XS(qjcB|;`%j2E%nKS-XzTDMBA6f!Y)6sn{H5@rF_5HWrv@7#DKX*6!(K!C#b
zV!45ofPx_C6QeHZV8MbxFQS=&+Ne|}a17{%YC~Zpy89YGiQOl*2@?uE%qgTI!##G;
zn-s<oBklDNzJW~AavPq`PsW5A2dGxT0C2|=(_!NlVz^gG#E%S4DpCIervt>OsB9Z5
zLzyaNbH&o};Sl<(RHT&EQ|;S{q-wlbnju7`UO`+jjvv2UBGjSMVgi4T4bkN?(Bd*8
znj{?=^=ybh59w}}o}jt4T<iCYwr5>MO@hli3@qAL(UsiUUz(PtowQGhrgdeDrU(7m
zwL!&NS`v%Ixx9z0FRzq|NhhoHQhd1p<dn;zpIM8``);G1(Ni+!zu_!88o6yRD+Uq|
zm`&x%^20XO&y2LGwAKgx#YurO5cy!#K`3cx!22_9n_oQBZIj)&Y9b{DH_HpwjIj*B
zocpZA{wAE42T)$IpY_||k{CFQ&iy(li}foD(q1?OrqUAj9<hK3HWa<N#oJTb(tr%?
zNNCwDt#ofGFo+N8aD9i$;R6pqe-3GH88^(=5JIT4YY;()vepU_t1;1SkU*2oKtZnt
zC8c2wC^uSN4|@KdW|pb47n01}DEK7Fwd6WKi7j1WBaD<N)j)$xQ`?a!rNMN+q!jiR
zg&>RhcDUUM$P9~M3#tc2i{Jo<OCI{5ZpvVA3t5F*PJs5D;7yu+P^1zp2TQiMqR?GJ
zgQ193!4f#z6R(&MflWFqcKQehMGz;w@|faNMT%PTd}3-`MM8$<$$QP@>D~vJg%Q`%
zNaoL9W6Soeep<F}W`513eHJ-!%NgY43MT9&jpBU?-(xv5QaoMRQamM?u)jFuBm)T}
zCwXDc>i-dd9a`mxilk{@mmxdlve2~b$cY1s3MLxVF@K{vyzV-s^ZbE?JBi_cN`@ar
zFW;?fpz8b-&m0r19Sy7z2jqbO)_D43j(*5N`o42B&0VHYZJsl2FyQC%AZcgyMz&{v
z{8F+P)m#0oZQRid(Qy7W6xiWFnJpo*r;y@#{>GZ*w+t1lPoW`=87~Bdv^`8q4^d<{
z;a?=(_!oA273iGsl)PW7UNwp?>pR#i?tsES1FD=*QGX*wU1=c@Wb+dEhAvF@tNz9E
zj!7F<>(4_2{wBOoaU&Ozl&|_*@B+HjMy*`ytv)8-Pn9~&)z?W~b<OdrFYqvu<k=jI
z3J=+VL2>RtdB*(jNo5DtxJT_w>a|+CrZ2+myH|l|s1g-@B|x1>PjzL7o?4#X%8iZ`
z5X<bh(Nz}PZ$lO$y2Yyb($hg^->m)xxK7%z0BVi0(NgZAXT%LXw6VGELQzSqqR4M*
z7vU<T*j6Y=ttNp?N=cPoZX^xh<;ZNWe3)GCu)!~89^WlXpP6?I{KE!Y^v6WOXU351
zBlZd!%-C;4vG+l|h~4f%Sd&!yk5bLm?1iXyT~qB?7cpg{>31OpMBKrsrt5e#7eJ_@
z{KK!12EzVdA-5-^$5Z(o4akA#nDMfLX3%<B1r2B~E5m#s@F|c<nD`~Sgw(hd#6zv(
zLE>sq6}WcytZoC+;|Shaxb+GtW{@?LCarNZ#*o7AyGhFPpL2WOe}A-n>dH8wXk^%w
z;~lYF1kEnf1fI_%?N|yty0S&kDLz&fS*H{l>WKBY%#eeeqZm%Ym;P43a>`{v;(0k@
z>8Tm>pS_I>5kXmy^tFd#^z7ue5v;Jg69>_l;r6;$zYJUat1e4GSFwvPL|8hElXmTg
zz#)S}Gbs8-bd`lV-+*!hyjzxq%`WY7q)}<tEartkO?J$Dor~KH_yHSVw$F_)9JWe#
zjlN3KVcaU&50;0Twh%v%ah2{{|5f5h6ISU+zO=@IpWA{*{G_P6-gu<9TA~x@b1hm;
zWSU<!`hrV`aSLug1jjPsC-tU`3;u@nUvQ2zVZrI-5bGzE9}i#<mD&U89Btq=^-3~<
z{~cH&tJjp`{L&jAiCrE8?Lo9aaRLtRyn*Q$ZJ*Xup77ZK`$1X$ks0TNX7!EkYDkl6
zM3XY2LBsgr+c<aZKf*x&30|Z!&{FL;q?*e>hc(`BRh%gloA!p|z!0G_UqUBeLkt2r
z!oXQdh3LZ*gErw(vy976w-+RAA0h2f3`hVxKf>1vVeSkRSb*IEd^e(4YKsWzfZ0F-
zHgI*kHa4IZ-tfk~HX`Q1k88!znabtX#!J`?4;TufbM0||sU|BC+dQ5$<zxbMWy=AI
z1=s1?!8?gX>}{Rlft$_vZx~1x7U5q6pflk8vKx5`px`1SC0Qe{o{};DwMsSqByT4(
zeH>Rt+uz~adH6n!3a;<j+$M;g=Iq$Kpu47Kv>7jC!ejiAl191d%_*|yqOj0MCJ5TM
zg5$&6QDC(KZkWCO0Xann5tsu7t>lU=sk4Uy5YN>8cIp@waK_jNN_xyZdWfeA{gg{x
z_^_BS!Nqfko6;TWbK31M)Zqh(qgvnxIh$0&2?n4W3KXz`{EG1|AUnsJPpXyHu$ye|
zD9of`*!Q^Rsp~IKm)0inJr+Iktm?}4tcoBu(7AJ3QwnKmZJ-6S<(`Y-WI3_>1gtYS
zvDu|H4l;UTInhDbjGme?|0}_nHFoH4^-XLRi*t|_KOBnUhjfO8o`8xXr<WUvvAI?=
zHn&UC;(J@jvs|1wcKf}Sw@EHxKyC=gBeOTjE&ERk^n+l!CS`1sGPX$!ZIH>C{RXCn
zgNX1ruf&VkLmYVju~toLrLZ`2Uqc%21I0yk5sctKja82xJaGH~ULfbtc)8T1cN?^Y
z5}^oH9yy+Vty?u7#3#L#(CsPAXN|meLHMau1ac&b6`YLAOJqgV#qTJs5VL3^aSKgT
zp?q>xg7d}iP8cd=h@SGM1X+VoBFl=Z3%GM$TGAb^=v3jjELqb9kQgXef|yv0MAHb(
zpCP3<$iZ>uW5+>e8tR^;p6)L#c}V$GK|H6*8D7K!smUU7;O+FyA|Y4v#PI~6&K{dZ
zFW~Q*EmKN06E5`<l;U+_$j(iFLIj(_$%N!cF5{v4hta8+>@xiv&19DfXkJ=J0~{$k
zSuRyD9cp@rj!MO2n81cNc^od9_<O0z`8)>C{bdhs_W~krg4Q4^2)IBoAd({`nDKGI
zd-jI>IcIRw&kT~JTaS)Nn;5Iy`C2L>mwCVe_qqk7QbP)L1O{;63+hi^JVd~vJMZB>
z2rjwg;u3t)n*kF5?-~;S0_LA&xK!i}p)pQS1xx@yx0E_?U>}>?e{TD?I_I`O5LL<v
zPul)g<@5T{NQA4Bf11gW!Lww<F*!?y&D-VbW!Y((QvS!2C<NI&UD>jES2JZsO!p3>
zms)JhPx@?#>3d|R940PCHUA$4IHz0|4ekpv=bj?4QD#p~c);%IDH`+Nan_?VGrejf
zrgKn%-sya@XFq^>9uVLD09X;!5cspU#Cy>o)fiWL1POpbfIb1sf@CQvZ)WfAz08+z
zoTtbZE|eQ8aYAs%oO90DMv0UK_qGAi^Ij1AULa`_g$F+=!i;Osy2w}o;S2qT`V1KH
z`w@JAGmLA^?WJ)fc}R~qaq!qS5i1$j5M0cLXb{jqRsdg6_S({Jso3r>z%hf}7SR`p
zhKz8KXDJ95DXN|Yb&&=x$EftnNDf&n9#r(kJFRZ?5bnjctlWs$cR?qG#GfGb6nKkG
zFJQ42p{fLvBw<=4$)vwZzEv)zp#}?jwhpS>LXIE+p?GWsjLUM7@-ek~_}5MXW`jW)
zWMD8_&HZ84O*=}i21&)3WHr^Gf>l(=QuB!@A}pBUd`bljmnkxx%@8DhBrw6c%Ptbe
zCCD;~+vcs)?=IdV0v?L%WOtRC1+@uyhEH&qSjH~XbArJahghS1Kpqd{Wp&f>Y@6C5
z_Kyj=%FO$_h~1jlctQ*+-|ZT2*i9NL|2)3OGW$g3y0S&(Vq%jH9pvqN(7JpnX)wrF
z1!4#B#vtg&WynssEC@QgiH!q`>hd+HV}9)kLpJNa7hJo}u)T2YQ=YKBa1*-9qM5l7
z<<{BUn!Fe0{s)we=jZ_C?{6_WuntEL3O?)Uu-nbTIqc{i8U5%<hjD1we$Z%GUKlj|
zV8)~O!1^CO4lDr;Uzbdu*J1HU>@5v-({T=4yw{Gtc+z3q;@J;+@#KYByf<fDyf>}?
z;&EUJi+5EV-?R?PCL23Q+OvBg$JY?n=hsJHHhZ+JJDIRP_CxHM`@M|I_Tlwkwv;m$
zz8ZmhKC3qVlBl?sE+bMKuaw8><wnxRZxM;CA}*zdCy%@|C+O?46q)(%z!x{tn7&v*
zbvjAia*S@h3P9OeM7O^6iUbxb(5<u9KS`}L-TGFD(c=e{f31oi6w4#zJcxT;Wy4hB
z4WwoWFpML_or#@R+hevtiZoDqGwDh}30nv<4C3>H%m&5|35gchibJS9!kZkm-D84x
zisK!6DNM8^|2~viE8B|Diz^{8=>m6bK<o1`4TbI@xqF}>(k_H`NQB@vlqkxfqf@N~
zr?4i9eB6BQH5Q3vDBO2E_N>9)4h26%eeLLgs{p)5N|4<2^k_Cl8nIIaj{gXpk~?T0
z!HZCv<F3e3K?;fTu8T~KFcVv=t(nmh@?`3!r6k+rkn|EvFnuI%NH5}cYS9W%3$H84
zr3q-Whw-xrB-e%3QXkzTV*x?M!a{k^VH7C52hwmAQ{GUMBpD1&l~$}A`o3?zU190M
zH8>n=@MlbLJ+YpR)2?vL4%39==Omq03dg##6^;k}O27q1GdU*~iE}-fwli~!%#0%v
z$B52*1R$qe7SVYvt|!yRjIF0+Z0>dlPUjAG9tYddEp<53X=V`DTF3Uh3R_`7{rVcL
z3(&1bXp*BA7)T*qA~4_{SOisghEfAc8WgJ<-Lr4k4yewE{I$YU(VS+h*g)_&l%gH)
z;eL(DYH2Cdc#t@(dkd71q2DS27X-_4qYv{UTbv0f2M7QZZY63wm9~xdl%F8|dZY$7
z7?W28X4r*N`Q%ck)#tS?2vUcZj)|K|`vf^^0wRMUPGvXpRrR;*QIT5fE_Z3(lY3}D
z4_OA9N8O!7Tu@(%lrSh#@tU<#V-iy`>75q6ph`L>?sMI#g3|*jg7w^yJ9sU&-g|~?
zVG+Yi1u<miW|FmtTv#IkO}m;Sc9VuETlk)+Mbwooq7;r<I&{#Z^C6IcI5cw(zE>c2
zP+SZue3=Z{DVGHmX4fJTgs23hK^^mv$%q@_i8&*7a&p@aJaBe9xY~?i+u>cKZwKix
zZadfydOOGqvmJgp<92xO`fmpgEMYtRUVu!#`Ei$-d9~NF5u|Q}Af?x#fT$#(^l~E!
zh+B_`oTiP07=3FX`-1GL%t$p55u>g7PZ3uv>333ji4F>hhp(mR%>E)$;y>d>EIJLs
zG^N_-q?#)xhQc)80BR3;05mZ0Ptuk(*xx{$#e<24#wzK1$@;rY!EzV4v^19rVxz3}
zRwhdbClC42f?`rIgA`^hhHO__RMt%pW3hFL50%^pARf0gf07zAmQhnyIw2`9Tu@%a
zC}6zc3AAfE-D(S=Y@&9EEYoW6#yWKq9n<!pnbrd3Ug=5FwZYtsI?Qy_T14_m3_i3e
zy2VFo=$AR+v{4qINC6OimE{dWTo?R@G>DPGwW!r=m0Jz>);`U&xPor5?dJOD*5%1r
z7fUEFxN?0(&E0M)J9e1HL0ygSu}7Ywrmk!`s6;u^swESP3=uV-B{SpjO)>n{GX)@9
z?uTFak@Mt#)f;emQ5HrkADL6n&6t1wHg|c`=||wKavf3dH-JmC21zNro8I_H#7R<e
zkoVywGtqn__sMFEOp2rtf3u=M$X`+&NDsXSK(p}(-KpY5>?RDfldN@AYPn=56x=lT
zm%wkwf!>!(r)$goW!yJf16Bn>Zosc{ToD^$>`*$;DTHklk!eLCXlnM5AGi<43kk=-
z4Y>;*@|H=mwGt%9rnD=_oXzb}#v**tJqBM2J0U`v|B2g34GK0}5S6DNn%P;LEVAVN
zphm#?NIkvGgrODs@gUu&YOPzPRuSSdyh&U1K-Q#%Dnk)$C2J^jjc5)oFUqqRvoJF)
zen$YVuvqgNXjH%;{abFqEr~Gds@q9E`5Spp;i^P8V9eUfyiO}bVhR$9qU2%(q1uF}
z`y$S<s=!W!9h@lQ_83Uut$vqkQbyn@Zz*+|4Cgu!%;{YXA^ujt4aG5?sBrf%N-wNv
zn#K;T+soXEb1S{>D{Zk_cQj<+3j0<+%2hPJp!-ZRI@b-9{iV^YA4ozMq*=PML$jQo
z9f411R$P&|^sD>q#Joi&#?m4oK`}JzhXf#}T)w1=qZc92MCR=?>QOx<WB%5#+ouI%
zjq7V&!g%V9^uE*8dJkLH-yCUKMQ0-&I*aLi(9*k<G?LaIW?Z=6J=2BDuFT=UqSCur
zuG@1#pzE;C+-!E8U8UWyb^iO&*I7D@TW9-0ud}=`>wLjgWVfAz7jr=Wef`&&14~%v
zu>G5pm(l(`yASBDjq(HP_CM6*k&Ml_zPL_gW^hAfiAZic;4T!oB}d?}MPO)Fz;YDi
ziV9jF8AK%Vr{<o(zpz@Zi4RD0ODQ@~?k`cs0=ok7zl#*Myj(su*An)<!Buoq-w8It
zG7sj{uBn|8V=KwaRo?O_3=`-Mk~1>Rbhixy2$4vL7OKGJD*%z#F*a7Fb1HSfU?GY6
zLCF5NB?4ejWe_+F)3U&n3u+Fuj#c?wbEYvTwC1ju68J;Bk}*Jpn;m70E;&qNsQ{0K
zIp#b{viFG?-fH(0EY((V|F+{Oe0Hv?MKd?bq01~gxa@)r9U*Eo?1F3&i*#JoFgs1-
z8TR6PtcXFLL07gsg9LrVbnl>`)M7exB&HREp6<wqo?a-xIcO{k|ByX&gu{&T4{E}L
z&=EaFWBvu<n{?M_spZJqrFPxohAs8-8kbsiKXj=>#p0G)eKt$|XvU>J{bVe)8tcGP
z|FurQ{;iF5b3<G<u>onlL0mxLb}zfWg2VRmJ4f2flCxl-b7v=~6w-+e23jz?_<b37
z@z0;>F3z6V!0=OsQ{Y4o?BNSQJ<aeHx=Poe1-=X~NMf$;)}dtZvgm^C5sd|DILR`o
zJO2#SL1F!q`UdR=vVM>WfrFOUDfPfos2jm5URiYfEwUsX-WtP}A}x^rP_@8s!3Uw;
z@3i6A1;rA-c&AItxGq4v$WRshnrK+sEyRD}0sy%c7@8zx&F4r(w**}gjTfat8BS<q
z+myl!8mVK-9>I&Cp{7AwC!0vZ&sLx%3V1<bdh~rZN6FoE3lqUT!i;$r2uiTEAnFe6
z8!z0F+l^J~AYqjRRt{(zc_-H3<-}G&L}n7YDo#bI@(Ax)!zeA6C^s4htd)-GUu^Wd
z;PF)OG%Lz<hj~~8@{?KPH(4~z4MRT%-BY!OTN}h~q&Pd7s6wdt0+_mGaMS&!niKpk
zF-Dus$t);6n`#Igri27`yR9+<-zo*`u_A69UBleXeXr))&uy$HYhzhV@d-h6XUxMU
zsYG1s47*9=TK@*$6S-Dh*>bIp=EK@#oDZ=ok$)119Ue1ARQ{R_*(sNW7hQ`=M1wl!
ze+anAq^S93J@AGesa=+h9^IKlk6x(IhQ{~2{#}q>I0$$g5^M>wIMLm>5Q~!d_e!D;
zpgTR0paa@uuOxZ|^CIvTs)E4eps%y<wibId$zv^!(+rRQ;|;JkvcN++hC^EcihCsb
z(7lp6aZEJ1W0<Oyz;qHWq(+6fTWzQ>d<QW>1(guG4C+BaT6tnGBEN`q?-fs+V5t*G
zv~0==%B|>ZE$F$RuB?Yq0glZW4Kx-Z)56S-eb%(#|J!jxJHP$r(jvfX#;Av?e>Qac
zk-s^ZYUN%$=3m5_w{>oiIu2@xqLBJup+W3qHV?!%=1-5lY_>x+$Q-crH1>dH(%npf
zda#L^0-pz960x+d>|kl>&|%C4OWO~DLX$%?7~}5YQ!II)@09s<mLgv)&5=eGnr2bM
z3Qe^}*>K#^2#!myLw7A@5>78Sl12QI`vTK1U55k58Q*zrR^w4wjm-NmaM*I1^REzl
zdC+xIT+b^3FguJ`&fkO=v0E>&oU_)7)N(E7A&0FGL!?nmwc|UaRiE133TD}HjekYz
z0p7PkC*$F(&5TSY`R|cwBk<S~_pEUn;!<hh3mXaiv4O3-K~9Tq@uhL0L)u|1OXyG`
zA#|vi5IXcAl4OK#_axDhi^WtNGT?=xnaXbD7a9lc3xup@v9{cX(8h=#I<-@fU|l6>
z*z6Bh;Z40RilCfQF4ONI<X#TDc(1RBFle3<C3IvE20_g_WJNl=2d)aY6vq!KiH7QF
zaY-{%+wHeGIP|ch#hyZ`u|%1yy4;0t1oMFjX~hVvV;tTcloXU6yz>E!lIBe7ba;a-
zBe|@cY_Eho)DUe0?GlrjXwC$=!BoT?2>2m33s(o5u+sE!?9O}cyZfLDQ<B*%n~IEC
zLaY>pD=tAW32RPGX)V<}2S$Tq^*7V5{^o7!XeE+{|CDq-sdm<tEon&fowBTaVv!;4
zRsRJ8$zln6zW{Uwgd-oXDm^7*{**Zw;^{dI^;inY7V-+_vet*t7I0;_VO!v{XS4;v
zT|0b2umuK+*ewwLWT@4bGj4&udqTE=V{NdiyI>2<T?oNuU>B5%-)__+x2<jU)4*<a
zhlKUh(=O{fY;#|Ibprnpi{A!w>aufZd#4nNOT5b#%ocwZhLZ)$Jrm{5D7{N|{WRw|
zYEa`y1O2qw<j1(l&oKhIGXiEyaHg|5RJ<BQ`9Gk1R*zi8Sm!8zT>0ID+4qeU68q7>
zd7o_kk!6wCM)idSb}*9xR~F;Z``4H>b{>&Ss(6tqm$24Rsg)v^oWkKaK%QH2o|`xj
z{OnR4)MQ$?K$|pBO0mIoZFM6_y1o8_IB5u<9EdWdcDu163G#YHB>98Y0U}_)FbkJn
zBkM2zwJ-|k6zRnY$%?*B62P@7u5={9oo04r-ukRZ-5PTWfa$$M>%+wB!`1dnpb0Ye
zQ6?;o2lGA-C0l_(A~Xm=SXf@DE%o783#J|kc|%e9NITGg<e)fu-R1V;craju)r6a*
zF-i>!H@ZQn5G@;fR#u7X*xb1#2+!9Oy9DNJcjat5OnFqXRt@Zye}jY7M)|BbOdY};
zaabWh8?B~6UEy~Is{dP{8X04S+ww0H)k(O=frx|Oz=W`?2!47eUZmnD)_SAVa`96r
z;=sS%_6)nL5|Q<RBIZyr-P?g{kopoz6oiHulmb08jj=#Dw<r#1EU(tg1pmBDaJFsp
zTY&dJqrBQS(QBzM2O6F%7H_M1<&#=7uj2F&oM*ulUw(DF%l5*M;>5lxa2=8VeOMqM
z->FpLN)Loy<U0F^IzmOjvqKXAFW4P@y^!~52=0#PFsOP^!F}OtG=MXCg$<WOf)CkK
zFdha%FexbF{gIWM3mBwL5!*vhY)aiFUp>#?ve0idyxu(3D50Bts~gGHPSlTt_2<tS
zVFuNnnA!H~)mI=qXG8tJb8VQ^W6U3^8M7IFZ-mY8+t>^rM)?62If`@YhpEh0SNXEa
zf0Zgxn7uTZ&9pQ5Ou{w@X_7$H683;ITmBQ->(~?3n_0@wj<A%!gLV0f(Uy``;+C?t
zwo?|Ioe__iIRbw3iS0kY%1?B+W|{wGgk}B^*6bffTV_^K%bZO7{f!E}t@`IrQg*HX
zHu?yi_}|FTW$5B%A_+@mLI#K>P#CDwVW92M+vgOVl}vta@VLBp$Y{OQbqiE73sb9U
zkVV?eEXGVK@X`T^fz3IBT<D{NtYV?M9hIB~tUD-6(BxEs!-47%Nu}*j%ovoLm+e7|
z34w)Mji3-hU4{}d#ErSOpu5(7;4rFyWe6hW=~IL(TT3E&z&s$5NP%oas5R>5RYq%&
zE78)ALk<aF)r5<MjX@`5bqM*A&)s`&&LKn5h?3u&TTRq;*Q|#c+D2E+xL0Jc!!%c-
zDSVIRc&Vw=l?N>mAvK}Ghl7@gfg*8g=-qZ^o+mSt&XqodG3^(CoN`%A*dtjYTpgX!
z(CI0m!+XesR4r>V!lZsLki<Tcgzc7b^33TB=OhFdR5DlZ6vqSM0wE~J0v*T!$%SzY
z8jQkGZRz7xKky}`UyBL|cCT?87cGIL&4}I-1amI1YXPCTp>!GIA2f2h45}4`qaP1p
zIGw2@!0XgixF}U)cje2&%ob&aH3yg&CQ#m3Ko3tMZS)Zi-lpS`&2g20@(?@}xLD?V
zx1_ZR&A7LVKQ!bpHq#EHt~_`c!xl+LX&%^w28!6j82)5<j8|klj4MybVRY`6wCZv_
zC1Z0hz|lE(O4fEtEGp)-uEAECXi%~@InKDT-NR1CPmgpm;%r3-7m6moOeqv^P@1tb
z^h+7f$1j}e`B<Al$=>7`oDe_kd!^Pl8@2jq0=4qrrAXE8ox73I!D_OEQ&#vnK>g&3
zkrHtUKK#o6rP3<*nHo{6#sU>M(L0khf%S?qwK38?sR_`$p(IfABhs@F;>p#mq_XG}
znU#rd(4lqMCY;6<5D5UISCoHJ*14MK@9~AS?W-$W#4a9x(xJ0uoe$a-P)Zuq{r4HS
z=9kZOYi4)Y=D?z^fEv^>|7~aSmN8Sw(Pp&~elp>l%zZ@11u4T#Xk$b6qxnW%CnTZQ
z>J}xqO|7U{5o4Y~N$QbROfU>Gf&FQKZPIt~>QETRYj3;Zig<w~Bxkv0xKV2=?QJOe
z7<Hi3aY|T@=wLnYgjVZn#8!Cs9U%K9EFOWuDGYqj&<4W2O)Yw6jWcD93JD6-;s=^t
zIBSs;EgV1xbU#B<80AhU3?D~odUz>gj%*(fa-iW(VnfPlaz_xk0SLlz&>$H_+!6`?
zGujTVgBp|JW0eWqO2*(Q;g7Jf0bPxYc@as3bdWZ?GER=X1o~DhZ(EKYqXA<(PI!ZK
zb6{r|kYij1DHmXoDVFKSq?X{Qj{HA}@>)b%+cFf;DtasM(`QsZOo-xEh=4B!Ofi6~
z6C{UwsZu;VXfnj9(p@ZLS6mh+Ufh>N=b=<Sk-am+DExq39`hd-C5RXz&GL#@;=1i;
zOL?!lc1^s=P*=WPZrTcVm?l6^;CrF~tt(s9p2(073eaK3T&wuwY8z~|S7yc$jH8-)
z@d2L^fShu<3($!?yPlFU|7+iV_$aq+Z21ym9LtwXJABEo&HK<un^)Km=`fBju^%*F
zA}`GLT+X;XYiGJWv-2e!Sd=d@n{wUhL~dIkLCWGa?!gr_yWA8B!?wffNZVmhfMVy)
z)<`K7CuOk(vt{0yam)O~nQoc2NLd_d;I?PB&jq&@?C|+^4PtZxsS2HT*Xw-P^8Wrv
z%R5MH;Nlz=p%aV5sh2{!-apT{u>a#s7j`6FuS2SK4=(GEoz47OZW}IwQ7rcX=Fegj
z*UNp_mOJmMqi{z7vWRx>Y`T;}7NbO4Fc{@B3@3{t@D`LC@N&q)BaMVnoQ=nc9>geN
zGlRk?*%UW_mLQP&cUkToLV~3Fq$46EOi9iFl?rl#id+g;7l@(|d{&yR=E^cH0EMtj
z8h8Wd+N4>l9U0atu&Mm72(alB#0Wv<!j)cbqzJ)_UIJUJRyH93R(=^s4htlil~6%E
zplZdxSbW)3`>q$;;hoGD%=RO0Y$xy{RwfA&woA3Uq?+r;X3g*ZUyF!pvvh>hx?zK~
zI!m~$<Yf?$p}lA!+={tJA)WFzsF&Px<aU^|Db_>Cg~Ecdef%mp;2<^P24`Mj!VQKD
zYrRel_hczK9Oc6<ytqZ0xi=`g^0pO-?iJjw!jL+;_%ihewj~rHI*Ew*W3jVPidvQP
zL+LA#&}x^F(5I(%o!Dkp?W5mP;99b9a<uK|>Od`7;N02hx2e$mqOPHfU8V`muT0vY
zv^wj`R%jNCKhSv`S%@#B$-=-#b3lJkX2=nVV?^iI3s_FMe8~a_8I2FYCN*S1Pfawt
zxLV(IWTp}2;ThtKD!|C<2dt1pdgCKu%FBt#;1L500P-Ax@R;*A_{A*HZ^;6Uj6nxm
z^v4V~os5jZ#jLZxjEQ2m5ybk(c#(!!rPc?eRx)0l`vF)h$4Q0Tof6`Pfx@8JW1dNB
z?E+8QML3XB)hRc<<GYTqmRlkEWtzhg>ri;Oj~ZUm-G)@a8)V0PncGZe4!La0L=GU(
zR?xNzqB~V;P$i6nmqmB6#I{~rgx@mlH=-{jvJD1WSi*G{lBNT^1XQ&|%km1!OYLaT
zD0Se)RH;e8G%v>jY)Dtttt}u4N27!*si5!#*+Ad{?ihsorv|mCK@HITvScR*6+zOh
z!0$>XOBA!b?P$hccck-0DQD79=T@gVzs?I{(eYo5wwII9F;~~1W2~;>(r4UoJ$9Lf
zj=z$$t%;6xWd|J(bRLI};|pnYJn+$+_HW1xIcPQp9sjF<<&?`89dnRTbj*nkxO6==
zV{=czi9UC>;IAJ!TV_GkmQN=l0V_}T{LitlSqYTFw&`t;M4+w~oF~^Hz$yb{OmX5R
z$7U^?nDpI1d-HW8>3srrKdD{+sg`8vQB7i0lNeM?*xgq#eH=i9Y`qXKQppx;ZI@cf
zWXu1Xab-v1oDk!}4OR2=lo@G4<M7O7w?`%QAMJdh<RC!Favx(jDnwtdiw0GsOsVai
z4jfsfkpxzrH+~!HCMK%l0p@0sR2wq9QW29xl4S^;vbO4>iWPLQH^Y!TcGduFsmI~b
zHdiwB;OrUd5z+CuE~M--je3-lb{DCKuIx~cfzIQoM|>eoJqA9S<JXoMa;QQK^=JrK
zPPu%k2L~CY9$_7io|-ZLMcZ=PxMmL2E=fm<0mA)ztkPYWi>wG&;feINM?$!l2*Q<n
zZopTX)91W4u)RapcVt<>X-;QXV%L+l>j5cX9+SfkBk1&(@FEqRvew(BRx&!B`viCf
z3IPxS$O9wfwoxNfO$_OEm4_?%>b7vm8imp;fEj_brv&6D$N)k5Juu9H@W9Yt(aX^L
zSEQ^daQ@`T=|I6i3f@l3?EFYhR6%-sq$6E{R|o<uaKR55`e06QPcE7G19NvAElxNJ
zlH<IZ2un7;4L8!!c?CDuf(*c)3xj4Ykzu5{iLgVic2C*8e`XIZ?<Gtud`NY1s9Em7
zB?A}dHVO$H=viq(cZ6Jo_G%+FaMC65*ih~?xDP(2@16Viix<XWW<Tn#AlDI`q(R0&
zJerecQV>^NZ9xj5;xjrcyg@yD`5rISRG06W{rk_D@NdV(wY2KDMmwo4t+GaL?i3^4
z>~xh)>?Vyq{YlbsC4JJBEqzixcI?ohNzRAB`Hm$GZu*=+?9h}L+Vht(WT#vf+LPVL
z%{hx2xizTp-+96hot>fF_5@F`-4m`q@vuFy`DqC#Jb6z@hjDwte$abDUYI>`4Z6x=
zbGj1c&dBDJeNS*;347u`m^jw~8Jby8>z>Xv1RO~T=kfzMAz3*RMQYRA9^gov;;$=J
zopbue>UGuEa|kN1@yNj1gv$FHyGW(yRaRd|)xhhd)^*h_rY0i7uj%#|K-GJa^<&;T
zDu<%OeTM8jN<U2K0qLFhD42nEqg3{8xuy8>n@+VlC%bL@y6Ki8?(y|rp)k~#e`VY^
zGxNt1_Mg8c)YEFIdLyF9pY<Sh8}%2XN_CsR^|=VUocG$bMr-N2R;$mMy#Q0PMXidR
zK7aF41Nu9t^3Vt`+r+#?-r0t$7o&j-?VQeDFl<tJC*x}M+5T0+k2HjpnFp<1f(K`p
zG4TF|UJI<k>g;)bAt-}&m_4u0l{nwO6j@=YtDILMLaRsot-%|3zIyn*85!!yZFN`u
zr_eLKS8H^qpxLA{v9juKM7S0BF|$nmMv(q?zqfj%dg&4WVs!y9^7W&oi{Y>d&JFqY
z@nZ`DM|&750#;8WPWI+ie~TIdaso6@q5zVH5W4w(r-5IWfP0u<D3wq0D~7TGW5$g7
zS1h6#O0=Pmuk$aVhb&a+^QXz+t-j8`lqR(HJh?hl?4rS^sW)Cjn5phOZ+V<AH%iFE
z%+HtT3g*RDY&GoR`3C$)F`XCq1za#`es1ueg6s;IMI`L+cY{J3{0$Xvp}&OoE=2%Z
z6SIgCNL{mxHy2|$${s=D_-ake*}U9UiBhZn#r@vm<i1I03|9T8M?cQ<e#p)|_{mBG
z@&L{jU@P}l{mazMhg#Vnt*rXjJ71h8>OYJP?O&?ewPOfsKRx=vsq9})7`m9Ksy>aY
z{w0l4bE#ii@-X8SZ`HrRYp(iNs(YPqw%gb_=mv^;%)>?~@e#($8L3r*4N=|bUrH<J
zynW?gP{Ve+q|#q*&zmiYiIo@PACAi%*x+UIMm9TF-@a;hy?&)Ne|ni4>T+b=#w`%@
z;hM5b%DwqVYRKs$TlTVf*d3Ut6M*PZZVHYHj@?!OLs3K-YOrf`v3aJ<?ylmXU(LVJ
z34{<DbFemS4Tum2pmfUooIT%v3eOvMPICzxu~Ea7rmKf9zsbL}?X~A6egrcn6SkFa
z7D^a9kA{D3wbyHRZ@KwqyzWl5SHO}tr(k==i5g=`830PogNFyQ>|r@J<Nf5bcI?7@
zUfNkKJI(WrZT>rh=IL$CEql`IOx3*JqVxfTaC5b{+(2g+_eu*mMU`H4b#}9VJ@(}C
zyg8f(fO)~ttB?7Y!)u~fIz3;lEma%%5Bv9`MvGg2Yj+t^%lyOix$a`3u9V;E=e+oL
ztEs&n0t^jAUPqlb%(6@&YM<=4(Z!`09ViOsU!j4=uzPTy1TJ4Qc;N~n3Q!)WSZ$em
zx6vw5V&uSxlCWiPuWbb<cm<1F^}HVX7%QXH$$4+NRBOzaDiz{g8TC`NlRoxpV^QI>
z$NUSu<|C`1l>TOgO>lg%6B&fhT<!A+C|$yJAlx@kamgXEd3_$|v@Qh8zamnAIlWjS
zO0=YWmz^z|0vm~OD^hk7U#h?BRkrNm(e*Fp>)uLR8k7%@b*tBdmdJMyxY_DG)%R52
zTK#zSkLw#CrPnv{u?<;G>R0oz#7B*f_w(_qe7yJ)Jid#MHXj{6euj^q<Ks(we1(tF
zrFfM2;O)k8=W(4Em)0NSgLhrlKgb7fL#+QJAH1ThzMl`?U{!DN!TW#e@8W}3LDc`2
z52hQhKcA0JZN=k5e0+nC^Vu(T7NW_hQyi*)k`FS$^#UJTao=?P>rcVsIs9vqj}{*f
z^YJb|ewL51&3IhE#|}QG`CzVT$v|CaR@?f!`CxL>`sevzCdm4=d^~?69^3hNh>sI|
z{1hKQ&Bs6R@i{)O+=Ry%ANTX|03UDU<4t^gh>s8R@fvpC;^Qazcqbo!%EzDc@!$qL
z?&9N7KE9U^T5rXsTc^RR{xv?B@k#PP)fow2-@ymNaO-V87<O3y89o@nRsSL%boj47
zn-6+V*H7@V%Ew#yppRw!5BZ?$Tm1q)nDtI_;nhFJVSIp($NBg&A5_kZ%DzrTYQ4-y
zA3;O)1wK~!cncq|yc~}PA3x5=JNWoKA79|(S}xvod>rB9UOryS$M^H`>wNqMAOFl{
z`~n}m;=O(?A75nipWtJ|g?Mb@<9<F4^6>~Cr}_9@KHkp<9gM{7s7_Cg`m6c4hz)#|
zC*?-|^(;OP7Vy}~N0|?gkGJyiqkMdvk3Z&P!xlU?@o_63&*S4^KDvDT$z^zakdMdt
z_%a`p1o~z^-g^-qZ|CC=`1mLvTR5?o@Nqu}bdZk@A3Z+a$Hy=8aUlzTg%CZ1e--(7
zh>sI|e2AUDmygf$@dZAv<%znEk0X5C%g1Z^_<lY<$b<cEK0d?8XZg5_!@Zi1yZE@9
zk5}>W8a(>`C1DyOXzP-)T#E!^3RI@vkW~oEDfAhBqsjrPg61qQv>JviNztpEm!|Z^
zkrpowdX-97MA`?}*XgZ-hL5>z=`Ucu!N`<beK5`7*tV3B#0&@@3;|f#O}FXyZw3PY
zzSW~3%23;ZyaT0oL5Ea_hMx()o`B$VsZ!4cuMHz!-Jr5*S%)?Kd(5A_6WF~&qE=KS
zr#KE8<ei?}ArVT<Pi_cyC6vbD-$@^a+zUGm;q+foE>&{bpt<Pt{fkIwKw%FZx#J$P
zvcmIIq9M)oR%b7wy!CZyul~RBPmtMbbl7&L!}iptXM^o(lp6`Q`jw~=16d(A$fnaF
zo5={-jwcPWsigh5cgTi3oDsCUasut}gXfRBYRRw-*^o;aVXNc?TRA`2cJEK$lCRDP
z+xO-L+y4Au+qEwpwja$1+mGY~+w9kK+mgHYq=WYUjG(<QC(sU$=eKOT_ol=4@r<zj
zVP3G^lpkz+hfsjO%?R5U^MdVUj<C(7uiJ&!XQSKap<Etx`*15i*!B!TCD&(!?Yg{R
zyC+B3hLC{08DZO%7i{<C2iwf<^ga3FjIbTa3AWi^%#8%>8bSh2W(2L87ieG34YcVY
z6yW<Zg7%ucKzn0;pbbGJKaml%AIl50H|Gc15Ipi<GJ^Iid4cw}+(4TdBHer<BWQn=
z7ijOu540h|&EpwC`~S{D(1tKuo1T%4A-M?U@?c12^INs)A-vWzGlKSvyg++-ej9QK
zXt!nrZC_rX{cL`q?MmlH?#l?;(I*YGM1ACtMQde*tdSRFPaSp95+NJ1W{+ir?ECYA
z?1oVxOVn%a8A8?GnGv*i<OJH`=jF%v?-@eYelsI%zkW8tHiWMIX-3#Sc{ai}1d)6-
zBWzzf8(|xQO19jPjUU;Ja(VD0xt_Nng7&jA!Zv;u!nSwFx;;N5Y|qULwny^AlY57(
z+XES4`|h(5wjmmlZbsPJXCrJwR3vZA2;1w=LfCc=f$e8A!uHcS!8ZHgs4Q0^Gdbk6
z{Z2;6ek(7?Zpsa^A!qG>W`yj|&OXS7?8bl02-(;2f^0IkH5;OfysVgwAK8j>dGI5%
zJ4S^pQMB1R1hj1#LHo{}Ks)@(97*;NJ?m{5VSB+@2;06PBI$z}VSCBh2-^^m^i)RJ
zdS@YQdxoI@|0g4CKbRM6x94}>_6#8a|2ZRUKbIG5hw_7M*AQIt;f%2T*SugmKR?)Z
z55XmWl@YeT$P2bha)fONF8O*!*#7Bkgl&j=>&j<lV@obaxjfjC!+EaT5cSq%M%bQx
zHo`VUP4c3QupK-LVVfR;OG+7GdnhN^X6w1J%F{zo$;&f>b~-Q6y7_@N1e5%5M$mrf
z>;rB05KY1_WCZQqIe~Wgx{--nqLO3?Px5;iLHkHfpv~^fZA0!Hf=2#VM$kTc7J@be
zjr^aCp#AT&5VRp^<eKqp49Qg}mj^>K`-1#7<Pd&jXGYMb&O*?Jup_e>LA&!T1Z@cN
z_cDUEkQZoo=C>h-C=y<o5wu710_|vSpiK|ikZ;Wh+FSAh?bZ2#He^HoQby3;dlrH=
zWJ7*5BWS;W_JKAtM6vZZ8A1C(UZ8y>w+%TnME`&OjoC={zvl(oNAm-12z&grjG$eM
za=CCL`GK};2z$IcBWTlkf%eJVR&Cc1_V}KRpxvDpXn&R;XhYcJT1L<o&qC0Ku*d&b
zM$le$7J@c}8+m(1(B5_yf;NO3`PGb|{qord+U_BA?T<5p_OYBm!!<0q;gOjkoYvoE
zgzf*$3AWi^$qlq!LpZGs-;s?Sxd7#Iq1k_*8)!R+?8qB3g7);hKr7`3+7M1_e@4*u
ptOIDCzs2O4k=$fkYRz(^Utun^C8i}SRJ?La-%E5vWxAaD{{gX@x$6J`

diff --git a/doc/manual/build/doctrees/hsms.doctree b/doc/manual/build/doctrees/hsms.doctree
deleted file mode 100644
index c740ab72261561dacc25fe5aadecb2d5c2a0cd8e..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 40050
zcmeHQ4Uim1bw2s-bh_1#C0U2T#%8dwb&_>^mTdxDWEEJ3*hrRzPR2Hl*qhy*yP4JO
z%z9?_P6s&r6gX09!tX+n;FOCBNs0;(3i3nY!ZAewsU$@pApt50m7fZPq(TK!K#@Sm
z_g+tT&+N|r$t(Xw6h7U}^mM;|{r>v(d#~R#`QDX>#`u5nwyIxgMvfa6J-=#&t#}hX
zs9RptdQWT5n_CaGX5;C=TnqhXP_bI^7+O?p$E^mI*E-p<$Kt8bszi?OsrL4yz0saJ
z*_y@6$;gRZEA=WiZZm`Gni*KeqE%@IPPA^^;a8ik6&ka*E#49CY0<a%bmD|{nt&MK
zi?_81(0F45-2!lXdssH(f*D1DQ*K6>70qJYsfK_!o~pQJ7~&y*pY+VS_-#|Q+0cKK
z&C033TBbJ5cq%ei=vB+!W?yD+j;BisMfP~SQDWxS`KlS2^R{2N=1)6y-<uDE%6!EP
zD`wS_|IS7A#*Op%e!gycP1BthU(efNJuC)c)QTru$Fo|8FKU(v2c93Lv3JkcH;j!P
z5?vZqA2>q;V{c&H-*f_NuVESskrmVzmbxLCalB`#5c!7RumUr(ipJeoPRnp2!wHRw
zUkBtyBQUY170W<7EN>I5RSDJ`k-rj{4cn<0r>ylt9bX5I=^D+@@m37eGq8U97$Vbk
zlm7i6#Ct1wTQnr_7|SeU*vK!?>!mvzmbbWg#5iC_Q6pTKpI=*BD*{9>4Bet1tQ=e_
zp^xgk9~71X8csE=&@95D<IjuV=IQl3wGaK}h$$@v`#Mc&#qxOWh0s~?s549l@OV{v
znQH7*Fp+hGS{b(<U6jZ@emt}y<G^uCEMDQbRq=x==s7ZG`Q4s_O9m0cJ|m2LhBmS-
zHELB1=Xi$i%~hT7l(CEj2#b>Nr$NRhBRa)57gqk6zVfs7OuR#~hvMy)kZlk=H-#h-
zHd*zCZH7*mqK$Z3NdQ4ZGx1a+67=T>ArtM(Aqed&AYPw`|DKQkuEu}YK*-s<?E^Fh
zq|Qt{4mqMf#JKUrA-LW<T{NrJL``e~YgWNJrPGj;X;`iuOae(_-{^QO@T9VV^0<o?
zz)XB)Zy}~3ytjR7v+)Fj6_1Be6$%SK=SVKLtoBLYjY%&ydtfHsi1|TYLokz!Zb2E+
z-*waRT6UH2yd14Jpcp53fOs<=Sf?AVQ*ol!S$+=@<h9Q5hmjeqSP=64rbg@WDtnK;
z*S_xXgj$z(J>|r<UIRg$gd7Vx7?y%w(D(&|NOwiKi6%(8p2h5c$)1d-<l~-;H6ir$
zgS=`mE?V)WUGxc){2LO~j>Q|3l}SN;nN~6Fx=6q(nJJ!1^i<1~e3gEbu$ThLeh01Y
zJL7`FRkd|^gIeTGQq5&?`+%^;fQi{b^`FG(1ZkiYIzNO?#Ir$g`4Ri=@s$#Z`MNfP
z%XcY2pRW;^|J}hhJPM#R66N0=82o+4p#5+PZO2Ei?XwGTT+QpcM8XYX28bEnBfqu(
zB#~{C{IMS4Pdh}IT^USzeWB+fO6g@cGJ@-?eFWE;l;E;g<IAO~V|1E2y!f56>c(?1
zfYQ3o>Zz=5ND0ScFANZ+>`OJ?Y|q-`&~gQ}B*|XoV)-Dx^ktrLyB7u6mGH)fj6&L(
zNPg=2UV;DP_SI}xJG7DbAwiNrwiOWFC;_-<JB<97b=@bCnGThc*ruitnRQt5Fxh>7
z*|6p2YSnDIkx?-lWMvodCb4<R+9g9*SoLJwCKhVO?9~P_x?c8!I(?QH%LPa~nB3U$
zk!4RWBHM=v&o(sn4rKTeG^<Y4sv4_~iSZ1_gL+&xv7?~D11o9<WOx_IE~b9bGO$7d
znLgmB*m3F4661L00&enfBMGlI1<L71dy;i7mNeL#8@7S;i5<l9DJE!ttU!4703d+;
zYcpt<;((b92V9Jow|hq24~d4cS>I=@`%OU(*qIt@PGl2V5o{e47TKoU%fb#by{N#=
z32}Fl<!l@~d}#6N{ripCW6d%QwYkIAx^YNvZ`X~*2viDA+GB(btKuw!*NEPW#v(TN
z1(F4Z>4w-s2lyA5@$h=pB4%nf8h#MLe)g<2Fr^qT(+TF|x*+$%cieugFiS(<VS46@
zMJ^YCXXdZ6<C1ISSl~x~#dr582DpHlPShykyLJHLlk|USiU>2rw;7$#>X4u{g*cn7
zT6;ovb~vwNQXm1x3j<jNY7-(6?ik3w$Zr^sw?uAh5P|MGIXJ4ui9^R&_MJGgNM4q*
zLqvn-Xe#>(i^j`B&``zRNA8$p3r9X40~;@gnwxGxc{M<NOj+>2RD5sQS!oKfO!`W=
zT&hL`l9@ZG!aoGYVX;qyh23-*nF%T*JFqYdd`D1MT!&~8P*to@x+P}rxqy}|S`^XU
zGz8H-w;R!2hfYq|pg8;=&b-Jns?IX+rFdNuk+siQgZItWq(SS&LJ+%g&;wQw%SM{F
zU>dGd4$J^cy$t%O!qvu<N}Up2A2M9iTWLb_zyw$)2cVSk)JxeS5~><y_{(gokdOpu
zBxrh(1I>&Vu5XeDfN4gKHER}670n_fH@S58P^Ug<8H}+;UPY!TA&x=Rr#ycRq7V=O
zL_iNJhSden;VMMu8bQk-Gw?vmiqE6@aC|ChcmZw0p-mC(Ekh9P^D{)N4fA*#Tq1Ld
zZo<_5m)>ZKqBki|)3mfa66+VbKh^1_rbm4$^LsAx=h*e4H->0JovS89u}PD*Vc6VH
z8QDF|{_WEDMiwgRcxmr<zED`K41h&4c9zgCW$f%u>znx3<iLsb5E^A4=8d#c2pm>N
z&>9Ws4Dy;2ctv4CfH9Kqz^>8|VL5?zvX4w7NPEAzVjDQoDJ*~|;cCW-0n98qs326&
zl>-M{xg@xZ{F1MK5<yg(<l6m=ZTncf4Ym>XAZ{rH4ZydN^4eU{b4GGWcXrNJ5A*t*
zMUAHtM1hjCe$(1It?gwD9F}z^-cZzC35YduOaD-s8>Bt5Cq*Y|`ncyl3?T83g#_)J
z4RSCF`(X`7Xpu$yU>t9T5l&bFKTNh|q(n#=K%7Tw78;Q(r&b1bY_L*O-4K;QWk95Z
zjG!A5-BGtpZ1Yyo3j}?$!LnZ24F&qBZq<D#nb2IeU{*k(1hBX*GKE-uu?i7@DceR)
zX3Y!@oH_FLk6fF3ahSE2VNirC^az@<`2q_Y=XscF7+EGC*4P9BYl(mkQZOdT0<&OS
zE^Ue<-**>`o+P1({9hzo&uAoT;%o_ax>@=i;z?cr$s^-f4c+*m9HwaF1Uf;eQK!rX
zi|1h>H8=wH+Uqcy0)GUo|FN7|)*i&eZd|XXo921}++bWk*M;ljkDh?xL?)Tu@3N)G
z#t~UmO14Y8ZJ#<^4Pgz2LTS(@!V061_^T%$NYm0fjq_d{s1mE!4RggLZquS68MUw~
z49-MOXeK&7da(7Xe}R{0<g5OrVOO2tU?M;GII*S-2{E(5Nan^Y$@DO3wk-;O1Vnn;
zplN@sp!iM>BHEdp%$aYYUCNw!aavu)pM>M4fg^{C(|`qHdh1NKiH$;PL=x`m4aJ+T
zC%d1moBhQbjL`O*E;I(VBogpq0R*+?2d6SVAK`cG!v$*pJcOb1-lrt+ngf2sD>QNr
z_*u@v_mq1C2XjDL?g`)qBjSY=8D+@ln~N5<fADD##loMxO4bXRE|6lNV|L{win?gr
z*@TYA3nDABCS0cu%aAPt4_<3{OPV3=aDC5RPa;!bEY%zQ0VE>aGftVj+2p*dnB+Bq
zod*lM4v!<578G8CIHKee5~46U;T0jWO<dz9PCFS0HjdP8sA!zP-aLVt=Yrs*UtEyd
z^%*_Qu?0=BmtHiuOZs4zC@6f4jxSR7y^Ji=r#0=uEID9nf2?HO-T~m*mh2dB0X)0W
z9t289#4Ff0HFAJK3>;jv<csTg+4T?$QFOiw|6pXd4$t6_s&+HR!Eg&aT<swKk%o<!
z^FTdq8Cg%$BkSq%j-G(bNmv(VwG&-q@p#~`bv)-#LO3OZ^^RBi+$<gkn@RrS-_@e8
z0-b}Ni@XA>5b`SYjF+k1k2YxPano9Wf7%vI9q1vHkwQcg$`pSn(0&yk4g=b+@OUEw
zZTfa;K1%pfPZW?J8WPA4juyxr1SH%P>@Z(xVn-{1&3U7Meq>0XKQ%1SJvCj;MR%YN
zXMkQ;L{q{0%pGOF+DYoOwK^JRscg14<!yNdj-yP^Ic?mkc_aH!;p<!Id{9cf4Kw@a
z0cMsk$v<$@-k?q%a{XpiE^P9b0`8|n0{7pe1#W_DR0*5-LxHwyd^o)AK>I!+3sSgr
z$D0g3%JC>=KOTrk|6Z)m(B!rKgl$sfHZL7nY!XGCFBH0N9s*srgUl8NN7swE>Ej`@
z6GH;`s?h>BmF$fq8r9zld#8p3&>k&-yA}`&xv;eASZl@s_}#Gh2bTo2DnP3CR*cEY
zPQ^XxM>FvReXQ-nvpEx*Rl!eF6uL>_mwAz!wFmo5P6cmf!=GyJ!FQ<$sBw<(%tUUs
z1wd^SQ_aLWy%MzfmOcQ$^s%LXmuUHo{o70K6|{U_xp&u52mW)!?HEU`2+V8TxBp~`
z7n6Mc+uPsjHTw*v!O_S&mwi9N9?2@HV8)bz7Eh=S$uGWNcko5-KpQcXoUvaYA4&Ik
zJc(`{MDXJE4anTUI*9<!2HBLKM<>830TXY+rp$L&EefSfpC;vqN3|fdfS<<41Ipq*
z;-<ZY%a&XH$|?ArojP`%l8Lhq6(@fO{SB&a3Dj?m7E~o#60=nOtpFUG7!JUnjuya-
zsPU`_2UDG*<~e||P1LAI9irySoCysoYA(mOy$Ge7sF}rg!-*O()r_b)jOD+y4*+RV
zL*%lne|srv1ZAIBQ8RsSv+R(Fxj}M8>WQMb<A8ZkmLQzmIrtopaMRx0J9XFMEfmHm
zK~#S$0G%NLTplriea(Y64GG`_qX2LKTU4O`ypq_qMWlNXiNUY@bH)8~5!)ZDwfyi9
zs5$~-`|ZI|^_$$ZH?eIZa49=Y0;(S<5FZ;7#LtWtM5PkCs)(-*3E)>p3*b!J8l||n
zTpjVB7_?1Cs7D<-;s-f18dOJozt8Nt>4=}<yP<T%R5I6$lDGpj`rSSdq?H8G^uPCS
zFO`I#>GR6LTNmqQ5FJ9`?ObXr+4fX1$DYZ-l?CDETD0$_!O5gd+!a@I)871BU|@0N
z8YrJd`jG<jr9*;w^Ju~B&%<{Q3E+v*0(g0bhlv0xL;$&*+`!OnoU9&oaB?$eUW0OS
z&}WX_IQfnEZYWOP8m4EQ;pd~ES+5TqX?`XeKh?i|md1zR=iW{K79J!3AY7Q;o5mA#
zQqnp+LEQFY@r^iP(cjQ+??$m1jJL^Cl5oy!Mt*1X)it7z?1}VIKCsy&H>c?>>1Xf8
zS#l_j5m)yYUxZU<5v=V5>R?&~9TmxtxW0Hjp97j@#9bKB)`g>Yo-mLQPlX0_z(0;0
zt4&H~H%w!R!dg89Dy>jVR;44XuAnm4SDeUhmWzn%n?HI4X8#eh9I8SAIu38%2}8ti
z%<sPmN$te~+Y5Xk;+kd4O-~M6>_k<kH`|YaDEe5{wMWqg%lB!fpVX1cV^4Q<CD@vY
z&GSAJ?cVqjW8Bs`o3A~;L?KuGd3{JPfe<;hwZEYSpN#u{(Mw~ZJO!1-=-&xaNM9mT
zNQWkR7K+H!tr1qi*gC=Vz~f;hfit;vN#-yIu0`<iTqoCR=T!gcs$geU6O@Kr`!>N&
zX}=<ARn8?FEh@-H3&LK`t7D2=b^F@a;DOOm(vSfPlG<13RqgBeX|wa}Q?&jf!JN91
z^0W30v>+FnJtxnZ?wLibhYXEWF*TINvcGtvf#g7n+xJ8b7(|VU91;%cLB<S1IrbR{
z=<tx~$3e#`)<^XuTJe`0GAd(#xN9HbK<FdnY(pWa3p6yMG(`Fh$Abv6SGg^#O_%C>
zaB_=-!Wsq+!4RB*uui18gub`WIJQo36!2v4UI_HPd*z@I<j8E0vqeM+@^C14M7~Gh
zhg*e%PY!_yCxC-!I02%FgVXZ!0`7*z9eJL=A@Q$h<e5TkT16B#l2WFylFk_Rse~w{
zSRV(8>MwWkm)dupBPD7((FR;igMgK1;@c$sK5qI}`x-F;EqrpoP@eV^fMp}Y(i3cz
zs7>vqL`r+}<83M~ustP2zsb)8X-~nRn8hBElUJaa4+n`M<~>IlBvw|RRti@)_g^xq
zEmd2fWz$*V_W?#7MDqRHmy;w|1mJTDsbmw*fHiJ?`7IQccKp~KMg!%mDC~`LW|Npo
z&Q~>E2*Bz(N7Zrab<c=kT~UETfO*J$M$^NQU&uYnGAGDz^cxg)N5OKC|4D0z&Z2QI
zAgEBr0;S7}onE<#>R}u!M_vrB&vbyFA&BqbQeipp>lm4;jp?Z3#q%(C%~6MWc}5;o
zxtO!+J%cI<4rbR^jU4suleN`pZTx~kmPLpneV)5QluC8lX5yWl3#vzRa&R!{Cfs6l
zbe9<2HsK+@8)_52Ns?b?|9uh+sa9lbmM#@%3(^@(3Q~uX!?DcAsB)e~jFH~LeeP}!
zLFKF+l!yZ>uOPmHtSn9nqXZtYUY$}2smjR3@eXvpSwK%Y8%tCvLyW8JFOxz{70Cwg
zXinrG7bCy!9!%24Qj+T#Gbb`muIj%)n*86(<ey@;!y{b0cAk6~gC#uqoK6}@s6)f{
zL53~MUW2mcZ{XXWJH!0CGqvBvcSEt}p3aGMA?6J4mceR-dzPk?Oyzpw9gA`-S(K4+
zK>Nyk4xmVBnN8IvKGTqW9_`vaHG?k6XL-8W<xJ;pbd#2Uf$xS|k{1rVBx$kGeR<Lu
z1Y&6h6Q{Js@9HyY@-n^yZIYcXeUg&E+P1RqwmF4TT2{iMl4cZyZo)nA8=|r$**VBj
zK`OjKPD#|k6vcQb<lhNtS6Q}1G65N2;u8z@QRJ)e|0ixhrK-LMJhT&6nn2RN<mD`)
z#^TN8CQQz#<T|KPs?%*{IR02XO>as_zNn{O$M1hR%2u$g*H!Li_@VH4^bXmcRG5==
zr0XZ?vG5sS5juRkf<rX{JhcHOy)&&)spUmsiZ_wkma9AgXl@s7y8uKY+^*>q4cXEp
zyuKR#XEFR)nKh`q+lg<_MFko7?unLn4%ms-iq+A+q3BexuUPBBL?ey2u@8PoG)|yR
zA{yzF4fH3MN2^WZSLFb_1P;Jkt)$>5mAJ{_C{duPZmy&95sNxz#Ux8q7C<Uk-l~I)
zeXe!1YNB{BvU`MeOER|iZWJy*u190grV_=6*Ttq%4u?v?RHm47!P|z-(x9le%QgY3
z<AkWEfD$Pf9@TW@eiRa1ZF%|l2laiad=4dvB}Rf(?eO(oKvQ=#kp!zg5j3QQ%PT;_
zVR_`c`lH-!R%Z3w)e{`d`0thlaEebI5?10xU~4e(;zCy3!n4Yvq0O2|ix>K&i+G9G
zU!G#!{&E0GngKjmD1=cVc|g*XG(H6YlhX**t{{MfpOZS1*~a2fms-Pg6Ll`yIrzzj
zgqUP|J2EsuH_i`1pB|Q=2@WRcBUB@5WNV>FQOt8NQfz>(+~G)(KIuk^@m<IOCaRfj
zQz3iW=?I1<T*HY@BC4uT2{nWW;P+EF?&7m~)*Z)gKPt4+p`>nq;*q6fV|<4l1oj@Z
zgTU9SP$A-<I;it02;5Bk)B;M;(68qZb(?rnrxO7P;(f!>5Pi~xhVJ<-SW9;z!<>rs
zQP#P<YyhMIa-pg;bedJMf=CpWv<l?iBWl3OV{a3PymiSA$5?>R9b@DbZd#zuOQ;oP
zFL8;UUQH41ELy_iDJ;<TYhh{Liqypwsd`ZJDKFm=k!}M8*~IQHGaK~5gb(>l6|1~;
z%Fahch*hF+j8`-gZ@!OYed0Du9kZh2mT+J1id14Vox-S#@=tRvif>XyTX%UbsU=Hi
zvMHDh%S6#Uu3Lu@vB?jjFbSm5ZpwQ;bYbD177NE4P|}qzIcGN0O7#;gC`N82emY0~
z^t2KQ4pypLd1oTIydBV#EBV@9Y^^1L*sf#Co77B8xo2u$!l234{kff6cP&OV6n~jB
zFTG<&Nzv+@kV_p2d$ljqV3*bYoG04daO~!%{5yP?+P7~^hUszP!e&4t<!S3E%9!__
zBl*8%9rFl)suh`JA*yj8NG7!s*YsKmC180WYG1)L<i@)8144;7MY}u)|MF8k^pEgC
zyAN+T^#2!nI2X6chD}4FzxE#(iLl;tW?hj!LHbBfT;M!|z4*Ez)Ro|ZnfU4fbekUa
zQcSuX-SGtb>@x+yaGin=KYsFxJSz#YD;m1@yy;5~ZGxjw*F@WwgM`6E*^yDI>-KpL
zwm%?7{#YN9Z}WuFC)&2_K1{q(_{3ZBhB-RjsQpYIG>|tfb<m(<>Ee%^fTIbuc5%~|
ziXlcN+%<T!U{F!DAhB1VJxCHS(J2@T(h0={F%IM(?xqi4aL`L53MW?L?1G~VL3sfi
zXBe97PuND8@=Ahfw3Gbl2RvB``-VZerm|Nv*{7s@*Q48WSPp?%9Zs=?!4gG~6K<3p
zK!aG$;Y_U!dZ*667T=zW9&qtpN)7i<oxiF-d1lTA9{}qR?%5c6;knVR+6Ib6?9Ria
zeq??=4Sc*0R;azaO@!K~cwDndoevW^(uyvC!)Bw;w$5_E?uaSH%@^T1s+`rU#;mhk
z&@O0>iNf|#gmvwqFfUmURh%dio$u@%R+GxxF|qUD41FJWn>FTo>IQ;?SN5Rs_-3t^
zSj=p&C4O^u$;RTXvXF2Y2ZpCorg6N~DRzyyM5Y=87!k%?740Ea1LMG5i!VQZ5Pxy~
zFyp{49KZ9fW69k|Gf%)k3RNG^S*^5FB%VH9cNapC8ElzN4R};3fE%}D!a;#YXX8z>
zWIRlrvKiVfQ~-BYY#0AUC0uPr7j2Rz{1^sG&XwNUj`H!yN!L(|zkL_^!RYj-heJbP
zG6`4e*^Y6HhQSJ7V#@B}x_JswQ*gd?t#mEU^3fP@gmm!?FC3pGWj)RCW)u+X4!<*1
z*4IAgBvP59$J;#4!jstH&HH~fZ<0@&<U(ty^k+<vDII(D07Q_pkNRt(H?fb(iF{fR
z)T4*}S`Hs*y*bDx_OH;xxoFRS#CIv}*?$wOc2Pa%MM_C-T+e{r2&*h(+XJ6E(EWnm
z=oY+`gYO?>gaqH0b;?QLTU1I^g6DtGzI`7x9KwIZbIK~3jOgkTa5g!8t_bfnv91`u
zBuDUQx)b;xxv%MR%&{H2J(aK`kjfJw_Y@U~=?|u<iH^V6XU$2|e4Z##q%qMa+8)!x
z#8)KF<+)~~cVd@pNQLe@$yz5<(eh7Yw6<FvC|tisO2IXEaaI1#jx(Dsu``&72W+j7
zdut96q#1-@rWAvhp<OD);O&4}TdrR{AvS`&b!B>wXslUAoh}qW1zndmkgPMwoV6$p
z&g9z92$bVnmiZmpP(lE<u#_`~T`!IU_+kPMxd_CSdlW(E`fIF@6LpH(yEs?Fr8Rh?
z&ef2R%WYOo7a6jgl_2-VI1%8aU7>hM0Zk>d(+qi>kv4LMd`-?;^khhagC+LIGqmt@
zK&~P{flJMHz4C$HnIgnyx%PWtV(Al&?@t(n(s=0FE7;B02#Gt$g(9b<Q{#ZNvQlJ0
zHg*GdyQ5rqRX4!->%km$Hum4}B1-Spm13TRkrnoW9Fj@1Z|zawsP@P7<1zd=Tl*}2
zCPsMebNIc(@NQ*rtkXH;ub)U8+Zww|xW$YMtTI2#3!t23*ur#xhrOvjVB;Lj)B&3;
zgAbM`6S`_G)Af@@jboXHgl;QvJgtB`(KE%7^)bwO6HFDh(Y2H#h(N==Z0dR}5D5%%
zc~O~`X3y-2l0=)JrPSi=K_;S<IlW8Scd2F0vFF~24-<Q?pj+yW-<?C9!`W|dM-S&>
zFh7Lv&dp#>Pb6)xy&rr*h+=uW_9W4~My*)0k*lCj<g8dv6{Jvts|P9DZ$Oq)0!++f
zF!4`I@RmLVK}#k*ZPZ@cEg5@d<xmn*!!h<q!giMFzB*hS*Jfp?TY^YBiL1UL&L}&b
zE<v(P+=vGsIE0f~-~{#TRa?p4eI|aw##3nha?U!Y^#Y+uIxru~qDdb*{6wOu>cdFd
z%eVaOHP#U-pGH{<HL2`<nK+CKWJqnG9_PZ6z5qBcMa=Q4*69V6sGHo4NeTQoh7hrN
z1w^{YBzuva-`nEk+<hnXcGE>P@Z-=04F)IYlaVQ}kfJ4o>Q8P8N#@+)ce#KJ(i~ee
zB%#I8KQX=4F2PZjvdEB*j*OSRd*#+7dok3%^`}soj!vDk*nQzS5nnr$DMk0v$4i)E
zZu&sxe*vo0h??9r1Y?EHJ-60~eDnfV=?H>A+RtURpD-GR_hl3?W=a>1(*W7<hqkK4
zIlJA3?%bI<g?Sios^xl4SGLs%NeE}uhtEb1o_p#s1@z5O1P~7ADm9b@784sxu@Tn3
z*=KdrijCUmDz*oXTBjoz)t1Vppq&s&U@CA4IR`Q5;|f63C86kND7-aFV0)eKLBP|d
z7|mf~(+3D5Q5hBm(SWrjl%0&Dt0pFX(!Wx7Pcjs02@d8EK{qA%p>8OBC3gQ+LY9N8
zeJn~#%LyNuXRM-T%=`h`o0J5S4{~BNpFU8aqCRrl(b1=7h$9SiHe%)aVTY6=cQ$?E
z)C)*G{)rr<4HdgW6JTjQ&F&VSxLOi1yTQ2PcQQ+o-R<9eALw%qN5n{T4~hvv!d5t0
zp!#RRM4NM}#?8i6m5xekS4s3d&R*24{2ZL639ZX6JOZ<}@^|4M&dfdKYP<g^+*{1F
zAT*A?SdvGM%*Ki9BjNH4H7+6eHjxC9lW|;C<uGDkQ?fO%C>9R)YhnYh{a`yfhSpT`
z#vH1>ZV1TaitJ8StKVGo$iLhN_mG=1s)~S2?1*zhgj#Pg+rg;#W7(A)i!TkEW!yX#
zHOXmGg3H74_=@)QDRQw`G~N)vKbjPXdIOFO8!paQ7Z!}y?<QlFPg{2{7$<_J^?=0Q
zC3)`@)F14EDcAyfq>Q(^_AoxN_rzNc1W3}g8jkC)-~jr%!xv>Hr4bQd!%m+Z17eQ6
zzw&viD4O^n&(Fs0;)EPBQ04j1;g3#1v0d^!_HXS4f8;x+aR`f?JEqf@KjX^fRL57^
zs4+^VXCPt_h~-3(L40F**ggz0jYLaGe$g_y+dMR8Y1BO(Q?kcX{`HG`J3U0oQp?^O
z?}~75Zs>AESBa0R;nKo!`fNNI`6#~AIy@F5TuZc}YYxVmWJzp5g-j7hR!aIh8gG$L
zT*tFoN8?S&`A67_ci;vE(5o935mJIXl|0<7u<_OGJXd5JZ}gi{qZuJ&cH7Z-I+4kK
zfS#tS2;qlwpx(eAn*-ea08l~rrx61;4_j1#fFyD66dDwgKbwJzzqX=YTd9l)7J3`D
zxD08m?~l-L&cs`R>d0%>OQ#WdP;Z?<*{3LQ8YS$?DRVSLZ<mWF7B+(Pq(nqks<?3e
zTJ(Br@_~A=1$>8_kV-CU(E*ni#Rc45qW+wWcUY&L2-iuQQ8Sc{CgaJfg@S<SZyRWZ
zgeYA&ZJBjEnZ{aFEP|Tgb37odWO=x%9<5sObTe9>dog7rwBqMxUzV&O@PiUvT<lr_
z&`+RNqE>vdKzpi}N$#Z;U(xoat&7_C!QJsT(XWO<e*N6+i?)yB?KB4vUT7zxsfDN*
zcxao@$iO(R+KMl-yjFY(5@6w1hoGZGU<?B*33%8j&RYm0PE}Hay)oWKl@Ut%QG5~I
z<FU2ctT#%E9)VbXz?UW>U4}Zmn4d7E)9UL-jnHaV{Srb{&}uu1Px+x$N`J{zQi)2d
zPUu8TuNRl9PDnY%n25KG#W)&INj?G3ZNX&d?nq`jyxW>ID^Y}R*gDyYpGCi65EvpX
z<t>kTt76GF2j&`<O8j|vL%f5S4V2@pfDri_%GMp*cgNcrRzu&7LX+7-PY^s~m549m
zXUn>ncpMfR>nM}x75!iZ>@-6y8342_(H)c!4;-0eHRi6l{wCmaTd-Vd>z<zI?yr^I
zgL6$HS=>%ibgXEZ$AC1Lx1+j?!KQK3BDjd}Bis~U0h+9rWc^${LP-P%osGAL>t1A@
zE~)SzL<CVTPAlHR6^%>xH*qUW2t-}Ne~Uj$RF)w@?G-o&pu3H&K=2!|%qT=X<Wsn1
z@hnKguRy&5|3VC$1@-t9$6E#sBywRV2@0s;wq|_$3dS-8GfuEP0?E|NRuvq)4hU?^
ziZI4Z1+7k%th(vArQ{req256~lU}Do4<XRb#^Xp|Z=tp@-8Mtg1ndh+#EzOTCoc)V
zBGb)|cH4kNdF`X%(;92<cxR>oooG>utOn=yAq}>y8la}<$ySZ7&oM*JlyIv2;S{wH
zzt7gbK;wLlRQ?C-_uG%!kJL^gwW;<R`f(TiI8HwvrB;v7j~Bt)Q@e?NjMERQB3k<%
z>Vww4OFs@`LtFcK`tgU<_>=h2jHhY52)7!tj^Yu|+8;P$KYE78I?Lmn<uT53|7W@H
zGu-bP?(;17ceZI?0WBxM-3)NwZ9iiF0mEwlPyjkZ&@!NO;4T2A>VRC+lyM<IrsBl{
z<bS2#7-R|vV32vAUHb&R;Cj>X)--kV^4zd_Y)m6}YsCS_5D5VPjN`2&(&SfSnbS{1
zI|vQ%M!oF2iha20uC|A&^>n&NF2HQY({gP7bZ2H14k*PfNAXO1kI5U@2@ty#zeyK6
zf}~JE+ZDtN17PY<^87tSkYkwf;qmZot>X|S4S2z=5(trQ%oPJGDV%w{Sv_V3*o>>5
X-DVZS&tD;#S*VhtNMx!gCsF)A#&$zd

diff --git a/doc/manual/build/doctrees/index.doctree b/doc/manual/build/doctrees/index.doctree
deleted file mode 100644
index 1b4d31ef6e74437c52b6a503d6c78aece06a3556..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 26448
zcmeHQdyHIHdG~8yv+MQR@#f(qa7l3N*gG?^F^SnaNmIv;gY9)16AThCzB6-n?!9~G
z-pPG<cN3=&+K}CF!Yfk=5oq}X^?_*BR-y>nqEeu(iq!s5p{5mWkt!keA6f~dRzijT
zzH{!muX*f@vu=!3OFlbu?s<Iod!O%o=gfyje*IKqi}=T<>uxO!OxrIxZk_pUK28-)
z<^=6m+V?)+ey)9xPk8#W?}lEDwfPpbs2QeR_n6auf7{r?$9z@`OxKCq8zaW3G4}rU
zK|CA@%)n-;M||w0?$`7>Yf}@n*zqp5LUSb#UTD*_e6*!wj-YMK_*I=3^dRueY8U`U
zf@!;1_c1>otJ%8mqY|G-9K9(&jn~6g@};WRmOQpdZ9+a4=nZ<*Hl~ez#w4Gp#4l`Y
z=cDR9PnGL>pqCA|$;vBc({;+eS1Z>f?CNhZXtv%~M*nhCcS7AR%id+vsk4=m=Lc=R
z!!{k(KD#Zf@?Cz*FrAf>Uav>E-r+j-Y6>|C-X`$!dc)IOM(Qzt>s7pL5Vimst6$Zw
z)=j?#y7&yAn|R{ZUFWJmEa83v@63QgkWG;?!ug2V)El|l5&jRNc79$nf}rKkm&<0e
zQSuFw*>%5Uy5)u$7-6+cAQWqEvuOt9g>w!I&goTOVdUYK9vBbqKYAKSK`GI4kF8gk
z{UCMRfAqcx{DP)w^ST|(Yv)j}p}nukN8(AKdkuz%3Klte3G;SNT9(lGpn~ailA~=L
zFdj5+2iF*Pg5}<f|8K$nyYYWNxMn+mX!Dso6nGGNW}7nw!F9z(n-^-jQ#XmS#Nd4E
z!)@c79~y_xjvMzHhrp`y#zA9ySk)n3@5CD&@BK!jAiRM6q=NnRU=J`X822s!f@2Z_
zW0r5#+EPlX)~_1xkeWiU*F&k#Bm6TPFjZBrH(2>m#mGg$Q59mTqU-5SgFS4!4fnyg
zLBclKsyx3CON5RYtd<-bJPHnkhO^6w2p_p`AikK0r%?>?m_llfA%=aEwsHQswsFC*
z1(l~FD!(tGvNa%;4=aEMdFR(h&EMaEno0?k7hT(Sm&-?v9J~J=NAEv!^yu;9$B!Jj
z|JbpI>n=&@gT7lcbvr|xd;DP4X3>*`&gUb=)>SQZ8K(S;F~tX>@VJ^l5m;CF%n^9=
zUQUtzB|-X`i1g1Sq+c75^!F%GH^4&&)mcyN5n}420;0obM<L$jNa(llTl}!<!=A%k
zaGgq>Et-(8tl{VXUMgu>Beem?{Ja{Kg7jaM;v=0*{)|$7BgQX@@4c*!@i;o1HO@sk
zfHXZBDbn<Zq4D<_pC?V<v-i7=OVr^w8h*B0Lq18yHnOyBUD-P7^O@8ningytDtm-~
zk?2=f+W4xr0riH}d5KiVYPG9a51`392w>$1Q0-3u)3A&s!%ivTgaA{(>({&CRUy)V
zC!`4QwQddhM2y7l=%*<<(f_A}ex+wN#J*~H!)RNQfJ7qJas>HMe}cSdtQqUZOA$dx
zH6{d^0k*!^4bL$_K4rY32=ZFDhJ0LMt2;ethKL@$btB)wR$3mMdLwAsZJMu0+A)%-
z9T;LVtQv2NrRmom(H1?EIdyw=PV)mectzcI9j490-JQSu=)%Q|r%q}oOegT%hc0Wr
z*>Fs!q4};YbgYI28LC)a3*15^5;Zu8+OnYsni(AM;WkqT46K>H#&mxbO*M?iJiQiZ
z%kbDs(RyH(-`WeB#FzUie7QM3)dI*Ex3U69GFdx}@Y$|#tCifS>4?Qnyx17A3R|~q
z5mcY$qw;OzxvXhC!^$qB<PP#3Votu@59(Olp)3MbZI<@ffp=?)2Ht0l<4-qgE4JX|
z3ey05M6Ai$Vo@YrkhXOjdh;=~2v%EI+HMyOC-EIrw#}LuwAaMrW!-b|k=9ev%@o6d
zX2b&4D1jms_g-+oPr(7R{L=LzX6$x@RJ|FMSW_8s0%|fc;xTK!X97@1D{*3-TIkVY
z+g=6pXo11BLx*&`W$1?vfeEiL+ig)uKtqksO4=o`pc~qC&33OaZPE1#t8Pe~C;0;l
zH~O;VxXYTF<3yFA9V?<?5t85q;CEtMtntCO4dzh~gXvyj9%!DwjCP&|Ixv!-8uPUi
z9@A?^(G97m?`q3T!-@$8s^t+70Mc94biajQL`i$XhAc41jN_Yi8XIpEy<!BTZDReZ
zll$UdPDJDm1#UN#B&_=YkOxWGf^Y%2z-gpqWFp3#l#5wDA~2csenj-nGJc-FA10>S
zXVFB0pNd0~A(=};YK>u>SSuBWqLO$EYiDWz>nQ?`bp0&9sSB->*)O4ChlpFZqIOUL
zzlgR23AnYNMkNtd(ydd)z|w6UrsgwwF3n5$Eoq|M(u0E&1aw3H-2*Uq7o@KOz6j|v
zdErPVd={-X#yGIlQ>89rglok33xvWH#%UVfQ=dwVgJO|b_eJ%CuS?_;{B$G89w`rL
zjnD=EpG)vRnQEF0{hI@!zMnOF_1aPYyE)W%nzHqjDU+zryhhHFW%zt+DS1nYz`-mJ
z2I;gs{D9K2uq8q<%UA*VG1A}B8m?~p^GbaV++LYR>)Tx@kyEg-b-W`5;}*UvS=Cl-
z6Y<-`mq}u?dvlE{X26=MmhUNJ{?j&FF{`GH2vp%+us-UgTV{)qm!x^2<HKHQIy?oZ
zVKc32Iy#v!7{$5^gXg$`=CP+k(_;mMjKxx0w>1h&S7F>B5Q_mk6PV-29avP`7VaK7
zflLc&ObjhKTaH|4Aq);nOa7*4FRUMosq1Og5D|U&s%{g*QlP)2JsCQh>l9laYnm7l
zjihH#sM&5<pOcd<u~i?fG%R+OsEL~KjPBJ5HtiyV*#!=?^KL!FOP(<NrcZM&lFQ&}
zHN!PAn_SFM(0T`4*EBNuWD1jtB{Fp}*}uOr*{y#;o5)#v6IA&>;VbOx7G6kbnxdqn
zdE(H&=PtDWe`;<-O+luE@D84N<8YN|tRD%s$htsp9Yip?7=iyG_K}{?bXKa8`F<wm
z%er?5hjMy;f)TFK1W#<sn&3`5kY3VAJ1~{j2YD;}W=IKPP<WvWo2x4loOPqoJ(5Nn
zsgf>KdJB*cQR&uR-IKZRM(d4Trhaz&%^2Yt=~cW2dhH+`+Lul<dHtHat;F<T_M2$`
zpBwNZ`3*lrn@Fir7pYYHPGP;4bRj+bT``OGkN6WWQ@o1|tG6nQ26VF?+JRq?9Pt>I
zmtqNtzzD3JiAC!Pn915wys)IWhw7#IEC^r?eT}SU9oDLVP(X-<+p1P&*m-PGs02pH
zS60aS*EATrJHSv@sLPYs7QMF%Q{`Ncv@O~X96Tks$oh}e<aztUE7utVQgdf@<$(d`
z>>`LQyiz2HdpfC>Fs0W8Tf?bLM<6e&bkq2b13{hZ#H;9<UbPIOGAC2~mY2kPKub%2
z0}FUu`biN755bEGa%ikUV?8u?V*^y=B$m2J)*D!2iCalxWl$+AwJ)A@DVk|x!&N%J
z%JFTOSK!pb>C*zUVFVgtGt^E)@WzY$RCtpbG6vwIQn0CT0^f_tcX*9@7-091f;PfU
zrl?L7Lsg+u1cM;SJw$m|4mKso9rdvo|Bk?YZ?+;_rd-N<ftW7{^!FFzD{l-^q;!KT
z_YX9G!h&BFXvnIC$UJXEvo2cUn;1<wQQ7XvjNk5p_~A6dHv}Deldg|O_&anRRwGPj
znKiEzkicOP7KIyicnC&LP$G%YS4iVkElu~w8z3O32dInW-M&+#EjO`yFFo+B3ss+a
zSCkgGL>5_b9Vr1MooR^WiU2?(gvc(t-cl)21RlF$vgM-Tx=TK!o>B><=5Pxk)}mtN
zh=nP#n><)_wOxW}f~zpgG^iDG(ZqHMX$yBzOoS!3+)u$GyAXYR2KzB{@B}D2t+m1`
zmi@@mYG8Y%yFaiq^I}Sc<Z5FD@)Hmt?_8$sQci&sfzkgGbnCA`zWj5E&shH)92ES7
z`=_=OBC{&!Ch3`ExTTA}xfxv}eKVDAn+$%d7(A;hhSN5CF~T)20q#QA{@SK9beDY(
zVxrV8R0&K(=n}f-nKw>+68uWy_0=n}>LTbTHo#_1bx{{7HGQW@t1c3>UaIRG7qI_X
zlyNZWzQL<lgo=VDK>*GVTP@ea5(MgvmJJ1wvW6_iDnen4&`G{_xoZcC?9q-CmNL3i
zTTKQyp|W_EmzOgcQDrp;G92M8VV&ZaAG%zTK<R3LqD?z=1*D5I;W%~ITczRNN-4Hs
zyTzJs0W=&!^Bo02-YLl5U-NzPhQoHO)%J9PmWV(_pd-nS;FaslB#MBD;C5l&Uc49q
zd=S)V0Agc=581!365JsYuZJB{cxob_b#53zAs37?q%1<c2=b0byZ1>@pO*{637^EO
z%FD{WNiot4MIaXm(y^cyl@ufMBuYNcc8pa@PpZTjTrn=JReCEZ{%7!)7lboJ8|C%(
z*{#Vt&vI=eWszsmzA7}<(r?2Y?-O{<TFty~lL`${7b)R=r$}pQQVNNd?%(b2X+bK}
zFc48v`%c!g05T3KO(VUk5^p$0J4}k0iZ*fX$Ow>XA`2zAMM(%plHLPq5}Fk3RZz32
zjiOzuf{&kOtWJjzluRZSvAX;+M%_SN(t!o*k7)KJ=V%@?CrKTD2^?I&t_p3SQC0{1
z;Rf>YvA}kbNTCPVp;?STDQS<o&Vc}qujU(a*GV8oIOWyVLJi+2Y^Lej<;Tq6OjyN$
zen>kw(dmG`Ipw0QFjjK~UuF|wQ%bvxj17kTUt2ptW#G=&<cW$TXBP$#CT>ncb}8i`
zQLkv@>2gZHV%eWSQbRgasqP?ST=!}vWP6JP0V4amjAxF+Y`<)y0R}Ea6|`$b@dHZ2
z(k?vm<Vo#3PMBct$@K$3>`_!AepRx|nel0&lyS!V0%jz_P~-xBLIgP`xqLp#UrvVW
zpR7w3KFLUVa`Wk#Nc=Yi)1{2kL$8n4iod7Q9FsCB-y!B5;n~N7Sd45BYX#%**cc4L
zh_NxCR}QOLwNOq-GssvE<&40T>{JvypVIMBy_B0I>o8H_-y>Ke6>hELi%{JXLPTkH
zW<;kC)$ScwtQ3L9l^mvs^Fsgt;v|m-AxzR*66N+jV%?VpZ|biRawx~NMWIJh=uSZC
zVl98xAJu!i>6<<nKeZ{kNKs=ttJqRB*}X&1B;Q~V%H;b<`W#W(dtjZ}mukln$r*US
zy!cFu;~GUep;LsCO;J=n(ddaLpQtli>V%VZ7ZB7(gl6*Uz7I{$ZlWnrl-<|cx}>Ol
zOj5aD<3T9it-n|!GOsPEAD<K&z@YV|dnuv&07K;|zE9awME8}=6;3h$O<ZJZrIDe<
zo`7nlUZ;zMpX$#EH_u`3y3;!M;fJ?hljT;FPfis{7mrp{mn5B&M*~pRs-Tmk-T@`M
z8~6`>DR(HL+y=wssg_QlSId}mU59Ko`covGRVE#gz7Br8^f;07g45nFKX7VAZ?<gg
zGKp|6TreM5!Uqu66$$a!>qW5GbdtofLEFbp`Umkw8#(DJ?fTIym|OT{HMDIO^v)}r
zpp3J8G8up3aS^*l*c%&@;$XH6X}7RVM*08b#Osc~41ZO`#h*qnojlMvEnvtAgZnH_
z3oNq&^0=@8E?vuH(Qv&cn7s}I$AtLw5QI1lLbQn$b7u|mOVv-IO|*cdE+40_;>4}>
z3O>e*xvNhw4|@gJm#i_d3)y5%7r6wXPq}p>ogG>0HR3fazf^iU4z6qFqTIy5_QDdj
z7YfUQc1?zK20=LoOEW(qn_i{;5%GjJJ+M$>9kjavfSKiQED$kI`~j#msBoSEfxm?I
zL+}K3>BSSzEg)BuGB8Qe;OswADMLqGil9>hs79HtRmQ|=1zW^u(F8|$0t1Wm7LM@X
z$O6P%FDzow9YSFRbifCs*N7)*B~P*og*K-_zfpoG6bXqo9kJ+OiW>o%S^fq?5wpc#
z55X4i1dYEn99vMAUTpD6oRcAiK>0<8(68dqjJHIQ0VoFF&|5@j%GHJHPENYe!#G+a
zR05s1DHu8qx#&1>6KGI3Fllx00Uf<jDn^{op#UOGUUV=ABhiT(p+hJb<aV&ijSAr`
zzX2hOS?c>ku+%y5$M=R~DeBUTr9S+q8{74ifoQot^26yERB~cU9Mi%zBFJqEZQTR=
z=`C!U<Jf%wb^>1zCtfIDoYT%+JTEMnZ$87yPS~tcz;IEcopG75LwpN8L}_)==2FUk
zc>WCsN%`D203<Pw{Pz$%vH*hrcsL%RE(wqHcAWXB^g3~&NRieB*2|bD<>jbwve+LP
z#~IU>8#?vQ6!<yZo8#63>@apd>lHu;h~iMz7(${r#Yflg99*D-m~?XTBkhGQr>&@V
z3QIl%M=EM$2}QeXf-<!k7Y7!=z~Xr(8}B1+#?hf>hm_Kf)c{Rv-7|t!)Ill^Q87nF
ziHiGBFghH(QfIBez)d~4Qb=!+2i@kokhCa*;1}t{BKB7Jj)v`4+v|MPFza>PfV9SU
zMsr0K>wH{F5beZZV@BM6<coWL*0D{aFDJ+lU)5aJ{Q!grbQ}Ig1o~xQ@Mfw`d9M5>
z(4mM^cLbMAc*RU&)y#KABq}cB;vfY4QH_gkdi99bYc%Ixnlrz*uz)b>EFLJ&SMF<A
z`#P#JCwS9db;JPHThT?(KA$8-q?Fmrg7BH-4A9X!Dmz+F;jeXxiua;m)-jZ4w^?t;
zAHL%x%wgMl0H4>b<0#jxcZkpPD9>)OenEUWf%5%r>mmHH-iIQG=??(ZGgO_%^f+O<
zMxzV#S|`y!Vl@5a{~C=EQZhIgeJq4O;17j`pc4xQu&|iNLP7AG96yhT?6Uzdfs;04
zbdViFkkTXkj%XLC2!Eys=f^?l2e*n9$u;tocJJRPR=gj=3-ntC@QIbCJ@4Z%6pnn4
z!yt;y9-$k51zkJD;H<mJa<IU+JANICOIM`)9Ol(C1ifW}ZZea*P>*9xft$ccBMnF4
z&l4%L8l{ET`vg^|`TTaGu(&NvOjx8vOgv$p<Qp^|fCn~Psf^J<I2?%(reG8+C(`+(
zPj>oEXzdz~q7~!E*c_Cf6Xo(1;KTYV6@Nm-pP|TVm>Kequ9*sdj`4C-SOFEjNY!a7
z>?JAyw*Khv)oKvDe-KkDWzKJds38r>Tq)oZAJ0YhYGF03nuMGvSFTTsSlIpsL-rFk
z>tkqOeVpDEjM!biJ_7m5fOhz#)DZAEDFPB=L)E605|+I(=tXO)Wt=L+T3Z1-RG%39
z*ERwC7xUmxA;|!=BwuMhjx}a0V*q}z2>`5h05Gq-nR)G~LeNyEG6vwsn*hLi9)R(A
z=?ukhpH##XZySC6obytC;yp+w5U$(2_DKB-Md<44{kuJiftlF^U_P1$=B9blsq@4O
zMLh>i*Jm*}Z`uTKUe1Fv(KI8au27PyiKm|1gsDH4pL!B$k#y#{xa7wvFqyh|`uR<m
z{u7vfll|81i~7@YrI9}QFBT$L5BNULZR2rbQl7$VSeK}HFN&-+nRqh3m2)Vk6$9nW
z$R}Y&&QNvQjO-+Ki?hKxJlBrLgBXrY#^xkq=jy&tfz_#01vy3w{MK|0<<c#hjS|lO
z*j=8sT-?>OnmpZ|>RYU{YA6?pd(zbif7n>;(Nw!K^^qHqX$;$lGlZgXre03mS&y@c
zK`332z3IVmOF+v;@I~~P$vnYXgw9%uzo3@iro3bF4yvAs3p2Gxb?iD|g<4a4f>E0i
zHi_t>%hZ*Z$p5q$We#@^Q)UjXbH$CL0j^GsX(GH3IZsJkbOjjZIy-A81zAGrnrf%9
z*49qb#t3dxb+0d2X^v1JCer7V;DuByQ?W|Lvs64s#RsW)o{C?k;sq*Rq+*?lkD|!R
z>(qI1wXgOB?Y9lM!a8WZOoM$w3?|l`ZG6m$@2e2sMXFAV?+l4AXo1Uwi^AFIkl=1D
z1`*<ni}mCO<jw*j#1z{@l$ydm$h4^88iz%>Un*}a)}XkTWD1`2X|(F9mP!sZaCMeP
zZIo5H9z)0W;WvP<*WqvSsS~)Axx!i|E|tap_TjTz5%@}OKP=JpdmhdPBm0lC{jcHz
z4v1_Gj-2-F0m776Hy)VR-sOc1x3@-@Aa#2d!~A<aV8+cj$xI+~LPWZw(fSg)0l;nG
zk|ao%1o{s0ah1y1w*C;=O-$vlrk|v9S6O<7iFEcVrkUrrQRui9AU!s^G`e1?u2w|C
z_H%9PF9418TbRb@w{&fYL|HT=KxDHpbvqeF)a0GtVl^p(QmLxcixXJeQ|Ya^HoJFz
zaeP^~aft85=?KS%E(6sn(0Dit;meD{M*<g@qsUlX)COMR*)8J!#;trhx)!V=&wIci
zOsN`jS@3;a9UyP>-LwTSE=$K%DPpS+*Ob3ox3T3Ohcoyn7A>tXXfGJk3w)x%9GQ8G
zktW3L&H<7X@MY3--2k8>NV$UOY#BEtNf3}A0BKs_h3ISO+4x3=yFxj{LLPAe9mNq>
z+kDR=hQU=aEcFmUNxG9AamdOFmU&G?DW`GX-E38&*o%(=Z<jSp?nn9+3hr0bW$Lte
zmK|`9DBZ3Ov_KTFWUPq8CKM*cmXsZT9pSri-%U`Fwof%0;Um%jFYsx)L=PcLv_NKY
z69Z1rffgpxq5+@j0B03su)CD?i=^u?SS%hdl40a`WFJ;=?9cTo1~$8F1UbbeY-SBs
zXP3l$YLpQ%N}J!Ady*T%`U%*ZPs?!=7*y{&vJY~d5yl2tz<a(CX^S@BY2)hZ5EcU%
z$5r=y8&<0PCTzaAUL7~*QiKcBP)vM*k4pE3Fk;pfLl~ocnoc`ck}AH9lF@h8!)B`z
zvm_8JDkx^-;dBxWxJ%RsfgtK9RV|-|b+>}}7h26gj9s5q(me&2KnGkgv7O|4G*$&y
z`{=lY0WU&M7^=pUs6gzd@G{6YafICA+0Lk0MMd8E&GZSAAebd&lQ}e69V|JCU^qx6
zzn<O7cayw<bDRbkQTW;I^D_tdbc?kTr6f3!YUnbD3W)~4RrwmI_DikRz;K<C>op)z
zv(!=mfR>fm|3cW0wTk=iI|h7CdyBQ)@KlowA78Od7cUXZE-|lUvS3ln0fkT|9|@C9
z;9e$3QJpps#`&EPpJpW%&RDBfWaM$3&-klOps!R6oQAjQL_Gag0No|Xr$pSU@^lEP
z_JOFI#CQ3%V!JgF;6hygPNZDYnK0%_c>|UO3K8{M3R~Eupx<^7`wx*CSO@pu+HGeM
zJP_%HJ)|gbuXC=Mxb_!w=~5W!M+}y5M?S;WU>y>SYr1^{c`KM>7S}=POBIofTfsF|
zq<00>yJ=+7#y+zbrA}Mt+nIBvjg199F0~277o13${*aBJBG2cD-*VWUzie7)bK@(<
zXN~U~Uo(DWyk>osY!X@5knhQ~7O_n6D-oG%kd3dTZ{;<<o4OL#_)*pxi?Kt3a#0N?
z(zfYGCn7V4-2}3Sy3fa`iF|U<`db3(J5;<tw(!GL2;(VC<2UHR*QxjcJ@_{&Ca@!C
zjZ!g3#l2KqpyC`APgCJgaSEXt>k%qyR9vRwSt?ej_-!h_K*e8C@hvK9G|^=$UZvvG
zC_+9#(9(sc0-*xlbph*|fOE|v7}o`SYXY`40oR&<X-&YhCSX|;aI6U!*2Mg4Vs6x9
zgf%heT4>yf-(3(0F(xH8uF^{jY>;0gu^~PQZ2U9T32bbkmloK#n?4C_oQ|<!&?kWn
z+98wJpdB2E4cf(!*q~^)#0EuNB{pc$EU+Q{Z@x1vri2#06PLeAUjiH;Ye*Zbc9KKW
zHKamBEyTK6b?sR4MdjXHW!!oqGvb7rRdm{u8DCs@gR@<HHa}MM1bdCJ75F(2vIKA@
zYPf?#N+5pJW$a{B{|esjh4z!sd&mrc2E{G|<*msHW0R4t#+J>rzlz++rmBry9rZ&m
zNislmVa+TrpHb@qO$xPkSA6d3E=p*Ux7#UKGj+kBG1lM3$0`b`p!+O_c746Wk;qfo
ziaX`R{k}UMUpRe%+y!yNT^r^r`f-*AXk}KD<MGKD3qm<fM%%kkh7J0S8C(<xBOcj1
InIBmCUlYDCi2wiq

diff --git a/doc/manual/build/doctrees/installation.doctree b/doc/manual/build/doctrees/installation.doctree
deleted file mode 100644
index 8361a9ac657ab85a98cb596ca2d21d5d4b928bbd..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 34971
zcmeHQdyE}ddG~AA-n;hNaWEv#Yx4AZv-jTEq-kQ}Kpr?w?A;j0p&`V%JNMq%ow<AO
z%w=Y-y;~BIilW#sX-c^i(H2V8Qd(L>p|q9Ks-;jBDxegQ5FlE$D5aD?s<x_HB&gEg
zcV2VmzGlYW)NyGfZ+2(CbI$kuzQ;Lp9^ZL-?7csKW*z%4nyP!XPUtj)lIzv2pc`$W
z2QAADyYK1l{h97l-RWq;H%|v%$FEu4XdNhOw$rTpmfJnqwbw<P1FIG~o~!8XF?-zJ
ze6l-@mt&z5HZAQ{wDkcu2+d~GWMzmBWSdS{E7V}m+jn${foQyKqP4JV?+B`9R4~KP
zcdDHb+!A*ioq7OHqRq9Y83cHU-^X0D#edsU@3iATs%CB3w-$+}6KxL7C3@Ahr|jMK
zWHeDxqT3szaVhc9a@`EgvhB63@`}^)+;ZU8$~7~nnRQG4zZkaKuP&o}xn;T?vsvb)
z%Z?^&$q&MAw5jR1R`<w;PSq}Od}F+}%Lmc+dmPvFSB+y}*j$1r45(fG&pAZkzYJ{b
zD*%Xn6(GF^|E|Tq>+$bK2y5?QLeARL_C|ZJJ!9W|WDFdviza}rx#XK|TUXL|?zh6w
zahD9J$`7r&aoP!O<6bVa;RJ?nL4~V^Wd^H8b=44JQVG+ja@O0N^}?d(8y1RNzHy&b
zbxhYV-MaBewc~~z1MlelaWrw*42{>jq2;%IC$Nm8j@wx=rjH+f{n5QtqEPc%Z5U0p
zX&J$45L&Ik2s$;}FazVbS6g1?B}&HKP1NCn@|4wFoi$dyj!{FSe#d1}6z&7D<(DL)
zKMtZQBYAC_ksK7pu^AS{j0Hw=m$J(5ze#{;HUrP7b`S=XQ7rmi%Yc>*Zuv$H;l$_!
zWD@t9{*pIq9Pb3-o`4rCa1}CB5QbvFb71OziPIZRD-4+SNORKkJXlY&<pm*1t{Pt3
z@}X#VNw4nSV~-f7j~EpqE_HmX1nXLa@r52^?*N?izyjkP1s4nvz3BCl6&8fSbMu(C
zcSWE5KOl2g8NggnjkX7E+i_P)X1y+A{?@kT)`3Q41;J5|1KWGh;!d+J8h2b4#$*?P
z5cZgeP+KIlaidT4THSQCiM14M48l4hH+~kOmaf$svmS>TKH3=(*rIW8Ohu!udZ_K9
z&!Xoo({a1D6K%#{;c6TG*G5J>iNCFtcGIajVfQS1ecJTh?ip4NF%PDIj!ua}@$-$s
zHMWAMIk?5H=(3^4qvLIjjLOpCs8;E4h{`q34Z*wRYub>#>KW;eLmt>Y1eybn^9U?s
zpZrs?``%tn^(sWNdnwrcg;9zj#GV1sb6JQYz}ds}w8r&gCp_81pnH*_K!gn*;av+o
z2t}XUZY@@w&^TrJ0mdYTw`h2-h5r@s61|G(fyC?JfJEY@Y(k;?$*kz^0&pK^-ScF%
ziSDZMmW~%DMp3UT8d8=MzO&+3#=ch<;%E1G-tuYBZyEdc>rXq)W?-#?c3(ky@?;ec
zt+3K`FgVfNS&iT(=uHK|w57d{b_gI<<GeoARoGt^;h>*T!SR)>a9jpBzLaK1Ul8s|
z#GeOtUzA=F?G(Ifp!9P4UBT@jQpNB0vhsU5Sa=~TzeJqm_fpAkpSl#hu}m?IG-V}&
z_Dad{VpbV;gRLKCm4S#M!|+HKjdL^WM(c}gF#4C8wmy^A%%?SCa*G&-LvnnK9^W#|
zQ>N22X@E#$N{R*x3udc++pP-=<%NZn+i$DTuZh6{qC;~v?(DBgsZaH3jceDhTNls(
zdUF%L;hRm}J0?`SQYmAMkGS~FtoX<Qdt)zX?A@#-2)!#>UyjT3<{L90QFdO4Wt7d1
zbD`sM2hXA1O9vq)ElL0}T=mou$X?@0*hx}>r9%$Bii}Ph-&htOpS67t-y^L93uZf9
zFy!FSaqHF!57#s*yQHsNEaM|gM*ERyN~oq1gudr4=^C0kkZ4BYwGnN`6;%d+6>Sy;
zyJk<{*f<Gt=!=?X`r6*hyuyrgm<_Y51!n7_ZBiW8C+N~_4?1<v0Pg}wDNf&W#lcSx
z5KWgSnpkNy4+KCTW2P-_AAP5P3crrQv+(F_w54gfOC5~Y@kLuT1G^hd+0K&P#J{kD
z@e_TUL-man0)>BY8hzTIJ7HU{>e_{>0~(6s>(V=IB$Y(ZJLtnre0{dPzzIEkAbaS_
zjl(BS9D6u6j%!k?jWzrngQ4*R{-@k1lWDwf0Dg@I9uBh#YKd8ekt&8#66Y?PncTp^
zZLI2|+^_6H433S*3kJT1i#5v+okgbxrwjPAj^AXzEV-Tb68o(gRExgV#3w#xNNAd7
zSF~pJDG@(D07u;p8)rb!I7>g?i63Vh@4`=EagAs3d!Lov)MsVJ-E}@Ty#Lt!#<I0)
zuus+bqplSiN6l(H2uvqbeE%7m&f1lh2C3$)HA1|&7(9H`u*0w&94MEi1C-n*ctcNy
zNx5bjZVjeOn0qmv#Eb_VeF+*W7VDPjx6scOJ)>-eHKHqn(8qUNP*yb**{AR+t0-QT
zP*|$-g7ToC{89>(`Ay)KJ`=ci-a9?Zf(MNX7CnkCzzLHSEzCN=Iy`*JQS@Y8&<sL6
z0*qCk(IQP8UW&OYi-XPIGC?t9*kZNXwi!5q9>WW9t5QFRyPS`>j(<u4i$d-{f(HE%
zHOC^()`S!acg{|>=yK~I6MoUE*&ag0b#<$1yqWCm;0@FD_A(hK=J4E*+n$()*=q#O
zl55qA)zyPJ?e%1ehhQqAvr+~ZG`aYA;f861u8Ig<MzI#`1v?x_%rQCcb<&SQ%Zgox
zPg?~g`rIkiH3yPq*&E|70}Y)jyBJ(cHT~G*piJt;6zk0I%D45o^8QD%jTJGnuUQ5H
zq!oMaq*gZesqGsmmY>5Q;8m<(au7dq5I`+4m%KbVG}L)jU~;yy`RAR3{IhTLCwlR|
z=c>u_0D;c0H@>S+f7i<SR2Kt0IV_QLI<(Bd)rHYU21>>GYg0Jaze4UA1lDDJL!}yD
z?T}tRoIo)#m%>DT^S`eTzPs;U#OJ024t>}xqI=);_FFnmZMn$ivKOdx!*r%x%F#Y{
zQ>uzR<RlZ!{wXy^-pS{M^=3FuCnZT^31x)AO=@&;rOp7frfoaRoN&WJ*-^6wYFgOt
z=rh5M0Ohhz2HS6q60DOE$ywn0(Zdof%$;}iVXSO|Lzm5q5BF*NriUnqVF_ywrZ=$W
zR>y)C)2f;UO?XUJa>d<q19YG}yzVv+4sx5TnA`BhoLblv%n8@2OW#SMQtW&ng`NBk
zbhHoBTV(uUYgm|PUv!qRN~8d#p&%`K8d#33dS0l)QT~ETu8*b2rNew|5X@Kiz-+l}
znyVM*G&04|AEz*sAL!$KK<|}6*KDh{%m&r~HtYm6DL*ja=P02h`9g{$I<#-h0<GXN
z4ccBZ#n3lX7|IXrqkYg`A)!6xSf?4XO>Ze+%iGFaN75*6|2c(Q9X?u&!|Yvhis2e&
znGNg?am^-0fMT)ZI^n@y{8H%@OaGO^QhorR;EazB!n9b0b*OZrvk3Wpi&Z@jdI_{C
z>v6vGL54>8rxO3ljoD`ws_29+2mPq7kTeL{8n4VqcPXRm72qXWjuX2;UdrXTz9tmX
zcjQ324g_!G$o#n+;zVyK%55z39<4g;zqNGBt;Y1x6A$mjs+(x|L9^9bHTLfx@am9P
zGn>Z#TjE#TDn2J$kPE!=TGnNv*1iULNwqT4I0k0L@N0M(1;z0kP%Ht8c?L!D%cpnT
zAQ$9_{s@PzUyeR>dgWN^m!rRolEcX%hYh~09C8qSpB$G9eGF5jQb;7V&_^jF!Egd4
z-qSh6bHMJCIm9D+F5d7E*ti@Y_>J8(v4p51*YHTe_h)EHF5?ls@TC}@3%8Q@AqHx4
zDJ^{g@3+!bAs6td0rr`oFW?PoHOm6t^XJg+=mk8^$#A9XLxAN$s(UHc@V?5Gl7C_5
zTLbVJIVVFcG3^XruH(#PL#U+?N{*BICS6h|WBz@BBzla^KMwK~Z`yd|g0I1C*mRE5
zZv|E`*$ItQHMPW4onsA-bC*r`fx<Vb`!!oO6E?GE^{I~Kx&ct0pRIKi7MiW4FR%#-
z(+L&p`%_rg!`D-asicA~=t7tf`GWGG(0pAAn)!py+Z5)SA-pWs<Bl;|8{frnMh>{6
zY^!jOrl16yldEvl2#YyGR^d1k+2YIF6_iQyeVHvlb@<l)ANz&4|9u>k8@E#oG`}0a
zL)o6@#%sS8_cZs({Nuhe10)_f7@(GzV`f>4<7{Q~(swDOl3tpB1o)u=GM!(q{H)?l
z(_)5oHql3Apj0OKdnwH8{qnmNTS>@<uek|^h7%}0{xpS;{I2jG#jOV71zDH-YbIO1
zb-8b#j6g53xTOI5)&Rh=uFHKLWk*d$4qKOd0p-?aUG5j59D;?p_K0;k4qY~ne%~O4
zXI*O(SZ5_yYFIaxeIEGziovA+q^!FM)>5bxM^h;r<@cmtR(xxolz*K~$dSLG67A{~
z(ez;TtBUC)*lCMzg3B~A#nWsGPx;~gHO09GcaB9jAwiB3N|-xSgwX;1uwrvGz`aXw
zLjdk2Q#?JG!c%^LKcYC-03NvzCwLx7qZocHg<&1U-%+e2K}=nT6C9<|DX#1kuJXh9
zF~$4n`1}m$_;OV$oqe9GcAMxNvYe^se<%Q+O#whx%O}9{J3&9HlO%c)?U{^pKg;Mw
zt=N6>M79HT!;WDW#4+sKXN^1P$o9Tl=%;odTOGs|N3#c>%q|=ghuPQYu+E1s3aR1^
zPakD=l6RruldM#7mQ()-fVIel25Nwfd-R2dL9J$4X!whBXm|8N1LtJ4tICr?zYqKW
z2p1<_BWm+QKQ(NG!eJrPSah)HN*NsL#sT{MzyjM?yxM7%*a?xuHeQ@`pp)Y4&BAN}
z`6TE}xQ$!}at{#8NWo5|2j(fuaKzRhI&QRkc+0VVzs(R!>bIPeF&Sd^WRxUs{e=Pg
ziZ&4}$&*UaCf~y|@k+BEVxL*ho~-Do2*@SRrrAG=HM=g_7&>iz6a2>>a*ab)-SbVA
z;{lp%;uMl`gV@kb=Y3c<3Iw5PM4{U$6y0Gsixich&Cv4-E_TJx5kPF5^F@8gA%S;D
zLIK4FhU;m2;(2wVS+~=w;_UFOVU?Cjg<JQ}VymS=)ri9xS~<RxQtRn2M(%e-7a7;e
z=*Gsge<1w{jBY*XQ@Y*8i|_$)TJ3pdr^x}-GjER1)`*yLvOq!TV0@y;IKhKW0Vm@u
zobx$2`h*WZzfeO+@`AEv=Vf{HpnL;WL?<i|w`k{I{op<sDPA`GD8*c!qL?8A!jMt`
z4L;NLX{8Iz+tSyF#85V!P_e!@g>`)>_c_H>(m)Qd9dUlUg{^Q-tL<Sc>1g%G2fU<C
z&!-9{%TK1rGDHpRFy~-3{FRbeQ$vP1L7|5Xl#2QLQ<&Ek@g>DpQV~}$MPM`_cgq{a
zRUCd~d7C8CBWV;jkEC#uAIdK)o;4`v9$2I<%Q$ViA?+yVhh2{yx%c7g_w6fE2tbyk
zhv#N-Iu_}7<k<-!QPB=s#j5Yrm#ji!Q}`O!sz9+)K+#q7H6?CRMK_I5ktUGTR#tMw
zW01mQe#L!VNunw4f=vFtoynGO^7mPk5#Bg>^7pv`fMuQheHY4(>R^XW{=OgO)@Jhe
zn@|qHk~aCvq02U2{nj9bXPwOzSZ5_ycKZhd)X?+Mr;;jsTQQjQt(0k9!CDHH;^?y}
z9Od_<zf*i`o|JzMSICjSpc3tCDWd6t>^q9-B-m-Qx`N9zGR4zBr0|p<?iUp28r(Ui
za)ksrN+@CeEkzg|;O{9mM+4kDt2+eXUNXhgizz(i2l)Gna}D5;6T5=vku-|o?VGcI
z?)-~lB?)5cq^{s7l}>SWRSH-6Vf<Ic`{?*gGo*axGnMXqCx6H9V<{u$C`A6LK)5Fb
z1l_*>18lz*^rJdTq9^h0%t&_!qwAdjrnIVVPuj4nxg>_uqNJj19u~8>lnEj5Jhyj3
zqftY}(y>xXDljaR$(kACKOv-<E@Y!ZeDEYPROIpWA`Cx{OD6M35=E0dMPe~T4vyaG
zGoD9q60eHLj>0nK3Wf0me)isZ`{sEJL69a<WD<<?szuvMC8NU99RYQ5SZi3;)@Tez
zdmSW5+#(CGlseB68aE&L0S+vwe6ISzrD!|Pz*>~~L?D642P<F6*(?%HOA$MPDkpnV
z#EwW(yM-O6haA!~;s?qceiO{5nFG@AHh!Iiij&hK^%&t-N0OmL4#Y>dVr~Bc<P1V?
zP-IY{w7~cpLN*PR@elKUE$w(=vuQM)Wn_Y76L<I)w|w981DY>1X`T?XiQ@DT%?qNt
zVCimo-coA?xgeNx;M^i6oRKJ`?IC9*GRR<B6%4S6=sFVM7La(tYu4k+N`=Bb7Fa<F
zR7zKXN@k5Z%!R4}OVlm(S6DLU;jfsb#L?5488$b4+G#cmq9EnZAa0P!g*Zj!btDcj
z>Q1mcGgC4i9`G7-m-t|$lYyvaW(MJ4X2z(Z<;6uLM@4z0QBHz|nb9V4WkHf<I-qY>
zJy2lYv{f?jb&ARg2{st7lzXj-1e>TCiAC!yti<)u*Q{0NX&Q+SgXe1W3cl4s_9j+2
z<$guhWTav%6!=s-<ZDaLD02%_155i`C*46X`Z|XAY>t;7Kt50?z`H2%Y>}nNI&i?C
z*^B~m9`VFE`Z;A(FV85J0*dcpIvH|cIW?<Lc*v)u$IB3g*rJp&_lnfWbrV9l1}5%m
zR)CYPG~;|4>5NCQ)~1RSGljxDCc>1pQ00TI1y#;W0}7fkXnA#{bAmouR@_C#60=c;
z7&MAZPe_LevuRs3P6-4Vbb@oFSEiHD%(CN5Im~!bEfO!=@EIht#u;=vze{Y@twpob
z48_a9_D)kSFOg`IX#EaL3?A&ANmC45ws_nqpECV&)2Yg&+DakfHDx&xIx90rbVOoo
z{dD4QTny1c2F#0tSryEm&k)Sz3f_wd>VF7&1ah^4_vmfdYyJOmk;m73agkXJEk)jS
ze)z=;hM#B3q+Yf^J>o5SyB}%Lvw3>0n3u1n8&>0QKm(g1w%Pp7^%=UnxCJh4<0~kw
zHv4ZDJ)&fOBl^d<#0%%Z(+6MPoog%{ha)-a9Wuc*w{iUdSB_qD9{scg{JiQ=QRzqN
zijtFMa}%*F$xq|MY$iHofH0bdj}D}4YgeHXw6JCLSUUH|_S|F)M;xW2SD(Z9Mv8q-
zWtD`xQzX>Bq~~_TyeCyTl^jq>&UzoKMyFF6%@6C&m^BU7>8t}g$#M1qN|xJGWYGb9
z<v=cf`=S|CGMEy_w;G2bzL>E1$VD<Xj$`tJ>AI7r$_{}vZ3amU#O5xG)tvN`J6Sjz
zGW6Ep4IOu5IC6fKD7!tGB71%xyfPMhWH;CN6uJ*Fx%A)KL<GhdJxN`rQy=saXwEOM
zS`gML|5O0HEd>DGajz%Qp3GnZG>N#Hk?s_u>y<$NvYN+!Oa4KK&rCy2j>u16u^!Dn
zG-vT0nat~ruYHxXnSITxL`7>|t%CGdazJ_`LHd3MLDEU`pW6CpO0z>udHD91x#^fW
z&7uyyNnFN56Cq+FqsnGW3IAwL3Uga5N0j(vk2B==rQBJo>J<FXr{JJl^lU6)68=}Q
zI7FGv#mt-d{+C_k(D#as&!@1FUmc~GSxp^tN*!&augBd-X+A<bJZKsPH=$v-SV7K0
zCY@uAYgMRxBLx**Is0RIlginnlv6CyJqksn4rikGY)z5M%1p1={B8=H`IYw*u`naM
z1-5{|V`4g805&u97rnt%vmTiSOm+`Etx!BRn4B0r^w;%u2Z^`^1=2<c)IE%4q}#yg
zdL_7+yNBr<kiLc>y^%qXbb<Wc!)+<e<~QlPV&*i9TB~?2EOM=?Q?7j|1qa=t?};T$
z!ap?p3$BO0S8SX}VI#jf?u(h#)Un2aT*$Y^wJKEVDX8emIULKIR8Hn_FNDcVuh{fc
z*vzlIBe5{)VV}pubh`8J9!4EMdtV9&x~?7~@wzCGrE7S1M!KJ4bfdZkKhKu~t!L4N
zopM-97k|o28uAZoFGSPIK0lR1HE$r*e1bulbfb9FD_u>1P35%GhFfj15KSXTxo{{4
zSy{;ylb=apa)=WR-zPqIA{Ir9fH%hjWPaI`KKxaS@X6tCt};rZuck<(d&HwLuSwW<
zv%xLx9v9!d{hP-}ktk;VK82b5@IDr^oF03)bEease~gmbqC_;8e<~ox3fYISPmqWk
zP#{a3dXYKJ$P<!mH2)(;*BhrA3;L2!&J9vGfJGs1T1kb&O*wE_ARMks$3fd6HOI<a
zlU_!{B&&HO=^D=fxx{@}(I&PzsuAG@IT?Lm#2b6mwkV9ss@PZ);@)x3tza90gN)J1
z8^og$c5*!F<Hlg|UHl~N-=Twm*wpdXJ-FL)nO#n{=YVm-?^sXC=y&O$cMAIXA<##Y
zT1$y7QH`T0V(*Q%-ihg~iq&?IX#1`%c3*AKMAJ84O*eiC!qcVX`*5AD+;$aj;9~o&
zv<+RRyq>#v@6`_@Oqt<g2Mad<)NwKG<+!gFdv<WIjeJ<Cu2$In<xh1RHL%%u4lM`K
zs|FHc8yU!mH%_MW+;ewsyjv`Jr*7X?v5ne>E!<~5+ym8R>h?_ZiqJRRfM5S!!9JNK
z+%3m1avuvlTnyhmvMwq}8c2R*U589*eKaNZdsW26?DNr9`2^c=tnPfY1$Q{nRx8|M
ze+jPn<=5KdvM=mEa<PkU{EcR_gB>GsH(oT3y-n>-*qyhh=A(%v3)k(M*j9y_Ca8zP
zwwqQPe@yzg1^}$WPFHY&Wx0#(fjALbvv6suy9|PY_!B4n@YlA`t5xWtd3p<0#;`}t
zU+qRa7f}su$kbk*iMG-G(>QcmS)q+<(DM{l<DGVe20bVkpu#Ko6S3JasL<)2ioEO|
z?TG?SGYB9ZV4<m2A6L3sxB(qE%|`{>Y^p!UqDwG!8{$qx%Ed2<#-cIYpVV1G@hQ3q
z87R`NiI&;IlL@G!W|2t5pW_0v3d|CFj<EGFn&^a!#oLS67S@ffOunqJ&2|+VJLj6%
z#>aLVI5pg?yqzPj)iTCv=|)%eyy>Z;@j)1RG{x(Ud61>AOupzT9PJ<(V0(crf=L&b
zDvEmyfp{IqqBmG>H@eifYMx(5Xrha;(F|=gnvcf$9w|b^sY`>f$D=8;6MB{SQM7?J
zZEmY~TJ4H5NdU_p;9e}cp1w&HZf8%Jv6J@WM{OJ%t$P*R!3e4yaA@2{R?$l`D?v0k
z<*<7Ysjdn(0@B$~2tqr#@MyDi6}a722t%70+4MZ#Z4+b_woR;ivKzgUenTU;>5;`{
zanckjpY+YsP!&6P+C8#9x`g}<mg6qL5SvcR3A=MU_C!-{s~v|YW{LEK&aG9*HKNPZ
zIY_G=l-jGIjXlSnzXXrkMU;#IP*!l+Fk(G!JjT_NR=arPEw=*CDSxrnQ$0P2tG`KB
z59c+>WS4Q7ykmuntPKQ&vK_XXXlw#|ci~0#(C!}D5?uv<YgLqUs`y&rw_l!(b_A=q
zjC-Y`?zhC@dD<h{jkX3Y>=)&?GY0_bQua5ytQnp~+1+6`fcC1IZGs;tp8Fe6W)PzE
za;J^kG^fBFIz-^l!@yZsk5_ZtMc9Cd3p*)LpyTWzV>`LgmdTxQ6AMW&8JuFT!-H4B
zfo)lI$@#7tsFo`hu0U&6aQ8dKU9fj1x`b+`o;a|Yi#(>CjW$~DsV;UgM_YI_f&0P|
zvAffOZ-f=Tv6%^XNpEjX(Y)~(bx5qgjdmsosK+9TWS`6E18Qth5zy7{PMy_8{np7Y
z>$%Jz+Ds(;&2-}})R0R*K17|{2j~au4XF%n{~=l$m9RdBQJ-a$XBpL*j(ycr-Dy^V
zJ;_Sjv%H(6flFh7DyH8$(Kg*gm;~E!dpz?eGE4r1B7vmi=;%*49Si~{)v9_;Wp#}7
z6+I6X^+ck^3E3(uv@=mZg1R4)i|*>JOT0nfia1sCIuwPVgBq?v<l0A1wfSE0{5_<>
z--YN$)(7wC9*6I>O&?wi%>{ID05*+%V^e&$jC`v4ReOxzTcCgY-6y|SarA(`TyaG^
zHzAh4<A8CU+$MdUIE1h(x;al7HN+dA%<`47yRi{;qlPR@^JX+AI??rFXd7*MVE)iU
z)RVChKo^mfT+Zqq`5{IrjrFKi8yJdZWx7W@+Nr|41dL#8Y(NRQA*~lS@%OH%bQlKg
zlWR-VV!U`dix9(OIW8>4%LX@OMB~~NH2QF8T!|6`Q22pFfkd8EBD3f*>A1CKr;eV(
UTcW6leeLLFMTbN~$xgNOKM3v(wg3PC

diff --git a/doc/manual/build/doctrees/intro.doctree b/doc/manual/build/doctrees/intro.doctree
deleted file mode 100644
index 2ebe2e76f3c92b240401dc8e03191b06b18990ce..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 29817
zcmeHQdu(J^dEaDry}PsT%{n1ZE}OvG!S<#krNJzLjdvTCB}=-tf}z0p&djy%_0G(l
z%)QrMr=;OkV9RY)#I&MRRIP*xs`?Nrs8S^aZPk{R{sn4PR8$GImD<vW`a=DqQv3UT
z=bU@ajA!ieB!MIZv5tN3d4A`6{J!se=iK-0{rP6POa7N1sm0YSjq1rvGp+?mC*RKp
zji8x!KGB(cf9I*rM1G*{uP1TVt_Gca7fMvas9tLa&Ca_!;jVmN5>(SDZWiUkz2R86
z@7<jVyxf~cX+3aW<tNTHy^GDX9eZi)oxeOke_^h}(kQ%VA-KkF`<D5s4hNHuwS4rP
zcEV#x#m`HAnzo}#mSW@_>F%hOU{v|OYTZu~JjCyNn|?$6w!fCO>>m}sdbJ%avrLxn
zOZ^qT>V!wa+roqSfpS5HaCbgtW`E&K%}@O^VcZDLT#FiU^GwpNo~imt)vpESztd@>
zb^jUEKhyA=nO{GnYM+TX>zQ_vcJe*-s2OxF-I!G{?E{#SztZ+wp+l#|JvZ#y1@d_F
zK{abf>4taVS{gJH5IXTDmK5PiXTvmYC9`K_SZNzG3fePKkS@=}?G+h9m^SKX+RN3~
z-T&GLX86ZLOXc#U*J{Tpmdy*AH7`qoc2e?J{HU3v-ZE+iH7{;^jkp#qNBEt?Xa`9P
zT?fgOSBcZms|EF_614p^@O-r4SF2GC>*Ck(exp>2RwDdf-|&)Xr5QC>bQ{&UUGqpn
zE<WDJ>t2*5o}Z;5Do0h$6K^Vkw-&Ue^BG}|iEuo>bs#l5iZ`%uGl>us%Nl@7z^{gf
z!@c<%pCQo{myYLSiuStG3H16PS~pL#iXYw%Rt)b1OTQfdUV(pi<KHX6ihC4`y(u5V
z2(hZ2{53mYz)lvP4qwa3f_ujE-*`bSrn^$XKtgebQ{iNIZ}{p<dnk|LM7SHXomL77
z<o@S{FwRy&vK17F7bRZ24Ds+<0kl-K2B!7FR$eu3wCYh6Tv`KPwW8{jH>ZTvgWd=d
zJS;W*tAPjp^MY%r9g%HVIcwG+7Act9uhbQjx8q6%3Bk)&oFow*&p?%-F1puBu(U4i
z)FDgKX2nmUDu#hZTVV7w^iyvm&b;-gUWf2i<E)tmZBLihv(YkBf{<2&BvB%OrT)R1
zbipbM(DXyG$^nN}N`_U8Ejnr*<Tou~u^;#ASpcTd9At#M@4I3o!FD5|@u-klHS-?r
zV%iVu^=(9Hv;v+4ho&iXw&n{mYdda4iDE~Xi(o}GzbIH&MaIh|G$o33#=~q-qv|)Q
zHp%KMaT{&az*JDBZHfu>@G|VTmu|FzWY)~}`7)e>yvcUtH9FzAA+y-eqd^mZg{G)h
zu17GhR_U9?hmqx*a+C%Q=XL%l$vEGN<7L>WS&>*DRuOEGz%tTq`Nkl!q%neGy~J+9
zPL}XAuESnwIkigaxoCa-*&cI2{d`#Jp9J+kx|N-y`u?z%02cnBR^J~nBDi=S;AYOR
zLJl8`qa-Fmm<5i|@*oOv74RhSmZ_W#uPcuB<!?ju(@CkyhGx9C144L!Ca5il2CMZ%
z7C>K9w<o}MctHFyB@aw}EOdK~h9C@J31BOtI0MF!HYq}YLk*wsc1CN8(}_0=mED+K
zT0?PQ8NBn(LY?T}A6hbc8z3uK1FT`=un?6EDEtIgA6&&D=`I8f;dQmW(Mn^1fiPHr
zP9>TFh%xH1I583gJ4J_Un2*5mUXFW-uFoc22|9o8h0CQD6@MnF<VTZM7&WiW__dmL
z^bWO@iYs3O7<HB6%eUcgWj}W1V^LGw7)RZHUOc(+ykup=4&#fx3T7hTBYo$)le7lE
z5<jOYTAjc}&D18p11<8~Td5pD)Nr}r?unb#fzui+*Ww0%SSS2Sz7K!V`T>JW5BWhn
z0N|s*r=5?=`*pwF#ILNF`f!5ar<JT+3+(<)t<`SEcs?WW`|9^n+6!Hc6&(&ebD+Pn
z72#Z6&BB{>b^h_UHK!l*;qskRU}aV-LN5&JEkI$V<O<adoedCEB6<N7Z>3^H=^@tf
zfPYY%Loo~dCbBU`6<W8@k5r1%gaSY{tu@;|9N@H9>pgErIR1PbS;0g9&?}C;LTAv{
z?O=<)8<vMycoPpTz6JLFoI$YSjhzpgkzXg$x^NB1j9wQIfN&VxE`hUYTY>?U(l|;>
zYgxSslvj!BfY0K(DQHIAa4KsSF$6Y$s^BUG)tYg0I#B(jz-tnQn7F)n{%wz*yLfrh
zn0DfZ!n$9EU%A9Eh}MSu`~D@3Az;#D3jP{`9&|H%ZMTFyV7pNSGZe4S*Hyh*j82*{
zVlN!f6#Y*F37(9bL@5cL`%M5B#K?#osJKWeMV^_GQoseyT)g-ab)P-z3UO)rKlegm
z*uuiD?gAqq0`^-5XXl3;=3P>3^9A#AwS>~zUhg4y+jb5~JKawAMEK>Q?DXn>RNhKk
z6s9`-bJs|(-i&(N*y-zzoesaAt5MT}8M}N}c$*MGO!FQ}ubtE;;v9B}bN?pl%vkE|
z71_5f-S<q$Gc_W4W_L^;J?w$>`Ox!0nOUl;^%)M<V4cJN-HORvSi{2FBn@so-_Iz5
zf{0^?$5$d?$uWSN<>*=`9K#ksw#;Ai8)gIvz8{Uck)D%Xk)Ce@<S;HN21N(M#U}V^
z2K`RWE?7rJdJF<$7_%^A5>^lWq(oCu3E<nNeggqYSe5lC4QITEH&l>(!+<K&41kpG
zzHmSb&$fi{MhyE(j7IYbBZO8F-$c6+45Pp`<vwGK;(c=`z&OU<dQbrZ3v5jC2VkZK
zF|Drjk^4cQ=^n!$nS<2xo8ZY$!#B!;>3Dg%*2ErFwd0$80(tGpYnuDwwcb7;PZuFh
zC&0KxsPovHvBRR7;q7tzYNBkwc)s~XG0XQ2F-ycbSD!*TC)7FV3czB5m%3kgoM7uF
zI1L+AUfth7fCjU3LMs#p6ejX9drY!71ja6cYa%nUDa3FHqUZslK4>;sXSB$X8wN!2
zH~wEEnnLsh1E7fbW>?AzB0EN>5=$wR;R-^gEgg3u@S4zO;>wjINR!gpE2hE~g(K&K
z)SHl(lMgLTVqO4*1ac-a+eiGdg;`1<hv)^xId$2VWF!i*>DS}tN<w6bh%ojT^~hB8
z)~iQ|h@G4A&f$Mk-lL0CrMb)J9=!nPDXl8ch~VX`FBalk`|z{Emkzj@+R4K7f}c;4
zd%5k54L!B8wx>@?Pb0#gUqI!pEYl$P^BL6J2L8BV3c#P+x8TICXvM1`t)!lyqNl&#
zELtcUwV;DdGWDJDK{*AZa9l-`e|G^PzpKFp^aHg5B#TD3CbrGU0G|2DMxzm6&ks9*
zNk+{9N6)WR+Otbn=FgQTt{|wIq|@`E--z1N=W6u;d-vL}OE%!2HYS(EBI`;Q=FZQb
z^Cm9T>k&d6Rc|hX?3T`}ZEtTLkz29!-nlw=W6}`SMIXQ;jMm_xdf4+%sica*nvHUX
zL>ky;EMYh2D&i;HS!_eaKqJb(G(t9m74+HB=WiMQE5h(dML0x~1Z$B*wcVKDeLE$V
zF*LhDUfa>1Nk`q1<yz4EAiaGb#A8B9ero$=A)~K;70rS{I1S<Py|PrcTQ$GcKgE0F
z{p7QwucVpVUf}}U&EM>7cJ~g?J$+~S=(EdFg<L9X4JVhc86=l4H^N8j57dJ#N*#CU
z-h|w?TrsTw*@n8Vy7-aqVeQHfR<e3MNC)i?7CTe<k6*bmfANtiZ#|5lC9rXyGA*Vz
z#^XSU7&e>m#uy`w4oaKRfp#&AxXp9l7m>h&qfW^3_0b!9!U}f}Jy{!VxD}0PgIgG`
zK18y;-Y&g%>x!X+5VxT6C|3BDsJD$3?g>H^lkqmMc$XD^9e9$IbR7bN{7r_C%fl>x
zaGPncyxD1G`TZ#0yV;t*8lrgV!aMr#bStZ114Nja2pMKnskVYeS1+(Z1(SBvOd++8
zpn+in&9BD{=5{b+mhU^`*Pov^vlW<4`GqST0vEIcIK|l9=RPW+HKVEo;GmDzPrVd)
zm!-fnYPO)rdv-vPvzXyKcR&%A?@N(6hOopcN-WDzCtgOPTz8Zj#4wurUWTfhr_*~&
z5~}W@O#ZC3Nj3GrC<C<0A`_wl!R!wjEi84Exaj3TF%x6D_vxwG7M|XISyrDy8Bmy=
z3C<YPgelfm4P!Xd`3AJ~gtXMH<6J!C$~VjRUE6ohX$B^A1TLK-PK?*Z=k+94SNu`s
z?5dQAtc4vm6^A-+mU|+Z#FiUvHNhz)L~8YJHstSmE_*Y}^W1h)EZ47YzvhJp@<x#V
z(>qu$mbc3_m?iQt1x*lHoEDfjhE8;Jhbq0F*RvP{3teCU1S=20o(`H!Qmn~}O(CXG
zt!EPR;9_D6D)p9@CT1p=mcSa`Lfo2uD-u)c-g(&`FHJ1G_55Vv6|p4Z4pJDQKc5N6
zakJJ{#haLSs+3qo#}Rc^YFo+d)fNVp#p?=qSbduaiY;MF4tg2k9~rmtl333;Nr=^~
z1l$3H_msrb%#p#2dwk%Mb-fUi0g{{4$_znK1?lJ^cJ0?$EQcggf;kdRZ$L9wv#p{z
z!kW}n(>o%(RWM%?W`l~_hYd_jqwZ>`eR_e60PMzc*{XlCJ)f@r5!vRpRrVsf>Fy!c
z+V-FZxBADZU3f^cu8I}Ru*MW`*m~a_VPun2+?W}Lv1~v6#&=>f-<fe9>1IgV&UZ!_
z?>AnI++65DMcKjn$%Uj3ck81q0?#LV<PusWErQSeUlt=8+r2$xWB__M$~gh(x43bk
z#b1Voyn?J1k!QGPCcGkHV`v&T<_m>ci?EfCvl{gcl^&=qs?|M`jR&Uf@qGG#ekfU`
zX;7IN=ulH~J_cA5_SJNx1K!L;(4ng&q-vt_kz_?igaxqCU!L)P)b7=YeJ`;fB2X6}
zTYI3;aT4|Ny`&XXad@JN2srbfBq(O0+L9FPV>Znd?D|OLb4L9Kqt*Q{BljJ>^E8Li
zo^Cu%lM=%a&%T6$*g8U-N&;GZ3%zVlfIx5Sy)GX0U|x_U_1F;B!gH}sR^(3#J2`RV
zUhlQv8Y)F%z1O?QYswGW(%~zZ*pptnk=@YV>m8^(iuZai>ODu^>sujkq$F+2;%Nxi
zOI$u2mlqtN_;5HyOKKbS=Ee*1lSXw-t7zIZ_oSR1#Nxg2;q?3NEyMy;YMe>cxrH)6
z{!Z?s5n0ivxP)N4v9o>N6!ZPDJ`&LD+fa>PMma}~FLbH#M-0%F)F`!CMo*UbvQWk{
zJfq+V87JO3e+lt=%)Ki_T582@<Mm5omB3P{E&kUkEVh)W{YBA_+@qtmEjIP|S4kt=
zt|kj5C{cYVzGA}?Z_J*+jQ0*4076WkKvwrE)<x$A$gVuGz3M!ps+Rr@D8}T(FbJUL
zn}&x-29avXZX;4T3jj76-0Iug1i<zssMVTfSv^N<-lZ+y0Alwl%!sS16z0wStJuD-
zN?#-D$`w=|MOS91w=-QiXdXmJCIRVjFf>UgYVs(U_a!Ez7iO8TP!Ed1hEs>6s!<cJ
zddUCf?Ez9L*Aeh&#5m~@`ZyZFjWUXBD|_-uK%7<-;1C^U7#mAC+DGv!G>1v=b`lMi
z7$@l`x5`n)Oo*u{ld^@!!+gyErU12glCb2j`B7bt3<CeDaY&F=N+aCJN0eZjm=H;(
zr+Au<{1UhEl$Z6Ctpq<f>a?xQeH={Ml`43<mhXNf=@sr@LS-%7H}xrRd-=5VGNNSv
zA}Ws}*`Gzdok_Mc39PR=&D9mVe-{{#6r)(@pL!m1NFiQoeTNe-&aSU`)h@^DJ;$YZ
z&Jfm3*jNnIlrl5$1`vJJMv?qYDN=``0xuG_XD*NA_jKp$7%cI<>8v2oANFC*UU*`%
z5Bx3yS)%60X+@_s^q2;WaIu)YEF4e$a%&()@UsOFJ9Y^`Wxfv%+x()K=eLHKCt=t(
zQO<#3L6@HW&P8Y=q)`ca!pf=)CwFc|&Y}3Na;Q#HnUYv*W#c(x3W9d1K|vF5;u5i%
z!fE&wP)6SxptPsfN`5Q2=AAvqpA&==NVU@2Hl+fiIcZlOTT(dAQNdtKoa`g;V&`CF
z1(0YFP)aLXt7Ye&g-Kgg_)oG94xqYIPpv;edR6X!ad{M;8t+@f_ViupX+)*_AE-Qv
z(%rRZr%IR8a5+eELYLZI0bi1CqIPc`$Rl>@n}~edVE*Z)@XIg*P2oLcH{0rMc+<Ow
zIkYc-Gb)cl(0jHgXiq-aK}S3WlX3Amlbb^2s8z6Pa;sf#F0oNPT`K2m3xeS`VJAv9
z!5p`)Wk;7l2|3b?^mW4}?_pk4Ldn)<iB)^76hmIr6991foUQS)P<V#71jw;os0)J&
zc;48WK&NHb;Gt8;7Alnj<nW@JQ?cA{>LVV5ENQ)Kxh;$2$6yNv8B)G;H3g0A)^?QE
zYYRJi>%$ptFcKr+&4mn+0+=tfk#%Rl$QC7vdB0<bdDF5!j&hD=eZpn)#Rxv4+Qb8g
z)p@QBzC6OlW>hIhMc%Y_%L^lHAGNWwi#;$;WhWx!jH3Z1RT}e=FgMzjpat<(1-pO=
z60loLZI<kR@+jep=U1@ph21)2M&jJ7*hV?R$pW%@$WkWUhw}r7yfFA8eW9_UQY%Jq
zR}Lr0Vws~3NXslGVboG@I3^=X*v4B<aq5<b_amHc&yeNVGjqU7+GXx>YBb4JD;ijj
zvw95~3f@(EfkFcU&q}ZY8pr@yoPBab&&c6RME{-=y%3m{Aq2)i?!*zCE`hlR0<!?l
z?2(Xlo^F7$ms^3zxpDv*+^VyD()C#2reY>=5O-cmDi^WaZh*Jp$(#@B0q$sFZ31o>
zmx=T9#YT&QBD$>wifHLvvx@r}C~E8-mkm*;NR&}VI)yHE=8@7n+HzPB=xVr<LdB?$
zoMto`$u&l}N)3k}*qbs}lDRZMG%So2qw^x6mc?Y5@KS#`-G`FBVDD+_WDBP^*RVak
zzYo_AjsBiO<x$Yz$53x)F^nPL^af;#bb~yN=VzZ0a}_eJ*1;O`t*{>ZH^$JF>HPEO
z+>|3ZAx)*OPNZpfP{fK_oam2c0v6na<gvpDD<psr_5um>IAq5g>a+x_5QdY~B+E@3
z#-u<cr&K7WMO^Vh^j9(miFB$7#LeVN8B6j)9C@*HpY6lggK*nV4p_Ryf2BH(v1Fp_
z6s2PvQ}l7XiIgout(Lsr**PI~;mA+u6B)>+lf#ITL{udEaGeZthib*C48LB@>XN@^
zR*-2sxEMkm{o<mQCj6^DcUQm|IPfA$x#_Lolm~DD#~PS;gv%CZ9|ITxhOr}yn%HPZ
zbzJcncrq@f`rTT_6=5eRsybB|sbClZKWL0w;PHA>0k7pqUo5906^H}#WT)g!u?*uJ
zZnQ^FuV}LrAbS%A4yjx?<W}G^&HjSMnEjw;Yss&<ThU5iF$W4EI@jWs6mRNK0rYhr
zyJ8#&sbw(dhBYjAZN2VRgMLvM&C%7b&{oe5s+T8v_4Sw0gx1$3Tg!Iw`+azMXeIq6
zR31f1e+~7vQPMpw`XQI|yL|KyK)^^R(ar1L_eUfwJvS|xNt$pOzgJv(7wvB`AH8S?
zoqD#Hzej<Q11sMaYITRXT=g~RpxwWr-p*F-aF<#bxNM8#-0z!sNo8zS8HLSJd^H?g
zph#G_VC&?!R<!#*?N1A^<zZ^U#ZD$fQAogo_VG=jt)mC@(6@*lxR*j1on!(<IJH*H
z_2#{sx!Yw>?i({ca1+Wo@qv%I&}i}T{_YM>2*RU~^scN~X~$P#*m(Ytx?4^NdKZ_c
zWV2HnRd~|CFXr+au?{d;2<0~cs3iLq7azi-k&_~HWN5o-nAAZ=Iw4JQ!FlB&E~#W%
z0-YMQTb96dp=)(l0U`=8Y-rorMiu{C*&Ni#>XHfuu%<1+sY<+(C8xZz5A(n9wbcCy
z^Ejp<v3|h2l=t$b0Zv@PrRTP*I7hTiC~W3cT&~l?{m*>CWRc=d1?A7-wm{suY3<mz
z7SKkIgY=@IuVu%3gdH6#{Hoz-->cPU$gawD+NYPzc5+`Io*&u{PoeTCc6b)`cBau!
z_G7ay#r`u8Oj1nj@dATf&pQ7VibAc7Rd8GRP#l+07_Oqo|A1Vq!r<n1V#EI?a)ww2
z=Ybd_!`^1~6<&nsA<-XxQ>j<>rizj{2q{HS_M-lEv!o(;QV2EDT?1aX7eR>xQp@>!
zQ&lUG_w95pmH{6Z26VXGT;Fi282f;E_VW1>TGD*J-&D5!RHUD7^f5G}zegCWyRvH;
z20@oP>g|lt$JJzeXx+u>pP-qQ0U;`I<CJq_(k5D(8y8Lu!wJ3g{1Eyu=F&D`Df(f&
z9~lgOKqjzrivAqx?Tn(g3}F4iG?mlnB|FhgWPPm>#huAZFM&U2349a;c0}!z?floD
z36+0sL@Iw_$5g)KqC5Vf*%y~H6<Sr1c{r^~8L(Q_*6F&))ZWwMUT?bHRutjf7GQG!
z<9<8BWq(CVt$k3;<gfdznX4`gko+r@bAaS0UHh=O4?uDr->vXWbVjc3<nd1cHJtLP
z;ENRE>9=EmH=U@a8IwEpjDiz+;dc|AmS}~bu<qi$feW3F>t2?hW-S#f>I+Go^Idub
zb83J!cNpHpoTT~62qc73BK(zn5I{v@(N)4^4H210C-1DC`Jo*X#In~v%Az=i#>wY!
zN2!U`E3E&?wQ>T`o5*W>`tLr=KeVa&cT^q)Q~e+6ZKD`_4#G<S+L=b5e2z~+%t$u@
zRVP%m%jF+C=S|e@N<Z%E1zA0ln{MyBWvn2tO55F3#rAb8%8qP!#!-0``reItJEQNQ
zdARAvT?GE&kp#}tWz!m*+FlrY+5Gi(9c~*e!?w>iJd?F}-H2=P$d1=ytGNtZkJl)V
zHGv|<=XQqERD}&ti(xI(Rz3o`z}Nza+OGVTB&#I&5)(f36gSH?+-ca9R6h3v>defH
z_g?NT!fEGMhTh8!OJ+>Z&U!y_TDDhP`0Mm66D5MD)IyKvH}!j0j5_GEoU~lHe%toc
zmCdnQMU`+eKXeu!UnvKzs2;C8)WLUPZtR+rB}Be|%~()tpxtL%$9iBSowkmJ@w&d2
zZ(6481eEwr-^u5hcinBP@6_lsHMkGYY50WSoW_oHJDyJC&G-J{E%&R{H?am?`?uRM
z?f7uiR#;b^ZtR5j<|mQz(M+&e!i7h$e+9u8^{K4AX^iuIolCoNWR0jYK@ERq<lh_e
zBk%>e7gE-3UCs}gCvxfgWn9-Dq)ZmUH^YweV_EVMF(i)QfL{~0xsM?vhR-h)ES8TU
zzoV6<oy*~o%lQF)lsj&B@CSlJ+`wzJ@W(->oM5PO@n(L*8Ssi40`Bf<UPXbD{xfUW
z@z>!ru9o>JFTTZ4_F~NK4SYgu8O;C!1kTHk=7-?~rnu*`d<{vT4P5qq1UWHLs|@_Z
z^NtA`yj?xP=Ak?(6XcZ5=fu#TuAsj!2C_g*aIC0Y=aG7R(km~8xa!>exi>$KyE8yV
zi67Xfduu@@TS0e6c<Vf<h!RLlZQ#iPEJroqlsLYq37VDpr6A@j;adAFU7miBnNpqn
zj_#M`pxut!<q#ftJ!oSEIMga`u|KLP@3gX4TIu9>_Ppt7V)b{a8IP!T?HEk$JGx)=
zRL+la4&c2c)S9G|AI9BYE1AC%fZ{b=#(yI|BA4H!k};r{_(cMAgDfb}VGP#}EMuCW
zNK`Wnfty&5Ae<MM?W6q02<&#amNi=Cf+ay%c_3LJO~1|tkIEBacCNmC)JlS^7MHIz
z$WX^{16iB|Ww)kqNi{96MY#M_SoUbS79|XGVj_B!`;4eS><(cvP`LUYGjNSAR_2zU
ze3kBI{)SGFDJ`<8Z*ahpAH>)8uvBau@_0jjobm?FX|8|~>k&R4)OqyS>HJ75XqEX9
z1NqPyCxZ_<w7~5cJ4GXZnfbIB9w#%c4dli&<+E^|e4Hg^04Q0;<#tf?DVAeDo=?B>
zz6U_hBlu=qPxE|Yn}3yQo{?R$Z2wQsfn%{V4=JjpVdv8R{7&#>qg)7QF@bVI>(aTN
zA4@iH@c3FejPTte{FATc;X=$#ekf@mJ+1si2B}U!sGH<(^=G*rV_R5}_D;ldF&+e-
zl)Qn;LPFHOnzhgczj-L%CDdx*I=CmU@<P%=FPxyFfYt0N7B$Gb_1IU!$j|s)?SN$(
z6?}UrNjETpFbGogF<wQft7S&$>t&?QQ}4>CkF#ZJ<0PmrE1h;d-yJm9I+wFbzF%n*
zh%Y!1KD^w?TUMW=5WYFyYs#t3SD%2Ku8OhEPjnTK14aC9Vwb^{@(DXzE(-9Ibo_cE
z%I@Ps_4~x?PqXQd@W+$zAXnG<;{*KjY5ush8$aI6AAiXo-{6mVY_P39#vjLk^;Zw`
z$6xTr*ZJc~R$Ir9EI+`0Bn1n-s-CV(FW04q>(cslY5BUedR<z)F0G*?8o8c@cd{-A
z7#@_-g%ve4UYw$a#*?&aXguYjhQ^#@H8gH9si83fAVU-Ml;wwAHWkVo#@9lWEd{mI
z6KW$<POXspgd!wQ!PbpRTrW6Z9-i!ZSd>1{)#3rut5iDC)jkYMJEfW!?`=!JfqjRr
z)E}AyAJ_{CU@iB}sSnV>N<Re<eg$%mjaq0B+%cJe)m4Xu%Itc4uy`!odQjauL+M!I
TXE#eVrq~IwVDjbreKY?LRXm`I

diff --git a/doc/manual/build/doctrees/key-management.doctree b/doc/manual/build/doctrees/key-management.doctree
deleted file mode 100644
index a924fc4a8281fde6e644c14a30ced300daabed27..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 60097
zcmeHw3$$F<S)OdY$CCWKj^o71aUS+ntb64sHVKL`QKSefieyKUv0^ayo;!2yoimzO
z=FCXCKzMW|!ME!GAsHH=p%e-%2rNoz>m<;YKm*|s(oi66SzVM;Rue)f<<Zc>O6d3f
z`+3fsd0xv85DQOq&)H``{{6rIfB*Yiwtx3ipW7n;m+q^y%Drw}PZpc4N|f}|U3}1p
zn%(~U`uo4N|Bn8Ay1NrzN?N^6IqIid(4t(8>y=K_>_5@3Zb^40QMntpnzns)dv!;3
z=M(*TyxiW6yY<L>mF_zktp}&VX1Er~C~S#_+s;LoIpo0mcl9}mbVobHh~0kmhGZp7
zOJTR$iC21E%$PIW8dnm`Cf!-Che?8m`1kf^*iir4Rq3_eA1h(`LMK{fn_jxJ8?NzH
zzq+q_d-b|>_mW+Hb!)oAtoro9O4tn#R$Gne;N`f{Y935F<%8ugDTkHF{O>}y(SFTA
ze1EVJHhW?Hp!)jYg=l>NPxOKpJ4v^nZmY-5sDJX>-U`>=Y;}DYo&V`;wrn|9jRJfb
zxG#gG+X=hT+IkQt!D_Er!MvN@uwGveD)H)SMEC^VYS_e2RKkBj+-TPY${{x>h?~K~
z?WlR|^x3m-IvRw{O0e4M1kvS?&4M?cIDKrfRN}a6t+38P&{<a|(P`D|Nsv@qy?P}G
z>zBgy1dZ^%)9S5NIbM)pHbD}-y%#mhQP5f~CEci<ECxrCpwTN=gD?r&tt5$8>d}GV
z5}INIFJh>uiw^7FD41m!Byn>Mb858el|@czJ-8I3l^%K((`j9D!?uAAQKyN1ftis!
zuSDGtSdEDUVd*g5HV!YJJbN;DfasURYfTIwgU;jW{s)%@9J<}(Z1;GpiAlPKrFlGN
zL&8GMW+iffU+f!{-wjL+*E(Ul>ZAQd!u6ToPnlJ9E`7F!SJVsAx({SqeGzE2dI#wJ
zrTFho{P%MF_e#)V_3rAS>i+7hs`s4ShQ^B^i`OXTQ{8_4b($KkV&%+OIhX$S-$lCa
zTl9KkvXWk(w5xIR@?u!2Xj!%g+^zybU%Cv2?^EN;C*TN*bhe~B;-)ZbBMu?n9u}cB
zmu>~`aC11DNAdY|n+%+8O}Z7xP5ds96ZNA!^1l^Gf2ucvLed>r0YnSrV^*B>A)WcA
z5ys7a_3P4|_^Z3#hNRvmL#5Z@L3FuYkIQkl|D?RX6n2{UCqL|l9dO`&I#<XRg)mQQ
z!rX~Dz7d2umu?qk=@t&)SKngDHGRb-TvP$~jQOZ~*+3Lb)^+^#0}!n~F&Qu~P6W(q
zEd#xGP654YJH0h8A_5T+Lx6VMP{H9NaWoN+<W_)3j&6LwW2o0v=c`+>cO?sOt)X3S
z9;EwDWRwLXIP#C}WPd!rH+h_<LiM8@SI=Xg&(zb!tUT;c-RML~yVVpGK{S)@C8`*p
z-{i2F&a|J|>3(S3bdCJE!Au*|-I87(HK7bs?W!!*V`y$37qCk1ZoXNHyHUe?oqo-6
zDpw&?pRb21aUh7h(B)z%Y;iLY0%~_!7h~w$p6)|^49X95BIqq3bftoop!x>AB&r16
zmZ&63*>EEA85nEs%8p_8=~I*L(@of?PmH2+Diyz`agU8Zu4&-cEy_Q9R;zc=h)=%h
zZ3lv*$Ic#*tvRZm1e%qdIfE@pf(On-N~I6ZMCDee5}b{?rFnS?#c;8tkkl$J>FKAp
zf9ZZ6{P)hW{W=!<*$i(!FwKJ0avYETbIqf7C~&wj{xZL3^OLga|2=90t<1}@=`T&k
zre9RBYk}Ui46nWgNb*?`aMvul#Q}h$`K)0a{QM6`t;a`5Hr5C^y!Uh$xsQ_OJ783-
z#E}0x+7R3E<$iSs%+uZ~|CwUG?EII|sn2n5%5dDDKB~-BauPBi7=ARGVCgxtq$4I2
zSQfZ3%ot%qF#LnV;8iebU_(`!Nq4!_ZMEtkiN%0iJS=x%?Rve?ER`M<gR2B9>td4~
zPI@clM&<A_Ia`Eo_;;%T3%5dkmm9=bRCDR;H!*X&k+pkZMt~UJobIcGRd>Sr5=_um
zbIs@3*XQP7#LhM@+jVunbd|Md(w!Pc{V*p9Yp+4`>g_TCL9f@&2tPLgy%wi*-H?Z^
znmN2Pda>RrYj5U!=ysV)cc`s!J)bUEnj>cz^_2y+ivvn*?Ja7V58;1Ck--qMuARqs
z9%Tc$i7frB0=pqCM1kFa3TCEH>^FMq3w%&tpTjY?PzA!;eHhgWgbBC5iEr{Oul5E!
z9J})#W6}6Hocg&Y!&|T>McF<@pZ^OCNdoLdVFLFKm4|A0k&cZa)Ga=p78@xi$!a~i
z9IwPc5fEsr1jgVT8Ud6RxNq2hxz`cjlE)`7=G%KQ6gCjH@)3chKuc+ft#qIi#ocNI
zr4F-#M+R;f`F9u`h7EIg`Ju2=!5&5spy->UpK4Wl@Z8KlboSK#;DKt=NVH3)(u$H2
z{A0nqF=FcL`-7y{ZnwamLim>I-FSh18Vm=f(rYgUk3~V$ycj3+d9C)kJq(1Ymy{>1
zqo-`TXsxc&ykiTQrt1)ZTnvuK;E?ros0HYqo}F%{GpKYIusrB?ov02k+r<dpIBdtd
z?1tf6RNM57tMOWOA-o9R6xcZdUy?~D2LMR%rJ*aXIpCTr)PDh9{6D}6Zx}hN<BR|N
zdA9kE_}(oP<Qa_zra_FHVp4k#dei*uC8JTx&EUN<gDeYod~PTC9L?<_OTG3T_;wZ!
z_W^w8ak#Bw&kwcF!QQr!5HdQ-i@@9nJj#*tx8Wb6u3jaQK_W30g@9{P9S-0%eAY4M
zbYIqw4gs(Imj!P;kLGT4CWg0X0FN-hOYqHuy?|*YM(yw)+4cN;?0R1M<TMTjGio12
zJJ0-nMMiY+<)evkXzD@|z=2b{t9<!BqlYF48<qT3%uo8f=@~b!f6d~=N$;tE9UZrT
zR50eO4m->rK6Cu&;pH!X&6nM`3`Xu8>|zv`)*>)+Fj@IfjjC-iu{xAM^5+M!fcTRd
zNAqVT4Gxqbec(Pwf^rDKrY8zM+oA?643&m?b_()|a@2z_ACQ-9T9T$zRO4p3-m9qZ
z{h0;xh;Uqr7^I+t!GOokW^74iHSHgSlok!*2SAXe+v)(+R&sJokxlLeq&wuKlLMEY
zrJZ!#^fv`3p<8c{o0aIYr);WF;83qtx)Tzu6HA<K9tI6$F2aTBUf{^<1N;QU6U6nT
z+l6~!^_=eZL#Rfz|3dV>y~dG&*>KZpS7zQpV~4JN7ELYbdZCBf=W<=qG0JEf;+?Ly
zbeElu$Qq0|Xg}oI%y}PK`u!qC8$-Xfzfm*#EBsGh(4<>CtL3bXk?w+9Nldx^hG^H&
zsru=mYPZ`?4j+`zB_fCA3sGk=j=HOht<IW+DXZN^{UCZHj2HO_MNRGhWS}v3{z3eG
zl~C8HUMd}KdP22(ujs^y79&VJY_vN6T^<k5@b2%yhEVhKxnN6V2e>9wUNSYsuBae)
z<3<EEHtUNdf5PWRC5A-+F4=0X#%nz#f@u9CpbM-*s2SgKEX|s!RnH^P%9w6_tp)YH
z+R)Ymy$2Ec?ieNug&$qOZE%z!)uXM(3RLZi&vJu#ykb}tgFHQfTIGd*aJkeD<IesA
zMJrL^Y%D@emWxx5Xp@A!E}|*jxXdX*3r81NQmG!VMueq=l<|d#D_KcM3j+##)Ga%n
z{NvA?9dca!rPq=(d0P4Wq`Q~b$oHcst&wlV{<<OVks*eu-J>I9wY%|go*nv{&oIxz
z{rJw)yT=8_pm^Ut991*w_yTB@P@_7Y?oc@F7CQjX$-|D;>smX7?hPpYaAWOZyvWND
zXTgjC<w==zb{{4I<=gPxbfBCdvY3HlF1RS*%^>B-_@W{HJVL(RgQ6c|tR<U)Vrxby
zzGG@AP7-U(fU)=Nus<v56z)$Z={Rv?t$>n7*hn{?(h)Q|xz2WBCm2(y;EkQj2MYGs
zM|OJJXfb^++Ibe!{TZoSFOa%kJP&$1T|@MCiNLghKV`9aZy791Bt1){NZ#V0X!ad$
zl5QlQtI!lhHQOlLL&dC0G!jhAO4%6)CJ@=Qg9b%*iL#o~IAFdMdkzDpK20r2OU05j
zm_m}m$#E6#(`qoAgu5l14^BWf#zFmBk9>TxN#Ah->3o$+ED4A(y#>89nkF&Kk%u@!
zv%0ONvXb&8YkgGvajCL7)0o{$t97IwHk3LB(flmW!h-a}Q-Jg<G9Y!FG`-OP1Wa&2
zAm@3c{Fe%>c$sxdSzfFCQsi?Zc<$au+em&T!#xSD*YMliQ@g_7oM46IwV%xL+9N*F
zoM(LP9Cnh99Hm_|KA7Wr1<sYA87VJSk5i5+C0Ipqs}h&#!e0zLR8;Iyc&p)3Fl%g3
z!+Zxf%*9q&oN^^S0~!lDl0Yj5@JAe?8C?>7tE~uNG+r?@5J*rkN{nHqkX8~pG?Qn%
z;4;D>gs`&H#Ans+b&xI#_H1GZoC!k>gn~DR>=O0vTm>M)*Rui8BJzKm0Fe#%JL(~{
zpO%&G6+|SRQr3H9YF}_K`C>GQf;>D1P*T>uc#5q<E6qO5_LuQP(-S;`-fub$WPY5{
zKcTRb9?=)QvH;t%b<iFu(z3porTjPhl%M{u$Ep$Yze!Ny!+`r1;zLojb>SMCkeqNu
z7<sy&N1}|tD0H%@(ME)kG^51~lp9i!83O@B85B~Ap;JAs%3#nL>+DU3H0wyt%F&?l
zjHoWTq12xcG+>BQ{#@;}8h|D!9m*d@DJd7Vl}~@)mTi${-vmfwsO&AEGJ`xm(wt{J
zUbZm5FA4z=OI7R{x&@-Ef;5V4V@I3|i@X~l1LzH*q@(ocjJAj(+gL%wyWFKHIS2gl
z!tTPdfvOU%)wrcX290n%K+MG3`=EyuM+v70g3BjOoMxcxLJuu8M^X$vp^A@#8VXk`
zf|hFF?3{H7I$@aGj-QE4P{ZP+IG*&TWvb)>KtQ#_HA+hi4Alw)D?;EG$IfDvlIo^I
z&~OXd5HytYtB?nmd}bkUN$15=kPh<8J<{<+$xR@Q1>!}r04&K%DZUk~QKEn}Fd(Wj
zqJ_+SglO4)5={6E&k`9m(tBbTcK-wmqY8Nl?L2e+yw4NTuOx+H!d6!+g9M@00mB<K
zY!A?;g?7asv2m>{TXZ<fnK#{!UDnYFmStGo<KFW8Wu0f*!VxjdIZY5}yB?N-gY@~+
zT$d285}){UF*qAHkZICU2`pH#N<ufEmG~K-dY|D>9NHpaRNJtgwA?tMyzrW{9nRsA
zzm#N3(!NW{3#5VR8h5C>8&?7c6IKc@1~Z5*hIJ+jg6m1om~e}!Ht1FL#$8i0;BrNb
zva5Ezm&nBBLt-iC0imk|t^9>od?9WOagcCq&Sx<=jq`SjSB7elBRb9u$InYtNeC1j
z4vH!US+4Gmkk)f<cPt6Mb?bN))sW!V4k5wxcU($XUVUJGU7{$?qO>5`0ih8nA825+
zDPnwHN|3z}uOirlGnM=X$2Tkb2xFOP3y4vPT(`O<v0Nxfq_?lZz^4c)%@OQrP{C^w
zIXrzf4cB-VsfAF*VQ&V7|E{jiqQKG=C{P}P0_Wea{S!V{6R{yVkkH<6p0>+OK&CD5
z3>tYHr3~3wrza<I8DOo~qxxd$D9^k=?QE9UgK{-0UjTo>o@-%+ebc&^(pkYwLlJBo
zPzQF^30^SH5@$rIC#)EwF^f=r2SftC;ctd#*-V-MTY!enNzoy~p`CDGU|LSq%r>W-
zusvl4)3%cIMafWrazs=mO)!jUm<vK{;(&a!iY-{WsIVGwC2|e2p^D8p8$7<cMXfai
zrFs7Pxwl1@7#mwB=f`V9h%x<Z%a08%D*6!_jl&WbL3|)0i((F?=}4xEAnY_wN;$p>
z#1*}&h<D->t6U+V(TEZKp+6=F+ilQ2+y(Nr5StJhPjO&3MDwV&E@4)5LNIM{K!}h@
z0H1|yF>x-SB(qoYgCtE`(diw3uR&mu=^Lg%re+qIMwl!&AF=5mC-cTj;X6B@bb|TN
zjM+dt&y4A2^!+;^X^xW*+gTXyUJxh|&xS}4s^jG9V%alc2lW`rP%YNTN>vcX_Yg>i
z3ypn=9U6I~Y<-bi?2cCA-HGo%Ku;{)Af+{;4lr7BV@z8rDl!dm85sA4V$~=DK^l?#
z_PAgr$`{g%a00Y*0SAm=;^>LPC+-hu`TbQujRTZL%<r23F^v{{(L+!m=9YA~a%+Z7
z|0rzw;S;MiP@xq8vuVJbVF&_^2w4hpw1mh7{Y7Ir5LR$`6~`nbY$Kdf^kKyVSE7VQ
zW9cw5HE|{_PC{bTJUZi%wf(?5Xcs7vB6-cBoNsx+b-sX9Hyr({<IJY=L%1WG&+mos
zaOkCHX)9dX(@zP0d1+*C*z7i`U2-{5A12FG2iRUQ$>zJc{cHj5yQC>O_5qYCKKAhx
zzMUog>|^-O%bD8B0kWss{IU$lKD%iURWn&<-vFW{kU@}hJo{-WTS4Br_eQ0cvXc*v
zSrOBLe++GOpqQT+X*D3F&b5^BB0S#<+`_yt5<!U>3NRBuRRNqN>4}H@$ob=EN{qoO
z>Q>UD6F0)ny2nGHZoycR40(2Z_TeMON3A2Y<R#=9qJru3Unn>PPZ_47!?Iu_rWz5S
zncP>}+e~bA97`8HDnTI=J&;zMYIE-FiLX+sqppi&nozC84#JK?5~-+#87XxYP@@24
zaru7&@AB!5`Ea6<Qr|oTG1J$a1BMuCDtnf(GPBh|NK~2dG<aKTVy18H^#5{->Ay2O
z{a-fcQB4^&SFzx0upU(Vf@c#(fapeaA{88hq`3nhf(kPxa^S^TH=sZyps7+4mN*AQ
z;guf?H6^a(dhA~8-ZnWZy&HS69qmUkdgcq7$`WjUE!tCq2Tycc^`S>R^;_#iKzvcp
z75Ad$*IZwKS_2=AI=M=8_4y;Bhb1a2aT6Reb399oN)xc763*&<^yPGk@upiGRRXV+
zW5ICGN970yR8=gHb}uz{WgIvx7${=#)bn#4CcyN3oxVlhJEuV2CxMK2Oo6;??~r%6
z-cY*>W@znh{><a2x}&zA|9%yINDHVtVf6y7D!d!CFv6<7>9{(UeGJZxdaLaULC&Q`
zuPiVgoB$ZKsb8-tQqShwF`F&v)^6PP4|JX7IdNSX3qG5qB{i}FrL3;A>_yycBeeAZ
zf?4J2LaW#1F_mTj_YG|i7(%FT!8j6a4aB<;fFEF@S8NQb`nMJ@!0Cf$1YDjbe#gkg
z<<;!3B@~sKU2^bn-G5!dZcM67KaOul@z`N!IjZ<>DrFjn`Sk8(bm;E{mJmF^jJY%z
zyR8-j6-bAZ3hBY9B^=}Qm~~Rcehb=YOywsAc`-F>n4bS-&>FV;l2qWV$H**%01q#=
zVz6_ZN?KS!un2jytvV73;fF-PDJqB1Sb?5!GM44DMnnyme?v%=j3Y^z+E&WY-5A8H
z8SfDgoC=2tY%ofz$6+N;SnyD_<K_kW<ii!viNr6UmY@&<h(gN2fL2&Q#`u<^${LG=
zaw37sW@~leTrwUXnIxjrNT5mr7Hs8e+13}1YA8O1s}uoUbca!l%WJVjznS-d!qFGG
zS~fD=oJh7X0=hiYmITXZPCW9a;7GR~CZz|=Daw$4E_UK}w1`<gxV)r+YLr<_P`Tdx
zA;WS98Ds+P6LLfoHFJc@K)&azSGV*T+fv80{vn7hS*d*iz&Cn!de>w-Zgh&0!w=o>
zJjnLFq~h(V|8gXQ+a`5~Gwt2s-CK*%&Oe~bh4fZxf9x;hg+uXG&D|7WO-n@N1;J@A
zD^;F?M1kop&&N)x_QM<z{EFwL(Stc8UFn~^2J2Vz0XKc!%#>ldtlFf>xa@l~EYp3H
z-lS~*g^H(SxO7?l7U6iOf()eL8gGZwBfS1^wuUA1rWUA?`zgNewY57vs8UX#Ktw)?
ziQfMadXp5-KEqU)v#hRc5HkPR!tqmr?8A@waTe5<euKE{N;UptU-YDR9<d9+&PuFW
z9Q{dr8Jri>uqN{aE$!5PZ-S{ALHhmP6fw0C2J$Vo4wi(^WK)(En5-<V{TWwFy~fth
zvX5$~JaV#6fz+sc1?RH#=XlBgD_Db5fF>!H^#$}Wl1rGnuh|-SwXNGTYS2W*viv1*
z<4wV=9{_a!V$3|)-s}e3|LFwnjfu?mpGW%v6ZxffvpkvkYIx^W{=~q(y&Q|q?VEX&
z-8b_T`!-kDwcEmb&}ZJwG~E`?qla0x@ctRLaL8)>-TbG3_AAFs$=^-3zjK22W;fZs
za5rzWyIF?99WB7LLb`P2)dSo3C`QX|qj{9wM)MTgxG&qM+rKB!+2;1|@iB`ZW{Irf
zJI@lChy?S?@Hg%U0ocdJ%*Ee0wm&;Td$VzDU$}9FWO!&e8GaiE&F!Cgl-)n`G)IQ6
zYqyQxi9R>Cjp-Or4BN)<#dp(gqfdt3YW&^&AwYX$%#{4yWcznb(BAAO+ZXQU5HdV8
zK!zW|Xt`}PkFwino(_=VA-8|OfX+6zfB$aG;)m_uuj9LE_b*F^hcb?Ve+Iz*+?cue
z8^`t^nxMVeIJPg`IH$T$lSK8oX0$xujlJ12S=UIZH%^!NQ_O}No83k86uY?Fe(N^y
zFY(dlHt^5J0Abh$ehJ@AyMf*ce4_hd!1hnZOvB$hw*R9E+MB&&d$)Ja6v)R}C-9f%
zH0~eBXxty5>q06BSSJlEWjJ%J%8eQWas`TZ_{-%hs7Q?pPo*PC(kjPtphqGG(hv1?
zm2o+*<DNKn%5!o1C7ep%i7EmI&yfmmt|GNZRZ#0h2wR{(*7}K@vj5zkq_s0%wqp>n
zhs6<p6#Hv7X0)Ag_=u#I=)_cgZa6TfJ;hbUFmzE4RNfl79}^TlJeO{!SG(ZXPO;z*
zV!^LL`%(HU3C0ir+uzIi=A&Kzq!1qB5TjQR{zQ|0mOpexHzqL6Mck1?i5R;9sd56c
z5A7{HckV4V%}n)KF==Z^zK@VAsneys9tYg=&x`5KrO)+gTAVvQ1<w5haOllb;2hf*
z;@sCh7NV>KFoOvf2EBkz#^O^h@?3(VKC6V-xHz>Xla{e?g=a#zz_7tu{$Fzi2QzM*
zD>{bVtJNv?>Zbtvl_~a$?cH8IodWWM83Fm3bL(wY)d5F(nE}C^po|csr(aby)qG<$
z#>Hz!j>#2jJj{g}5h5hXtL3nagcES&6)Z?TjB(9_7Jln0q@eFhI}j`{OJ$7cSTli`
zKGQ)Ae|ec`r8-vedUX<_w7h&qq8X~~BlgTKJ^=DAFB7{4-`Q9}`p)OVf}OVbErLTC
z1v8y1gonZH8wX(JdV6v_Mw;UC92l4|m%d;Kpk1#;bG&`{KA4H#TD(!N-|w4Yw%fSN
zu8X3n-8Kvf%*1Xf!V%Z!PtGtcKX*{gX*kLHdh@>knR|MY^{l3+JXf(eOi>ay)<uP_
z<>EZ4%i=#a8fX5rzQg_(jp)`v;9~*-=hRJ|Mdb}C;LKod?UVRWYhb>Q)N;&E6@Yd+
zAK@p^!zdkVm~HgC_-<O;$X|kQ96g0iBZ!22UNQ#qcI^tNlc5DiC_;<#zXqrJImBt3
zxN<}fY_Y*eYecO**Y5#2*cAql#Rw*^$%UlaFu_3`GU-N$i#U6YBDGLaurX*<%>+AM
z){(d@CxeS$9$LmEkl@jThU#o8Z6-;tyh#$iY8<yyw;_}+c^U~P$?4BSK;ep1NR(v1
zRx=Q(*H@z8d{Q}L-I0==Loq<eK#H0;_md(fb!9_gZ~3O=px$X!%(w6}Z&zgR99dqU
z+fzr1Ul5A%NU_kz==EGcm0NaNs`UMB?jtwcwP?CI=f#(1B+xw=d0GM;vKpUOKMYDD
z424$T`m_^+gWSMI4RIf8FMgJ9zQXNL)}!`nH^5z+-kO)8hgo>%y)$f0ei=jeWV`SU
zx6Dc5sNJwxI6gECj-G?{&6|ef@fqQGZqsngI#@HfU4JH7?1=4}fj`yVt_`7RD@2={
z-n`n3n|FDJ%^R|sp|p@wZU;!A5VoE$D&YO^DTb~4$Zh3&Hx1kGm=U%g*d%Pd)eMF0
z9uc`(sJlf!9Wee^lf(F_O~d$SW`yxap8*)(CNM70hNgwLQ%zK`Ez9Nqb1}T#M{c;^
z-88&EJtMsTaFg)%Rx=c*cW5=zvPXr@li3)Q9z`}r`a`x102ObmD%(((QjY_i!&i<Y
zWnehHp4PQB8F=M9!Yx|YhXsNNNFCX;y|#M>4-ubN!%hP?oFPpWd9Tp&S5@6Oc)T%>
zbv7v_7vgr?9M@;!_TJ1~-M(+xMLpJ2n}>$`vZz(UciMpUB4ZZ5d!*ZJ7T9$5>n`*#
ziw<@xzMED(_EzAd&_}WHgpa7i|3H!Kv$~lUylU4bLtn1Kp>H;M^975G!IH@-Y&Fd(
zWu0ATQaAIl#&kOpF=O15IONo*y4~iUlOOX&W;$c0qNrRdE~Fv}eO^i^->6bC=1sP;
zXg-0Fse>aD7;inQj$Y%+y|v(oJ??FMT*F>lSf40B<$N@c3600m&P!<gIA&$NROfrz
z9l@oUlc=z|)n&}9ybKVj>T*#D=$Qw_1Dx}4H5gh=>#>5Dc?H#NbUkY(;OjdA;S*p~
zLSnDR0nHO7gfV##;;5|4;;PUw=vA_%NxTbN>=$x+77T|>XO(@e;1X8wq~vhvaI4L%
z|HI4T=L#OUkX%?KBC$F&PQ-sj(Czf12bT}HhC1BgTIvS{O;sM3*QtJBn##=W4CHb!
z*RA|%S~}0cZ_sn_cLw~9fj=hb=`rxTEnr4(O@R&^5{1?2o9*(k8>U=91v!SUFk;{!
zyYZthp@&%*dIR723|$X1{5X4h9j;O|x9av!<8=F6A$DeRaDEjOOi&81zxF`Mt$YB$
z`z?USp>zR=-;FUeh>>T@(<W}DC-H8KPiYK{-zh7|id~;q4RiXw7vD_<<Jvdj3xf7m
z3)&1hZyvVect8PcKZrRQ*s9MRY=08(HV4}uLl3jy?^F10v#`zZzu~amE{xGFdH{7_
zX;F6+(<}h(Cmm?F@l!X(r#21PPs|9|-<=t-w^*e0gvD^M`Y|g7(#bS0@)V;LWVC^;
zN*jQ>Zv-lo0-UeQm59)anJTji(Qak6$aEFw!qGPseW7*(^&iLGOx-5rxS(R#+gd%T
z0VuV}SV`QK@?+Y9lx%a?ckmmWP%TI8u4ogLmhKk;<4hO>QDo81sLkLic2;{u&_VLS
znA?COYEmBu|3rQ32pR$6FddxFlh*1}C!2p-**?!7U^w*uf}nrKHcD?CfR#`bt*{IX
zT`ylMAR?b{!zwXilmm*8dgIfu0anRX%a{zUe=~#DwIAQ=j<uaHX+78SnQ<a=a#hYE
zHf!FQTrD}ZX=?N1o+5jk)6{|*T`!DjUqD{3_=-vN(p92R)MXVh#7t2z#ISlzeV=w6
zC8UIORYmR=3ZbgPP$Wf#;GPw56*>dZp>JXvRdYuSx9`rmBsQgRy#l=%r68|x-6bPs
z)uri_+Lxh+S(Ji%@!e*Xg5e6+r$M2FqVS2lQZNACnU#WvFoXtePAPaZ-fT|WIxf@C
zZjH|ohiS6s@ZD^H9j_E*!1^zrkNn8;dxZp(@p~@&)-l^b0p*qL;wPTwGr~Kw{Ve?j
zMn3Al>@?R4@W{skdh6(Wxrlb2@8!Sx+E)4_kFmb6+^r3+>>LtM0>AO=@n0GLS=GvS
zVmO~d)~R8&Hk5DW?HrQA>AM!7^{6jAT}#TTqV{`Kk1nE=p|~P=v7S=xbwPJ>!+qK5
zI==XA0u0a6f1{PMGcTn;)&DNSQaJ&Fas9f<y{}-Wremewi5_NQrQeV5W~2BC+ycJ`
z<RaXKlRkQ7Hr`^p+Th8Ek`psn?_>M<4m2=TfSDG9+*n}!sVwuW5z{vkm@ALU&Aike
z#hPFM$OQ&W{|QUH!N5mT|DJ|n-Dy<k{RrNtB}Oa63eoRbI~il-Mxa6{1f|O)t6Cwn
zC#2YR$;L65ZkxG5L(H6_<;i#;eJFCcoWXuGS@~sie-a5+ofAN*t77U!fsL!shpCsb
zKv@<}l?c0n(6=P?kpec97Z~PH`5$CR$dO&DeV?vygME+-L>LjLYc){pj1YA@&M1GM
z(MI*3cJBXig1J-J{Rg!3gxw!y$p5?Y2G|G|t`$fp<}w;3t}|EOM!Bb5ViKewv$;~?
zSqRkzK8K_cGR#oa#w8=zJi^C_D^ZiKgNiEMX+K0+o91#U>8;?bKD-D>kw>5e(NZaO
zQ((YJ^=I-ICPQ-KQp*=bsh5`(;EyGbcscQEH17b9$@2871*6EXskjrn;?~8di~Jcm
zM@P=m`F+`OPof{2M52$|wgQ>{Iiie`>35Dr2q)A(Ux1O*3H8sShgpRB7x3L|LVXg4
z^dEzY2z!z0cTb4s4lD!PR+w(&@)C+tGxnA2jtohDvV7qNG#z71kt`aOp`n*O=wX&!
zxE<g5yP${3hF&(L#ig**>~ApEQpg1|&eaU~^XBPf!1Z`X0lFV52Cn<a?d5%&2JXEx
z0{6j90@quOpR|wx?(N#ss;-;NFjfbG0f_I*GTj0If3*YfHZo?{+4)Vw^W2Q^T$ur$
zYVt$DckJnqHx4!m&{<#ct;OO<U=CyOra@Wd`ny~J>zuM<yv7__xZM+1R?u0drPk_{
zs(cO!VQv&LqO4JBGRn+xt<0z@cdeB!QY4hTH;3<hfo%`dh3)9F5#KD(kE+=FMIDd~
z>N4^nVCg`YhvWCeBNy)ziv$1oGG0T;8*F%M3Xj86Yp~lRC+>WWK{~UqGs=X?*gBxH
zF?6>~_hXkRHjY#6Fmm7}z&Ur7wpH>k$DrC`uf}ME-Evhvgu$fJGVQEz0x(|lC#6T`
zg>emDtf>kcU3MDCH=m;_#9GwBvjR_tz3&n1%~HeDaaitqCZ`HcL8v01TVFJ{%~0wG
zXP8rX#j$AgUcAuY_5hL@<}|06Q|`U%_20~}>f455uw^Z3b0%Xge?E-0Fd^$W&*v(B
z$in#`7b&1XGVLJAX*KHLu&z6!+a7T*fSeC=_X5aKE&3;TU#52Wc^4EgpGs&D-J7gU
zRTv)rNjL<-p74fln{K$KN!}bj<M}Ra(U{q)`*IaWfuls(2T1<(d?lEOWo~4R`a%Pr
zefpEiu%>l*aV|!sQ0_fIEH@78U`Hr<06-ypj4~Z^uN0%dykL`WRpnHkaF&Lb;OErq
z)iJR-$%wnU0nf$;SVH>k@$_kB^#9Eek|RFGVI+&mc}v`r(e4sDE=IXa-XzuB471sx
z|FpCJlL=-|cgg3_&U2UiZAQa*Exn~SCzO=obl+@AInfe|U*gmze2F@76P^ow(sH6m
zgL3~5PjxJ{StEQM6^o_Fvc5PzqsdbNM<HSB7|{nrh2T)1e-#duR&T9ZV$o)C$hL8|
zRB;P^k$v&9Ud=)Q&U2GVT{xugF_M5q7J!cb|BdXB=iZp+q~G@Itbv?AB4<%xC)#Yz
zGTw?FX0eQK#COwL#`$G<X2+>(Sk9L4QtF5x+w_1eJnFZ97$Ci)e)nt|kay1r$on@9
z$jni{93XEkCd?6#oyY?>j%W)k=2LDLMtR^=&u)GXkKdRvDWNB4+?coJHbxJV_5Jv_
zNEM`nYB;H6Y~KZx+otFl;c^bDn_^6FcRQJ<Xv>(A@!K}WW!IW<+uo7ewn<!e`DF}e
zOgwk#rAAK*$3njJ-NWGM@ul}~8jkOq5sp8&X*iDJOMXVF0;1EXMtDjT*%*Z;bDU;}
z<{X|HW}l2!!>ACAP{XzzW4f<N^N~L+n*U0{_T(H;lAiHPXy;V0Q@gLp=wN5X6l<y^
zQaVT`34%!Cu8UlGdAx{Q*+f#MCyk0($q6KWtzu9#++fzYAQwF;IEf==H{yB-OGnu@
zc8*H@^%OY$z??ww`dZ`}KivC)2)nr%t1Lyq#7N@G{S$!!4Kh6uXlse9GR6y(SdyfJ
zTPmn+BCd{tAz~OZGm`4~BuD=~ExYHbXK%2J8WAHJ1^5EF_xs#>6?uB;m|h)!{(}O%
znlA42d+1>nz3%h)&e!WEmwIE<$4*^G9gjd49q;86V5x)1z+O#wOmo{F3x4mAqb1-S
zc)d9V`daib3!rbncRrvekyG9Zd=Zs}>!O4_CZ^*NAl_8k>AVBHv4<_xUo{@;W0bnP
zW`z2EIjB#L-V=mXa|n(!B5PPb!<^4TT9M6UvQ^N?NUDr%RmrVRvYNj~%2knaZshs&
zR^uSRiHZdWnttsokkKC*sh@4<fw1_rZB)%o;t;a&ov1ze@$`jI1K>|wa(AaJt*kH6
z@6>-szxH)Nh}t2ZK1g3s*bv8j(Tr16%`$-54HxCWB_w>P4yd>bT}ZCDdZc=tH?{Ml
z^^Scf8WdzaesU6-S4IQLKek)lE+DERU8I3_ZWgC*%IYGw>4+28V9x0#y*6h8SBjlc
zCMj$&cw-9%=a6~Utb}zsJ=?t%IBg_jtOVERrHJlV6ls*l2jNG)$jhTR2J1G$H!6pE
zb^j3ENU|&Jt;B|+KfukaW&`;zaj!5~jd33}lC9v89XnJ>)rgdDaN+@ngw4%5@O`&r
z;+O#fNOI>b27T!4DeJkt3ZoG)viSH-6X2r`fS$UAnt?$~ki~+%ChD!!7&SUE>B+|(
zy@$NGo)ZE}tPl^02ePO93unU$chR0qPp{Mnb628g3*Glj0o@l8x+y*wrKgZX9Z-3E
zr{n`~I~=fhK`*s({MW6rNICAn1EF6Eks69EP$Y?zZj^>4;{t`d;^i}aYZv^(Q!Mz!
zIdmFvdC?t5G<NYmDWBv8jTF<h%ddS1lhDfim=Eo|KQhI<U&49+>j^eW*9Jc&AN&j_
zl`jsy->hqZ+j@%>O3APBlWvVubYj>0sVUa`Qm*$CQ><4$C|vJ7W7i9tQStGC3m#rI
z`L{+2PxFZd&1a?nO+e86k10SSA2`rB#mgvGMp2sJq69<wnjO4^D#8d4$t{m4aeopN
zgve|d90vzBkScy@VX|%SpaE8-wOoUCp4Rg6tk&`<qgX~vkdVje35zAkw57{|&Eey)
z+613bJ2VM2qE?^*v{(2+7?%d43xh|`ph_wPl9Ml{GaR(x8;OXs^Gh+bAL=VjTz^?n
z8U@?>2`{t{I0?Bne6?3s_0=&P5`Kb4jM^v?{gM$eyg75sS=ZHNpJA!dt9RoCb^SOy
zKl`Smav3=pvAXNJbh-t#OPnoE|Hjqk5SR9HbCyt%>vfqfY*n7C0LD>}D*|9k2{%nZ
z2}WOfCAotkiHt>Zi_(?kcEq^35H1jXz1l+hy~29Zs(zodqH-KS$ZZ4%2owi6_=wi*
z$q62TW>0oNW?-$C@eM6J?wJ4{3~$e8Im1GhGklfD83sjR&hAi_1R;_vmQF~1N77qe
zjmt68V@UREI35J*C}0pmRMl3!qEg(n#wxsJRX72A6}A$gC^6x(yu66lC?h~F!ai*a
zUA)Lwb-@_Wq$GFF=;{PAA_^vW{pl~zbLj+Yp(&0+(q{jX|BrvD(*S<&cH{=Gt|zPF
zQK)zoIeH~mT*;--{UgI_pIZQRo~$ny)X8Sn?K1E-f@vGU@4h)Q9^FhXDZ3XJ=0i`{
z-nnTMO??lhZnxG<f0udWzCAm`5+1!WsA8#Dt!KD4LbJngwS(kphMY58&FJVF3c}s!
zIamOT6LR%9oNhaao1i(<b~LvW7BYg{-8q8WDHYRf(gZCnq%Mx%J&7eHXy<7{ug&ng
z^fM={k0vaFgi}}4OyT%=dk>j^C`&FhzfNs|+~VY^6OVxUJFLQX;+RSjJaNn@MUKA>
zym8JQdBwb5Y9j8~p=NL7jh6M*k>(f7yV`<>?*B4Tfz<g;YEy^qf31FkEa3e{G5Pzm
zUW+I1oB&S@MSVFb${<XJqV7~XxKKn<VRNCHG(3{hjSEQ%XrvmCrYS+w5j3^?;Y-b^
zlT_ojp&jpuUHkV>uy*PM-<PG4uguWM`CZTnPPaM@7jPvm8gD0Z!*KNh97twD#Cd(>
z6@t4Ph?Lg~dxOOQK`%%Km1CajygTG>1zE4O6>LsEhcHL*Mf=j@;Vv9HN9zc0s&9n)
zgi)z}Ih;JxG)J28gtvIQ+?OSclekggw$!tOPqe3#-qfWZ?9)_enY#)T$>Y^9vH12A
z6X2VnwIif8gLqI6tk>xLw*%jJoC2g`txUC<gA`?yHdvcUjJpNJ+yrWb&9$i0>LsO>
zs2pM=(HXp(;LY0JYlQ1^ua;m6aX?+1B;C;=4)2Fx20eFn5|D^VYoQD}z%a|p72KH7
zgFRW1+E(z;Yb!YfX6iS_TGr@&Ksn<nFRTNddNLmn;T<8AiV30D#2V`&bnNu%(P|e3
zhPtgDGB}aMeNJ4C=qhxH5eul)s-~(FLuFKk8Q2XBa8801#WGZ^r{y%+AA0U@i&O7D
zBFLE4YWHS#&9Y9rU+(K)7>~+EzvV!p-@YH-jprg7xK$~bcqtq=+Y}CmA_A5S+-kpr
zC2B|RZrjjx`=1JcHC_J2ZwU;iFW>Xu@tvO*P#B>0PMkhzvktv=_{jms$(HPn-ZvAu
zSbnI$J()Hy1AF{%OZo!jI3O<2?a`ODR6z;lCN2}i;mP;)ZM<g@1)0CG12YtQXM%U%
z$b6o9SdI=K4!+^;ORdg@q>aDsJ{+7wecg8$jK8_)ot^gI7HlV-jL7A5BV~fMwJ+k6
z>i%@k12`eG6t&}eYwf{)^`4X0W|+K#M7rB@8c%V`JRGecQAhE*+ozZ`v~e0ciPxul
zBfKs%?R<<`qPu>t=xaeK9u2rO{9f@!t3diqcDmKA&gM9I?WjOfx+6iQ<T4z<uS#!`
zb3}D<UM}HWv=m!JJbgah-feZmdjI5>lxbYe1Z|=U{_GKVufg5(J)Avic9(Qtr_(*=
z3CdVU{nP0#aCyd<l74z)rBwz_)ssaCnPwLbk$$@4tHXK^ekX%k=?)Z%Z1=h-hr91|
zx_d2xwizNch@N&=Fg6%nqm4hV>$F;3Ocls^xu0Hh5ICZyu!M0hpg~Fh+3VEt*WPZc
zytINeG`_`Dwqwqnb)+h+q8mu)$b0!@x)*m+b(_7$(q(vA8~rEKeMz?yx0hJa0Usvl
z@I~qgv`2Ze#H-wv%5@%C;Oo8m1N&f)N_Shr8LJ53yf!UW!+O{JxjnrRu{b~xY`mAa
zr`s#hN^cGQ?c=d^KoKpVB{cA4H?!&@E{XGtn}FF;)GW7nVOBrg-RrI{ypB%he){6<
z%O#u^Yju{Y&`;}82Rp#2mb?A*dIfo}m+jI^KfNROCf7ynt^2?X_o;r}9L(1*&c4Wf
zoZi4S0Iw3nDTRad)4g@5QN3_20>mp(KfN|;_S2iy=`rx5HZTXn;KF6VVFxs@RV)(_
zi7N&nsyots^qeobN9naJ1i!b^YqXavN&>L*AO<#ekl4u%ua_r+?A(3#sGUT;N^9wI
zg9vp4l2BSnwB&y&Sb_|ei*XVwl)ZjQms!L@^elH8QUTfR!D1MI6}m&Gdv&uV<^KTV
zyOsaKAgoLZE{na9k|Wsi>pI~j`{&7P(i=%{z?|k95V0ON;%@)c4R@#e+ELr3)NnC-
z_ypnLXo;ke-d62)+sWaB2k|&rY_E5#t>$8@vj&QqV@sI;S}t{QCpM|SpYFo*g;(Bt
zAK<yKvs%t|&nK??yG-{W-jFDJ0rzmnQFm3w07E!f?KbKdY<D+Y0Torc)&9v{=^eny
z#*!sYtF$hOROxS|Hzez*s&aX$8n0FB_z(EI4Jj=^_dQ7ih1!<h-UC%90MyO$xB7Fb
z-hvj5#{lgexE2@l!Nx0k1C#}X`1(SxjUo17c94RAzhVO$z#iNl-dqI^Xufb083m+e
zu36k5?$%qOBF1gPl7KRem8b#=UdIfoQPjm4b7i!;uoN}IxV~f$K4R84vS;pi64h4~
zPuobhM$L=;)4i2+mrkA~Tf8A|s_Je_C{VW+fjePwH|9ln!tAK)K&Lekvgu8k26DO&
zEwX}E+9w=r)iywmAZ}EU-k59kL|?M4!X(|vChE<6?G+s8PX7E`*i^Nj<<DPVi=V&Z
z&#&|6SNQYi{P|P<9NdbZ1N^BWm|9!o&#!I6&&T=mi~RX{{`?eweu6(ond<ch{zz_^
zWPUxt&mQN`Cs0SA_N)B)3=S*R{*XVvh?Lga&-3R|HaWwe7ju#?<j*UiNz`7(pEiFQ
z{CPir`uw?tO>V?bFWt?R$~^^?kh0bdS?7kVaYNR(A#2-^b#2I+He@{;vX%{5$CI*#
z4VnLwHO_rQ=Di_vMoUa}L*}|6^W2a*Zpi#LWNsTWuZ>>y4$g!CuU;q6uKuV3^+yT$
z&+_N<{1KpkuLb%i`7Z(b7x^y%I`i@r&^P!m0s8AL(0_#g5}@;@4wY`l;!+Ce@-G28
zE50e9vtEJ%I*$V=pfh<<0iE$H1$0Kq6wv8eRzRmmOn@%-dN1AUGX&xw>J-OdE2I<P
zrFufXZ`vtZ@Smu5pb#*S#!9Phd5ko@CHK&_-ks@jw;5GFlFLQRdx~(Bi3CHQ%lD<<
zK$C)0f>}(N1B%mS9<T=JB|DGm=kLSn-qk+?4vV@F;MMSSC15IQKr5X5$MaRl;A9=e
zt{djD)vBu7t2@Muvd#|u_guR05N_P)kVC-`C;tdu28I${Uby#VbPF&jWw|ekKU!V=
z=YVYajO=_uz#%B%A12MLj4-gaYnAAlbQ_5ZeEh`e;}26WvFa%qXw*M>7j(|rQ_^4U
zL--$Kj0|1d>ju~6;_2oNnbFJq^n}a&t!bB8`xL$?SmejtBBS&=yVF1wD7`v00itD%
ST)ssAfl4`mzAULli~k?|Y(TF7

diff --git a/doc/manual/build/doctrees/limitations.doctree b/doc/manual/build/doctrees/limitations.doctree
deleted file mode 100644
index ddcca1fea07e289ec9af5547c0f1cd08d9a9bb5a..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 18851
zcmeHPdyE~|S+~7julKIs&iWNQJ-7*8JHB`GXwt+=Q*HdHH;&h4*J)kS=z4bM+&gnU
zkDHk@`$!X1Xd|-96#mGq#7n4D{g*$WR3%hJNJt1Fs8EE;e;|aa7K9L>3M7OIzwexx
zGjkt%_l^lPlvwiJduP6L&i8%id!NVW#=rDS^V{UVWS<q7v2fg|<_8v!I>~N&;BjAc
z-tL_J+0N^onPf6FR-+&eP2Nei0m8H$*9y7cdAVb6OC}<23McS2yghF3vL{~d%;4p?
zaD>YXuabk;{9x5*FF2kf3~Cp32pF(CZ}Bx6br8rK9YQ79)iyA$=-3CMWh1E=LWIt8
zEPyxRIp$aqa7rdj*N7rK#P@OE@YJ{6R@}~iEF0$CkT(b>P9}uWq*on#pMAofN+#=?
z3HDgBE2I6|tYrve)($*AyXJU-KO2SStZ781Ve#y5Re0^kXVHGvGyK?aXI1N2Hz&9j
zMxvAKbRC~}uI-4ILHnfRwS!O?1-9Gcw~uY#w(X+oo;eXSnC(~=_gUmLeIC}>T*RW-
zw9hj~(ED?KAkG2G47|3>1+N&fu!B(Yd4;n}3rj5G;R?0PdR=u~m!TO8dD~rQtB$al
zusNHXV?oH~F0qDdG%FDo=K&Qm)9`651uO#Ua_RC#_Dak{hetIw??-|g)_L7OuyTCC
zeT!R61eImZ;s{^mI0kEnL7Rs_$_#wV2-hWgj^C6hNFpuvYT)w-ZJA*Tu(M*i4kRF|
zWl}Q<kuaK}(Y6ax_5tU><e{9Kv8R)VGbtEBwmM1!p&lQJNMLt!uWcKV6BW3gj7ter
zGc%oxL9X&<&q8DE`=O@xDQNqL@c$?9|HJtI5LD1UV?RTELm8%%@BhD%;UZJ{Q0_ct
zpS91~4`15}F4f{KSb4qxJY~<=V_<7V8S~sY@6R42r!TLyVZ)U*W)0}MGyyIqm@RUb
z8xbrc+34w!Ks8bIt)`r;?PmzT6yGUn3&(`hE=tue-?AZ~ZKKJV#f1T1#a3-Yu=OC8
z28m1TStAU*-0qN_g2j|HfFiF}xe<q~85k~EN|=+T0U|?22FMT~xxu+bPNBwbN{ZP9
zxQ7dOLT;Eg3u3{ZkzcF$`s|$wI*2nH^tfi^`y5l!`IR3HGjlr-Ma#+lsBJs`TFtPm
zH0s#XhL3>dudjjY#mPT8Y#K5ju*>nKGtD9v2>Ityft}P7n4|E8Ub&n}cFJ*+u}D~m
zAMjZvJb15-`Z);f&kWPPWEa}O`FE13g2V41grdiu;rJc<7n2G666<Y*Q)4ttGKEh_
zvFn(Q=)5UkuNt9`uhdQ$VUr_ZP^6FmN_+WQsx*6nQzY%?L?)J61HtUk%nEf93?qyz
zv{x8Ws;yMlspZ&3v{82*L^XvO&@td7y{S8bdxh7@+qV#AIKJt|6dN>RUj~te>j;Da
zz{N$B5QKLT%!DC~6M_>mOcCNFm$S&^z7aYBECC{xN(zJS+A*|#)kcgI#=cLXM1XLK
zi?|)JnH#f9=h@Yz>t|u#U_Vwlvkk;W2p<Jd2>djr$o2XCi{teBlYd(9e!o}6dNnEY
zX9pp8zqgg({cb9F1pM{XpS`24?zgTQz6JfqTsKIfl)$9IaGr4sjsrnDkIpkM2=QHp
z$7{I|QEcm1E#5F<S5(>o^pHYPA<!opp?4MqBuM8xW1S&}r9o7PO;NHQ@?7RSDw)xu
zm>%uXC~ij5VKp4|R&*uGhUGH%V?Yi08Rvg(QgXZg9Ym%d(_*pZY-KUc1H)%E@Bgp1
z5^4%zzavfYq!xv|IidHuM(^R$GV=MXt^F^lb32AaY@meYgZ`iw=NbDKMsjoiG)yVA
zo3nql%eDP*bk}D8#%2!fu;Suqj*Ecb9fm47uFQTAaG(9S{Uv1C<cyG+hKzzq<g&gA
zEvJn8966z?<5!WZHbWjoP;vs6ktFO*A%&teI`G|f^1?6@l!t5AmAW@FQfbbta(MVE
z2l1t6+(nX$%o?%wIz^{eKrwhFbegunH)=;_$TmXCqtn-HH4N}VzLqtB)NdLt%oQ*Q
zmRFo0j+h;+qEQ9((Gb)RUYdw<LlsD4Bo?j133|+Oki3I%E1)4!sgdBaN&u7`Ut-mW
zMI7=Pdk#_YDnA30N~EI~d|RhdLFQSdxpgcM1p_G3h#D;{<_6?=gNjW^Adn9!CJ(v{
zW3AF-8gF+#n5g&VM9Fy~qko(<W1t#ogVbV}#4bC1s9(i0%Y2|$`SNaNWH(z@6y$JZ
zk#Ao>gAY{qUR5_|d^&%*BdaM#HmX{yxz)a`^$g}Eb!Ybv=_5zr*#R>@qEl;;5Daq`
zoA|ZXRkV9AT-y=*gqFx;do3qQadkA8N1dG9f{>!u1AON7HXk6_rP8=gvb`$P%dZt;
z?ljrUTPLSg(M6Svs>sZ$F#lCqZb9a(N=8Oj<?Dvl1twLT$)O9iz)7Gi3s)%;R2Ujk
zz<TheirFt)RP<Toufz^q(d9IwrW#gYSea274LHkWTCWcfx87t1b*$E_fGd=;9stI9
zQ2)Ib5nDuX^XoFeFv(jY1LYE5`13U9XgDsy0O@T7A_B%64Wz!zDTWyp1R<yhAY(mG
zj-8{NPZ0p3hbVKyGTX^({1$heWvX&<B+*uY5mdpSm{K9%-!*#dV>O7dl+_5d5CKwg
z6>}i0SaA$?=MK^-TJuO-0wwC}&K;FNlPCDIA1i`$J$*|`1M1%sC{%!_Zn30sd{f3`
zvNt`Dae4O?iuMNVJ;K&{n*{Adi!hO?M$wEY^m0ATG_Y7_&oXaT5ZW$b{cTwy#9|;;
znHcvY#CnL%NL~%B{7B)GV&tC@Sbm}fDM*QFP<R>p$}XUsV%mn^<WU7NBWh3vMWP{+
z@mjNnxY%zvO-9n5ser1-KxsV^D+(5UDcNe#2mPaWt3shG1lA`L(hLOFm6)-NdRSVx
znNI#MqOL8?Z*D#Lb~bqrbxmGA;mLzanXA&Yz!XbUSk2U#Y%`g{+%%`~={%(HTKzHK
zDf|%QOr~y#aXx;@ff>WHtw~}Oup21#svIcOiXjl1Ie#<)bI1(;A!$dxqHu0FZhPiE
z<aH~Y*1OYn=;@^Up~m1ZN5tSSx-qB%gWu7ads-CDi&sbId@4z1);pa5tG5){`g`hC
zt-);CM5Fo-BcPf|(kz(veZUV3i;B?%!GAX;5v1jmtX-$#S`@=BN`C<@$6^iEshwBx
zAdawpbD>gUtjd<+HkB=~cr7ew?=1fCFhow+Y|2CzE|6nc8d)Q<Qar7xR(J=4VHq4N
z?~K-s9S?n`Y2r-5+kSWiOfuOU305<9Y{!=NS*z$HVAOv~#=>1pExUnvxBf~Th_2lb
zH|~WSXfu=-!{qJJ(#%(!(y>hIBzTZY;yrYxS@}Q-Rz3z+o&fx)GD`4AC450Xk8i;=
zO<{6uGssM6HV4q;JyC+Z$ARvnCCDRqMP6?Bdp&)t4bf}8Lh^?KSQg9^V-9aUQtKdK
z($JflC^6oAu%dk+u^(t3#uwu#^VFKxt(R#eW!F*w&B8ifZ4nG<WqSgnzO*%Ax)Mn6
z1F<}NW105I7|V`aiJDnLGz?S3K1F4~dB1uyEd!qIv(O@^q(mp0+LaR2J_+o@64Vm>
zKx!uz0(SfQ3w^Y_mD8d@G^SrHf$2vv@<s_v34S1^dw?nJzFNjYP9M5o$<ghG(>Q;%
z1kO(ZhcB1FncxTFd>%N<AeWFvL>zct>^r7Rnh_L>RgM5w`Ln*g1g&>+n#%Q~Y5ryj
znx6&@-zY&d!4IVQsVn6288&3$FVXCaFmM@StWcJc9Uo~0YTDQp7O=Y<>ulI}f~{k{
z#opwj_t;Tpqwl%B=HI&|_;&&P_;v~Y5q!?S%`NL-GfpvB7G}nU75-!omdEpWHjnaq
zpLa*|y+JdDtV06&1J|7>qCl;|4O$4$fph;0&C7oqftM7%{{V1>@cm=JMEi>5vs7O0
zsv6OXZ(#+-OA(8(Lz7-naU(;LHXE*BEdq-l>y<nQQHiZAxzL&ovRR9kISlMbAlfJa
zqWw=7GO_xR;-J|%J~p~*{CI(_!*h}S&pXJevB^Tk=Y3}O7)DKfbswlk?L-OGo&#z}
z06%J6NAQOU3ALpy&pjsRZ(muYU0QuO&*nH6fHby`mcaHRMz5B@mf#0syXOj3K7cKD
ztMnm!B}cd$PUC#F1kRU$!=(~96Z}A&AH2j}x%mO57wAbWu$f6XrZnLwFml?--ABvI
zIW42L*EH5k(0Ca*zf^)of*(lZBUe%CB*O;36v;BRs%cR{)L^tZFmB5Y(Uh%Ye@Gv_
zBB!@}Uz+xn60~0dEnx}T34S2$4=iDAnP`XEl;mgeiQGlpN9kKRrCYVsbbYY|U7rA+
z8ztx>_<?jCyosX#!VZJDiDh;iap)uED>*3xfHn4CErI=2VDse?*c1Ff?C+cR%}`dS
zuy2*>v6!Jg0^Z397!0pz_+|+j=7G~UO3*;?18LZMYia%yoBEVL&ynu|)L6e;0_*32
z#kWgfP4EM;K0WWFvW$8&9Lwy&ja&0qK8+IyC}BofOxrgP-^)oErM0H-?@G{j4fuYy
z1bqZQkiL^Qv9r`!gH@x{WDClEm{T^qou+Bq&d~#u7l7k`l%R>=2hw!-;@lhpHf+1W
zhP_Q<m}wxE#xMiHH3dgYP;i|v0{p0PjD#ni_Qo-bw|M9|et@DUmg@4ld48Zquiuet
zqWBg8o5xNEp6|2~ildHwnmkv9uNkyMu|Kc+srP({EHwTf=vmK3t;B3BU^dQ`m<@u@
z<*95gMlorYwRGiT2hwb$nq?q`RhR6Y&Q9=dcus~)D90>0UXYEd2&y>6;9EY<yqSeT
zia@mR(goB#TGwLx7HcL)Z$Ruqc2^$bD{gX6)oRoCdNN-cVKONhybZWQGPpQAdpU+`
zOKPY?F6c1XCMLkAZdJ)~^EMjU_6W#kYbm#Yv<vuA?Et|$DUl#9&u6IOlhSf}ArMYu
zoh@-__RQjyi|o;-pMLTztV3i{Rb{=;551AoSFRsT^Us%{`9;w1`4Th}{6LzIgXU}3
z=WoI#37jxRD7x7M{#s7pkVcxCUoSz;CxP9sl%R&-2U2qc)X;&;7jIsgyLEX}Qofdx
zvRMmF$Ja~H@hRZ-TP5fq_<?jhM~jn&+oWTpwwKXC36NBM#1615i%WA$SLYsk;z?QJ
zyL|D|(%en_QqTJ2^G|Y`-;3TgfBv)te{O@`KQ6%^f*;7Ak6)yH4kWEO&Z>4Hfg$9a
zaa5Lgr%%`#YBLXC!)X|TADmeIP0pPEcGsFSe_Mhxp9ZCWU4k<NKaevYx{iffm|?l{
zi~S+A4+KlLvOa0mDt!gtQ$yjiAY%(CP4d5&Ao-_3!oQXvnc#DhbGJO&8XOt@%(KDh
zZ%dBi^cF-y;23`3*KrKR@tvLn^+~N(W3Po+K!e4P0QMT<+_r0&{K5tH*)z0FHfrP7
znG5Vz81vUNZXF)<PV?x<_~0NN=h5<!x+0U-eQ08zP4+y4BkXnFb`YpO+rhEa9bH7_
zEJ=<A6fIO`v`{TZ3wd!`feZ*JdSjxlC<W0#VVHx%22d}R!BRUGyNI%Bx8YbJ(7=)W
z%{Lb7>j3O?$$cU;{K%Dk)*;yPfPlP;U|a+Oo5QYcODY)*x9~HjrPA%mJ~PJA0AJM8
zs|6O4J=qg^kZ~c|ot;0zbqI7BfxMytM_lD$dR&C?NyCj%dC$(<CA(BPv9n<BTSz9G
z9E&h?thIw5ST>_wTV5MKrotc)K$UVoZ1tSQ*+Yc_j_>(*0Z>VQ#-WQ}dqrT@sqjT_
zaXG{|a1Pfy$)N_i!7f5xc==|smu`aaW3Rr348+6f#eEU(XK2@H;Y)6?SxD|zPf#$F
zPwI4huby4kfbr4>>HQ60i#p*_cd;7`?A(!5Y{SJ_L-lh!IS6wKE@BNSj`FAD7RP}r
z;J=TKQNq{)0_Q+IJekCFn4Cx={N#bbI<_VSRQJOX%UCq3PgPNA=_Dt+U)HfjB?#-V
z_Lj>-%mATk;#lT>#rZ-n<Fc1da;oP|PZzB_P^M&`>Nm$BYkji&MNi}80MP*1i|o`A
zbdtR;Tv3cYG2pm`!=*cLMMrX2CB(2Rlp|mmT+{$Q>{6TXh$D`b352~X*+-?_dj2Tc
z;owB<UMu$6buE%$tb9OMJA^)to1mNh@`)67n*IDyJL0hw)Ym)`r~}xE7DT*WY$>J0
z6!jG+a+JvKuOqrOmR%x*whE%*M5ZcGyFDO=e5lkryxW_C)#d(Ky7l7-eZwGF%9lnJ
zr$y15g(;uHT_%_+_4C^H<RIxAB*$+;5T$+UTt9Fo+1KXnI-SZ@`_?cBPAIn_?ZBN>
zBROUZ(T*<6&f;-YYp>&?4Znt6iO{HNf|LjVvW`<VFx1%flkCRx>O+rw1pM3=Hq4&x
z=}F%GPiEcInm38;UEJE?aM6%s(Cs3&@LUWwi6wDpktOWTwcW`n$fQ@-%BcycOYhLx
zNDf5n*p;<bx3LK8(n2iVLxMv@on%ksVOO!*p%j5phvjd%VF{WQm<F~c6KhXlV<+&z
z#4CLRmn93)8s%{eK{v|CTVGN$umR}_Ovi6P22#6lhzte1UJsbu&xNrJrHphz%H0k`
z##`nVG<Y2t*qjTDF>M0sZk^*mwOhxc9V#Dm-^-iHLF$>@XvE!yvS}O18248?3-NNY
zTUisRFC-BMF|kV=a;MH$OX3dpx?;Lmrga*6+LF#PIn)K9u9JD44saJ7ri71Zu!aVp
zW8ri=4PYneq53}4dYrm`gg#bjzmA}fKcJ6q(Z`DjN?MEb@y}QnZT%yCT&JJU)5pWq
zYz7~3GD&^XiE?=nj_h?q_P8N?+mJnN$X+&N4;!-eMr@zLjT{mIdrFROe?|>W+u7C7
zw4+iDO-s&dXexNfp=Bf!Cwq$`C#l?vqwLBrf^zkQEK3HbxLtfg>L8y&M7`y})lw`U
z-q-U`Lr-?~IGK$q8y)KEUv6CPK;@@<`%2%ySHtd^sQN;<F{fsLbL~=^;Q1ylrqAET
z9KO+6gbw548CV0{E<{@!)qvXkbv>TakEP^I;lMDRdWWPpNuw$jl`K<Zrb>df{{mSz
BN00yj

diff --git a/doc/manual/build/doctrees/man/cascade-debug.doctree b/doc/manual/build/doctrees/man/cascade-debug.doctree
deleted file mode 100644
index 385aabec1bfe1597a9dcdb0df20083593269d69d..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 14744
zcmdU0Yiu0Xb*3KVlFOGUnYANX^~8>&70o4GCuv;Dk)cwGVMwOzh)CKx#&C9LxHDI?
zGn;vcWEul?U^ixagFZY(5F}{Y0xi&_d7{rWh0zwxkD~pPA9)~Y`UDy@Xwd#>P#8ti
z@7z0gUb|e9QraQ}I6HIaKF&G!yXTyH?wOw%{gn^?*ogS!Gp65;BgYMwJm0j!gpX4}
z*Ycv|mE`;j$@58rPXxwR=*L0ZO85wBv~9;V1ItUEOY9L|3$1qK_+D1u9<|5p+H*+*
zFGnLMa;?HEKHWCLwqaVDX|>``LKRW(_`0=CBUWF(ln@DgtY=`nD6vn3ErZvMC<>fb
z9D!b<@0eqTpoQ1kt`UYP#QmsebmiT+8TaysmeIZ$SesNQ=C#P^(5u9ru}|BRd_vEd
zw~z5L#q%@ErV$y-w%@gux1Fx<Er&sSIpstBHluFuP0MJ%+%>$|aF=CkddjK@mY0Gs
zO89Zt@vP+P(YR&TrI>TE&8h-Eeq+b;d!Z9bIn5Ueq+~$$GDKpZfgJ3!5aoUNe?9&m
z!2g5b(LN`5TeKVYG5fr|U_W$q6l0F?35e9_1V+y;&d!CEUf`p&yRwn;x1nupJp078
z>py<!ns)u^^(U{d-FR+eL(U#vJ+^xNsi!WjUB0-nA!uyy*|29j-u9AVnkl4aTqm*u
z!_~tm@V!oPyp#RoDOPJK0ZGQ`+pC=NT1stVRGGdE$vh55=lKyW@8R)~Sg)n@6bZR&
z5SNOS6IB7^Jw98dsY=LCW`xvIq2-N<oS(`jd%9nmAb%p0aNe$az(K8{xOiKNhZ-mp
z_<*=BX4I_r&&)6+tb}o^-8BIl+weM8)Ac(Y$Lk36<gk$tv9DyK9BTew>SOzvf%E=C
z-@Lz267=oP^@sY#udFnhYdLuTToVbae5z-8Cgh@TLkSh}ch6n|lo-rVVt-O-%y~Xj
z7IY4dPgkjI@Z(}Mek_d4gx7Ix%GpY+L1_I%JVc@JF%S+dm+-kh&6dDY(95pjc!~Xa
zUc*zg(}UF*OUL7rD6+PDuG4m+WLMPKG6D~`)HE`Jjs@jd<&Cu1Z>MOT$Yfkx*yRbv
zN_w^eI$B9tSuU(ERfRQ3AehpFtt6r?T}gQZJ{~G1ZYcF!Dl4dJ>R_^>s)v||$;(#Q
z4xFAazbP(CWtr;y_x<=J1Nfc7$WtX{@VU!mthHqg3OsJPR%rWvq^(LzzNBgEwxwZ;
zn{B@fRG6V=TY;s)W^0k}yP>w}2b$p-?#_FG{d(F?+p;ZBbNwwVXu8%d%hjOG(Rnx2
z{B}DI(C?FxhM{8D)LNE?&RZ~=rncoow(Jg;QS&!dhv!1{*3mW{5V)jt_YWfJ*|dFc
zziCrCJe$5ERQV)4x(pvV_$tLi@JA>Zg1?z3T)$<w+I4}z%t@&hD|XmDM@B~W;|QFv
zdDJUl@l*+m@48`G+6q)q!9^i_IUcTEgVus(wEQ^II+8kHQU`$cdVUZAK&>4Ocnfy4
z)oV}IQ_M=hG@vJr(*T)@U~d#e+aJ$t)=YVD3A7PD=6J%VQ*N_8${r>@$ibb5Zz>l{
z-tU_S2%};DQL3eDq@_vER#h~6ggQOVmhf{RMQwkvsFvA9v@2-lV?vkjrIuf||0<`v
zsD<Z20SQJ}+ACsx-?98Nm`I7|8dPb`qEoAYPlPDAl(0V|XTO=wK0L(KHRkCXEq^m)
z1rYXztbp;=RO2ailNV&{Sdh~}P~Sqm0_tCfkyrVs<C)fW!BdcXt34e%Uc){qaKzRJ
zhQDVxLBj7Z`wADdu5ZR}No6N|UfSqpxo%>Qtwo7}xo08Kcbb*SToY6tCq>goWCQfi
z&>KB;u+NI(ptKXLT6wWjR{4ZzA+}|OrSw4>TrQ<*yG+o(G(gY|m|CaP6y0HO3u44=
zX;txw?XJ5L_6*wKj`sp9w1Qg}?VZ>!NS=S5e)1jEnc~7@@5f7lF6=}x7I|10(Qh&A
zi_6QG*Y(J6>)3fkVR9bZO?r|W&@mcqmxhs>v@?+O&!(da5l;!Rw0$os?#=T}WA3@X
zVO6-`n(c2X6HRt8ENaNiJRYoaCgRV6r2Vk0mgZTo@Tr`IoIpnIg6p@Xu7(!?KS2;k
z4#QU9L|_q)gVr`Y4{ipTe!-D>LBpnBi_p5DZ0aowP6c()foeyaLW7LW|H~mWVZC|?
zVck~})==HYeuspb!$Tql3$fga&`AEi^1aKDA4}bI_GNU&Ye1{;)Y(_)QLK~Vv*$OZ
z9)ip6`RaB?6*o!e?7)eiN?)qyIn+oY8)lVeJztfndejq*7g|w-$xL=>HM~e{(xOXs
zj#wBaHW7+a>Ni*K#j+uaoz&|P#lDdGG{UrHdovNhNzs^XafRw9$6>12CO7o|20pO)
z%N>XxK0tqYT!6hsa*(R;u0aIkBmI{csT>W;U5foSe(XQdyr|if#Z-1T+xt~qim{_5
zmqGz<@68^(iou*<+Ov(`{g`(WT@}~W9U3`||4Jgt_45NU;EW>WvK_`|W=8Yw6k8g3
zb*Zy(L2J4RpG2TTIuCdf_OZdvlML=1+(hnf67~@4i0T%>J2j_e(gAPwQXl0F_H%_Y
zeyZs%YRz=d^w_m4@4RyDq68uP#bUjqM4ki=-DY~}M?ptbi8t6s(3E`?my)7jzedHs
zjtkM8n!`tkkzCvl77P?c{V1ZEo9+R^Z}3Snk+8JVE>Dwf6T#bl<6I`-GL3wi^%KCZ
z;EkGZesodGILB?q`7;AKzlKuw6fQ$J-+SPa$ZP4esL`|Mj0Alk33nv?GVkMB5fV^K
zc|k@*cOVgWB!}GiGz8H3Y+;qq?jEiXJn#nlO#;+!RdL404cDdFr^tMRJxWtz(3G%`
zqw0C~30&=}lk^~<u#8HCMJ$|8QcZDWq1>WkJTvu*$a|nDfrvOD#PGBqh7O_*+AYJ4
zt#Ab)4)}qKGFH1N9F0YdVpOn8i<%V#ey~`_raE%kMz*}x|5rNCrt1R(rmLz3mDhC+
zGI=qRN!b=u+9*dtiEuwhLh8J-OUu3vp|fAbfb1J|_c6Nro9ynJxZ7oaE3SVhu75AC
z{~)gaD6aoR*NVXxT2UGN+t%e$E5Bh6tt=+GDPxW}__{mCYxzyz4(K*i_UoF>Qm5Ku
z>zCf~#Fh0M0~PmdrMA*0edQTK{%`<74yDq6H-${P{aC<qDrwYug<|NHVo^rO7Y7n@
z2+h(@NUmAfr_sCIYVDy$*!xlAxrBY5Dh^W}3s@$fMWutNj#qD3F7|TJ1vth+6f@gZ
z$!&B<dzDaBaiHgRgnE&)EyJ3{%?e^vP&%{$63PzIOT?wxcDf@E)&6DEk3ACuip>tG
zD;d<(v`en5`OslOT@AkFpoko5$BQj34rwz~R&okHKk$5HDElU6uIj;5l$)&-;v#1H
z>)A{nNFgd<+`dBm4-6<3;&<szC`57h|EmyFKXnh+)-JiWcFDCpvxgG3Ew`7jv14SN
z5h%Jt&$iyQ$+H!mlIPl}I<z24Ika}}*3Dt~DjW`_{iccj+@XEAqWuQBu<Q^zZJ+Mh
z4T5LNSJ7Q<4CL$11}?d)V+C15qpQbkoxNos0f%r__u>5eFWB5zGz2PfmY8kU1gwU7
zp{e<3uv1{1y%m?C{^!F`Ep=2nh!MH^bO8GyG&9kmMM!wj8aUkwaK;tm*bK)J;$UlI
zqiJt!EW(OFk&CLTSgebUjq~|YMdP5I=4<6$VoLMy0w0qD4qRBes613>+Bo!P)G0QB
z^L(z4?ja-BF>=b28odvJ?>Q_5M<JdJzmnM;6V-?Y#T%5Jcm#Z`V>CILLwQz?vzq(c
zw-djN0i~UIh3<r%5O?1fJCQTa)oDi)4oFi(k*b0IJc6d`irCk{h?Aj0LL|WIp*5l}
z!y;?rbi8)S4ShA|c|kUBzj1(Br?}6@()mig*0*5f5k6~Ln~sMKn(yhZgJi2}EP@i#
z5PvFF(vhOnE!5<X+fmdDSC&=s))EfNkR<1NR^%Ejx>Lu_nlBFiG*l3Yb0Vx=7u?ZE
z$Kf=VdVc-BJxj?TM~kv05G295M9u?ym6(>+;s9M`GX3*?WGbS2ao{9k0NRiJDGhX*
z{Rw`Cg$1eVA5&F%a`9F)`2*1e%-3@<7g$KuetsfwuSy9RBua&o;gvEzzk#u<&cI&2
z;iI7SYX@NOD>-}AM6#E!t^sO={a)ULB=R{i3j2Nhs1OC$78cS|;e~~FYmFZ{UoW35
zrx;>iC^kA#ZIl6RtUtYOvQSxxvHv7`<oLc4WB*O;oMx{HHlXN7M~L8D)6$EuaspA2
zdJ!Zm=<B<pFZNaZD3SC5W8hhP7D;DkK{+i2_9ny-R3}*}$n0nK{sGM9G4g$n-S0#5
zVT)m}82KXF-TATm1&Hm;J`@yf8r8pN|N5+eZ)zfE=D_%-$s~NIZcqv14`c{52ZG$(
zs1JnsTwgnhbN0OgT=-P6mIC;Ax~R+?oj(B??4uJD!q<hk1|XbX90K8QgHWCpeGNzW
zY-!D#GK)4pEMhVG=!du}1)T%feXk(3?7|!Z<6DC4a`WO^-V5U|qTQh|o|8_XRT+L4
zA-QlL5{e+F`n~<@7eP)<<m4O}<TRf-$cH!k3@wJ-8Y(YEcqexw%_2lrJd*C=pA0mQ
zd}(P(dtVTT5t5WbRC}KmSUneE>6I1jr_XKq!A+5@aBf9g4`S<i1^iQk-eq?2GZ4|B
zHGpHfd?cjF<Y%VrQ)ptJ=Tna%WnH&=4gyh#S3Y$0C}fc{mCFLT7M9gC$hXVANh;IQ
zvb^s;uMxgmp(FK`fOJ(0y{Q-J=L1D@MVH44+ju0`4+C+U-fu7PyAZAOLRUC$x=1Ov
zLiuUIXyiu-^IwH0qv}{D9%BOF5o|8wfIdvn)4taDlqwOqU~421aiom^^Bg&d;!}%F
zq`@P{fez>2DNY?S--wSPajh3e$(lX0#wR+Khs62F4-!1!BLpjqjBXDPlK~PiK`NZs
z?Svm$M&w440FT$Zi3;`fF%DcjO;e%?efmIeLCUB+c;_cK(G7AetisEe`80je;l*8j
zn=<N>m-!4l3#X@32nY>Bba+OVAm}MdblRfo>hlYXmo`Yh$ADM>VC-~t5fH^^54>(0
zZuU6J=d5i9QjCx!6sk(2d{k^cFx*Uf07G98SVk8m6C%J$ED?Q<2bt+`lzmFBMjmn;
zZ8jfmifo*F%P)0tgrg&&#B?p>Mv>R#AW?_UO34>`85O-G{A}e-r3>~NmI<Gc{pK{N
z*7ufQR2uUW!~?Jw+UXj{H!v<z=wqW}LE<J-l8)k28-6OV+J0a{V^9h?hM^p<H9m&O
z?<SItAQ8t@fUw8-j1fn^o)__>4&XLz#@(KtK@x%$1uC#j9nOjp0d|`Gyr>sivFYnb
zl|ro(NaFTGOE0z*C}~IfEhls&WM_5L2@M>sfsvHTnp!GYc2i&mst}oB&~fN=I<2OQ
zU^jim^FwrpL6DFo)FsY~(VK}WpTsvwm@4^r^$4G%^#<g49RSgFx=1g7>clxd)3bVd
zwu>TWkb&O=+Ce)l4StW>jG;JO>g`0f?=AU32P<lxY6=2SQ^)oYDmW4uVpgyD;KOf*
zJZFN<cBOkN$-94}>YlzJBFNsff+fd_HpLiF2+MZVburjPWVEn~%*alzj`Op?WLM7?
zXU2dolhk(k3FMSV#<p%d9oxmf_@aout>IH4LP?SSo*1h-grH7|XZfg8(iM`UNwjB?
zQw4gkIhE@TQWhda>zi>8xjgh`nD}}tRRg;~kKd-Vj7%?_Bt-#xR;lK63A?Uu$i+yX
zI^9eFnQqH6v4VFff80Wz|1O_zqt;E`!WRRsj?@99-qH74FY~$dqcULC-IO|Qmmjmd
zTM05G__)+2SiV3avXLCDjYwA~d0=j?YGg^9voBzsGGPY!$x;P*?)*HIXwejk`XLRr
znN^^#ALwf{)U8pWyl=3-rmp{z%;mT3Z?Tiujj&m|=yZ8EUH*kG|4f&U!aHCerpsSY
zt3Sgf<`dMLNP(hH+C+c5_P2LMSG%H{UD3s^Xud0&;?VRgRTkq;+TXGl#h~_g<cO3O
zD@UZ1O_8R^D3MW)O^2A`pk5?Xu;=NRg3>C)85^ThI1xW(6v1U{bP;z%t+4$upDyB4
zh-4aHbx0!$G075AL#m#@-CVJR){ZCzp1UpI%^)ud@2V7LwI@nFPN-2uqm!lnVNrr8
zfqs~;_LaVYVTY1z<G2kgfzCgCm(Kd2kYFZjt7-Wwn3R{2cVNLIcN3}uX$m1QE(gqX
hWvO^FD;6-FbiB43o3t!CwEPelfjUn$pWHYt{SV%I7l;4=

diff --git a/doc/manual/build/doctrees/man/cascade-health.doctree b/doc/manual/build/doctrees/man/cascade-health.doctree
deleted file mode 100644
index 3a2514b00fcd5a8ea7bcaeb31bd3adbf6645b3f2..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 9255
zcmb_i-H#+y6`!4%o}SO1ncW>lb{7f+c6QzA0b!#IB3TxKxa%wd{D^=x)m69qR!?<R
zSs(0-LZUGQCR`p2#UEgT!4Qqcn5d7w_$QE%V2lqw86MRTWAt}!ech^Qx@XW$cDn1{
zbIv{I+}}C(_Br)~##?9anvnlQ%ks=PvYoK)dKL>4F-rpj=0?ez$%P*#FDL6_E--F}
zUL2S#5fh*=x$Rg1bCVYmJ|UVRGb7t`3wqw*GrajivX03{WJeBDrbNp$LesFA#+l(n
zJRwRDPCv``XvstKuOy^|nDGs)7$tlq>=<I+h@!ym#1S+m4X11?gf^mSIz|{`5Z@cF
zF-X77TCra~bPRJhU|ph#MKdybG?nlczm+eDIlVBSPl=h_>Zdm?BQiF*H(;B4_P}#D
z!@%6kEXhANqJe+^Cipi8h8r8sX39-Z1xadjI|!phOgpyAl53N3M=Xavx81$AVOiNW
zEWgNt5MCX4mff|PrMmF8E0)D9&33hnNV~UvU;Ew-!|}QC`F8HoIk?Q|1%}T*0rQOQ
zO7(IO@P;_jvTI|>(hY^TAHq)ZGuS?U4iLDV0J9+)Z~?4k{0@wL7XR<YHu3ZPK`>m7
zYYZxpSd0S04IS)L2Z%c$ru)IP$=CT5zrZi@&s}Sb6fhm_`#|_&=G0UX(aat(p?X;=
zwV}wKCj7)5KA#3n83fDufS7$|-}U^^4$~c4Qw9pBe5dXd)kd<3aQd9GZWC)hP%P2j
z@&gZhKG@pH(7B`S>^%3x^&5{~xvt%K>e(l6Y(MkD&W;*=>->^vId;SX!_mVi@Z6pX
zn3IP^=K43YHIhR8psv1XW(p-n-4Y*`IM9AgoX|=MPS~NOlIf!=a(b8{xhgAl8%v3=
z)^(~Y@=BpdGxtkj5Y%B6kk*;+&#*O@?@O#Oh}kgTa)S^~%#|?(;Ur+8wy`6?wD1@U
z&A|3$>Xk`!O;pAT6W$$XKSAmpW#z>Rq|RRD%-q!?o~LZh>uOiiB%bA(H8Gl~P~~^y
zRLQ+rs8mtqk;nJ!DAaD+5!Xx{SK9Yj;AwWDj%J712JT<dT+iK*^Bz<WZrUL$wEdsu
z6bAkAs0OX%KCZxH0Y`4Ji6ug6!y`aKTQveCttT9>V>sFk36mo4)Q1am{yfec+LsR$
zsGO?o&o`f8OxwZ<sAQk67vQAA-+@6;)r^i8M_Mn{%S-jr!r1q{Ai|;6+1D5{?!I>Q
z`jhjfH^AX(rTeyyL@`YZl#%@*a>XUF=rh-{-JZUOV_i)ct*R<%s@TeNCI2Xkn!{P_
zUv)REi)krbOofq!YX<&qz|7&t)IUd_GBZ$;SjEZ1_ksjhEt(w|wwv^4PD~&XVjw-2
zrX<$_p4p!7*rpvN2XgwR5xB`~k~K1d9>dk5Fo{l#zh@b04SV+?_G?W%uKizjrGO3g
z;b=*cRFLqgL_sS>!$yV%oD_Mg%x1K5W<)Fy7DvRwEMe!06MFfPQ4ZvW^f%%1`rg+Q
zK0=^>33N&nd<H8|h-Hg)ZPzB0>yC{ZUU_#aFT|&7L^{shfkG)B;Zfv=Tbucnv5jrV
z<=k;u<QN_LHlHP5&68I&4FvMSF5_!nT1Qv!X&mSk$#;yEoO)(LLW$wJjSGKiL;pG%
zO}F(maRgC?PoEm&Q$Z0C2X-PC0ATyuw9u{nui|4=C=uybh%~+2odL^Zk_E=kmu^-}
zNVh?`E}b3a${Z)7i3&SytUV4p`SErZx^|CXo>iJhEU9@TL#_X4$wD4^M6S}mijO?;
z3GL#=?BaIu;`7@2eHZ4di88}b|4Ef;rOs3UZRYTuaX}%@-B{$L!eehh{uqz-Uk44$
zcoiQqbu}hP;o=C86JxTE3X<C(>qk;npW!2S$su42Jv#o8llR{xttb?V)1(|)E3<E5
z=`TTFw{*SV!01s<l>W~_I4Tlk2+{G-KS?6hL*(}~aO6Xze~To~&>?^0<fq5&@Z8VF
z=s~AV4soLY>3I6S0&!wVH|NL@r~M>|Q!<V_RhZvdfY2I>b8BZP&{q$!rAY4!tdk=^
zEUHvF#Ah?dStUOI3a0wb*G`li<A0IfLUwJ`FisQ4!1x{T$)BXG(HLK@M7_0>T2X?0
za`F(!iy{1WJ#1?e40T(Nf%0jve?pY6g7vs4FAY#HNq53|6Jr!nVNUe_md>u$GU|J*
zz?@jp{W&tsX-hv2=36BaH%!m%+P!w<4IByi%eB;QsT9NEe{Q6>VWDu#$8qFgaXN>J
zx_TKR4-bJ&-F?|H@Sxn8EJQ9V#{f+nBSh|kKQBvJqeJ9OHAGbX4~5IOA+L5O6hmub
zj1P3Fe-%Q<2%YDpEmd~ag(D6K8?46-o#Do)VRSbf{H-xcsbNI)Ums7eo)*NC?%|Qc
zh_?OX!ssCd#lDB%SNo&FNTJx7A9{?aaimaZVL2|2DjbL7NSQ9<=q>oKo_<vjz~A{%
z^JD4iA#p?#$B3izaOfLS*74#<(f?2!{TlLWaa0Vcaiqv7eeheUe>D(}5l6p~wp7_w
z7mkRdKY;a<$B}A`8b|AJ@UO-wrN$A_|6)A78b`#E?%|Q+h_=0qqtR>+<8V}dq2<4v
z<uB$>hjAxFhX@TQ{AM2dlTEbSZSAEX4x_9N|B@Ck-!V+KwWWRk{7o;|4ShVF-_o89
zV)k+#E2oCd75DKE;i6%oA{LaDP=_e14gJ4?g<lYhUqbIjXTI%ty)P%|DNMo_rBS6X
zQ08R}Eg94s%6bNkY1vpQo7YRfs3$0b@{ZX?)-fx^<uiHJT2)vIol=Sv=rfH1cGl|R
z7sctkkwTjytM@ES+iZ=<iwq~ZhTqpY4SF@#CSro%3AFCwfSPoACTm+P<|DF~v`s#V
zB9!XTXI!PSg={=_(Q$}S!b6kq8-^33XO|Zp#0+YMejFv+ytOUnddx+SBJzR+4`|4-
zFfs-{9u@-6i=Zm%FMEkNv6+a4R0Y&w++7gNXOD5<;AtuHOr6?*Gz(Q4&^g#gMXn1m
zt`{+7@-?wU{Y^I>=zCPeM4_#P-@CT2Q*jcEAq1XDN0`Iph)xA+J#R%~y^JC2O~NgJ
zFv^{}gHk8lIVt8jdZGDaL##5?xzUO-qBtx^8y4%tJuKIviXRm`A(t5gjLcy>OhzV=
zezpsr=_uczcZgn&n2V$C#uqn28{f}XCv_GCUZ8VSSsfN&2S`;D6~yJ#^NN&)l#+;Z
zwV9fT{uic@2wSP#Qiq)TY;~f>ELO+{H1R^7MR_8Y9K-F!MvuYc7W#9OXgrHk0W-b8
zLe8M#FP5<Zn{6?ZUVzCXwv_{d&xn>0N1k2|iAfu9Te9MTuNRPnW95JiGzKoB6k?X;
zhy*+BemUfaEVev-Z$N-rK}FUJnXYn5l$eqJq8-{PWS4cz4yic_L+F|g#%3NW2)jiX
zgJkH+G9KoZGBUkuJ82*LQ}hjsge;H=ler|#!j><fLyxUWAFrJds}yfQj@tte9eaRU
z@z++)i<ZxPoeIdZwnxUGcJ2f1(49g<+>)0FF&wu2{fK*R+Y5S#s5PRL3V>2a(Gp2G
z!gkDJeB<tWAAmnwLD#H_r;$?pJ-K-5rW0g$S<tpw)Rk)>A#Cz!;9#*iG;t9{7TyoI
zHY?5nlLNg7&cXm)W`0z`SI}jPj6I#(J?`MYY_3xqQ!Iu91A+G47*QR<QK#f{`lvge
zX=JWFXL2;lO>BG`Z}75oA-H#AA4|}C67pS!EDan0J)TL8jUq3cq(p%etwv@K2)mAF
zq`^pC|J?+T8FZM12;PSVoS|rcAl6J!?dlBWe@93AIY8c(TCZlWSOBX|H_d4WVv4yh
zCfj&<U^dMr2wx!4Mk@rd5$S0wK)wmFT0dqfoA*D$f!3D?p*UF~NMDt}I~SG1P|}CA
zShpac$}PQl0oo=Frr+25^GE^xCjRiZ`A_)!{Js7K+yeUd(4R?~`wv}F#2oQZb3>jk
zlIwuKeZb#8kn{(V7LELKct;==w*Ya^@%Q*UQWpO}3X;cfES6M&NS&6@BazWWpiD<7
z59D;IZ`6^L4lP;$YS8hV0&|k|bZxMpo~uZl%U6|5CoA%i(t{{LfUebLWivQgk)=#8
zrW}MFFg?e?ZsH`yIn}(HjlT(xzmhzSh{G!$h+Vwr5&~rDf<>~b3@;SJ5+@6`YdWz-
Uxa`r(GN_j$pJu5iEvB{q3#je-;s5{u

diff --git a/doc/manual/build/doctrees/man/cascade-hsm.doctree b/doc/manual/build/doctrees/man/cascade-hsm.doctree
deleted file mode 100644
index 4e3fdda2c1585ea79e1bc71766a0d532c2d18779..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 41243
zcmeHw32+?Oc_u{?05KrILxSW`qSU&qA;keiOOY*@wgQ2$M1uq<0+MLiszGC>ftlva
z^mw|50CYr_kCfnaZEEd_9mla_S#ccM6+3pa>%_^fy_?Ez;@I)A%I2!1D!Zxdrq-2s
zH`%Rh)@ASazt`{RV|orwY*#9*Vx#BvJO1~-|Nq|q{&&4?=qC@pu#5fkCyGv?>6I()
zRLv<`Zp+_C0adH!wcgu0_FU_kR@NVFn47NCY!s}PzY8%6rE;a%uxhO*TBTk7h-($R
zvQv}sOGBmM(#R97EItl-Wv^mspZu|c=@!hQWt7}%i=rXc-W6+$$_sydSBr}GhwCQF
z@>->X?waXmOwVhS*P0$^CEE6si!SK!M+z0wbrFd7p_*CcZ~KbPy85wZ7A`fcb&AvU
zM?7<bKD9~{r6Z*=e>5*EUfSaii~2527fsKcE;&_edaGP@YSV6`FdfuE{LOjQ`rXq=
zKV3CzO|vr1Q`0XQ1=XEuxL(WOTPfG9*23=QS}DUBtQdAc1o-=ww`)$_ExVjYlUe}h
z3y7WuLrT|!3#FrA<4yQ~GydO-|F@%tr8`*7PL#5xJ*8u%<E1+nhEV1%e-sQgHyUQW
zq_@j`Gxdgp(CW-;P`g!Qb@j~;o?Uui_N=jVe&x*4;_?%#tJH4zaB6Pp+_~As)30A$
zWfW%p18%)ku5C@3#bO{z6P2=OHOxxh^%_oXLoe-cyfjhKk)ZgNtmhk|_4G#qT3cqc
z%BR7X`%%qF|0+Y}aKB3x9|`Eu3ArYzj)Ihf(dw%l-yEeWO30feAw!I1Dk%~3xNPY0
zI4?o`sN}CoSM9P$D^(_57s$d0=wq@0X1!iglaIGcdnuT4n`?z?ab^`wPQr3(dH%wq
z^B3}GNGj;}ne+LFmX=rYOBeEQc=+_9l$FxFEU+g*cvp-A4<`!1b1?yUF2wVG8~y#U
z@*@gIjm`^?HaZb7=kKpuwPLxpk>3Ii>0&q@;w6_qDI=v{WH>qL?*XHgJbXGzP1fJb
z^7Z$)Ua{q8@XYZhYFSC*`N?Jqe)z*65s=pM4@6+Bg${u}Rn2m(Rr<U?f?wWt9i78)
zP?|r6AZx2$DHqCKYlp?yG#fR%Qc}-sY*;`-Rvp5rmjam_mF&}%H{5myB622lbxe~!
z#iMUTd6dM5PU14zUX-D#hhk!`ivNo)i|<Zli9K<ZePdrL>z16&n9ed@X8YC7Z^tT|
ztet-!)6Tyigm&5!SMAyrBOyUSdHGQVB^o{<VQE6@BV$xVA?;gGRG^c4DS~Wq`?drk
zvZY_^QYCEz$-C0Z(tpsk(4IoNo)oe4WuH^7>)#jztW)dsq<{A51a>5;AWH2{2Z+SD
z4$SnW1C_Gt1=dTSGH<^nseXxKZ(n3h8#YW>;6Q}GmPANg_!Siq`4^NVses~>vRmx8
zqd=ho6hW!LI}=FhK?UB%_|)F8l^s(=1^xxn^{fJna$N<+OGg48btjLAFXT}r@b|gG
zdN+k#9tzWJbOQCUh>e~yE*Lv)xrIi#&PH4T|3hKIYPLU<&<s)4!_de66yj;+9}L-p
z51un?=7wc>CCex{we|8wvtd%%hO=%wWHyTE)-7Y%Dl{8qZ`(NM6q^;xHL?#apL35H
z<(e_aM|+}|9$0>|nqTOmn!@HitW{SB9DfW$U&&R~WRc*MRwJ&ZwA#dj6=%(?7)z|(
z<d`lREGzYgT~vzN?)SrOHyLWX$CfS2n1KnWjp){$23iHrDsM$|&1rhZ2B*&9)EREG
zUUwRvRW#PN4ePSi*f!?Qp2-xPDlEa`RA41c`g^GWrT2fyhz@n4p~ATg?DB`pH8unm
z{)N(z{Vl2o`2r>}kPjqAGUM+On4$1wgsfb$Q==xX{l6&FBlch8Pd{DicaToQlReB9
zZfDp&kN#9ruH(sdpnw>|Y@T^zApDn{;T%`EBd|vI0SMVALWH=4WPgIUelBQz45<T8
zf**V_)Rz<uAlXaNfPHgZdZg^D09l>ecXu}6Na}AvJPom~N6B;kP`OsLwzM%7cS5xt
z3;QE*DmBW?PlSO}-7Gg+{&g5&z1FBQ6oVS9<pP<f!4w<o=4b>~8ea5TCR*9Pn<$AA
zw8-e$OOO&HCksj^=u6%$!~Ntn8zJWy8xb)@nDa+jH0GkxH02zX$TcN28nhoyU|trT
zPI)88@_=Ix#j@9srud^<)yj-pH_5xVuimg+t8v*P_mRECYqvmuloRQwu1xj=_{by%
zt~iuMj6#XdnhmF5SS9^T-g63hIG;SXbqxMC`o%qP!&KTCDu(;1j)JFe2ufwl+|PJ{
z4#?9Tlge+V92ob`7K?^yESx)Y-e5Ip7@lJ^U5lySC2QN*uxfBhu|DjT2DJjl;~dj~
zKK&+_GW=GM-DwaaRPrWNv!<%4Dlxn0c-D-uQnJvwQU_ae(EBp<b*VZHtLj{~3}87#
zwY<KqSJySREl<{G06EF3J=;UoZVpu~6`|}3u|PFAmjNhII2Fkkc{PNOAuPnhfjh!}
zA2RbtAb-pwVZWb#GRfC}*PI+j3%Dj~j(D9A!8t;PZ8$6T2Oq`nLx>Rwp(`UDs5v4`
z#G{<3JlFC(NLOoz<oh&Llhi1{3nuEQrhN}Sh=FH6p!EtGfhMEYSb$n=jM^Et?D-fe
zS^JGzSTJTJ0J6_(;r6fLM*vHa0r9WnOH?7U_L~uEzXgv_Guo>ZY~rE8&*$({gP&VN
z@bg)G<nUu#ly)7DaF#Ygj@g&+EJb1FRy4)0&<C^%+M!A@*^Gw(7R@nw=Yy8Vtl*;M
znV2pi``4@)))t07XkuLhrSkQZMylD@K}M8eQM+9r$nB`X@5vgpA2Sg<12q#B?nlk+
z527slztiJq=<!$d_>g@2Fy40TpJmUFu;&Zx`BC<Kkv)Hop8vS&Kx4Xebzq~ufv5w|
zDW(or?NRE$qR7_WgD=t6?MWTJ3kGWHa7RcT{sABRR);$vOy3T2@1zblp9PZ*vr>_x
zLW~x)PS=%6&_ztioF7VHPCL;*25PS*HZ$ezO7unL`WOAXP#_omlk~<!pS=x4^i_w4
zIaXmVD|1{AOEJXB98NLBjoHQqo8NVrMI`;4G_9w6omtpI6XBR@p!XxJnY4l4;WoKw
z?xHtRQ*pa>pD0S@c$VcDZbUW2>ok#JKZNAE9*7Z)7zed;89j=0+7M5e7VW1mFv?TZ
z1I6Ub#hs8wVoTI&iApaGUtWiJng*X3fC(V1LxTp^!FcVphCU<WUx%4GK9I{{`Xwi)
z>f)oBFnwg9bTkV>lP}cF*|2%=cB(RO{ZLe?`R_!8D}u$hg_$~~4I40Ii;SWYtgNg*
zMgtd&fB0x=oJJgMO+kFf6gE@-C6#={juW8N*?tOfQgPYe2P~zMXmNr~>@w{X%Vi1$
zJ`>cq6I7qVFv2JoVVjoM%T|L77xLz5U`;~`QvJARNTT?aWg?sTCD0sg=BSDY+vYCR
z@#ke7!`Ki>BWxSNl1>26^&mVv<+jZiQ6LBSe@AZ&;MrTh0MC?3nEFa0{A;0v9ENl7
z3FQEZIcB6QxK}Y4P)pD>1*#GLM7_rVlQi%@6as1}2A}>=P;P&NI8K@>XP;FNoO474
zxj<x#{sH1gTeJt{ei_O8LGC|Cx?Yi660ZaI-H@`cbs&P`6L5b8@igGR2fS8e_Htj2
z2dJFuS!R*6vgu+Vk-31!^b*zyEH9rm)=U?6RoH7Gb@F>yqHON}3l>D1JEDvwp}_ZQ
zEYtf%CPmDVri5L#O{#Pg$5Tw3o5BW5vaF|CHi!38^^`jJ?G#37#|=mlbZxQ{l3h2l
z{KDAPgLWK2@_w`<i*y6gj{DGr#1p;wqQ;fbjsu9NX~)bJm^Jn`sdpDf&4I8{b64D$
z2~#x?V`iBunr6&Af(TJ1>1mAjaF~^+z{>Z4BN69>zVa_?e*h8epT;BX{s?(g0#hZP
zz3Q0kvnV^&RIz^!g}_K5Hl!LUryx9wK}`~kl&l7yx!Ia-q%bGvI;<7EM6H#zZ3%%r
zrjmNu1X<A*Y6oMlM>QI<8XC#lE2Xll6OCVRG#8D{vR5)3klnx{II);=Rfw|-zfn=l
zi)QK$7D;Uz>t#%vPLan~&yYE=UHGvv2Z!0idb3e?u*P*p&cNN;1qrIJeg~_y>e>A<
zjXW_!D`&AJvwpk_W?|u*P1ysWC;f#%R#lS0saKMkghQh1`H?nlcJW$F#hnD79iwVq
z0<S&8GTm*%gf9cLpk}Rrsc!PG7aYtBJZTx5rE;MZvXv39eA%i|r<~a|U8B&jOqwcn
zYA0yA6lT1$Ne)4$PO}V7gE{Q6G#L{OD5GkbG~ck^tQchN2jZOxW-2seV6%i=(d>aZ
zU~V0YXps`xK}Lf3$kr*85z%EbmnnO$RavKb0Z_us38Un=9vfFsDCR_9ykUw5LS%q;
zH7bz)nt$d{dk#rae6b6S5TZEOP89b*6ko+ekrqobq(jkVnwWyFhZkE|71!Eivq6wf
z^RiPe!f-59nzWV_!c%jR3=={CmT5FI#AXdR5fWR7DH{SJYs6SNyKEFHWsC_k1*<^=
z!vdsenhZ^|2?4`c5dpN!gI2$zET{?efW9l4Il+L8X-H<%X;!dYz=G=3xjs-Dwse3J
zDJ9|JOQO$ZSU~y3e`W`!T^myhtv}O)kUi8!$owze%_NMW5@Wqt@UTI_s5n9U2HpSx
zC|rPmBZgTh04Fj^ZWxeJ3p*YIJnH3W@rb#;P8&b~c|tsxpTRw0SW_EQMtMDB3cNxG
z$&nCvX&N<aQ$r*Y%QEIvSg|B9fw%%;OJ;4u5`ywis!9@3zR*Ksp9?j1YKJHsBf<>p
z-!bx^K_GXG`~kf&#|V4t*D=BjbKw~2dk&P36kZv4%Omd3==Ot_e>6N^h(s93=pkV_
zI1Lse4$;2`6N52CLINok-%1dRo<<Viq;k~SjfV$3l89%o#L@n5D7&kX1TiCZB=ImL
z{;z_XB#tCBt9*)VXkqn)jh+P8r$m)rlgTDJIMn@6Vj1-qM|^6Lv~fL#)IxJbwfooH
zJ5V6k+$_B@&1G)`(OlKu{$$*x34=ykPo^SBk0y_hGMfcALYm9x=u)s|krvjqclhkr
zqp2?T)vWD$a`((q^YOud+}$(B^6T5(b3c-&iAB3<taC^=5O>cbkWb=CH}0N$5Klvv
zN1>PfE@a7a6u&MJ#d9Uv7AohiN*ttvB-bY=$(5{1y=A|ZNTjuT7AaJ)RxeC<R}P^}
zu5`l4@l4}b?(YVPfk@D+M24qPeALO%6L@chS$uK8;N2m6fA<MP)(fw)Uhhq;R}cQD
zgo5?OME<bGYq%4{Pf5TFi3Iepq$q)aLHgI?*(;RHGO6?@G>IlzwaA;1ZMTMrd)%`2
zkD}uCi+EURlY<wb#Z5%wy-fPDriJrxD)5C(q%($xjo3yOGf@o>>tC_r5Np4gJ8N|{
zS6W>?fq?@IeHK*&Grd?{J;u9Ia<6B*%~Z+MZ?Y!UTvNlmKq-K_V*M_Q9ERDb_l_J=
zlqqva9g5MNQgQ|*2Xzvq$0YDid!=AE*dyhaS60bHnkVaV)Z>dNtp}4qw0-|3!*@_1
zHyOT5Z_H$1Z~dAK40MIDpVps`EYs@a2KR76l;m&8yy4+Eszw{1ChPVfp4LA-aRvPo
z@1ENAHMCWtr7JWGh^;OQ)6-SIGoH&)UdE~OOBYsN&xA2Nj38*_rE!Zy{FKZ(mcXo@
zx}e*`T+BzhAb&(Bj@nE7mL$A7k%S(4i#Q2Nb8G{-cQwYilOm>}W*#zgOHf<XGQJp8
zpRG8)GI!o!Z3BNCTy-^gK$4~^oSGb9^pZp}Zz+L!QDGO3MiUh{D=VOlhz`8DXsw&g
ziZ^5Y@V)oli@AL+EwOM}>=Qi{TL=}ankE6%#F$2~xqpE2Kp+RGCcQC$VsHHd6w^)t
zP^uDGZO-sW8^qwa6OK^PnQA+1SuOx^(va@zIp%*g=9H&PqF&-R**fp+qIC!XpF=zi
z0oSh>0dHz!ZDZ1_!B$E6hm~0)17k=SrmHI?oXq7!e#WUsuy$>6_S}3TB4$)fA?JFK
zWa7sYnAj6Cz8L0iDT<6^Q9^-^p)g6xze*&f2ZW51q9oY<Fmmq-Azz}1X$V<@OnoG%
zbw`AJ4IgpC)hrv1rY_Xvf|&aX%~F_h9?I`O1IgI0BrvuedfKSmmt^HM^n5qpi}M&J
zMS>|cnt%(owW|4Dwt{P|Q7&#+IQztNoC>+yGqUp73IekkTX{CiSTqecI=;XO&ZqM#
z=9-0h8NM*@{KDMwttU?+k4q@hb21fY1CuG9qYUh$sWd4=^G_H9G^_erIpG_kS7^%N
zV6s~Ks51MnU2v1EZYq>n-H-iau|YO4ub&e3gg!^EMyiAwI5myvr-ZQg-%srw5&hH<
zy|I3Zz4hBqG3*rmRNoF4ZqT-a^E&2eHk}6cT4``D0|x}>B0t!Rv&+kmEnPU>4$ehP
zA*6tF86+j)MzHsad@V<if!0~p6W}~dD2H<uCP_JwNJ<ZI9w$Xft38R_yMl9rBBsH4
z9SU(>Q0tCxJ|p2=@E*$D5zfg)APwLv$wD&sbOLkRL3#rfoRt;SApM!P@L9x$_GE}u
zSSA^e3h4sH&!1T&PH_xZ{2(_;dlV-!6!2bPbsi9kKi&lc3B{>UhT?A=V9jMS@+v8@
zP6KW))QqWV1aJ$n?jN|HLiPCo<7s+hz|GzU0^F(+fLJyR$Y~Sa+F;{q{#Bn2pTXzw
zd`WcR0Yg7+;Bku>c&LRR#;mf-u;@dML%NA7+w{k~kSrROJdb!9(ry8J`kgr7{n#yS
zh9!ctsAtQcR3j5TJl30qsq1QRf~f&5OXC#I%9vkV$<NJSSjnHCU3n<6V}ox;OC<WX
zNT}rPrxJME(`e-rVWvMB?cT0#M>cRO@tY*=Hxfzfp}UKdrqsj!7;^8byZa@InAY7r
z3DNs_z=g!_PU|4HwcZX(IjN`POQtlH>D>Kg7~HcpowU4DTK-rt2+JR9K(TO3dX2bO
zL3WnkM+#)izMRmq?fTlM!QHP*?xwot1xSm==pUs22MXjM{Y`pfAkE(T1!<=I1G27f
zPDdrIm1_Cd#6XFH2Z2d9N_e3~Spt$4=HJvFk@o9J1R#Y2rDzQ8yFzpODrBH_0?$VA
z=x`gF0Y^!nBw<%464nD6#R=2U=-UvpuFz-%WTc|ev(T6CNPX$xZFUpjsNN`F#xgv%
z=8o1r@Xo~0R&(msIXd;J%*sPJ1f^FX`o5GcoAb_u=4=N+&w-`cK&)T^shwHR(uyFR
zUs#4%v#`FfNXQOXjJXDM#w!jL#v)q0kcTI<KN5?vGuuv+oy9^QolTq}BOErA469;`
z+NxT;9VDiI-|3KSy{`whzB9yDr3?usyFhj!*!?5>c@W5v{b71z$j;sdg6ygi{>_>Z
z7OaBKX--P$jb@GC(oxAe8|N^0(~NT*rAM<1#++tpJZd#KX}W3NIihUs)h=3_4D%-t
zPs8Nruh=ke=U~D%2Rbki=S^u2CK(v({=#&1Ws<{3r1FcezI={q$|u3}n37}fNZ?pc
z=JvB;R=zvZy(R5G?_~p5JbNY5_LC^Pt4@lzklIPT8$$7PP?JQHS)USp5FT<sBj3k>
zMcj41szirTw(CF>Y_gBBf;<C($01g<g1oFwt{PZ=vQ=M1RiZw^cAbfjs((aQUF%G&
zN3gNNqm5q<TX~2bLh#a~Z)k*i40!jk)*TjpWj#k*e|YbpZ?+K2<7rnAHt=90QtfgX
z$K=!13$n}j9+f6p^qC%5^b;W#DFICB7=$qO-!c3)2;?2Z@6a3T7}#6C9RmZG0h#>m
z91(nMmm}LO<cQG22Z4HUL}*#c<3Bn&BD6%p?uR2n50wJ)UlIhQCuICHWT162?};EI
zIU9nbNg`x(M@0OaB<)*?r1fC>$4OH{ZT}H+?+R7_f+D6lBHjbN`ICSPiKwcf&Akbh
zKcVRP`E$C7$(B=-UCP@`!biW!B~SN_b`O~?)N2Uwsddv<F>8z41snRugPTww#{+}j
z7#^^<9|SzOv7HOR46xvkHvSL727v>wz(}5Fhf(xw2S?<nj4X6t3z33wUxFa?r1w7@
zNCt1}h4)4E{y-9`(D_)nB<aCKl6uhhI7ynm--X<}()ZU=#58?>AN1l?LG3%~`&<wD
zZiWU4<iU673~s6X1IbHrJD<SqcE;0Bp~i2KHSWq8C>Yc~5?n@s90@k*jUfSh8we68
z$?$K|Iz};MWEO0&WmX$7ihYl|S4NN8dANu{SlV!LVva8&J6o<|&!(KWi3ZD7{IM=t
zk%ofr2wE@D)(=8%uWXJcd50dLhp(N?dF85wp+L+3Aq^5E-(t`hrn0Mn;jOVEfjdi!
zi}Q0U`IR&0=9eBxUTAwLmQJ8$!WYTzmlD|B6KZ}e+zua#q9*x5lc*2eq|r~3u+JqD
z)&q9N2~!$ke+0RAg`J<Ih-ujQA;{uK10Ez|r#=F`h8E?@#kgFcBpN1vlnnW50z=xt
z+s}fiFH52{Yi(RDw7uJv%WNZ|vdBN}p~x3PMJiUOjI{*Y`bX5i1A!b-|2MrcL}hRN
zA}Z6@0gbh8ZDU)}<eEa0YZaP=J`4g%j^=WDp2n#Q^RuT@L1ZGFLLf*qSW3u5CT@NA
z1Roh>pbfTOjKT+ut2oiz=n98Rl5R*OsR!VQlcc2C9zyP20mng#m<Aj#LSaUN+IIww
zBLo~c6{YULF^LyU&j$UGgpaf+k~#MzFsB`ed<+Dhlmu!ZGNFOUT?$2_!LrZ?dMNbc
zp+XhoQ(#0ev40qO6A0um@;JRQ7-4Te2rzP68yMMyDQzhn(GE`ye;EXj+?30OGBr*;
zcHzv*d@7V2h@=r%5(}4d;wH#RPhjF80}V`Gih{|(M7n_{@eh)y=MstP0Z!sXDXF$?
z<lYsWG$~>loV*0ZsRZ@!7Ea#UB(E-O*>-S}7)3JY0}0G&2PdBdf$x(9YH$*<K7v_~
zNT@9G<2@Ali=iSF+f%?qu&{qH`L`gDgUJ`@je!Y!`#}JcV{O2sYHq<);N44ZZJVwx
z_HR&@Ny6trz{;^)E}pY->fG$b{Dt}D^SI4-KL5a*R_2!z*QZ^Rlv<!n@<%B}f0!Ue
zJweUO$UuXdPe-9<vVApxH*LO3^8PZBydFR&PM(r}`>V*kE7194ikJpEpN4{cJ>Wz~
z(7EfJiR-DGRXz(Pqz(7m;1D}ns>WyJve-z%1TfgG4Q}<GP%`p635;w9P@h3%{-3Oj
z22k2A#Mhj>?^SZx6bqNd?jMVr#qEmy<xsJznNmPXu)Keex)lU+kh+cD7)Y_Vfq;~%
zgg+jvUZ^nlkLGxq2v#ca51rjiaPXwLnZ_2di0mwFQc^yqP?&6+ySr!`axmS6c$$X)
zYsmMNIhgKfgS}Y(mSfwi=xF!#@>a_~qL4TCF^0QgI=gZ)-JZ)u^EFP<%Dc0(56qv<
zpT98whBFrvG52shr9j-IPm<}6CNRAxyuA=^jbDx8EhgoXD**gR{3b~&CX&_z*2YOw
z@^7C*?p<N+MT(e)wZ96PTnf0*5o@#3OHbST*ma3;!}4>w`BpwIYjX71eFDk2rxO_0
z4&*)$;<qL78n*t#9Ihx5dkxVG;7C1OEXJ0%xzn5Yi*rx0@qiuYN7ILpTXv`;9U_U1
zhqxGvoeLS9f=Z{8;vhkGF66YfT7gbc1vKDb5IQ0-Sl3XrE}zKIx`q?9tgeVquORvH
z14ox+`@4H!`)`EUuEa8>ZxJHaf8X)~2;_asN9m3AE$pq|zJ(#&fShv2JAyD-q=5yj
zoyDi{Qhgr;6yK=>s?1skGqQ%;8^PFio=6&BI@ac^l%-!!kfokr`E$rX>m<Jzh2?8g
zY64_#_gND7JBbAL0M2m&l@{2aMebdJ^S_~pY2f@tDB7<CyyytdmxLkAk+@>jHn4?5
z8NLS2WyWM#aJwy`9_}ihG8SOruoN!#TjRJ<03ePX<tx3!mTj-mtkF5SY~Ap>wpQ(X
zTBdBiKTl}Bc3s532Mhm9vQX<HbWeaXz9XTs$iL~K$lnSTsRSbh9z`Sf50At91w4+>
z8-qvoHV}AJmGCnX7+lTn9z$p#MxBjr7`<ACSM&9RuDlK=e0HMv-2KUkIFT>Srr$@G
zH_ujFN0^u@KsNV{;9;i~lVr_bk9ZnT{WeP8<sZPQGvyjP&pOZUz*D!_^7XG-M7kyt
zDG#@6Rl7CUzrW;pb$4cZIyjnO3fC~ZQ?*LX@}REtmJw$$IP6+!0}<H8I?PVVu-Z{c
zdp+pAp7YHebLO1c<&Uxhx-A?IucfzNOO@t5K^Iv`p5EVqr|ghN+@{`Q1<+!t*HJ-7
z?ECPi)4HlxQ&iTOFMJ6}?q*3)`HW(-R)t_0vf3$eLmDfEoTNvR^}L9(JIRhXy6AU7
z>myxMZ&_83lJM#&9ZEu$lPU>uWQvtyzY2fEZ5qCD{CFT-$B)0o$euiw316BX$dLUS
zJ<-8vA}MIYIH(^zh{k7sOp7eo7{6!XY2@F5WA>AXgKAvHA1K+RKeUSoR(r+igR8+x
z5=%58`3mxCu)ORQ{1GgP3C2X2BfJiu5Yg=qAT6na{kJ&NJ{Afx<CXm|BQ(4=NZpLn
z@ly8>GNQxD^}es&QK`RxblOp=eO~JRdtlr9J5T`4m1mDo{8s1qwkF?{gttuB@=c9N
z@=Zt#GbtqFw@3*rCJK3RHBrhB#gcI`x1T~eqM`l$dMqK|`vRTP?h1PuiMkZ<uQ6^V
z2snM{LBPKTo_v|*l`h~1LINJY7VUo`kGO=3P|%rB-T%W#4a;Z`BL26G>~QjKM10qH
zk0P!}Cz*XI=s&&=&izdX5_B1-_}}atUzc%8!W*Y+8K?GaC*u!DG1Sg464K80p}++q
z&gI}oHARetL>;(3CEFxzxHdVy(2LYFmQJAUy3~*?q9%3$^q~h0`A^{JZ7i>J4Y{ow
z4vI>47g^d04|cA$#L|~R?`cMFd(|MTNyAb~!mHS|oDo-)oTVo_0jbxFE@2EaBltR8
zz>W*Ty(V3zl25e4{Hdua<LO4z^{_P5MYN~s5|xTsux4hAr|!T>Oqbj`e%&!+tTdX|
zGlIugCw-GFEw^DQ?zUAWVdSEY60tXsq;$;Rf2!end8=N=nKf`z-?^|Gyik==yzuwA
zmX$MU2*Jkr1Wqgrmmsk)m3Qo(N(>RSjK+e#g7j9)O9UG{IFj8SZN#xV%`nCxj@X_B
z<Gpm;zs75rHJAG^^KeXV&}B%iXIfc*$iuxRmDU1`Wf8|J;%AdU?kb$`+HBx%ST7&s
zwdn5`A#~?%YmsX1(KRTT+&x5N5D&M+Pp!ig^sE}r(i(o$tYAfeGz<M<taq(r$?IZi
zV$mPnu&|?;?u$ZBqquYjo>Q}0$B(gw<9HyIPhMO#jnmLM2^dt>E+IlD_}Oe!@N3+2
z3i&m&aEZQxlp)aEz)=H-*O3i*f3=U#`{US%>D8Lm{1*0*S6k2f6LiZ|Jx_i-By^GC
z^*qF?SS%z@oA&bTVq8=P<pl{UI5dm}?1%8;(As<jxBq~hyZubbtjM23{vm6t3@+jh
znWifu4f#VwYpuC~{3bTd2HlW_7;sEi5i*MAC|Fb_qOV*7&+-_HIdu0?%O7oe>$%s^
z9y`pbhd<`6M#E|3;l?RetOi<uNG)KE@d3_xEtesd3+@Mre2HXX|1wm>pWyi_8bs<F
z!XF}u{ex5o$evpY^t<Jc<I1s(rnzB(<3;R;-EGxc{?&B-SfdEEz%8I~*%!);vBUgI
zDB?)DC<LN3>`!37vXfUq{_ZlwZM@j5*7H&%!B`f6!@lXP&I&c%0T#l9omyW7)m^Ju
zbn;tO5~zdL7F{}**HbbnDR}wIWn4VPMD{?wSaxY2Jt|ULM`JAdBSKZ6cKcBoz+jDy
z$?<JGh?Zyf-r>q)|5|!OA(&8MP>E}pky{Z>KGrZd(Nz5B!d3nu(l<yB`SqX!@a476
z9lXPzs9W{C9H>)e_EQMmpqeMu@LwUu`v`WY>f6{aQJZoa8_=jpipdB-%sf00fL{;I
zu@B+7+wZyu{G4d47b4kHh|2zzB73?qi$wMkZgVPI-a0D-fG}P1sudJA>X~cMqM}!7
zE$s7;LME$ushqL`d4~C|9si)aUGvPXe5t%qs^CB5cQ1J;TmF6*$FqC+w>F{GE*Nz+
z`^|sm>4GO*DM+k6iVKuL4;r598@S9^h}4&wbrdlH>d;4l{~QK(AU(KOuC@*t2yo#r
z0R{T9NVIa5WVhm&Tp9N=NP@^z*Q_EmcpDUyEXzX~lLf@Ol((v8xsr!#i*T1weTZ_V
z&XM-Ya!lLt_h5Rdh1phrA4e0YFC>xXqo5mJ-os5J7SIWmI~46;3C-;$^wefupno_N
zfnTxx3_w)x23dTU3R{;Eh6!<tl$$?7f&4vd{}^Tc4tjhNgI)U<=<yADe3c$I?Z)E<
zdd%#><JI)|5<UJSJ@(@c8+()<C+S@EDSEsD)`LAsj~~Usnf6okco!XK^LBbXj*Wu$
zWAu0%t-*eV9yvH+?c?+~NXf=oS|aEvJevL}QR{8j!CmxgjNTna>kgxHhtash=-Xkm
z?J&A_7)?8jo*hQZ4x?j-(XhkH-(h9%uyPRx#qBgpN2wHINNJ35qjZ9^;#0&A#){vk
zH^z!vh%*n+V}Tx@rN`&!@elO)E<G5d=+<m@X*#=BowJN?U*;^MtE1RGr8eDU%I+Dm
z=_Vr1MmmO>U9w=)Jq-5e>A~I@Yw4h8c51jy=ZbSC)1jK|oLrku(q%_1+H?pbXFMGW
z#Ll6z>7*)~&VaG$lo;L^w11dwxwmOkKHDa0(?(L8Hjvr0#f&!<t$k-3BW&6_!B#rk
zv=*8zQnYCqBU?FS)7m25q%<+dX1Hyd1837IHchy&W@ZLi(;wG?gURZ6p$zyTeS-Y*
z5b7U9Jgzf(2#*I%0?<^~oQlLE7WJA)po~2l%5hYb$`Tz8<&Ul&`<?;ZlhM3_FR-}K
zdlj4}^-Xlyi&Lp^Oo06|G8cru7t;K$)&(GO-E08Us{jyy4=+%5VxizM8O-owj9-~Z
Uc(p;$0jDVX*`Q0}PLrws57ek&#sB~S

diff --git a/doc/manual/build/doctrees/man/cascade-keyset.doctree b/doc/manual/build/doctrees/man/cascade-keyset.doctree
deleted file mode 100644
index 6bc88ea15c6443e322d130c0c8ef8bb7783bbe7a..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 29628
zcmeHQ3yd9Cd3L<sx4nMEPDpIWL!#jIV|ViaH8sY0Y#bWavBTPs7vb*gy|X(rzW2`M
z&RlypBqV7_$-<~m<)XF`YDHVMl_(`VRFw(|HBbsIf)w>3wGAyT5^WJurK&uns_OUu
zXU=2h&feE<Rae52XXl>R|DXT--+#{e&tsk${OG5{E&MN@C<Vnv<dwteYEW{*W;{Xx
z6{i|CUu+(Ew)s?ZG9Inlm&2e@FFMV53sMwauUx7-)#l?(cS}4RI>pEfsw%xZ=nlEV
zk2fa~IT(3S*)gKxiJ~1A?UG|%bXG$rYEnuh+;+iPA(Ace&o_yQc&KKBB9iY47wve=
zj-tA^*oeR}aX8?WLU0og7t3}SA`tI`Rl6eIMoNvE{;_BmFV>wUO4EpkBYT;mn(l;q
zy*nO{7F6}!fp|#PdVZ#4NA`>xRGgU=uM$*e!g_HgsfqkM6;*1t&mjLy#jZB&@{Gt$
zzf=-Y>FIhHHREk%uj(}Cwl)^sF(GL!xt%f~9yz~S4Qinm3Q6rV0)%M5_Y7p>?uQ`U
zgAnE+{C_?E--Q1+qmu4nuH12V(j9P*xJTV%bAzC{B_4%L?d7^%bIk^7oT$|UgjP;0
zBo$n+78V|R>zQ-++<nG6_uz&5&z(L0_`*WcfQUQ!=()3}Pa)()*jOx9N+%XBh8LfF
z0{@HnZ<m*Yx)-?>F2=}@jI-w+c;N1{_aZOXZZh5()?BZ;GHsVii9Sx0y~wHC<w6+M
zgX*%$>7G_jrI3ab)|*O3_hn@i4=43(+F5bk3z^;t5$%hwvUCY|h9tD%gddZUy?OGH
ztnA8)PM7#tmZvNuk0?e)q_}l%;^$GNCu6!DB;_H|Fgi!2dwSW5&&JzpPPOD!mkTRE
zk6HUe9hzORqd0Y+W61A|_vLDd=Jxq4x0CTUrX3H2QK=b^;W;HVuIc1S?%75gSj0o9
z2Ef{k_p}1E37bc;72B&e-H*h>_!X_zVE={^g7G+loRwPHD|%6LjZ<8<>s7o`*2u0e
z!?>+iN5bUO2^NP{8)s#%L>BLWf@$Q)_8nDWT4=wU6<VHP@^w2!E(=XyVN``_a(~n%
zIj608dW#_nHdDafDW%y<tuXJ|Al02paLJj1`OUFHbEh9s7RWuV==Nk@zSSa#x96Ib
zZ?u?|Z=_({uPOO%3;j$NK&C_x&oL!w9=b6lKkS~Ksn$g3871Mp%5oU(lQ9?m*i~D$
zBo<>#CsQiuZ%2HVnMwD<T^b301lhZ?6Yj@Mqu^hId_CC(_cvmbf71kvs<z3>Duqb}
z_oTZdOsX&~kmET5$+H5TRB;qNiUAE!8|2@b(y8t#b!Pxb5UmE_!A&p#u*Qu1`FRXo
zSj8s$gu4IEyjtg?-JeI&EZ{kCGcfPFd5pBeUUSik{8nbV0Kfl4uY?V?mK3!W*rBWd
zHBuJ-zX)0h{0FE@l><8eBRNd;fcqHP`@#K7$k!|GnQ;^F<L>pkRdR%*VLyVNU+XL|
zxQ%{lDZHE`g&eRa)Vf0<xRWT<8RC&pPDE@u#Ylx2(+z_0cxJlMW{NX@uM-yQUX5pw
zNn5AFRGWXZi`rr$=YJjP4EhtP@x(2sR~*cF9ZO8pXkcyCgL2sl>f)Wo3U=8l1{I_z
zh0}7p)q6(8_-kD-E=NJTj0!XsjTRWk1YOBVH$o=3O*@br+O)&OTg$;BDt?YzLQOcc
z!KzX}?4nZC8vl`QjjL0w@z8n4u})whZcI0q&=Ou1&x%btVcCm8BeIqScY)x}3LCXr
zP>-CFwYX|Imz?^lHGAg%v82^RqfHWEh=2ynwyiW=Fa{wLY2u=>x5PtUmFMTu3*rv?
z6UdsVXUqK3-^1mmr{UTh4bxnOW*gawioc5rz24uBKmC}a1ITBXqXC}LtT#7#0b>xw
zxoMB~fddi@_f@B@O_9G+6CrV}$I^P34hpIJ#E4Xvl<rT6)}KmRA9MD^%@HRtmX2wI
z0MflS2pE}7FfSpm15|ZpA*bwkGiz~4>+eE3!v<Xk%CqsHS1ma!#_U<R%GRA7#lvuV
z)jjrOVftIMy?Qgg78B<;Ta}>HC_8|`;#8vZG$m#S%oGwd-J!El(?%=%ZzoQ&44q|u
zwvkC`VP_JYPEbrC^xz(g8ugS5Z-9#@zujy+%E{P;W+3GvQKSU>Vot1t7vu<U65WWm
zJjG?e{Rp!BnnFrEx>6~h2x~U^AV+F-Cv@tU9P(}X6;V5n{%8-^eiKao0wP&s;3@<y
z5)>!~i#}YJX-LLng(xT%;2Dd;<`MV<>6h>j4iU9wA|sq=`yta(LY0NNon=uBs*&kF
zl}<flMte=7W(>5s^K;z&=zeCsXeGrDgK8%gl!!VAE@Q=I+CF8}*8d=-)0GnSgrcOe
zOEM(?i*$vg8)_)=n)tts!s21bm>nnn@6b<fUGsM}m=cJ92c;Uw*9jRsMcTg#pUU<m
zQvTkJ6p5fim1t)*kYO?%l|=O5X^!B#YOYZmE+*oTnBe9_HT`)+$jND6z=Y4UJus1=
z3t;-i7Dgt0*9eOTxF8_RuNuMr*YHE)j#4O%`Ex{MHD=OZMX3J-9;qhu-$%hu<6*$-
zPw~@$*P#@=UO}XQm;W5)eLo)QB40qr5q}L&Hw&XfXofFS1i*_n_z<P!b%##Cd9*!n
zjA$i>@1XFk7&0JmC2(F3zP_#a>Iyir8vOvr{{(3HKc>g;(c>rd_@sLKeY~ytpW^4s
z{QNXOKf}+@^7C`_{NGh@IP}{qI1+4*f^$JF3ch<lD>$W4EqgU0vMt+_g72h~b^mcw
zO2Nkv*|&n<1V!4Ol-`qq&$d@^BU*{!NRAlRQ}CO?*BcaHT`9P%M*j+a7YGUkznk7z
z!TIgVQ1F9lwJKlDcO?TXm26X#ebgwfMdcr%CK6*QBb{pT#}K_C#eay(*NT5QrTFuR
z>|5~<L%}X2rFT;N1LlxOi6b*GYM)4n<UKheSq}t9z++YM*cAw5mHG$43m_;!utskT
z0)D$PKyZV0v*)8=cY*?)Zc|`jy2nZ5(_@>DQ!5D^m<d&@|0d!$1cYBF0vZU%Qb2eK
zk$nT<7?kW|N$H({aKk(=RarLsqL%7G#fn_sEn#60t9((Nk}0u#9(1!}Sq}_T;PVd@
zpIw1LR;zz7yb6K>41Ymy3<iF?GQe;xoX+_ukdtllN_U=YcQK~tf?D+cU#UTa-lrYl
z-$z8YWqTU(e2+@j3O|!l_<urV-wHniMfz@1dMAZH`Bo=VDlS~GAy15L>xrQ1SaxXL
zd;Yj}@7eQMj5<zE+Sz;0Tl4ckgPt;PtPlm3tG2a@bUm=#iaP$cs$*ARks|3IEUyED
z0xZ|j8-s=4HU%tto{vpl(i6r?Ktf1`wehi$r>l*R?M-vi-!4gTYpX?|++87Z$!=eK
zO@4Mg6PV;SG#tD=?oaV=LjeikI&4w#-^jGmZLgiaoi?cWw;;O-I_cAto>8?&CA0Q?
z3i%ADuXMz$zb6HL-*u{j>7v?+@<wPhNiXa0$s&Nfn>Qn!VLRRglyB5~azlt+Gtm?+
z#pD}YIqcBsTJ3I{FLLU1^rfJgBwcp<riUFqRWuoP7zvfhC?kGDR@hBT@(xoW{30Uz
zw!(Lyot&ifPF8sLc@lypMjg}yYNU}9qbmRNIhD_9i}a_Q05?x7Zqk^^<dKd@$$bCz
z@>fAn*vpsbjqN4B^=mI#zc$Tbcm!JzYxXj)a@|U9{94(GoP6y+kPNzWvup|w_U9ID
zoxE`2%qd33WC|MbzTEV3>13T)r8}R?(Vd=#FE1y`B(!7hq~U|7?W44-S1(D#Lq<KY
zEFpg?cD|g)PCQQQ1XykmixWG@!OvTaTURL3Uei~Ix9j~@7Ihcve*$Ux#`Z~+{>elD
zx!9gG)*DXW&x@&Y3u)xqV#HN+?dmcXP{m-%!eY0D`icdg&~oidjwPGeDJg@nNu?>t
zzm_BUj6qON*;A<Y->PaGRlEsGYIz|KBr7)dXg4Yr1qDkSL?cO6fv(aj_P*Z(dv~SS
z(`}vY*vUzoEVjr-?BB+19h5e1fZo`~@!OSQ<8Cb4Mc0|aURkg1ly1#8Zu=7BmQK4V
zRt*OZO!_%p{C<cn>Eg4Al@=UCnhkaH*AWpt*}5my&F@8I-=^RmDBU$l>A9xBfXUl(
zEP+!E8q2N~c@+nk53L#<p(p`1uo5i0&<fq4Q7#FKkTj%1(`FW_#C>~?xYx4@*sbs1
zqUzt(z(R_vf6%=R1jWE&j@}q_{B~u4&Ky|W*89LhXW0}8nga`6w9z5A8CdA_c>@b0
zR_TtDqdPqfEbK&?l7Yp20M(b!3CLARHFijBM$1ql%w^!4D8hdgkMzoDYOysLHncLJ
zyAuChD7|l6aUZbq?xcFTw&MTKu;GI_QeMwQ{2Z$N0ab0o9(FYpNZPrpv`Pzqr3d!j
zmSRu0b(>*>Y{dR8*r&jtuwXCK8(T1byD}_Tdf0GV55tDrHpOP8M*=9b#WDL;QYhgW
z$R<`=@Mk$%(336t3K7x6hBK*Q!yhBEZ&PpvO82Ft^juS5z+^M~_(WuzS)>y8Kjw&g
zJ)3YA^?yy(zpG(`6j%SC`w<8V(EXU+7<Bx0Wq|G=d48}@wYrWELN0%+WSauDQKPsP
zl<gW)C^OQj7T<&D4UNkusC*5u2U7qWMP%Oqdk_jXo|N7RVE4>Bw3%59x@o;{$*a;9
zbe^EMOvQPoPN_(6H0z}nlf$FUC`yTUGDp1Y0csxgy;;?_D?mx{^be>zK~MndE_!1?
z@!O^VN_WNaF&q<M-?ZFq8%|-HH0`vV!cMy>Y(|<=+ZK%7$&^hrQ);y%caa0x+AOQU
z#olgN<;dOjWj?nr7SHr@3Lmq#^isWEN|{J!(Mu@jxYdm%l>MEG(+83LM@R)kx40XX
z$1<HkT+?`rX{5EJhozH;kllo8cBr)8(usq7y)K>PRKr|0c?a~KB-YKc$r+?Gtj#-N
z7dE<Va($v$79CeecEP{d5-0WI-8hafHpWlkMDi3?P+Ki_ny0RoOp=3u)XeFroBvBx
zLDBlz(}FJ|YD1>_!)f6?4B?scvYZ{elYS4guGZo;{QVDtcH5pH9<j@1atqVN5-bMW
zZ?o(5VJJ<U)TdMD@ZbfQda@%?kU(kLy5Pd>C;m=E9S*H`%->II<#p~z#HpACd4mJ5
zq|-WA)Cd<AgzJXR#@x|w$r{I><5t!9kFQ;as_dVxmKT7KPd4F67xx7&E^QXF9S)8%
z`$QH75jQkU>&$`|-D+8*K&X|=QIDdKPpbxKOHjIMWqWn%tpwoG=L*F3-q%1-^j6=d
zH}0+Yt>4~?u`8FObj9OCK)dJ-L@&j5cuIEyMh~Tv@;ZF0$!^;#!Gg8xl@6avPHWMT
zqE4L%Y2<b@gKpU$KwPO)TfOv1KcZ&t+#~&jX{0rwhaTxak-eWDX<&HMd!)yq+a$4W
zdZd3N;pp-2yEo7y`7fZX_&{!dG(~zyhj(`B9!Z3>Y@JGT)Kz~pEQ`<Sk)|Qvr1e!Y
zHNL$CksIohj#KGcd<&c0C$$!@LGB+0?Y4cA|0y&GdLt4++umpa3Uef>NvGcEXYQkh
zOm+&OM_R-*gtsh~=oDtv^2CZ8^;hVhszGF--zn?Wx4!eMMtcyPW*aTrM@Tcjh?+g1
zYL*6fCXY1pQV{){`DG9kX5OVYHuL<}ubF2^NHgE}h*9A4&^q{}qf=hB0f_F=5LJPj
zfzq)lKC{I{a)A0YHIp#YW=hrU&munC>^=F?o+1JotEElGYHRTZR#!l~E3A?f+G4c?
zjea7jNhhq{I-4}Ab=d_p8K*b~$4lZ3oJ6gcSLrA9`PPz6x4_9!S|2%8Lwy|FWg9Ak
zH8l)dLT!Fc)ut<a%F6eT&p!k~fzQv=8{?DTHU*!$)#HO=D44hk+6=;E!hVKe=(5`l
z!EQ{?^0R|5Y&!13Bk)yjQo|#lukJ|(jH(<x74W}B4VxfZC)1<4zvNQWjo!nE>s4g$
zXT<ew<m=T3FlO*?PX0aUFA1lcq1K-uone1`pts-2zcA(3<(hK7ASB+UjX2Hx=jU4|
z{+ge&?y;`MS>p1M9NRrQqFOq0LCH8`vc{k%t36CbYpY$}WUJj;yvDD;6|}pu+Eo9x
zR=W&6*_PBK*J_&!ueZ~*oHu3Bl)qN@s?jvAJS$=Dew_YRLueztV^W3LHihds{ocIH
z8gs|MMC$gTAyKe2{9AF8rn2O>bK*2WvzDA@<5Vcm#<w0fuG(lJHKuu&<c36LG|AJw
zk{o0)=mJ`(4ksd#BnKcco&2F*>6s1(K}#!4JBLFRa+(A&(q+g>-*3lG7<Hxr7oQZ%
z4Qw>zPI^`xdq|Way+Kd))%_Qs8an7g3UWwYOIHMUw_=cQ?zMdQJ-G0Nv=HYsh-IU0
zp%qlitCoEUgAIET*H@Gp&~7mxv1_#1u<qFrxrLk>?cFo>BU|T#<8pF=>tJfQ5eD-M
zr&5bnk7J?4DPClWkyi=cFaTtXS4V`?i*OX;9vDncya*TntYT8)VeJHym&>+CR|9a*
zD|b86r8A)JOfOH5MW{&Cxttt8nYQj<vQ~ozf_RS<S5iP#&VHnS3*0f0v2`dM=W>d6
z)oO$e;W%|Mu62@Xa>_!#Iwmk;J!#=3qN?3i3azQCHB)jf&EPHuuPP0IR;!;j0^c(H
zf6)l=V?BJ!Pa%Lio_mwNHp<VjInpD^_^yq@LmK~+8$p?7@IzhLOX?V@BHS^Wy@se=
zcfCd(g*?rLwC#ocr;tWWh~_AZ?r7SQkuDE8GI5WHkzhKLy6|Ov$M$DHUd*UIOK&`*
z;<tWhR6I6q;U<1vu3sBA(r{?&H0Eqdq-nFhis5*>Y19Z^BX)N=45TLM0M(1Wg1TqN
zy4m3p9iI9kHI^RIz893Y#5+q47X8r|1=T{?!v*2`@PfWieQzdF0heP}jFj=6ZWPtR
z6EpJ0@o8KLhP&O%RVPA+OK)SdNk4<0m{tstfL99m5Xu<WZjvr!$F19`l3(AkWFZ;c
zD^6D<<IDuyy}AzmKTxH`WUz~(luZA*gG_m$7lVi<6QGUt-yuTS+k-#tW`~sY?<gtz
z)#jc;mcQXFsQj1~vr&a)fl-g#4zv@c)RXp!R6YL-v^(jJ9D%(Ly#Az%>itMpkFtpB
zrLmn+PyerU7Lv%fn2P_`_@lPJT1Ss2M)c^>cUhCS9vMsDpqJ>7|MzC5UD-@Z(S}+t
zb{{tqOEIc@>y*T-(T)=HZ$KJU<9hsIGd#G37}j>2BEro5R#}l4O7aZKx`xa0e{9sQ
zMKN;k6nsWX(0>bY1t|Etabr(QC|1E*D|-(!n(hO%tEA)gf_F00>Fj1b*V`^}2KfwE
zNuSpXJ`1tExdR90+AO8NqjP%S&~M5jTBd9Lrp6@w78A0xj^C&>u#~IhrG;EA-`$c;
zsJVX#wUG@SZ#Pp({T@j$Rnp42f=nGuf>iK`r3KB&DmX>-py1CzCN(ary@KydLB5pS
z+N(AEqbQ?Q!(}M=%&G26%xYRkdr<LTX13GWyHWAqLcX3<T(fRE0^bkGz1V>TQ^zU&
zM>?lBb)2$@#_3wesXf=z@rRWfPSL!QF2~1aEvfGJHR_o8*3-iSd7KVOGn?8bX`){V
z>duj|Tx1+*M=TE{*RGR6;ze#FF?rX}c@>iF5;|Y!M#zB<Mf3ojUx28;%4M~O&d>HO
zSy}ZBl%P7#?{^lETBG>@YW6Q&v-QzMqbb82Qx+kNu2q%fr&YCmwpYn)>v5YLPxCnX
zS{x;W-zCCVjWCkV9mvJg)6>?I^+p)s+Tak$o}_J4Wn3<L;)M0y!<U2lMZRkE@CoZe
zz2Q711%Gv3oD%7dv3#AwwG5h4YLBNsjx6qxc>76w5UAkPymGLNlh()Pwn7%VQd$<c
zDb;bX&lIx|c1x3e<1i};Ycs#WEW;=WCl>fKObP0Z;$#f33i8A%Q|N#(b-~Ar*4GL3
z{UrBjyf>=b)v(Nyi~`(j%ecZ-e7k8d3a~$*IfqfVOyiXBvq9GKDtr&BQKv6I6_Rf;
zosGB45Wb)JEY+Vc_r%AmcGF~rzh;Gtljs^&x~BA<cDaFFd2%We4+-yK^Q=2@HXdDe
zs`$K66x5sefv-F{a2Qr<_%U7&f(Wc)R<_cNubOG%FgSk%3$wH8MI;zYem3f5{Mtbm
z#nQK>C>E>?iYrLtJxeHt9Hd6%3-J#6XjZjRDXd@<Or`lkJb_WLS1Zth4l;%)aK8v~
z$_|GVE_;z%kl(igy(B~O!7GSG?EEW~;fI7cx5i_xU5@0>!Fac`;z5eM2T+F&mYl`L
zGRRHP*K6PhrSB{`b_F4$XpW*oRU-bpDm<<QOzHyq2oOGy(}<R)?wI1+bPuE>3r@Wr
z)C<_VUMf4dub4*o9xmFAcM8cHr3`W@O)QkMM_0vUitrx-P~r(uuI54JK9G*cWR7=H
z9iV%mo1nZI?<nKsd&6FKAn_8mJZ#0+%;Kx-PBEyLU^D1bM<7G@E}xBuunA%bmj**3
zUP&s1I}}gYjVLJSpm?hXb=y&DRB8pKk`OEhU<t>mV@p33xRXOz*{St)P%U&CrJ#VT
zj*)5?4%!BxQ!sO~mK3AHB`@@Z%I++bypTNUs7S))u!IU=w;h#%F~pI6SUD8BBS}_R
z^2)qZHNJ-4Km->mv%$nw2PmzCCLhOV-_Ri9=iF8CZo(Thr@9P9EPEAv_vnFLhvSKw
zQ!A($KUD@_imE}|!8<`Cew}n2AUK?^twwH8oet{DK-4};$qXQ60j>-fVJs!!hG(ZX
zb@MH6gghteOT|p_6rziNgDjpt(MBqJ(Wy^+PPD`{U=U{9s8R;8(a2r|ib|2&oEwP`
zLMJN)1x{6gg1BUQE#8Ii9Ypp@!S$BiGXC=y+vp2q@%FHSyHX18X#mwB1a&q47C#H+
zpora0`~|v$IKBaX(C`9pkTQ!9xi2<qxYd|GzQ-TPOU%F;v?nOi&G*VK>>)#e9xap1
ztB~%N16zQRJ|%at36-fVIwc@@6&$z@jQ3i+uZUC^3l2VIRW9IO46?h-_3q@mebCkN
zlCWuO@qkmk)WlM7Jd*4qCbPH;_cG(`KJ-p})`}}fm+_>!S+eH-b-=059bvpDl|bx_
zehNm^><l@5NW_*@0{Si&ea;VQhbd6JPx?ox=)?5*8hq>iSLpHY^!Nci-h!F5e}W!2
z(mC5h^td0p-~9XN@jZHcmmaTR4c`AEJ-&c3g#USZ+(?BU!lMz75=Fi+n!YQ@G}oBk
z8q->1I%`a0jmux-ve&rWH7*meC<^!R9;6b8VRxLlb&m^H>EjfFRl4b3uu7N3^DX5*
z-DB?4g~~o%x$M);vp(HT>(f=7K3&%7(_Mr<-B#$+C2c-k<0h&}m(%c-K|Wn7#21Y4
z6(m00FW}P+1blkfr}M==9Uk=Qc%e_HoP0V5B}7Dfig~}gPdnm;uxJAs?>F>mN1{)=
znS9#sBm_v#T3##nX*Hci$-|dMyu$<-x9JXiFHMXB(9R-+?5Ip9bju7O@N*~tSy>Fq
z3bP!zHxsB*kETi-l~g&?o>ckh66;YD25w)rtRw~_6Il6T&>$NQ4KCu;70>{Sihh20
zHVJ<b8uNT}9u^Ci$HVsFBtQs|3WCbmr-H{-Fv`V<BU$<du9xWxmheKNKT1ru@KQ|w
E4;NMzy#N3J

diff --git a/doc/manual/build/doctrees/man/cascade-policy.doctree b/doc/manual/build/doctrees/man/cascade-policy.doctree
deleted file mode 100644
index 24108b2f9d92140ebccfad59c0b17a3ae1ffbe66..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 13594
zcmcIrZHy#GdEWcj@7vkE^DQ{%JD9U|?B3bC3&M`g`fTf18{3?3FR?8UA5L%2bnSHa
z_H;M>;oB1+VT5HbsemGPAX1RvFQ6of6eUWOA5j!V$TD9NKM+D71Og?$@-tE*hv%*8
z>aOnTot<5dm9}TP>aD8xed~Fu>aD8z-1uM2KQt!(c*_d9Y2tYCsvlS^&iE81^qHSz
zZ)BHW$v&Gc^XbUE6$fe5Wf>oXMAvpaD`I~3Qf80w$(VH$C-4h-d)%I|Ctu2zkvX0?
ziN~}o-s+lh*R)tW3_PcMJ0nR5o_vw*Qj-JuuV$nKp9oE~m}K@s+%fr#nIw_ZNfT&H
z8lG^h7~1g3u4l$E67hZ9H~aG2l$D0%OULZ)L~NU6Qa+iOJ<7`LmVM5i<<mxCzI}pE
zD65}ev&_U?vx7cc+jaVZzZOT`wcHZ*xsvq5_phP+THo|j(_53J>8%ivMz2P3lJS$C
z<FoAg@w8*lNKcoZn^y^Z>V?~W5XMd{J+-JMNY_B`HTcB72ad2Wz?tvH|3&=YhyP13
z(q0nAJzy`}C+y4i75o0{<7jh?Ps68XFET@0@1U#eVH6;>zrK|lxYgd;`oz=E-TdIS
z=h`>_=*4GmZocr+)>htu$h*36^Tv&9n@>KzwI!5X=JRoAJO1vfX<0d}TAq`z$n=aj
zi2}c;H+W{SL1pV?u0d9q`k}h1d@@%zGwW7A3D-OUOBeaEc3Hy{G1)$u>!T}jw#iJT
z%0k@(WsRSx>r_|dV}&A9%4=n5(&ytvch3#F6Z%gVE-uUUM{Jc1MaE+}A||1tKnVQx
zc%jW>gIzNe3+r*(>GrMlEzgOQ91QkTMRkYj=~oBr`{TwQer2GCU#WQXsJ;5tf%a>p
zqF$AaH}op$u)$A-%(ooBXY69c(V^CA@KlKc`>(~QxJW|;Mv4Obe_K~+nV%Fj^AmAm
zWqbzD71;$DYXaf7(;))|pMa7WzA}DhaLCFq3s7#~bo|WzXFiFy<aUS|VIpsk&mxKK
zh8WeIB-;}bx6H`LS1OvAQIE+{4<^x|^vxW4)6$Ql;gp02ar(?raT?pfEgIggZeF|b
zR55-X6|z6B_mABS*&hu+_D6RFvi~*EegkA>;|-7{9llj?wM3}!ksJn#ams#MA(V0p
zgt}wL#>VPOEZhGyDn9>jBz)Tcp@Y$#L7Rudqx}{?Db&_cI16AM)GsqNpkQR4kjN=L
z&~ETR6BW_cXox4p1`+?nQ4t?8FEFj&ZESWQX)>}A>+XXPt;1a;-U-CJA8t})5cH)M
zgSc19l+a%&24~$_<?!tO30lqZk1><{S@!={gGQq>!2P6f*Z!-yVvw$pz(u*kl0fOM
z(_qd%mpf}TbV6RCvn;@;Vzp>B)pE3wrY%irK%cEGO@}OpXP;zoH*!J|apZkaNmG-h
z`)3UuQ70l6{q7ebr?tOOSpc28Vfto|wKrtYvJ}hpo5SK&wJ;neQYiCRBPgSmVrMj^
z^g)8pB0wu_FCAM;9^zZFZHRAMPkTYf^x8LtcZ-0do?IC9_ahiZ9{#(khZidz{^$#g
zwb!xi(87)FAZj~4o_&-0xoviWG->ywc7fEc9j9R!L<zIno!f2pGK+4vH=cWTrW^FJ
zda-2pEMtT|Nez_z{5PR=WumJzF1vM%PdL7a&r}p_kGpS?9TcuEBG8n8DC_+}gELCr
zPtwYa)>idpnfpDe^ql)9K8`Z^{RHJS-k%WbxBXUPuVdybG}l@GPG~@m5d-y8?K|TC
z0w&Vq<>;VB1U*1i*e694Tq@Xa$=+Yddmq7G9_I2qr(Na@VE|!o2m_`zBzg+$mkEVA
z$Bqv!ahk@Jx2a>xkoz9AyursE-(tI3Bp|m+_6^baBsM)F3^&-Vz+yi%ohajXQ&jM1
zyB}Do$H0TmN)Gyr&&tL4iijKRiOnQ4(a-KYbcScEDs2jlPST(<pwKdOZBdR9JJ=ve
z(x|eDBjXamg$+I}<iswDMwZLeq$Eo<ig8yO9Jq|>!Rf7tO0WfmhQ-$kTln;D-&>DE
zllGye!idEzdYMru;odLpTcVHB<rj29x$i=zKn=Ew&=y5YXff!x*uJXLlFt}P&^53-
zlEm3%><Q7E+$EZz)-F*qawFveyn1ims&MBi;f!wJC;Aqe+St)T>pyr7o!E|84<9VT
zC?>Xs^oeDNL;=PdXuH1Nu7go=>)p`x!-cN<FEPl(XGpFzO<D`UR9Q@(q_|UsfYt7r
z$fHHqLS=jso)!V4%ji|~vHtD{E0P<C9Q{CjZK>oH;=ygilBe=a^?n)>xx3>+Xx<N0
znv$cMsJ)ma2_o`rkIZc6?oiwioeDGE1!SmD=tvZ$_+mIkMFes%Mcs=7sw}(j(bDo*
zhPdWFpryO7;YBg98l~+ar;eIs_hF>EkKj@1M)xWuKZb`!v{&(}5$$4yXrDu-B$|7T
z%6<@!YLy>C%4PRyJncH6E}|<wPZ^*w`r%oU6uZz36k2`(PHrbQ#z5JrahrM_I~1Uk
zgJna$*;XvoMlVnh?CVgV?yCI=b{};ATA}+$1XHFSg<!6Ow%mW9hf9xtq{mM2&BM1n
zw=bT)cn0Dbisz@qGot73l?dl#eAG;ZxqP<DW2iep1{Ko`(&78CHK&6TDth^c$gB7A
zp$PF^s=S<eE>#He9b_Jv5SIX|H}l#LBE-`3A{cF(o+oIbrj+(}6!b;Pw&Q7`%gFMD
zqkhxisQu`$1kHa{Xg(4hl%Yqb!`o<3(&7K<o1laEc1P$?PJcKBQ%l8iDXOOpS%lJ3
zaM&W00+wrD9H<C$sz@mMp><*qu=ReR&}$ZQ8ZPfg%VT`rV%v`IP-ta{g<`pED^Kpu
z)`Se4-}JS0B7ee8k}zIhQ)gSN2t9C$==m)1%np5<$)o0WAVR4&1jNar2<m2pb#z8}
z66>Ez%@+@>Sp{jdv5du&j}>8QgL^+2Etj4nR8{zN?Es&Ot(P=%GSL8ynk&@MIrlO?
zbi%99L<?}-B@&fu#uXH~PZWXiGo_m~6Y?cTc@T4cm@5@dh6@#TK7+RFgIygvYR$L`
zU7s4kyp7U4Dk9A*+0x{Zi)9h=$h$-<?!EX>6FzTWxsu1(SFU`rz5Kq*Gu4fP97FE1
zUTC3Sr~ul;;MwD>Cam08M9785Jk)=H$6OaOFk>4ZAlV`xA0vg!{Q=5|YwPEl*L9G*
z7j<<+UG9_kP%aq&Myu)(X~VaaxVwk4Vk-PTqS1lW#*K_G2}P^J^&vJg{!}PkEw0<S
z-v;JiqTKJkk?}sb?X?3m0CR1HZ<7DQ!Sb$#Zz>{tW@LO*XA-{iMQsJ+_ZA4W8bNMt
zHKP3VKrsn(cL(jLj^?LyDTVK;oKxDS^}nOghyedr;jIRMQ^p|x{(ku6UqoHQ0X|;=
zcz$qEZr{1TKple!SE<mm!Q5X9RjU|11jK(S)UFmE1>*mWa)*L=sXAd+otHic&;9%W
z6?BY~{7(;-*D+2-Wao^Gaq7?gFuq>GkYe?1r?;8}eNW*1q1vEs=@QM@zc94ACLY|q
zUkSyDvx*aX>*e5m{^ZE~xErFy1n`hH0Z_&v`0<DE=UGwLaDLoV<%h1nJmk~3@&VL0
z$Q6|et{mWo$At-1;2(lFj|y|D#Yf@IGbnc`-ZYz`bLe4s_u&K7(K$r&4<0P9bBKz_
z4jh?7)aUzg=ur*A`7N>`9MUAVW*R3DokW^+&dGyFR4Fk?A}zZlQ3C&sILU;<)%hf&
zlZY}7L81@9p`NJga3s?7A0W}6qrO2BsniOIv}#H>d_|a0Wx*jx^oB5}T6`1|eFNo=
zNFv<~okZ*K?w1cxM<)@<^MmDe5>XM^fg_WM`n)93@M7mNEoxDjik3x`{7!66#kjtT
z+p&m~8^bidy1Lr_Oq9k6jvr%)eFhu)p@##C_4W3rmu>~ojySGZT5rD?rR=kcD0emG
z71739a8VOaaKWl<2?t>14ukt9irAO=sjIkHYOv7pg5Kj9?s*=EFG{0IU*NQbu@#f{
z7_{9Bq+#nwq?L8s^#gkBA!rq;>%1!xBwBSUC*OpvC@d;Hp>0gy66`QY=l5{!EBtH{
znSShvEd)c{{A97b13aDtiRoq65mPG}X5lp@2p+?|;xwWg#717%CO@T8#5wOK`9vHI
z;1cv{+Nuz@qOo&EM>%xJ@e$KYaS*3A8u$bbrNcDIHtp6XpYAaq_gj-7%J72Q!YoeA
zeu$UZC<qd$ianRzj2~O0LppJp8hbDP4g_ZM*EI6*Hb;j|bVr$Tp~|>Cz~E=LQH>uY
zOv`+o&(Y;;KkXa4bXuOh&Rd9aozS4oDHM!R;XN{ic}%1jx17W_)IDjmmlwz{PQxvL
zFwWHt4`=Fd=W#w`n_lrc&QG&l2VP8YC>SfDaXxObPTE6rExPkZR~}I>Gy6!HMt5`>
znMC?IK73|i%O;?Uk+@cvCfh5ItcVl2^VLj)MNtqLHjeW>hI3Df-yIy*@p<Wat(I|7
zOU5tMa%xq$?-<7@*pl^@I;hg;s~NSze1U8L_F_9{dB*2F)9<CYAp(zEIF>w)Tk-s^
zh;@U=!k9tVKhX@G-)`~=x%4HEIF<s0J;7UMngm9f#E(0G+nkm5L!*Es94itWpfU2n
zQdBc9QUutk_sgU(W~mhzI4*_M0`6o6F*Ed%0wvwVc-e^^3E6qWa$>XNks-7|N5M%&
z70~V!jKN@tlVFT;$eYW>46&h1*X`dy-_QsSWyOHWe5%btm(Swo1L!LGdi@wbO?(4#
z{2qYlIepv~y|J*wTOkXLVn2_J!R^@)Xov1Z4Su)U7DRHq8s1Lqz+Vlb9vHPql0pGU
z8rZ1BAe@L(VivAkdhdhqXDiz7)~ctJvikR^>glRKL3W2ls}4)HMH?6p*6gJ3p|R=2
z?0`j9VrSQ<_yu6HZxrM#3^3$D^&VfqU8uy|HEgG6d-xZ3VCf1xKNa_J#B6*j1*>B?
z>MrpvUkxwln%Ju+*Iww_xTxPn$4kD!%ff{yy_1GG6Qv(<h#y+y!@wTU6LjeYO))N<
zp@9N3T20L96L#qan;;|oBw;55WcnRufx)+-fz5DjcaJZ2A+=*LTmbeA-0R2jJN?k&
zb$&Yk{Rgn>ZObujkDp-v%NY(*`IH<@Kwlscr@9Wfkr?taurTg)eVV1w-2E{oG*?W7
z{7glFj^Rn7IvEQ2m>SzI1aQc+O+O2P>?9@1@5}CgQq{kv$7|RVbH6~3zoEys>G8kx
z_#b*qVQt`!)8iK;{4+dKK20@=V`Tc>iKuH&)Uzk**c0XVMA<!24yS7uNRk?~XGLrF
z1F|W)cqW^o8!xgcx}hO%D!6o)!KI^AmkwK9Izw{llu0NeCiRrh>97-)&f)I0oEu@i
zOrg<5$w`mvDMSg83Yhjgfma||B%ZA$7Shv|8mCpOqR^R2{g^1CBm?ai>viQhn6EMR
zb%T^fHuP&Z@H}7y;|ylM$&Eby4fy-j?0N7Q*D^3700l9iD;q3^z)JFLku1<R>-b$S
VwFvD!Vik7YF-qqHn%tRN{Vim*v;Y7A

diff --git a/doc/manual/build/doctrees/man/cascade-status.doctree b/doc/manual/build/doctrees/man/cascade-status.doctree
deleted file mode 100644
index bc9b4971305f400a4beb477c8a56772582fbdeff..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 9253
zcmd5?-H#<j6`$St{<<^!F}m4huvb2Ic46*-uto=h@?i+>I;%jyWW}Do-8HxRPT%gP
zyPBPeAR0qpV!hGE#25{RNYqDP{1Zq>FvbU;43BDvF&d(h_~7qUe^vJk_uj=92|F`g
zb<U}CPW{fQ>T~)#lRr3n`<VJqww%CDgzLp^KX6!_${8ByGhd{yrx(AQzLc)X*~q#P
z2T5eJRE~kd=C0>N%uk<7`IwxJnJwJFFX{OtpW@TcrE8d+6t3`?HYHoO72B4>j96GA
ziBqBk;l$HykCr?%|4K?q$f?l6iX!F9amSK#mJpHKNdz<|4aZ$4hBk8A_N+L@ApV~8
zt$y~`jFW`bL&vgrBep{{iJTTzm!?wQ;%E81oHa}H`M8`atbTICv4pk3gFf5XbNhk6
z5l8k$Zb|WbUG&5IHo(8pxBSHNHZpE{DoHY<+fgi1IpMiJORpSHI&vuvx$Ez>Eyu~X
zVd(`H#qerBaNHf2Il2pPeb{lBW4OMN6B+lk?`_|+Zh0ZMKGQB-It!Os-N*|0$6%gv
zeWhLj0zN56T6Se9S+=3@_5;{Seh%BmR{?=f5n$HkBwPS%89$G)+wkuWY!ko0KM#h>
zNrOQrk_#fT{Mf@jb%3}7V!97Z8+?tA^Naivzw656KmikCKLo-Ta;IjB$m#qM6S|j`
zQtO)R3Bpg(;d5EgR6(#*49J<M_WdA?-5m5Q+Cb@)Z#JEx+ekJMPOoe0PGimc%O%>I
zVH9A``<vT2I=7AO?dy+Uz4pk%SB-05efo)OTTeZ=y{$*z8oyh%JXf&D^2}I7f#1~u
zbMmmr3}Gt>w=9;^QvIl@zMRe#O0A|PAuREr{fazhR1&<nLrEpqM_1(ZQHB(%EH`be
zB);0zsj0{-r6SXXUrK|Z4y%E*$$Vdqt=VE<5{*I5#Ko3dgm7Z6jcEuc0rQQG9RQ~J
z$5?DfZm3ePN}?;WHddPO%VG8tq~6k2UZ_Fp`;WPC=vn)*Vflt7)~)rfXZd!Kz>SE7
zK_rZwATl1!Q@iUsu5Ag|?;1C_B@7q;$8&ZPQ406=4JV)}%XbVvP*j$`4~jTpu_1^d
zV$UaT#Ec*WC<P>2>WIlx+lu_Z(y4UxZ-zO#z)I=x8dm0U{+2sh!KE=g05P<00}#`C
z+zUFEXIxX5DU(ohxHRW?!^|Nw-qmn(vWA;ypJL3|#Br#lA_9r)<7Xe}2mq%}kO-rj
z=@n#p8F3O4qHw}>_6>&gyKg*t^@%w<=;I`HG7PLCYfR7rRhYkr#BsM=2pPcVcg;PV
z@p|@X)m6#z#%7T?`TKbY9ZqR~ZMtDiPAK7WJQfb_9Qe5oGmk#A{xa~$nSzqUDo-B1
zB&4`^(QMyx{gnS(PU9&%p~e-<Jf7KJ=()Bl(gQVp!;1X$HN_{asLOE4DD9!M<4<|6
zI*pBcPi5XOskr^0x1_`jHes}MNh&Dp)Iy+@L18_I0?v#gY34J?2n3uMGXnyFfH)u!
zW(YVBdvQ=49@Ri$Nbmfyv9adHH&Z|G-@6rbS_quM%42fLVLPtxlBTBT;;vWSqN=O$
z=?0OB6S%KY$}eys!gzC|xIDJ8?YO3UJ`<kRp}*#egd3>K8uDs(byvYPr>vt(_ymsj
zn&k6CC1;))Q&3{a+PL~xHuN4Mqv_thB1aHa`t*?@K9v*>N#v$#0RXo5MOx@=??L<;
z6h}n5Nu=2|?<`n8t5{(CT;*oXglrqMi_<NGTv^~`Fi~meb*w!MJH=6O4!VAQ1oNJ$
z%p;b}yn&(CyT4)~kKC(P>0QRJBI`-x(xv<gcj?kMjJ10&&egMIj-lQII@5BKsRY{8
z;oIZ9MqIeD%t@ukUWWW39_zgX8kn(<Un+G?j*-G;{#O%2vX2guRme(|tlqQuRk-93
zFpfMo{#=mveoR_XD3nJ@HFU%Ux%UR>o0hKee~ogM^nRk$t-mwrIZ4G2oejMSQ0m7=
z?^iT1@(I$LQ{*``)T>T$bleKJ{b-0Dbkr31Ci))^r|)U_CYEexM#eX7CgGbhanh+{
z{L>`@og+c+Y#)j86NlI`nD@Sob&Bnm3p!PS@0r|jP6f_CfT_9d`qohf%K`p-<t?Pv
zCctUpCID{0C%;v)1_OMl7V^$^W<`bY4<Ms~@Nx*Ru!n8^Q0ZBR>8KF@r&74itNUpH
z#K(`{Jj5&Q39|*p&%<;77@~-daiag*aC#l%#FA~!$QY;n{3wiXRxn(*1AoWuwnfnQ
z6y7g4lDeZ)9F6_ef#QyegEJq+QN+aQ0w?<FReWq<^G1x1yFgkV0GG7`fF^DtK5m0Q
zFDO}q<KtXCK6L#L#mZI4Ys5-9v?7Q2;A=|%I`&76n=NHXop;2zxenHwJsOU-M314{
z;oUC}QA&>?qJMliy&glvl5OC~F+_X*Q8Dy@2H`NkYt{as7}6-V=Z-u;^dQox^OzhK
zL^Y1XL8MJrLG&v8H)0TdPq{ijWb`1SiJJ(bJK@lmm8_c!B2E88LG&i%HG-%d(t}8o
zQTgB(O8<Hwj2c8gSBBJiM+~B0gZ1MFk#30|L>J)QpAAt;4<e%f>2P{Ih=?WIz>$N9
z_Ph$B!E75i7PYss;%!;IC4VwbIx+e~Xg}dS`N-Ea*>1Ou7o#K=c@_ReDmQwT%{DiU
zZ(X<%M7wc_rwg0L(^0}+Dgx!yQFG<n#(QwlQE?*YwUufWhTb2+!Y|5&2hq7PS?GE}
z_n{OWh2!u=WmM%06nPm#Lk2a5s)j*hMm{#6dVv~(CaCC_t>^u+N?b8h)T|GcM8>tk
z1iDOvfSotG_$7I|Xrs`ksM<Y?vnJc52!!ROSMW|<(4bRuWh@~G9z)|UtM8h*tSz}v
zjHpi17WqU_xffl=6I7~DZO0w-8w6^0Xz@K`d8h!FZ|QOh#lbKU=@xHo$=NRRvtn?H
z2ejiD9MTW*FdqehfU2mu?4|P9Mk?ns6;ONecR?_hKPHifr$rIiCN%+R7OG65CLQgg
z1h)e*s7Etx@-?|g-AzB~n|oBXL~*T!cU(6#sTv8!7y{2_Bg|uJ#Ju4OZWfJ5td}$7
zok_SQtC*V}YMXH9aXH5=PZW=n@&wy+1sXBb9<4?v9o9*@Sgu7?KB{m+F0=X=nZ<V4
zj7%c^TpvC&QL;hj5S<)3n~0tD&#lKU{=TI?X|gB^B9o)6>ahqrK&slP8ZKp?*Q87;
zDXCm-%rr#wE{-D+wlcYu4h8ou^@#?vTqYaP!i#wx<*8gmuc4b*T?UUk=*}HS+gYB9
zm>on8at2j<v5X7YY{{wY>PsGRodOViO17*-1ZFiPkGp`|qLcJPvxFoZs|H-4G4c_m
z5VNF46xeC^tD!Jvi4&N6eFD@ns<1)KOr2Aq#1`fYZtS9eL9$H8jj1&WL+FBzq3I%2
z5OxbN2FcJ@r8~?m=49rM>t$W+PtadjBxaFHn9L_>4z_$A{dsIv_ITx(JVEgW<oI0x
z(R2H#4}WF(f^3B>G^uE;>Um@gisd2D4&5m<<e8!@h~c;$?h79H?I7wRqE?7fDF8|n
zg-Rr0f$f;V`1&39+z)@Yq8+;-o<=J1cNXHQmrjt~Wl`H@Vn?lkgs{Oy-@{_FXyGD?
z9Kq8oGjbJ}?3-n9mIjzA^P}>;j2@e?_Dt?}xrcwMwN6b;xe)iQNSMzji0T-QI;Ebo
zN7D;zD|hXx&Cx2ivGG~F!OO~p;NDF_EJ0sMs4p4vG;jd)1U8k;%e-)s5(Q4Q2ASI@
z?0SKf1tazRcT+&7-(e0Scpn;YhC=;;T(Lp5YckaPJrm962zgg&eIozB0$BBSvYd7x
z$C>{^x`j^%X0mL8@C6d7@rKwCW>)@J-$9&c9<!9qd+*~w>#2iKo~#jMA4=ehi`rqR
z=wn)JrzD_iEq!+Z+G!fh{$A_-heUr!2j-jn4gL;)yLS$^fZiGU@d3^K9X}E|OFY!j
zP^XLHI^b^}@OKUr{ehxI8-EpF2xQ{sA?`YVo4=)G@pqLVb^IoBQ3r_9X%T%96-@-n
zY=rVaL6`YPAIa#@par1%oxm$Gr$|pX221MMn#9>+RmF6&CLbw15-9?7r70_)!O4m&
zWd{l6Anbr0cpi2WCo#^c=|}VN*WvM3(kBsd_`n0Pi?3W_fGk_EOjfnw`Epp{WZv~{
XFL4N$UHVi8HFD(BJoRKXwDx}i@}mpg

diff --git a/doc/manual/build/doctrees/man/cascade-template.doctree b/doc/manual/build/doctrees/man/cascade-template.doctree
deleted file mode 100644
index 166b8b47cf08790311c7aba4ab0696e43d13eefa..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 10669
zcmb_ieTW@b72jmPKk{}r$=cd9`udUN?KZocq6OL3v~k<UHp!;8LD9C%&U<tB%}nOa
zOy?un#TF{skj2}-I)YS+Qt=<LQ1Czft00IKv5J2bKmSls5kwFXq)>n7&fJ+hvoG(x
z6a$%k_ug~QJ?Gr>JNM(<7e~ML`r?rI$7_byiX+PjS6t6vVZtY<qQl%Mc_mr=Qu0F5
z;FE!VHT2@3#S%UQik4|PM!?+U*~A>;;~{HBmgna5=BPPljz60;&^Q`dk;9ZGKG)L2
zmTs_m#5%sCM=T*)kd9np+canwikA`+gpc_;MvW44E^O+2N{^zzYQ_<yCMkz4BZNeJ
zyyfU&h)Vn(b@fjAYr=^AqR`Y^mjkv%G%+8K^fommX3f0KoaU2SZUS?dk4eohtr~iy
zubN(mt!`T#&s`0J)@r7W{JR`={Ew}o|7u5fW8GOzdsC?($rN7+!YJV*j^(oC-2S*}
zPNnuP>^Cbb_{38?uIGnVm|AN=sYs0j$yZ?&^9W2~9)&?aivM@u|6TZh3~HJugnB2<
zhB<65noH(A=SDH+5TArq^>(29raDch*ZjakZD(yWQ*pDtx%u?j^A|sL=6wC)6PF&l
zxbf7po16JGqV<9Gix)1O*?9Q$=B5y{!DmC?wA}3#-7qrusySA~0^QNVDDd32I^@B<
zLrQJOGZ~Ux*+;9&^6^aIM6c@oFpTpcbY0;4>IH`fL(+aclSdWga5qJzD05XC6da$f
z%2XBP^SK~Xh24t&B+(c0DL=5+pwM74H*(RhGvK(ar+0iZ^NMi@DZC_Z79IFRC>>Cj
zu2rg2+-wpIrYmmN!?mX$W??I^d=W!LELh;Bx_r)gKRpS*yUNH@nDo=RL61EVSZ-8j
z+d2XdtG7IN%WBuXpzeE))!M0VSq=+V<U9{ZoeTGBKjEZ(XQYrN`%WYH=2j?7T&eD1
zWzw~Wm1}1muc<rri^9%%7^zn0>U_VSI%MlN6<g1iZ2h^X7^|-#4l3be3#PVQd^<YL
zbzN_Iaa3=oa(Ss-^)U8*FNl~?Z|>CD6&CE&*UvvT)$%$Bp+-784d7se1}Gr#7NE1v
zXME-wmfP005!_Wo*UF-#b3DYyELTKdxzZu>{w(vry%FaZRf{zEh!}?thmnDG2j69A
zoUkhFe-2aqH0}|c`55G-uKaMfg(ATUOzj=rauf5nd>o}{$H!_sEILi2%(i_vu@xn|
zqWP*GxXE?VFVcfH!$Om5L`%U>GO*7>w6{cPe5C$=nV;N&Fe63ykRd}|jU*mO1mQ>}
zJk(OZSkC+cK|Nd0c-B%cT6&;@ys`%>Ce~BG%JEQCNJZ??eM3Xlsjtp3z+mqOoq~r2
zjJ(cAE!SY%iYumDqZ<ZdK8_7eV2M2o{L9y^AmO*Aq3Zs6$1`F?t}t#cXMjlf0hC%D
z0~Hj`5_4=LN_0%IeTd|#inSr68lhmbN2mtmtx<~>TG$XpaZuX0jmZ&cySC0J1*O<G
z74Wf_X;30q;F3N!<h@-C*}x)VwU-4OY&|i!_*sGwpWN;^YoV{x{&T_)Sjd7ajCM5k
zYO3Qs^rzU@+@fO5z7vhYd$2{sSP7q^5xu63ZEG2;d`gSFmWKUM6ef$<2U02B8II9t
zi!@BSb-D$XJ)Vs!OgbaX0TV^))>&@llvU`+S>|E`6tTK4mms+l&exuvG`T%LgYo-0
zrUcoCA@4>mZ_jO_eV*tF^-_)DIAu7KH7V?krT$m3<X9H1Y!l4*IIJxKmTgf{%(Gf{
zz2y`q2wtuyf7WF6GGSr|k!>bxl;wF)WF`-DqFL9Ib&`%a(Rd+?A}kNdF3slMnK>jz
z#Kb~P`!E{hrr`s@HQi72hHFYQ09@^3d&FtjOG+J%MPmOV7B%~n(qexV1&PLtDEFS1
z(N^`IhJ8P3?FaBFA<%w^s?Xq~fNmE>1$0MBp!*6MQ_$IuP~S)KDYJYWHH-E+e9bDj
zj$lfzQ3D{2`M5xo;w0J!PN|Cd&blj{_R!=8`8I~B8l)QMC7g~z!f)jg4g@Eu&<BB&
z-N9J)59s64=ZEz1@?SoF?b^?YZy>&*_(tLzi|-Zs_Hz3I-8kUORk2ug)w&+*Ev<UJ
z)?3=OopC}>?y@KHihLg4hNS)Gf!5m}gHG|kJ23JPpEcN)<yy4A)Eo=v>tbyxE+r0E
zh%_8YI|?O#(2OEKTw9e#_7!Zia6#g@EOPWF{hC_OZZSNugRFx<T$+fT?Uc}tu0KX_
z)-7?qqc3N<H>E8f!*vH1y+Q~3FQjz3z7D`Dx9Q*e*i>vl<G@P90OTfrqk(R-|BOE>
zu;ngH*~r;{B+_(QybE3aAi6;Lslv>P3Ry%gj%By^GNtsB-bA^cBm4XNj>PcYkaZvE
z`>FSSp&oTf)hp1_%_6@mx{yVFEi7XH9)DyU<MpMb>`r58>6v=t-o>f%5he2>`%h}8
zxoW4}(Z=>(r%Wrv(v0~TAh%efzs2n1pn)293S(hsH#$TD=Z7!R&}X-=I>~YH`iS6V
z58;nA$sWh(dT4uFlG~4vR0M^0_Es$vr=48W$3b6>D-H8EgPh*%vqIb($NBsKXZ}?^
ztJ#;(Z}8)q`Hw<uU@$+Voq)mC`$$0a(zA*Fq5kx?;@Q+Cos)q*o2HRGJ6oko-hF58
zdq!9HHa5HZ_xzr2se{`mppBemKBH1e&z{K8WE5`sB05zkyt1H6*M44DtBY$>!%evM
zB5blPc=dMe*%H`|^t#k6eET)<sQ7kXg}dLqy1p*tEIa6+&izdxaJjE)ryDu<_t5XA
zoV$=)_3kCu>>GVVP`#Vzzuuo-^=|5tPRqdFO*45T?_Mh$FgtdyL|(@co_=2?kjsO)
zpy=-PM|-mChJagd)I*}-u=EgBz5*HV!h8cF<5$Ac88Yruf<86e1Ts#-p6>`=y^(RG
zj0{!&Jt+A%_*GDnS1s^9Hu$fQzwGscBIZ9rk#gTb5Hm7-lZffAgNmMI*!5q1#8J^h
z^#ANnucC*#q*FIAdT6$9gr55q=S@#zz0jjjY)*AuG*tK~)EOH4!Kc(?FMO2d0zRiO
zjRV5xBuH^EN%u@De5m0j;Ij&YHUzJmgO4Kr9{5}UzY2WvDiuBokHQ8|3i-<r7!*Di
zg(Bs?gTUt*^t-7Ar+|;Dg9@Khu<N-#;;8T;`cL<#SK&il(y1F5J~Z0}e0q0#m$qQV
z=}Vr9#cB8!+|7l^z$3wr^KjSW7++agsXrgYVT4>u2(stv0YhHC#n#s9Up#Tu3oeVB
z*Ar{?OF_(DkPtc4tu5bcUx$ghA%ssWBjHZJxJj_Dp^Lf5XC6RSTw}iFc<s{(lGOWQ
zi$bZw7PvTOY+0wf1m%_jb@i;S;B8hjlDI2S7|9n2%kmypVJO@3OQn*~g7L6&34ttr
zFSpK~5|~T;a1`ini02P9F(Prz!t@!#Xyiq@lbpl(S<)~A#hBc1AFs9IfF40;8LtgK
zBWpw|YlG|}ZaMLmW1g-h#N&=FB-?Q_P4~5*)twmm1$n8!$B>2d<0#oMYa4vBo!(A+
zL4pDvJg_iAx)g=!!1E%Aiu;xAgzsBT_;e})?pfT+AehREap0hIfbP!enFX~%l+pAq
zmLJ>#8`q1N(s&(73|z*$aYx&x^dJ&fHJoQHU!#jCbPU1pNLs@jCTg^+R%B}OsRzc(
zI%ID@U>3MB5{a6FBqGeYpHG>(lNU$%JlnQl#Rz$hP!f&uQG+$(HioNF28~jQ;LG$5
zY9=uqEk-Jle3lEFX}F&8DB*|<T^wyKe_~lA7;Y~&YAgu6Kr@lQbQsb(bXK>Jd*HLF
z<rOZYf=j}WR$3}7>|X*byq5AUWRSgYFE>;=^EuK1z89Jq(vd`RbhjPrZ3c@Q$g=Fm
z;~st}U@b2&5H~2TieV@%wUOs_U=hoZ4q=Y*njS}<R#fr*7ToQC5qEqocS#slR3H)0
z0vAXH!&y-yoSkOBsPaP=8=i*j52)sl;q*eLsXc|4v?A?_6<U#S*;&o7LcQsbA|fBQ
z!N(<30J|9|gMf(S7H|iq2Qo5E<o@Z!(1++320@NVV3WDT&A^mT;}sO9DlMMd$L9%e
z@Eo@dM|7+Xa<3QWPVkz~d@aAbBV~}4_TlZ2ouI*Ql~;hM4p;o0$n@M5FK7c%3q&ad
z0Hv0PBP6|;zkKY}$6?P}u+^%tr<#KOamk)uE0N1yX2FWZqAf870>Y{pbsP*f8R<=+
z$cW73+yp-gpX_KkICBNGH1D>{=kNd|(zi9!YMT!Ji>FKUf``w99c0Y3=VG8bgrN?J
za$3|JuchNz1)26}%fw5g7A8K$8>}o$h~AfDAL$)>izeQSWno|!-s83C$v_?#4pN}N
zs#YPhI^?^Kr>9_~H&vJMkc@Sj%m9LSAc4t{1mEQgEl^$77;@>3hG$90CemB6>wG?Y
z#s*(?w$hlk%ZHhJB|%PzPo&WV@P#KLL1h6Ok(Q>`g>v)NrIw<(odBn{SPc2W5&>lu
ziK4t93i^-++sX;(X#l-!1MN6froS8ZcZl`tv}j&4zihr?e%E~8e9!(7b_4cX^m&ci
zU&SZplhjY-zv!Wy=(%fN+cn?VHQ(PAU3LXI@&iYSKyaM~*OTD7Yrbc`nX;q|w@9bj
zlyJ2v$753#NDLzu>6jl-T}ViM0Iw3#bq<=OH54f%U1~kGhTL1!!sR+m&&j<~R35HW
z=G2oVj+1g!(dl4`KZ1S`C4lfkl~>k+wHI-$<;4`GFh?!VaWLPA8Cc22*R%RpV9l43
wCxJ<1jDc><Xb3k<2h77+sd_rE7M?V1xh*F)$aC9-5Zss};%31qy;ocLAJuvACIA2c

diff --git a/doc/manual/build/doctrees/man/cascade-tsig.doctree b/doc/manual/build/doctrees/man/cascade-tsig.doctree
deleted file mode 100644
index e6fc3525696c0c5c2025a12b46604869c1b583b6..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 18287
zcmd^HX^b4lbtbvoYxd%`vO<b+OSZx##hE1~QkIr9mDQ4_2$D;MWMT_4J=-(WGu^#C
z-Q(^aa#xWY`-d!UP{<!o0NF?oI4}?(fsg}+6C;2SA3p*l$iFx?{3AdB2MJ*0a1I#A
zfqbvJ>*$`@nOTYv9E1RSyQ^MRy?XVodi82PJNm1&%e(kLHd_m-?bz|6k{{HpsKX|x
zplSJW=L?<VpX<EQSzwc)c`pjuVb$ueU4W?Cj#mpUzjLQ!?_%STRgIm%m+<zeJ!X&J
z=`5gfG<IUo(yG{W)r_iU%`)Q1X><q<V0&*{8#G|9_RS6<z{Xl8MvFW4zNlidf*Hr5
zQ)$P*marRfY7sDD<5ka$A{63%)Hj>S+eEG1QXdtwx*l3}f@!ny*lbW$$DXwh+f!_^
zET?XdurV>?mltbhY%bbC(^}kcnt{I<h1JD$7UFL)ZnmCTMEk|2>9<X9F=<U-3Ir1_
zg;CsLdp*auI#>6!D{L-m*^a+aGHbPT0p{*nVFY?MgPK!!teQ@|qsz6LRWlslNP&z~
zrPHNT#flZ1r%QsGlc1N`2+fwg^R{D-&yf?0Z;!HJ2Av-Sl`JLbd=6`9AHl-eN3rxD
zBsM9sQA{5*wd}`H_96U#5({J>v!6$Uv+Z019f(cGq3K5+R;U6#+oDF#pwXheV2{|x
z?GyG>S4aDHus7apfv=}if+mQt@$|F9rZft3oQhi4dx>${6}yl~isJk^QNSi{ZTdkg
za-w8)=CuMzlTYPoqEC^gL=5_>HtsmaJR^r#T55#>*1Ng1ma^rVv9|W=<!d)yT)t-9
zc=`5~8>_eOtgUg8L(Tb>8`rNduU@>cw#JcKuurmC&xx(j^vY2j27W_loCDq6i@A)a
z<8|az!u(X&c#2%d%+IQYS$UYrJlk!k9=xbRS|!CtN90hiNeNW;<>#w<d@GMr9+5XC
zB4Y`SR9nL4^ODjt-NXa-laipS-4}-()5^#~9<gUq7M>LApIP_y?uF^I?n_a-Qf=0j
z*1+P#ALno1x^lUE_0lWl)#dA#zzbBieC_g$n^$hXbUppPb!p}1rQ3>8J}pVHBd+-U
zE^55dlN;XY;)ZuJ^nXwe_*U2WIYmPpkPP0%0ffOxHr=xPn&UUh8?YZbQ_f`QnsB3J
z82fwNz|FG}5M43H_w(p1u)VxrHWJ0P4lCeUOqQ!#ClacE)mNpB0Y#Xi4%?SEKONX|
zs%x5#-?9IejpHlPe`D!zYzjrzM$2=mPTbkz5ckZ`$163B&9Gs?g7Nu~X8OyNL#HGG
zby?1?-oYMBC&YIy$Bv3v|D7jRUP#p1Z9nu}j<?0IQyRz1A>DnuckOx@qfTSgtOP+@
zOo$>i-V?)*H=Mqp)!_D`T~Q6#L?ld+Nrso`m?_f?FDaa<oWbd1<fblKQ8jd0+z(7y
zK2s*_gS$M$RAKGh3xLzcpUo(~^Vdz^Y*@z4kF6NbJ%8q`L8{DHw>BfA9)yP3j&1mh
zPSuPdvBqnG4{wv)ggQK{)JvLY@2wL#p&LU?NT~6B+QcxSU2G(FTDmg%mzC5xb|U{+
zY*gDJIlkVeLEeoK2S&s4VWneBo3Rr|mRBzoZeW)8%*_mxDd7w!qMCMuZfwg~Bk#Ki
zilM{8c{`3<(bD2##qn#;mqN>|0R|c*DmlTT<uAg$vZ9!r*%rtimF&3beMsw}i1z~T
zu9zYS|Fswgfp=l8j9~-MsE0w5k9_6Uit*x=)r$t)0v9`nbUl<e^Z%9x3s4UB`^5lC
z`BXUrgBeM`Ti`cr^EB^&{e5H=sg*U}N)cUv=rl<ujIt@cwyz=F%eQxK8|@ew#dhd)
z*eef%+j}xQZ4caaLh`UnROKQ*mYPhBq<8*TB`zVN*kNU<rSyJ=h^E+cNh-OYA^b6&
zUn1HSBxlq*S9hz~%`;=5bW25<@R>44!UT!2$(s<0@&Lvta|&kniaFEo-T_SNfKU@*
zG%{9i3SkXtn=}Gsi~HC<vORrl-|S^CsF<E{gIhnj&C3@{I{Y?p9^_n*1^g|Vo7%-b
znz4W%zhzm*5>&Ld<s;MQ_;@y9_W~a_BWTA)Bf&06urs1|s}+PXf(VsO!@@3i(^$E7
zrBDr;(C)QF8IvN~O9Ln+@kbnK`#aM8pUn=QFx`@<cE3r;Q*37*ahb%Xsm{LLg8~co
z4^roMoSa{BUwcIZ+&@9vzA`VIU;9V8uj~E=+G+0Y2=|Y-^L6jrKUQe#UhZM63y}hA
zG0!e>XX8CnTrx&N<KYB^5D^TL;r7{Ny^HC3W791>y|l(qHGO!VxUCP*Ppl;TBDq}^
z$m#rBk5$geFU2+79|2C|^Pk4ZC)p@G5o<%ULrF+++s!f?ho2NWJm!bZRLgY24*LK$
zUFQtM(b{mHu)is$TuvJ-z85aiuFM`=jXNgkx{*D=B#+Q4$7e5Ti!O9{;Dl<*@TPn-
zZigAu$u~({3Qn>~4#w?~vIOo?8Zi-*%ns3g92I#bu>fZsP8;t7VOk8!Uo&FDCO4Yi
zQq(djRy)xOt;h=RTHG*wFqz#E`lHl}p$n6H0F|6$5LU%lL@10HRLD`w$|Eb3<Dgnb
zq%n><#}PZFFOH8rMzs7X8YYRq8KCJS>8PBT)0`I7z>g`atH_bAv2q0;y=gU^2yrRH
zG<@rxbY`Uwzde9t!)1(|r(~WDh1q!mm|l>W_BTD}2~JHcnJbtjE5AfX+R=;cb#}4F
z(w(^b33SHBL1(@hcVD4TzQX#q9~2X*z^>d6#OtgmE|LUnVxK;pR*LWafJliQNuW7D
z5M=_6dZO_nE2e!D52m_@QgR5n;7gjBCe8zdGEmA!FYBXbNZ9+R8DlwY@Uw_yUne6i
z<Nz8J#^Pp&%++ibQrVgi_#=R$4A+5edQnk6_jQ_cB9#+jDAnU<c#m1;P}XZu=*E2w
z&2^a*`dPR^+yx`+lrv!W(M~g9f}ysL*T9A;>~$mdVXP&QCC{sQsUYPX08Y~uPqr)W
zUK9yC{~%iV!zsHMbk2}kqjN?+{KJkQR+*TpB4SR(Ot7+BXJ_#Qf4cKsXfC*iwKCQf
zaiS$(a19N{{VG0EPUr%c8s=*N%4?Vf_bHURC-KOLynBj@Pvb#KGF8ccfKQFc$227g
zCePW79wc92Q>3P$?GxKDL;97UhIJc=ECS!6kq^7w2q-P)z5|%VCb(zu>OPA{W=?Fv
z^gJ4gj@3BHOm_)D$K7*ycA0}?81Q$g0!9ey^ihK3=Zxy~L|FjiHi8w@w-MBN_&`K@
zD3}4_NJ}snP_EbaF=Bqb^1LrB!f_z`U5TtZbNPe;uVvYTX@c2z?pg@Z#5O`KU{$WL
z4AYAO;cQ1n4f+bfx7gg^K4a9fs!n~Af>R(JrdFVs44)dJA}uS7;mH_gYy{Yh(`jEd
z@Ziu#79H%7?@msBiBCCKQ%Fatn!X>zM#Z9t4?i%3)FHf+><sQXv7Lm0)`~^bYasRy
z=O6L^ViAYAp%t&K6;d~`WL&9t9SmTi)O#`w98nrhY}Bl}+4f={WxDm!^3!LZRhx-#
z{@<sR(*J+Y*+-cRHc52jR21=xQU0x({PPeThbXp7T|@Zi*(hHR)j`*oh%BqM62nf2
zBGqtYWH7I1MxMzmyy~b6gPldx=XZ+70tGCGVlpY$35rT{<t;1OKq1#pW#qbV8#ndz
zgw7h|=_P`b^_JZ`SXuX35W)Qvy?un<%JOXuZ(FX(pB4VB@@I`dE&i<2lZ=Muk#Vah
zJhBHi%<k`?YX%*|LjXCmtPTXRpURqKS@lrNapokZhbdkK$x>6C0hP=Dat{{Ukr}>5
zBdDFxDHx}3gECp;l-YqUxPJx!_s{XjSj3)2w!3@9cJ5`2-Pg#v-@za-uSABv=Jgaf
z`${^Kp5|2<G1emM%FPbcR}jJ~G=-g2x?Nb@lCfg?WKrliC8#eMcGIjDBilTEvLIfe
z^-s$3XP!G_AS5N~&Ypf+TI=_JV96#e&}LZc|1@aXl(fvc{5g+7XbD032iFpBVZcO7
z+^09LCHUJ<f|fYiTT7&eoE>&3t0I!}hoT?Uv1t$G@Ef#9>5i@Yc=gMu%`f?mG{dh`
z_ewJ$Bk7@PhVJe)&G0tH9!fJ14f<+^v*6}0r860%87?jx6*ID)J!9ZJ2#J9;19?H@
zufol9e0m{|)vU(Ib(3Kk1A%8NbWl>+#DSrd_J`A%l;Ce*4*BKGNu#v$AHkg8m2)0S
zf(3~lT!O!g0TT)S9=&l1=5G&0f)#JDN5pm`Dq=@Kr?3qk(o}I61;IBSGMXVze8?%v
zANFIH-!CdNK}Q42*xyLMQx?cI`nw_4h~f)BNY^GI_SGefyo=2xOh$(oWe@Sct`H$*
zmLAFhm65;J)F9al;+!u%e<&fSf-G0hw_?w%&|5(qwgx=s(EtG7yzxy^A&o5|ITcKu
z>G|=2J@dA%hdrY39^BErQbi5XUJ`N~&H6FBI<cbx$UjUEAV=u4Pv#_n?k1d)Ankc9
z#(!Zk_yQCZZ8eH^g=Zh@M?b+F{ek2>jREr{J{8XUM}h0nA*OdkO^=!+(^KNpV}IcO
z2l1n#$d5Ti-2cQMv5?F-aU$iY6DK}tESx@G$R35IjN|UX=(5qid?U$SW8DdtQyQ=!
zWA`cA#laMFUnB}3rj0+zzH%2Ktaf!&5#>VGIaR7N$qVRfiTC9`hCgC<U5wH5a8QO|
zT@!7&wN~eavZ&X2VVz@{Ro*J%+W)+;%F)fX)n~X}xV43LTDbKA&kKJR1S=1~K<8|N
z|KwnJSL1AIlB~(loK4F}oSjDCGTi-y<h@!?_O7k<<nR4m%@PK8S1=pFCu~}W5}ZAe
zN|VZubbk$v`YAoqT`6n7&8bBplN@VP#SU2eMbM<f`|8iya~WYzPaxFsg8Oy!k>hPy
zgxtUGxxUNs%rfY(%>Bn4;cVMsnEOxBZb!_m@Fs2*IiD+_*&hx-LFaCQ|LS0Pox7<?
zvMfV$H?8D$+`Xh2kdDOaxR4PCO^<W>*_<M;=@7lS{%GIsdP%^e+qDqVa7b{7KDtua
z{|fRADH;F7DV<8jSxxCv#SSFn66pCu-dBIgIFgkN9slH<PLq=Tqg_%Wi{`P3Ofp6?
zE1+ob2pZ>UFs#HJMB9E|(RSv*K)W4DOz%19((^IUb#4GUy7UnI^k8^hdZ<aVbVExI
zt@d`(b53L4R)7rg&3@9OL97*e8Vy~1H0V?s2Z>LnMYs59)rxhlfqr?`(G@1>Eey*`
zoYXzUhbnd;J}-fw7kOVh6CVx#F7a{DU(U$LB3*p6J`@dnj(^r@3@bkCd?MMlI{mg2
zpAEEoK=IM%po`BH(6uoD9bJ3~zBU+M7awYpEZxxJL#wUCr+>45&+awER+#U=K7a(J
z2zMuOH4~fQp4%~2DwT}a!*&#>chz1uLaXH=^Ji(v_{C%Qf^ePZ0UcX1Zij8_4Iv^2
zd)3K(*jGTJUJ`;l12qz|%2ZN^`<rNDA7|6&aksH-wHz;KT<GB5-5$_FO-j)MX-t-d
z12Y5=RG@;&_@Qa0@2=1U0t8w|;w~wVd}y7Ca(<bsyTcJJmWMl-{n$CZ1ZtmPhr~rg
zS`dDv&5Du>sH1TZn_lNC@?-@J?lNB8)h71a&1Taq{&L#aDlWMudHo1(;2P*E(Sv8)
z;P&l)ib3$}xJa0%{3yyD`UTT#<8WOhO0hBIb++1ZXVsovWs_;feGsCjNnBM$roP#1
z;bSTcf*7bGVz<#@yBBenF+qXGT?arR{cMLGzGf(ci!R7gEl?Rv@`BibI=aD0oTXLX
zXESu`*Kaq=8*~=kxzA=PK-el%d>9QQba*5wu{?{Hl<CyDEH3F{ytF}jYZqhz`yw^9
z>>(``<lMsww&}^wQMTXOaAMp~M4nwFfJWJ9&8oB;7;cuXDIqdRHyACmiIPbyN7bS!
z5q^#jnw5Dt6HvGb)sE}M=Zc7#b=YIs%CZ%PL0GnNDDGKEB&0pMgA6z}mr!2oWt8{Q
zVMlW{xh~v)fRM1+q+f-DX#H5WBG;JhqdDM`Yh<Sq-eEJI={MTAjRA_+kn6Vx*Rk2b
z(5ePu4f=v^t6>;Qh+Ji3iK|N#acY7g>@hZri!wo36|p@I*lniPZnnyjB|%tT;D8&E
z?BG#{bG#(EQiIi3MXktc*Mc%~5COFh*T{m%D(fvdmsI2OT_<v4&a!jmniJ9W7EFX3
zax@$lq5`p-#$=!flf(to&7@%Ey5sSL6ZQzbVGv|Ga%G7m81z=dl275@I+iN=yt<q1
zCwT+s_zf_k=QMG_?fSlBY_?^!$}+>9CWFg<EpR(<C(&S!ig+K2qf%=#wgbNugbhg4
zJV9~<09i%^5(+rxsh3u(_~fZGpyzB@ujaa^64m|Bi0<j0IkD`z6_y+;uJbXV5Ekja
z4F;RUC1*$xF6VTvPOzik$!1v!r<_1J$^P78`;uIcvh6f%5C8eabGqBhrlThEHp`!G
zL#iVX>LCA4KFeNEHB-_at=dR9sbb+1c>|R>3DJ7J-9oA%{dxeu;h(C3EpSgzrIcu?
z7Y>l3fHlj3IZfhSFEHs+WpX2a9Tyg@X2q&Of;WMIZQ-Wj7MrgEYQ1dX&Z1XF$`5i{
z>6ZU}wm<#h0r09<PjuQA8?pSm9przpiA0+~e8GuGmUJK+aXGn+!G9xQf8NBBHg|sy
za_Vv;$PQ!xk_0FG8bQVoa`=b_t4jdNK&Rg%0PHvwChrUGH>m4(>2VH$VfQ(De1#rg
zrpGVS<1KppBRzgd506fl9eVr?d<FNf>G5^y;A?oa*(CMOGdAgm5P1JvyzedE?-uX#
zKJRaf_qE0Q+2Va5m*6P1B82QIj*b0lf(l)uNKpBlM1_*g6I3W)n<ompluDc+MTrPJ
zQH-aO@zZRV&b!^W=|SgP9A)kfwAqZ#w46>exNOR!?j$Hl3F#&Qm#mjwlEC5qBAC2c
z2|OtW9Q07GP(n{;dYlxa@<s<T{lm<JF)q8X`Fvk#4XiyhXEkV(UIbSl5z7OI!8?HM
z9A8Pxzkro_vvU(#0I6HhCrFZu=n5S&<>(M&Hrhmbb5j&c6W=2hE)BBIv%|OPCpC;V
z6nse1NH=hd$cE)CDJTEu$9lVQn%{<S`eFAb;JCv%BkuoKAph$cBJ721YHfG=Y@yiq
zpYS{1b3f8Ytqqu5HvOUkXgO2mJm#bSY*hLk=}$t8e|-7o>Xp^Y^7lHPls^h$pP-%M
z%ba-b&*6^<aVD#@pygQfTdwrTx*v#~^k)Z5I@#+ScHc;ls%l961TNvP446&NC8Vj*
z;f%fq7`Tk?YiK2Yai!M^f;V^`l{(+Y`KQGWNcToaC)W~FvY1<zDaWsR?HXCK2L131
RPR`(gaa9KQoM*U}{s#+Ixn=+W

diff --git a/doc/manual/build/doctrees/man/cascade-zone.doctree b/doc/manual/build/doctrees/man/cascade-zone.doctree
deleted file mode 100644
index 75069769b3bc99af42b5a5dd28e01db3b7af2249..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 61204
zcmdsg3%ngwd2dK^o=Hv~BtQt@0Afx8Cs7fR5YZR{#DoNsAeD#v%-MU+*?Y3j-rGI1
zlN>;by`r4!Tz^<L>P2hOYU=}OmC_2W+IlHJt>{Iuz9`zN*K6y&t*?63(sKXbTC*NA
zv-a$neYP6R@0U5VXV&BUzV-e8>oMP~xpm;Kk$+vp{sm*Dda>nKs@|4bz2tc9V3;n<
zIyJw2XM5A@+OKVo2O~}Us8??_i%vUOgcQYcrCMq_we}6|@}gkKbBcbYUX$s|1LeW;
z&<*Wz+#K*Le$~-#1<Q-JSF}rxbz{Bev?(2uEj{EMqY7hpZ)=kP!C=EiZGOAF%A2x-
zQQP;Mm8q5wX-T>zm68WZf}vv7_B>p~`9RH{<!8gCRzv-mvWthC&NQWI1w+0)L$})H
zvGS?qWx+^6s$O0a3<`~}+FG)GduzEq>ufz%nXT8hdd=e2Pz&*Q!k=xNzZLnn&f2w>
zUERua(=VBX6yDPG{C2RkT7m9+7PqF#quj>IW-G;oVEEu%t={k|9=Fmu?E*Ipq}~dP
zlsCW(<<nuvXW{>u_<uJ3p92-k8<}e7mB-6V%A3lY%jfPHK%I+%5m?loY1)ml-Za~`
zHJWu?o!vGWsyAs(PF{EU-u*AzvDeyv)uG+{_Z_@pa*{P2?rh(=|H><O?7Q@m$w?;S
zc(BrIlq<DkTkKLPbf>Xu#dn%^wcz>9dTmCpZcVZ}q3KXqe_JYgSzOUzC=|AB$929G
zhIt9}To;^RsS;k|k>*38Jh~ujO-c$;R>k#KC0-YoDK5yXq#%RbW-2d9bFFOZ6-i@4
z`Vnbhm2Wm<oldG(yg2lRAqdF41J=4kO7q*vhDq^*ZC-1tI9u8_iAHDsqB+Xs<irF=
zg0=nN{;Ln{+y!4jSrZeDdbLuVv$kKgfA8*{ui{s?@7r-DCE(6f-X#Uf<teu%Ec6Pa
zhrBM~A+L+HNv~e<wnY6gNRn6Z$`f8e66_3?H=J6jQky9p16S#ex*}q0?xE6&${%KA
zx-M9PhENXk$8mASgQcw8V2S6K+QBG}6TAuAj>&;P)Jmb4U=SjL_S(U!IMub$Z_vG2
zyHabH9}0%>%b#nY4;c)r3zp%MbF2YRsQB%9mg1=0tl^Zh`gU{10b4SCh|4|@dhLib
zppNfo>j6>MDMu7w9+B6SfxZ|wkjV($oMoNS(?zwb6DUyCf2VKNCm^L&AG@cj|7ky}
z9|e8s*adeD@(Z#ecld-wi!#=gjl0MTlH7GgZ`{>%X6r{BqNa!<<2{m)Ynik)@{oHP
zlE$fsUF-)Nxz9HVk|ZQ0MVym_C?Aw;yh^fAXtfv-xtF2Nkc&VMWLV_}R~Y0OFF%-(
zjND6^u{sZVBp;O@(doxMfPA?asQf4u#bnp1XIc4FWh#w*gq0*42U##tHW<UeK4Fd7
zU;zmYu(-H4SX3*Xzp(Duz15_n83{MD#*Gf!T)Nm7B>b*P5CamV6bU4Rq9`PcNhByk
zsZpK#ho~{c0Y>~7_>0l3`+kEgIZ*IkWY5$q$58N5<jac!F1e0@6~F*DQZ|o7dV@#y
zOw`r7&BmGiA?nW?TB2-r&%b3>kGUsZ?2CK;gGmsBdrB!1?iq@r+*2oNX0<p`{{(d^
zqNXIuMSp6LCx?sv2-$ma(M5~%yC{g7$*w!;N;s)Bl}^-&2FpU!Cqb$VgO{+zY_NcY
z23WkNH=?#1m<@*mn2Cv2&8y7RoYKu0cd`?jUuk0-Iz71S!0sJ;7dqQ=x0ozr#?NLX
zO$>DCVqfs{Qj;JC{75Mh_z6W(_*pIKU6?lxphKuM1kg~JMj_~x28nVY=m4_!f}ly{
z%S-Z7cpXBk0U>EE9YTpVTMvISd!3kqtTWzMwmM?4m1!g-<yma0r5z?^#EG(C`u4n4
zrkY@R0#fKGh6T!$qIc)2H5-$lp$tsY=#5F5j*InNHWM;8=`V>$K58<InMm$K(gcyv
z#fT5|xPIe4Y!bvkBvOh5k%XcsBGEfyX5BcCd=+)7j+l}tkNLVmo*XptWn}M#M!ti5
zd1(Y4F_T?qkrTlp(o{Nx5)HO+7Wsw2R3;XY@<do9Ay5_;S-vFO$Us(^YJ#jRaz?IN
zv#|&o%D^I}-dF@<k!G_};wvg0c%)xzEiW_~!^|AdN74jy(8azm#}y_)49p>=NH9kz
zieip6atI<V8t0DdQESK@!y=Jlk5?OH%E2DjB6~0FQAWPJ?4hLB`C}dULmEs6Pomit
z&L6iJjAi1FZ1QBGk2`YJm<`CVm;uPI>J7-AZ~HBeh6C44Oq3kou2h{8Jp=3)df#ud
zfEm5-MbZR%>0)2d`;bWx1A3(t3G{}dDD<j+KQv<;yPrp$qTlC96mlOk$dd!Pk0N_7
z$o)F<<wfpbD7%i^lYv`lDjm0p23r;PEiq|WuDhHv%nuBPF`+bD?O9N|cxkpyp4XTS
zrLd0yrI+`H(x&4%e9W#thUxj~#i=HJ&6qq1NfVf)i+#c5c_u*&n3Pf^Fd2%XFu79p
zsN86ANWK(RhL9X!DU{>A%pgq;L|%gIy&!Tg^5sQjD7p^F^#G)_lMcv4Yh{7Nl))Az
z5b_$cK>`vQAhEkQNR+YQUT@CzucNxrq_G(kM_5b8R*LCjUqBI<1Tla@N|69XD2f7w
zTImvIi^Jj`R2sr!C`_Y(@g9RjIe_slWbXwS_aa|jU`XM0Xlwv9q_uQtB-$(sG(Kgp
zh6x(H#%$1lgaR5WLon=#2r*m4enqZnabWbcd|50GY*akb74dp1_H5auj#q3}8Z59c
zZ1>1D`6%ljGiZzWI`<n$r`3N3It>+Zbn=yU&7N_rojf*hqsPLfye(oR(DA+$<6kp~
zA)=lvO`O)0X3u4afRtJ*lg2KmSe3L&vFh06)%uiOwe~Z+%DBGxWvSHgK=*M6*>(Ww
zG~1pXvF$Yn9mm>+7#%IDZ@S*JDm5HuZE9i5o~pNeYlcf#=h9hTtI?=8eWzqi%~=j6
z^mEqEy}L(?^;v}alz7{WgXES{1&Rz#VnUY{xr{|C=WV(u7_8J-7^Da@Ef2UB=|K^p
z>k!S!T|t%mY=bcr$qZ2#69pp0W0>5tsL)g0Gw`PulG%cM8p$kS!A_k5mu^ScfRtQk
zm~$Wj8HNp&c3FL~zjPCBaplK?3-mZp;rk?raF>YhkMY)@2wNXfm0>h#5Z<xWofHI+
z@1-DMcqjKB>HF$}ROf2gsoTRg^7;cvr+NJ*)VwnosMJc%F)e70b6dw~$Y2PO#mx!}
z7Di-T!>%;j!O4iAyV#noms(W^FqoPMeV(G_Sg_*+h1it`_xWubt?U*_lDI(om^@2~
zQWD~fL((z2Q=sQ_m|-^~G14sJjR9e2Fv60tIAskfucaC}QX=7g?&}Q38%L*5nVDc^
zAif*bveO7sf{|mh)ootGrXcU(29121h}$9Uew%A|6a7(v#OLZ@a+|oxJO=UDsEZ7R
z8tYSRIXGI;Xu+=+3kX2=z4j&qUDGcfhCN8N%~3TxR{31m^hj7MGv;z;i(<Xz>+$I#
zc3SIC)*f(XF#dCzmTlFXqpUZPor(FTbia3_#%}H>&@=%F-z6pN9F|0iy_3=@g}9Dz
zk|=J;eiW7|VkD!s8w|rK-H)NLU<meQ5tZ(P^pmx${<~J6;AlW-Wvwnw$He6c^87gj
zTP_c8ir=e|A~dom6RoV(#Wj(RN}~EO_w*62+MXvh{m>i&53DJnrdz^|=zt?1C{N|#
zSY}+V2yq#PY;}jG+e(Nt?%t?fli^<kGxt{Qj{5|Dgy0h~V$yq_#J#xpjJt2bRX4yP
z(wy!cbonhfXfXR4erhn=8iCoDaFfH#y^Hd`6^Ce%cjL+?_Z>Kv<8a!FCiybm0Ep2Z
zzeg$A3mygljU8aIZ-5VbYe9^|;+Lh`KSp73wc}%60h;GQjvq)lGJ!^j-3w^kkE1Sk
zbP$J6(AhFN`=mVkE1b={f6b1cV#oi%jt{fr->~B&bo`|{_bC(~W_Immp=+}UvVJ%=
zkLXIe_1Q2?=+?1twR3PM-nzM*`b;WX^&RI&occ7}?AfW$hclfKmfp>&PudG3Tg|X*
zz_^xtTTL=L-Ih*%vB3<TocsdF^&%-(CMOqa^zP&bP$75ngLKB6oShvXP7VgAI4!fA
zD+Xt=T>Wr#5f_$p^~2OMeE1|1$yT1ly#+aYg$h^BeqqGfOSsvyvtJ0Onhs0v=Io$q
zGNggQBbTMx|HYtoC+EHha@;EA$mHBY?B1RGZdAyf`yF(~oSU5;AI`lYjQ=uw_n4SB
z@Ho8;bBFE&6dAOY^zZwral(moA};L#++2`@e}qa`4t{aO!SBV*o*n#RIM#h(>D?Us
zj2+yTp@&;j4#uEh_ahbOs1q(vU?HJfG6{gs8qCrO0567|pO$iF0)SAfcL00~6><Q4
zo6Z;j*xB&`0I)mF_RRjT*qzM?`^4_Nti<^I->GFJyR$^HmHz|x7UcXtr^1!<<2_T=
z{O(V1vuEdj37qPuVd>qR|MUaQ*j;?TODbuU6Ni#U>E!x5Amu8gCmZOxi{&D1(Me2s
zg;Kq{{$^CjUH@D<W3JE6jt|#AO~l=poquIW{vuUh*k47<B<X)AwGRh?N+w%-7w#?y
z0z0U91%aKq8@StXvu6nGgmYaImfj5lTla@CW&i=!tBzFaEf4fhaHl2h`m_KC?-Jzl
zPwsruaMu|O*9j)OpviAZO%z3>z(gqCJ4~9Wki*2IGX@iOc6`9(R30W`28rk)!cdaF
z^bn$~L=W*MYMHQy2ouRx{%^RqAb8AE;R+s?N8s^#-0T@1m&2*v5SHEz9@gcKZ~0}c
zU$Y1<jt37zBrIu1)^xfjl&1LugK0VeU^isFN6MNB07A9i0q_ti<N){!I%5D}XU7Ks
z*0X>Tv;Qv-I|&|h(hv6!V?dJK!{gK}-23ApE`Ntx3v&K1P}$1)_e7lkQQYj=`S-w~
zJ|C9e&G|1mK#S7M{Tr2rL(du6GdI4RY58>vI}2D9-=fE!tfwg3ReI7%U~yzuvCv{9
zaK3LaYbW4b2|d3j^~?kuVV2&3vv^nlX9=A#;IOmf12`MPkP|a>#N=AUrSt<lGEO83
zpAE232p^eBw)E+^xgY?or_vRG_D2A;7B_na(0(}9Nnz>T0CcA4Jwlsy?mjZ4l*T#V
zV4O}ccm<?=u9P+t41{vM!{FtpkoO;Z=#0UDo%IC<>Pa8=&=SwVS#y#RBG*!$u+wwy
zlqc+Ggux|@?_{ha_4pQT(8HeOP}Ih9J)MfOxRy1M7QLa~K!}#1z2{z{W(ubpB9SU_
znw1!BKoz&qZTlH_3fXlG#0Suwc6?|cpBA?vo~L%+a|WRs!%})Y?2+5e9E2y5S>lgs
z<DN?~3D+Q<hTcQK*+QRto*uf2#d<LwgmJMYc9g-!JJ@`QUk$ffN=`48RQt;3(zDpE
z4?nkx@~!Q=uPW@g^wI;n4j#O28@6jYaOjd7u6y<NLkD+XUf8qiRRsz-zTpz?R*}b~
z!LTSpJUvtwBqO{F_F52K-W@ggE44TQxO*&YBG{Nm9e^Zrda2NTCWV4!6b*q%Di6U}
zL17GRx4L8;M)aBRy`<f#Zc<4_CGK5FliDW)!*;bwHPN<r?md*;O?gcGN>unZsu!J*
zxtmDYZ%!=vhyu!+xW_4Z3BNMPf%|PVW{W?s{URjbO#C>VF(zhby)rSwKqyVmm~`)i
zFhMs&E>nnnZa=_yng9~EOWSeiimiwCZ@qT^zFk`{+r4*J&&c~f&}2c#`yL9=sO}p0
z%7<}DgcJm8J4y>+nQuxI{lX~RgShHGghMpsAreIqA|@%E@<8|7C?XXx?!!m{to#cl
zOvB1Gz{>wZqK;S@*MgEJ4`DXWdYEuayrNyhQws~n-B(fPjH#bzjUTP}Wef3{^p~b5
z6oYx5RdS~7R@L`t?m|~aFF1b_rLwJQypd%!Y`-k0Ex-JVWJ9ePNqSMdUleg4*!Rv|
ziS*o9nqj_pP1&ho4X=KrLfhVDF~}xsuHLd{?K#V?di5|g5i~c40KMty$}yVTF+)yH
z#`-GS3IjGoG*qRCxgO?-cDPQ`aEg`b3MPREF579n=%N=~FiM@Ab=aA+JhVg=aj=fn
z@{j=eLFhF$zhn*SH|?4?jc~K3^O~09`MfD;n04JRQ8zWlvRE^yAz6Tz-;;Waet1><
zmMUmGLwiy?QibSh*9FC2g)ybOaXl53<AXsOwh4E;KI(4RWVTlKBVm@GinR@`mJyIh
zrEsNyfeSzBnfZBEW!j32s7Gl;ZB;zWIp$y&U3dn?Qd_0UG<*S3a#p#HfD?FF%{p4f
z73MILVsq8f<m70{Mx0fRifFcKHFAC_#B2+B;c-XoYK0X{cQ$Y4IW})*WrvVgf%LyA
zDiL(f@1c2=Ctt=Pp~BFk6B*WY91wEPHuoyz(I+yLNR@cNfQ=jznSBg0(Rq+gm7OLs
z*CStlCNh&i1et{a_qlofRv98Rt+ZQ!Z41J1efYFsnPG8BWo#NOsGES`OY9<rd|qyV
zsLDbq@uER;>)}y_BO&e}2bRkJhVH_;uSXhP-oX%+lCZcC*$9i8=Vh#UIy(skA-<F<
z<q^`9MRlp}4&0IBugQI&yKUBPJPK=;&^3X@(0PHLWUoeD=#^I=JjDA@dflTs$M}c3
zJik5~zKvrYso0A5eDr*5B_Y8*znTh(8LsTBYO2ZK5BuR2Jrie0wd0)eQEH8F@k1n1
zCH^TZG1{IvIO9){y_dz0Pat1z&XCgUiytL;7@37}#tB=LX53cUJevx6Zx>Z!o=sVl
zXQx&p=A2?6-t(OEpCBTibN(}(u{kF@JC5g^d}H6pDo}VSu?ntMfoLcAOv^ynxH!IZ
zF!}m;VxdRW83I9MQ|_{4G&xbo6+-+pnnas!&cvsiBXTcs!RXo*$;YdWV&s@uCdE*`
z>HY#TW|~+IK#bIh<qX{asZe9%B8)z<JnbsJnR>|Z^m3Vxb^GXJ-t<J$K${E(ig(ds
zgk6D<&q4acgzj^kpLbyLN{=%!5SE?K6$h{66EpEB4ue{{#zwo&F$&Pe%Y_*C;yuIK
zbY%u_MwKvG<HKUECYyrcl|&j3v)LEM*4kVQieuP@2taE$9`Sh=M*X9Wy607<Fi(aY
zMGVLBswpOjRm}hBJxFdXyV@w*7Gg@gFnlEJ{^Yd!H%u$p<QL{>^23oPSFUfEhzVL2
zZrtsuOy{-0eGriI@_ssFyv)uP#>;{QdtIRCi-F@Emgg(8v`jP6XiZ^z`w5Jw+QA03
zE||RA54zqsF_9=3E8bVqs(s<At6zpsEzp|1an0~VLteq8#(UC#$_D?*MeQXNpiz50
zPVHDM?4Se2g65l2xFbg4au9w}IOX+j0i|ame3ufYtt8d~EIYJASHiz=H*+qG<+*#Y
zH7ZaWRtqY%VzmYK6P$VJzJq9S>%alTLr5m;IlnaPn+;~|)J?nws=Z07rmg#3a)^4V
zn&Xt%vL-Ess?|)(E*7yK%2+!jdods3Gc~ErLW_|~y)%bWUPLM75-CI|nzwf%ydMH`
zBK%W2V?@Z#jt3%qPC5}D_6|?bYFay3pP)f`uOB3Mwj?r9tfY@U2lo^@J~Y8tHzZGy
zPtc#?j`W$&8GI%e`F#cjXyn(5li!*S(u4X;x1?ZC7zN8gd`ZESm%9(6^i0I}KPh1v
z@wEV?M?xEPCB6-k_-KiOUe>p44EHQFtfYg~G}1gjHkhXqfgOd2Kae771oq@13_<1d
zmk5)wWn9+xGje8$5NJl1Nmz?=Hky?q^aujFjIspukd}t5SgxrY0f$dF>$8018!c&z
zwFl}`7ATKpWg6nzMIYZC!vapR-k^sVGOs6}YtY&@GGKVkM%#E-8lUFTcy<(B2nonu
z{clQx{)THQUE+jg$th|lmzayVgaSqi{R=1Wo&HaOfSmr<(;1_GcJ>UQ{~J^2U*794
z{flBHfnJ-9{zbkd{mVPjXP$5HnOyY01qEpIe@kcjk4hh*e|1X=_EMu@Ip{wrnDTOW
z6H3oS|1Y3~Y4m>!fOKwXgP!Rh`b)OzME@*}G|z7t%+m?$w?f3LrHBire-h+3pZ=dQ
zT1uCg&fyZj6LARzj1>A8PTo8HzZL>=`oD$F82z)eX8`>dQ|Mpb>o5I_VkQ0W%trqr
zUy}ai9qBV~Gx$s{`o9weX!QTa&h#IZK0^QMmK5xLM!|B>e^M~z<?fqNdM5h+@02i&
z{@(~7-4WWLXZnZ!UFn~tk>>fh!91Ple;y(}Bt={>{gWWS`Skyc(Nem^XLGp3n<6fu
zfRRG~!pVE5|8GG+PXFJgGe-aH>={7+w4!o&w$kXd_`~k?gZ?j%EaFhH)^<Lfy~Nti
z7fTD35}ot8H~(Q*XX?$0U!KK{>8d^B8CS@o%RpRY{=Cz0NBY%M2EWSHMf?l}XkEk|
z@h;+p3(yeVNUzzYf}_im)8=tEM^}?nP$A0wF|^Or)%+(VOzUdy0BHX$w574D(WrgB
zTxY^!4PQz@3?H6T%6=v#g|y6B2FrBnWqudZJqzinrPCrlC`=;UNl+-$JEdHN3OS{0
zqccV+?CcppDKr=FL@DxKe<?*2y8yt&A}17ah_aKTPI*WA)j@+_<)W1Rp`&rn+0#DW
zD8)7^n1fQ13Tl+{a+IElQm&?iX_V3iX!nM;%uXqo8h4?TL<-sTa|X+FqLjBnx+7A$
zXbf5`kDwHxOz)I(2P)*0@)kN{l)}!Q0hB`XyH1oM@Aa2bM6tgNN)crzDMj9qe)U0v
zU*)2dKMWl$q?ETGZ<O*eqk=goC8?lBDep$<nJDF6N|;6|ZwF}qAhcz6O2Kri3#BAd
z$fkeHV3`;_$agC4hIF5k(q*C)p-k_T^1o3br<Cu}8KV?-_UomTaUTD3viY%hxgBV)
z0hak|fMJ#m<}4Fsr`l+{KO_6n*5VG0^}?;idx+f}ohYA&*MwQ2hM>*G6A+3|U+7f2
z!;%%I;e3t_jGqquBV>Yi#+bmcAA7FZLYLx$#phX4FPuufPBrS4g8&Q_-->;KWxV~M
zW^2r=#7`-}xKV)P*|3V>#+g?JV=8ikxs^i;9^;+1qUJAAj=KX;+}(_WlSX{+1hqUB
zx=uIZ+jCX3LP4c?R!wqPzH`jC#_^I~)5muG_&fzZRS~}ZH&LFPJP)sL;ms<RR9t4b
zn4H|iCv@~u!Fbj}l~28#HL3R6-QeUTRVW=$2i5^Y`^R~fUVfoMS+xD?gxo1L<HI!E
z|5WV>4=m-CU@^=i{g*4Ne8RBUCHskYL66H(TaMYRX#3v#iQ7;i?<d|sXRM!KXTRQl
zf_D>U&fm^H*VYc!C}7#mnF+d@_TspRT<yAz!(doJlK<V`qvqlKFH*^-{(anA(7WO9
zpu*KAHuv<o4@efT+|qq3>drJ4BMYRC#qNO@zdh8X8zr4a0X-~!Cyesp?*-#U(vsSX
zHa(Fv|0hvr-28E-5Ha}gfsB7CWy~}p6DswNv@fGVj<m1P8ABR7>kHCUTLx=+P`EdN
zcN!+hqU^&ftaZsC@;=+_hFP56*tE4hNXzjLUtvp@wC!`w+#i1Zh~A=zyzGm2yJxY3
zXV)EczROxqdx>ma=VDaX;r@Uck>hb0(}Y*2`1ePw+-M8uc$Ms5kUec-vD53PPa$94
zSIHs@=x>v~7v4(t$+DHsw~<cckoN(B3yaiGr{I-Q3N~!q5fv!Y`%{8h4g9-tOt!a3
zB?({??!^fp*KGV8DqQjJAN84klf^5{x)$or#J^;LRQ~-Vc*|L#Cf)e=S)KTo!$_{%
zcTFc7VK-`yH$o>C{s1JsOiCKXXe^IdY7>g}&cc(Zkh8E&XN-l}S+6Y299(>_N402h
za)O0JZc;=nk|-jUNm8~l1EzcCV%m|RD;GCd8>VrwDn{et8>uOyTukW{7vIdvjka?R
zE<T3ry>Rgxkgr!RW(w$B{2}-(*(VDZ&mx`1C-?qpx%hd>v2awNg>vynNWBhY;rnqf
zP6N5P_>ZHuyRXk&oGe};*Zm;s&cwxJfmANO58iTbsL2Ajn7l9x7xQ$IiyueL@kWU8
zs+@cN2_$_?N*cvzERWz~p;+%+{LiS6bMg1-jBznL>y?X{gJ<Mo2JLh%4wIyCF)*FR
z#b<RM7l$7h=}N}GV2!Ae@k!BvaikoLjhC*J=v>an_~A!Xq<ah^Mch4d(D7nq?}d(6
zAzxlPj%uLu@kimeWTGs5{Qr<n<Kz1m%*UIJOVZmXCR#Px>B=eHj6LYs$t7*<e<ydG
zq}2+MButPb>!`Gu$a<Z*YQs4CV&xqjGD$aivB^#He4Fngs!I*4ALuicCyUpp`~|2x
z6P1%eQmOm_INA$CO}bI}W!QrW%dE7aK=`sf-Vq9cN^dHKd#4E(pdIPBn}i?Yp$)ZX
z)P~yqDo!@(4bUTw{20m0j^WRt_q9^*OdW$TQ|}#vj|zFm(4sTeF|e~<I|c?O(J}lg
zXT;C%3$Vpp*MQ`J+NQ%O?9I3rZ|7X2u>VShE9gGhXXqx2*PweF>dpjRvOp?yAA}3P
zG1R0RbXkzGaYd4MpK=)1J)wl#eW*L$44vTi7m)QsQr1jx6RPzNx4%J!9Bz-$8G{=;
zJ09R>-Zysp!CeP-@7Rleb#1g?<=6Xyx?x#~0e4SQBXQiRbh636iM#P8&xO1vsCb3E
zkM|jQ$>KHSeHnFULLS*56?q?rH-9zMq#N=!(OMLujw^Q6s<mdP(0#@q3dA6oBZq95
zry)(eVLD;)laT%?DSaj^3T1o8;z_Fn7Eh)#hDCPP7c8n)4o*p|PlY2C?IZRgjar~m
zX;NlI7+I&yic+5z(3hyXPKurb(?qtMOFS)5#b|S)=OSB(S+Uq2{m$L<S-H`c&M_t0
zg6zFaiMAtO-YHQ;0ewdF*YH}hPnH?c*+{3c%%_0Sg*`3EH6w~WJUBl|+EMxXJO`Q~
z<vD|Qn*&vlG|n2i=-i1K`r$s)d9ru~baxVUXQFd5NGhE_4A+_pHR(p@yG(N+{-L=Z
zra*lvO?CtG&?4TTow|WXp!FN1)=_eZ<q=C`!brV$1NWdpJ|ufLow06!o%PxcFev>x
zW<W3K3#?OSKp&&F=`aI&2>0UcoC~;rMun?!*r)pp++^_@a6f{&GXa+@kP6&S!-ek;
zHR%T2lxKa^S;`4e*K`tWUq{XHMu-7NE;sxwB>jq%G!xi_V!eayhp3Q)?MHORz{bvw
z2e5UU|HOLH3;F^#HKieBMc==1M^;O~sdTcnm*H-_wR1skh>BN`d$iAxOBSy|ZZYc4
z1Ua%nD&!u8BQFg#=?1y+u2Uc0aZ2oE&mf!ST*wk{mQEo2JY*l2vS$LJP_=guz6=#|
z5bmTi210h$7Z9p8Ha?hV(*V}+WD}W0&3kwQqz6f1_?$NFIlJ@2An}dkt`naFtQEDV
zK_^F_21N_frasqGbMj7d1$!JMQmV)EuV!UOTRX?(=UQa%W%5%-zPyv4m<syz=P~#$
zSt-l(XFt+uO!Ecc^w&52d0~>cqw@86`g12KpKbbc7m~)gBNwH=C2Hu$`%LM{;uYN8
z0Ci`gbTUXPr9TeWdUL2rH%h<UH2o2n>tO=axAJ6%@BlQ4H)^L2;qRdNN2TUbiiqVA
zQy^ie-aCXxQ6cXTK1XM)LttmUb_fhkzm6%;g?)i`$`t53)HWTaK;Ol^csu6;@3*LM
zH6Hs)pTV0fUIXuws5=vQ$pWe1{R&+8o1rG%z<VZ*$4n1_1c2p0EJI2OxWP5ahKPYj
zPJ_M%X_p{9**&dOMb9SyCzR_QaHpd}4!ASui~)|F^#yRMRfF}3rDtJSZS7ekQe!YJ
zQOe>odhxVTSjyrv|K@wwG1vraM{NuiTYT1w(MDhwQgd>Q^0ix@PL01VV&z83HOKht
z0%T8fl}@4RJCQH%_$#7-KKgnBeoOYrGWyz#bQ-VxJy5x@(buz#;W!f$CC9h1>uV|U
z#*n<2cr`sL7e-xWd=1G*%#P!??`+FA7uRpuVijm8J;57NR<n)2$kyq5p8>ueKV5+^
zYfYKkgy;%c=G;BsfH8GpV4$w=E{$sHlDEaC?l)7(+zIuRlA~_H{RMRvH%1%vn|<yq
zlEo`pac59>rp|(_klI;%6P7<3YSOK<xP!j|Df|gr$m1oLS=*=YVc1jjElLpugiqnI
zedgKM8rerUHhLDenm@Q}C)>@qQo=_+=wpgak2a#m7dy_Qjhc@-)hhj^VrtG&%0Zjc
zH=QCrQH5=fTX?N=hV7T!tXHd^?3<21!K9nL3$~5BS*Nb>AJG=?kZlpA$5<ZG6^f=a
zbcOB_YJ2tuZm`7j0mDJw8S&5Qb^xV(H;R8|_W_i_JIX(!GuBbEvtBz&hH^eK4c0ry
zu=liI087y45Q|Q!Ff~`8(MbEXZTDkT;b9!S;ACS$Fbk5AmOR;lSvA)SKrc#;bae*H
z_yMJqk?t3vSf`Qhm&hzrQ4h&A(tV5yS0ml;^qIVp#cSmCS=610yvPEn<n<i@=5wJY
z-N<XA(@3}J(1%zU=kV?g!5ETRa^{k-{|TguH&6`1as>QcXz@d-MYK_4c?9f*(gxUf
z1iX0Zkpp|#i2~Tm>5KuJo%I3O`jAL2FsfHH!_gpf0n$$<QR82kBxUrAQB>OK*Xq0m
zN#C669(l0=c8Nq@tc@-}YNcpn-*b>l3_IBBBTJ@+z8hJo(MHZO^gSEddl~vZ5Bc&A
zeMdF<^^x!Q;ICvHy_rof`;Q^rDM+XB%s>5VIr^d`M@I$9w9uHs(btoD9abY=jeBtl
z$i>muMs4@~K67-kc#Wg4M%|e>nk<mY(cgy`ToY>2jia}8=4c?6QFNoyaH^G>qmy*r
zY?7sKfn4z>iZQNa>HiBoZjyRL0UXOCSX!vvJ4@e%3i<Hst#rm%nw|B^(#-wE!k}vJ
z;H1Pl1?MeA(jtW-X^|p@qk;D{jvhYfIMxn)pj~W;qAtibdS8Y%BBpsy*f!kQdw#$s
zvnxxOfYvHBLn&18?Lci-%l8=?$BcJvEK#B2JF{BK;3Z|>Z+P3bZVkU!yronxdRuDM
zn&VgPDLRv%!mZbsb0R@&7E>HHHyUNyQB6znJ;6xHXLc=_TV_!(A_vKuWbUU(Y0f_x
zijp>cq>D}20tzNuZB_xz(;udaPIdnZf6}@iO8N;(%3N&EkC5ddmIca>Dl=;;gxfu-
zFO;7qzT#yvrSOyVL{iUhqVBBt{xM|z`wZ%RU8zS|xOxgnhK|tvn94#Hd4Sd8K8QbZ
zi3J~S51niC=IgET=WQC@1|QlcKASxm`jGocJ=3aqChlnNZTK*#EP0uhNSJRZtV<0`
zPFUO3QsQIQ|G~t^hDZa8NKjP<-SDQ;O`$o*zrhqgXJxrhXj&y4Vk~M2u7mspvwH?4
zCkVJ_YnyG!s}M7(?AZoo)fj9DbL9ybpHGv;sF^(bEYtv@Eo4svL8s-%3FOnpU`wcu
zU>V{1SOedHtoZGDcKfK^thH}1KdL0xM_)gM1gCY8fYOT%U?~0i?&)34uPF;}ne@ig
z{F)k*{F<-gM}7M&>47DqbC=BCy*iQ2<lf8mRKmXvpO$|WOwff2go9trtYvU;x{<@d
ze+HYpf|Zr-;432z9&TEo7Tw(=C?o0N;wt1csCyF=H9AVk;o`@b*wO6zAg7ay--dj-
zTwIB+`}ogcIlqetx{p)(*K|*>`#5Fcjg#5OsXaUS_%`K+6a2%(Tm1TLmHGPxF)}ad
zDa^iqdTMbd9GucAhrq<zkn<z8EAsvb%$E@#A7+*g@o|CH0nm*c`1p6&^8>7`bbM@x
z;v-@`uAS-)K9BN}SP@qta~Cr_&Qypxeh%C`#?*;s&w`sLkuMi+%xdTudJ5Kkw2L@8
zhA91Kx~JDML|J$PX2uY;c_$2Athq4%UVIvcv=o!0#^I3;A}w`@$!;Ku<Vb=@yRASp
zvMw`-29Oj}6h4a5K}0ulfapJA&=Xi$`9P$}&mRM89nN!5UJ^v&Y6L`DG0F_*G8LjI
z$N{2prcN|_77$&4d_96lS3?KU)3ENdyNIKMh|-_gJ-rSh%EB8kGl;0o6^PQa-A{uu
zH5(JNWHviK*=tRCe#LLG`LS_&7Hq+@-<z8)&ksL*e>0xOHL7;e*|yEPY2(p)^RU;z
zuZ`QRL(P`+S^<<3P50!y%!Y|foef6As-{Q;s#`#o@}^+<_NM0-oJOTupTS31&fT*Z
zwopnbTLi<NgWUjWZ9%PJ&^0T(ma=MrwF9l7<zdIk_7~I&6W7_}&4{pUPr)VHvghLT
z>4H~pHH%KWyg69wH|?5NWy=PIMzcPHH5Ly~xyFM5zwX=B_8!cmMH)Qj-?OMi?so!q
z-fcDU2+c2qW$g==iz~Ds(cVY)@O?Z!_1eK|TAuJLcz}wJz}9@HM$ZOcX;)j0Cuin(
zSlIF#Ex*05Jhm?wnQ>}P)As94lr&PpM`^J_Kij~MWzBlshp1R*Io1wN*oqkq7Xj-n
zwZlj-8vblGtN69TuNMnbcJVOXg(w4%xjBb$g=rLn&(u2F&D(<&9v%<k4cWpmdeGdy
zJs9)+W~EV}=m%u<P~ZlB#i=^%N`dz8EflM^=Rq0N7iN$bmh;Cwg{pJJfjJikqh-75
zi=P9*YUfx5R>aCp%TreeO3qYk2IY;><P26sil$@F;>rk`qv()IBwwWln-%aZvtB}~
zb}-WNrzc)SJD;?J)1o&EPP18W7RvbEZq;d`1xVDQ-wsxC%WI_!uu`zGO6*Ro2=_w(
zNifFCRWgX&r$ukXG6$<j2l$>>4iVlCR#ffUObZ)yz~Uu*nR~HQYX>Lt$MJ=d(}3ro
znhLY@ARqRUMJgrX5aq#O%x?L0d`3xJ3KmmD$cj>Hwo#BS3B$4r*tOYd)__nHvyxq5
z&Q7hbE;T%-RjL<`&5}c{!sNN`IR!l@^AbE)K2q^2++|l5N)^wZs*)nLX*9;ZU`Rj(
zuv-pgK!i1hJKS3lCM&Q{D7W#5>LfZtC3tI_k)>0k(n@IZWlj4inu`D2b3(A1@CMJR
z&A<_>m03*duUxe;7;88U^`M)SSx#4`Y{*W~2u=}8fw=5#Y0UZMdTmR+IRiwkqm)bl
zq%2@@5(Mm{Ifik4;+*Hc0QMYfP8Vav(-l?xb42j~uT3s{*lBL5IQ}%N1B9@(?9WzF
z*@$mX0YxRh+}<-BoDQFyEl6<6MaTkUeJoh4^5(G2d8|;b%#^G65C2_CyJ@$B<sSCg
z_6x6R0o5K1bt3!Ce-^6sqK&UplW9*cmTky`hUa*Lm6-{V`*5p)D#jokdMVhS)4)8u
zr(UGs6Uhr}h$zsT#gbKK$#-dQD+b1;jFR9oc;&tX1kXW&vV&Ns`CwfUsSX$Di`Ufx
z_J}3kWm2!El4<$abE?yv)8>OEPVGn=&yIp&&L)5_Jh4(MRe%k@z$2)ba;xKAEU~#e
z3!J*F6Aacw5>V^|rHFQfEWJmSP0Iv>#JD9^8bv^0{fj~+Y%dt1B>c{}dka-`6CIvd
zio;jwuo$aY?$dO(pU(Eu;m|M+ub{&}U{_W5NjkW+QP~U~enN*I(!rva#!jchUIduB
zyXmkI^}5fd!#a#L+%<Gyu^TKh<M-+3JLzzQ#PD!v1tTP*Ki6Qoaw+GTg!4?gc_!IB
zlWLwxG|!}&XOhe_Ddw33^Q`uHR`Wco^>&wPoM*Mox5}rZ?_>rjFJs!5&*Q3pgY;*r
z50L&$^#gR)q{B^g_!1qyMu*b|aX6C>B|22-a4#J`LWiHw;pcSNK7_*#I=r3^^K^KW
z4qu?dS~Bl?IxzFn7aQEW=x{e3zD<Yk(cu?Zy>*|aLjm8EcT045m=2$z1AST9rEf2@
zk8Ha18BX>MG?%`T=F+E&T>7|?OJ5vu>6;{MXMUGHPT=mKW@Trz2ewPQWb+25jXl}E
ztS;@`%A1-tm~&}=K$mt9<c&^y3%Rt>luKJtxwLPMOFP@Rw2y{MJ8f{6pf_;Y%h)cx
zuI<v>oi4rq>C#JQF1?n<9frcx*;@-Pz1QGU2((K<(%gwCoQ8+@P?Qskd2=Z$&ZPhn
zmqJXqW6?7$_i8#^O9yf>HY98XD|F&wxLSc_RzA7{e)tvYpF}#2S^Wx;D!U4zo1Lmx
zB^R=bYhxE>>XAr^BcfK8X-%Yj3^kg58y&~Gcv;~cjQG%d7V9nQ8|kYd2z}$6gz?kR
z&hYx3V2#__2hbBV>?ZmY@Q4TU;}yzIRKJWzGGpGHhwemNm4m<XKztQG{Jk#Nb_HPD
zBqFsq%~@xef;-Qm7e6qb!)!ssc4?mqSa*_n{I4yxWBvM6cMZ~|4xI<WVcZFLv<A7*
z_w3$x*?t;J$ssk7zSG|G4UCiBRlK}lnKTGv?qxh!k$Q?5>XGoI3IT`VV1Tb^Z~6a)
C+tjN7

diff --git a/doc/manual/build/doctrees/man/cascade.doctree b/doc/manual/build/doctrees/man/cascade.doctree
deleted file mode 100644
index 8509678583cf3e3cd72882bc149e907889ffb395..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 25350
zcmd5^YmD61b=GU&+Fh-rwNlw~8OO3lvS!zEtk~JecAT~9D65AZDN0jEndQ!Km!xKf
z;~~dh<<Yb$5_nT4{ozU4I1eX)fuu=c1ZhyDZGg0B3lwNtpheoW1@fam45TpXKG0WM
z7wC7+<-M2Wa5$W`fYyd)$@@I#-0wU0@?P@%!pLX-du<2*7tYkYYA0~&{zB8MS$;Ph
zr-X*p47$&CkN;x#Bi&Ls(Kes)y-vGob;BJfQMH|Vt!*{C*ShwOaLl)=f#Wq*d3(ej
zwa2b?OUN7voS<&Svcjol)32H}%UC{tu1m#GYR?sGlln_$e!NTFhodbMeFa^6pTA~?
zlV%XKowZH?SxL6tPR)lL;aIh9`aTkIJ<>EA;%dCsY3Z9avwFR4ty7s!I2M>2l-0Fo
z?8Ej{I8jlG+q=V2sqe~S%?!*%+iO^hn@+=PF8b~2VpZrM|CWPB>&=U(zt}LF9kaeD
zYSW!8ve5Q}Zn&rJG_CH+uFjf0DU7R)H7gUs@yj=wUdwlUVW0U}g0Kk$UW761TVVnF
z2u%3X`1eNqdlUX0g?9Ea*6O5PvUl6Z?GyIhD<kN0M>qjvnj3AiWyi<l^ir$sA+@oz
z8fms_tgb%!*!fHEc;vis>G3P)E?vBQZIu$wEMK~C;gO4vKD4^Z(v`wlzhyhk%>}bo
ziy$;pcLJ+z)+>I{_L>{<p7!_lB$XVCy6!3+e<rPCI2Os-HPh-o3Y$C(73ag9hHl|u
zpOhYp<cSM%FiSrv%D%Mfy2U5cGNlE1Utd9fP7UyMuN@)ygtD#fu2HZ%D;En7Mi>}_
zY>bJ{nywIz`x0)Z1X3a`2C4}(FqHyT4v?oFwft(^X|a1?uFr>wG&R)WAU%nsTd|%e
zG1d<$gD#vn5uxYA3B&P?z-Iqq1Rh^5ftm{1wbccITp(k#7ok(JrX(JEq50)O@_q^O
zKF@eOkRgyB;OBwR<#2DyYSx_QMr9NJDGt-wl;}bt2<|l5l}H~AH}YGNfyX0D)O07m
zla{s=?%|%o-F{Gm^Tcl%HtJewG=B$be7lq5YQj-SOjX0Fn78X<&Y<Lm=`_3cABAJM
z3vRS9f9w`zac^z5>Q2=Ox?7z6jM;8>pXGXi+1{|=Ewv`((7qLcc(1bT&IPR^?5H6v
zVI22|k^@woft29D6y`pKR850aat;#+k2y@3d93cOnRVk5b3r-wbh6^ZtLYI-4-E0)
zl^7pp(f@Kd;xud4W(+`LChqGT!ZFOOZHFhz5<t;1opv`oRP`Dd%$h+EGdvdgZAKZ3
zgQ;qxChl=(k6sMAC3j-yjve8V>?&p7YCmnYyY3VUae0e|^0lP!7g_c_Gz2}Om!Q=Q
z<y3qJ^L5Z^Csq@;l>L)NIqJqZbMEn_$1lD6%0m&sm%|CJ%JaOYO1O)pr=`a{UrMXH
zw?WFZ;Y;v^&PJJ=z~Ts!@MVH2;lyU6zT~$|S|N?M+7_!#)3AG(6hG|VLVxsRJjWXE
zW#MSvq;-gvFJsV3;S@=MriCEWRF#)Jz0$ZR(V1Ju4+*f)PXKojIm(0XI%z1A;8L07
zZ79@Z689}gb??Vd!VE<_zBS(QxEwv%y-rX<oXZsA7zt6z7oxBEliE+FpaWpUlawIu
z%@pKySwnlR60;=S7vq><k463rOI;wK8%`1qyfqh#?xed8$IW`3&_L_kl6yN@XN9a2
zPF4c1TEWUM@Vm#c(4{+ujXg>TIfz1$Z=C~F=jawtjX|{PHG}vQfn2o4X5dG!V9JeV
z9z(F+aGHK#Hmep*!)T%jk?Hcunze3r>cNt6>fZYo?!o`3mhL<K=C@uG^D=CIa~e~l
z_6#&iV>s<k<@9g>76_CDa+la{o62c}2^+$h=^>Q^N0aQRaGa?@8;vGO_tR)B9K*o!
zJn8-l-Lkuh-#5Lo@bH*3o1VO!k;!H9<~J~*?u|0#{Txa}gXpV5vrSK?$#T>Z_2*kb
zfaOSci|{cUnS-4+KTMFr{vYW&GQ3sXxQQu7Ocnq`*8EbgdmH7t^|V#*h6gkWbSh6E
zCPd1ZK-_(hGAUBYosXr32g<qw<IMT9SI?f0<_S09kfvhgq)$quDO`OE&8Klya))qB
zFG<UaN3{9QTGB0zC*%Y%bb=D%_cDbT!X@<zq4DefI$G!DP|0<0>ALty`urwRu65mS
zQ$e?d-{bC6`0a5m^I*z1D1%*#>r+YIUdV7JA0lVcaGFk|(||L<3c?9)7~Z-8=jNLm
z78dxP0bImf2`wLi*lWg<EzkFzwYp_IZPq)Mzcd-NF)yDqYSvn3<0PEYx_8ouik~#B
zcH3*8G_dvyoT^#ZKIs2c1~s~W4Kt-77H1ccLAtI(u<&0h3m0--azM7@y4>f`m-~<O
z)1{w(qMy&GtIy(U%l%dU{Wbpm9REJgzn|ydFVOEzb}`X{w9gvWPOM?=#2WV2K5ogj
z>aDK3V;6xME8adU*uf5HvTV~@m7Am0XDR7-c9kKHT$I{+1vZ6_(-0WS%Z!oadhK~Q
z<z+JbcWIaf-hk%a2QkP}ulUOHj!eCVa9kN3Cmi``%+~Oo@>X$cF;jpc+;@fm@iq0$
zH>`HdCB|boqo+xRl~^g}yXulV4aMD4__6XF_F=e_Jt$PfVXr*icA8k+!EKWqMu7cX
zqvYFOJ23nXCj0gc;~6Kgv4L2&S65HMc{eviQJKuVSY16XH)rO<Qqe{=SDxS@we?Qh
zsOT`0SnuP)xqi~dZk|hxV!<;X&h^Nh)AJ;Hj&zc}_aN~4uoCQoc@%zyvKkY4yB@be
zkBjI{3}&v*a#<_Ke*1Gnhz`Zv@F}|Dxq+|#f6fh86LZ7W#N2RupSb}`6Q9mL+%J-G
zU)S_7UA{`wgKRN#hJa9VhPbMM@HO=Px@L$MNq9X&+<ud1hyl&_ogu!Lsn-xQL`KJn
z8Db)7ZcsdyqImZGOfiO-Co;sine#+%^V%nr7?|Olo+l)}icJ+?hwkp5;U{;hxE<c*
zD=1WCs+bX8JrYAb@~4xP^<T}fe!ms40Xbe#auo7%Qta(}xslz{%Z<_%dpW*({a#Lw
zV>q+H8^~p`iQwY^EIRX(Inh2X<>YKr(>8I=Hud<jcrsVpqdGwi$UL-6dz<utV0YTx
zk8&}mawqR6?eUuR8@*ed%i%cm!?PWBFM9StcZ9RpF~ZXz9V1oh4h~Y&W$38+V5(3B
zhmeiTl6!DE8P5stPMoq});8-{tDK3pv!eTlR^M-wP90|tT(W;tKD>r^6{{>f_ixK;
z?!#mr;ml`}9cjn@NQS9P_8%5GwQ(Or-9iU9_MgWOYupvo%RjGqHg;ZP{}5|XaTp$%
zi4ULUS<P|a;H@kOeCx;#wx0qLW#IH{TN_C@xx>>w-YkG?OLR{o6wcECmy;RgQ#gL-
z^C&#SMVm-s+eHhh`Q|nuoZ?uFQSSZ75YA$SD&8lw+YwG``1OD;woiK7vTaqbM=NE9
z8MZZ+g$l|U<`+^1{4g6Z*UhQTfs>H+28qtwFS&KxXQ-T1P1{6zoVYda6-5{E2aAR`
z<BtTmc={>155&^KV@a-j(8KwXq8Z)wBiS8;E2atd0*NLFwpT)dy3q9c3QD9sSy6g@
z5p}miuWz8<Q1nX5PWwHQTxE>W=U9vka#6+*<Z@k<r!9#($u}Ff7c=TWf>C5f@X7U1
zIL#(4l}3*HeH0wTCaU;Zlmm`7@h6F+7=xxSm`&^f8YG0TD3eN69Qh%dN{?}RwvroY
z_dtRlp!^UV5dv#XZvsbBlTpjVDftb}5^>*;C#lJ(U*$Ac{)@CuO-7=wX3J|CmMqGa
z|3uyGuw``5kZe(tQ6znwFQ+iP|H^`7@P#tA%@;KXiC#12Ad%6JGg>l@B=;C}AH*4|
z_|L3TK4<ntoMAC=+^=ZUo1vI<FZwUaockchBFYcJ93i&W_vSO_x^)BRSeiNFz94h@
zRZcVKJ*0JtIijv+&U-T~S(G`KQFlAcF;Q=*c}6iOl0MFy(-_`MEJy}(DC6}rNA#M(
z9FftFIa)G}B==*GXb^L#;(1mnpE>uO-L&w6ERLi2%}xX27;Ud!H@vpEwi+G|n&gqD
zX4dc(74tsD7R_Cwsde20(BqRRKLqoH+S*<>fqAKQU4VBKH1FuHAL~-<x~z(6#(k5t
zO|9#wp61)PGVE8BZ!e+lcKG&P)EkO#YF)>&$JzE)4C&Wdj10C>#<tm})^*fp#=4G@
z`!P*RrIF+Q2+|B<8ddx%tCP>PxoD2Ma{1h2L@iCFj2y+4AG1A*apepoc^T!0;EE7j
zYkU*9ay0oUWBUzF72Nb=iZQ5KnkQ2uiYHTYJ&*P^O{P&GJ;4{H$pq?dhbD(mZz!51
zM31xNK@8>yOOe46%Gfqb)JzC#F-i6(9)6J8k0V+pjTrX<$TEl{RB;z8lh2X85l7y6
z`GTfLGEp&OnQc&v8E;4bZ%6qdm?6Z~dfo(P98W@=U)a#x;M;!exU)#rG(*-&V=<FV
zONMYSnj?0G5sPx9hPvC~NE`Kr;z&yPI7=SEz^<|!87!fUZL?%w!eY#mg9)CnCHpZ&
z%cT+IJ_mUQF@-8#V}<gWa^z8Z-N#ro@Cix>Zv){h+6#I%+6I(TT>27Qsu-8>C5rob
zlplgiLLqI5o4}>TBq6XB-m05e#;V;mnbMC@CyF<a=GE_$_JUUmC9*qBtv|@HX;Er@
z4|TUgtv^M*p{Ug>f1F)sG1R}yqGYg(GPcdG1Cm|RZcMO434+P2ejL-%X=J&tLaIR=
zql({QwemT3R2=15n<l`8w|~9nI@bMoFcP~R#<~OEsjY^Br4{FX!uBi1xpzY1e@FQt
zI42a;mKn&oWKp+-ZI|>{Xl@ya5ak5@QRnG+TeiOz^rc}tuxjE}TWXXm9(Iq?rF`2q
zr~V#%M}u!R=Ix-t52eKNO&SEN)mh_D5Z)vk6~`TSK|ng2!#?Ys_><gcbr*V)N{Ma#
z@U;3qDmw5vae~jqCi4z9CfP-#4g(JLX-Sl|Uyzc8`+ExtmowjU_@vPDmeJnDZF=7q
z-)On_q8z{6lRllIi~-*i#m|DyqpbyQE1xs@M>~<%%rB&Le4>Dka&P+r<h#i7^~Vxi
zn>hOsK%pu^r6lxIW_0-sNK_#!+%2pSKMM-))FVjS_7XDDYF6yzXJTYNvtkcI_N9wS
ze5j{v>O;>xegVr7Iy}}T!?{z&5a_sswyq1i+{CkuPZ!Waj{oD3;Fno~!sAa>gwTb@
zpY){h7k)VDIF9Qv67xd}1!`|P69_S9k*M7Rg_yID1tl2NgPq9GaQJ2cLlPW*gAJGg
z2g(=%4(~==U*op&okj2Nyj)gA%uzPey8KB2T_h+jLykXYISPY<stC~wgMzf}2a0nV
z6k?-Sf@0Wh*Fm63w4MhVS+EB*B10Sc9|{<nK=b!(;0(}E#t@)+588T}+sX&c@Egw&
zsD`hoW}@*iQY9BeYRCF2^cX?;yj4+ZCZZ}r^}?VdYxM(NNrR4dJSF6M_8&7b6`PS_
zm3t5sn~_8@i6=E9QL;wUi2@cRG~LCP%Rm!l41uPfMO$}pTlr|p*n5rOl98kEaJGOp
z(h1Qk*6(0Ra`6*inNSrWd|^D0zWwlUhsFao_fl}+t+q@g9L%cL1BBUBDT#x`#-=jd
zMghYS461Cf3>Z+x5HNTWZB@9fd>AD67$XEE6O|4hE1-iM{P&~(k8=No2cN14kqZw#
zY1wb^W6v|ZV<m?_cmF6854Y%%j<?i<h`F9}5)-M7JY~@r3s{s;@nyDT1}Z3H2vmFk
zZGC~;%16b3?Xw6b14=0^zgIv@iJJ-}{4Psa7&lZ!C{-9YWQTsZd03C4+=!9TDZVX|
zdLsU*zHRn^DCT^0_Yz0FyH?7`e^<cB1f?IbaWkMq8ACwHL|cEuZRJC$;O<Zase+}I
z)~^-NT0(0L690rHE(|TIB9tr)EwYP-R(>_!RniaGB`g95ZFISJp%8~;p{*eL94l)p
z=v@#(Yz1in5Oqbq1FrT76KOebm(x4md2g3rwk+e3y6;Jxj;jPUQVZh*uUyMhXe;+_
zl+#;mD;9RM25wzFYzINhUs_Z#xe$v6anI^aE2x`mbTzpw-o!QVnmWZkK>?11X40$Y
znNI(W1KSkJBJ>u;yg~d9#0b%^ue)bS53yHXpebdha|6u8VR<@jr^_ACa{4jq=&-wt
zKZ91@u~(coP~~B+l26~;@(d@3JHL?9ZFPWdv;!~6YD2zj1ytf!ngxZZicm>|zVGI*
zs6tjaBdn0v*3t{dn)LmNQ<K_iCT8>kKvrW5m10|-d(}*UBGP_39+I-v#|qer-1*P5
z^cn7)GKO&HF53E_ute@gR(9Mf_0fd;0@`5M>klGS62crrryn|mmHQ&gne+=qPm8|7
z0w?RnH!)QVtJJ3uFQH!kX;D0M6+VT~auY`7d)n7wvo8)1A&zM(|NP+c@dqNRB8H_f
zrfDPz(^*?}OB#I?HUy_S3xU_DGsaIJpG;yrULqUsM{=9%!TuZi6_-3XDB%(BT0ctv
zEwmamg%BtHiftTm;`DLd0A&opi3ZyG3vMglN8XxaH=&y5$A6%`6hBnbd^o@Wud)0|
zycgxlPgs#;-6C8WofwiU**e5|(}Z3BZGbp&-cb2}8C*Wj8>%9Pt}t(CwEOYqZ87AE
zJ?1>##7eAAW=<4w;>1cvJj^9dqIfTHV%Zw^_hJl-5N849)R|eFIFvC2aau6t32tjR
z;>3g(K}hx2c<v>%mm-cziW4W+hBm+zmOlypqQrTE6-m}DLYxnv-cXZ_CQe+3IB}kW
zT`vp}Cr%tH|E|I1<HVsVV(1DJhelfyC%;<kiHFu+a<LE4?FbL~oi!g}g%PzFpMz$8
zbr&uyEEpedcl;pw%=p7b+rs-VRcmR<_|UOuy!Let)^}{lxYF)eACdexkd>#_TAzf8
zvgi>`#d=D7e(OGqD)#Yk?-@k@tynDwF^dp$>h6_Y38l0x5Npt~$|gM`#U8$pW<+T@
z4_|l$iZ!IR7prwA)|N~*L~^RR-LWSs#3;@Ka}*!hJ`o;7e5Iz3*A8enI6g0eG;wU^
zk-!VgdUpjMN6IpI(P3prhrqWJXZM{pMRu-4ZCwoa$`p=mdXcQbamWyPa*iIwI8OCC
zVhSS~9Ys{T$`PK_;}k-yb%ItW=w7sEE`}2uRufT(1Fzl14Wc+(h(_0F;by9hcflYk
zJ}TbqhC3G#_d$q&kBghvQD8E<?X>H-o2Gbq6g!%7A<Bq|mKN?`M>9<?uwt3dhSL-d
zyV+?}HrG9TW&CV7gBY_;t3prJsOY1?TSbahw>YIjAy6tZel_}wDntRTVHSWFFNst{
zY_yeK;iQc(N9FBEIA?7-uwsDdn7&RO;Y~<%HxmWBqHxTX*+9w!hr}Y4NIs_tn^o{&
z>QM+<gl_Ew>*WW^bUYE>mdvbhxU7ne;GlJc_2l@u4gwK|v%>PRRz|p$Zg?b>lWM~K
z0VopAh<3FMvi5Dsj8x@tAL#(>`F6zbZa7^xn;RW`AP9@s@O|(u#3>ICw5_VwuEASS
zpj~uBAx|%cqhfJO7IA745cX&|V|D_sqLad14&XLj>oi&w1xXl|6A<{uYB#}8G&9R7
z40alQoz(KJPR*+zOejk2!z(+UZ&l(o870-A^0ebS0<yD}n&X>zbrFit5*!uBBvnAW
zy-)^j5Ft^)JLFAA#VY*P6@@{+g|5&EqA@Zz5jqsD)iC5!2<VQX61OWm!#Uy`kki}%
z5bI6@L3uCiI~LBgtX4(sT97h`Q``dDAv;kce1qKlK(fEkx)Io3bHQtGfKl^Qk_AA?
zirk{4=%`k!eDt3CV9%NMdNtKNrRe7GlFd^Hc7p76tG(b@!8-Q=hp<R5J)yISz+3~1
zYJuHd84r(uZ;gr~r&6FI0<><0`w;LtFgGi<vtifqj{~z)pz?69k5ENH<*5!>?ZZ$9
z_+H#r>K+2bAsMDUQne9By^4Vse1nzQgs6SJ(?S473aihd?;|&`1@w4Tian?N!hUiT
zn9EYdoCaaH?wNv&6fypK7m#VJSv4^D2EEE^Av*F_IA2An>lF(hwbv_%B8#xI6afF(
za4w3-53JVLg-_cGcU#S;yLc5X92edM^aT<TLec>@f{KW_%*xHBCs^|4?q|VMm#4sR
zf1-d0Ir<Se(fBmT<$daGT@|2E(G;#9WydH{T$kLhQqwQeRQU<}m+T+gFT1mN3(eh2
zKP4>a-J|sL0+sp#emda<)#f;rG|zDTE&CH&_K&x?<`&o5;u;7qcZAAt^HXU4r2VqJ
z#ckWKaKKfL&FgL;N}0H#kcTb>MdT1$E(Q5=-$_4wMR9&yin!vwtgcu*+DGN60UYpv
zzj)@av-vwt{_d2&OXKh8_`4bY#)rQS;O`jt?Pq>ho8Qso_exn^Uj1~!={TU-hSLb1
zEoNQVRiu#LlI6r$##4xFoC*Ro*1Wpn2qzv)C92XBi54ehuUu(=qJ2z3?Vt;XGM{cM
z%E3wiUbX6V$Y)ZxC45N-^udE+UL9MG(x1bqe!Tl`cnHL-g|CrOABlPUm2*ubPpM?a
b^_0`B);l%g(FWB*a0dAQ$W@9RkA?pQU%!Zn

diff --git a/doc/manual/build/doctrees/man/cascaded-config.toml.doctree b/doc/manual/build/doctrees/man/cascaded-config.toml.doctree
deleted file mode 100644
index 2d0b71ed10424a26419a65b74189ae0a7ff14f3d..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 62568
zcmeHw3z!^Nb*5}fqnVa8l5CIhOQt+FXe2Z}l5Ar<Hco`(hma*dB%6mVW@@@?rn}TH
zx~erA1F;Dh7^uLPbuSwO#=I8@5MUFsgmv(;;B_`^SV;B@ut0d*2@XrLArSHr_CM#=
zeN=Z<b#+_DmLbHgnyULa_uTWo_nv#_s(*j@pH}ey1*64!q2-q=UcOc@I$k>%rWaMG
z=C|)|Z+T_=743;&q-igD^;Wasw1X8WQ7Dxw#imnhA8wac1gkx#;Fs$)Rlc;UG*nuB
zxIKZ7tNgNGag0yFS-b1C`SL=mX;UTZ>T<=guC6z$w%?{osI&5rbBuaVD|%O(KnsQ%
zHsC<b4c?p`<ZRz>mgibN#zAnOQZ9OcF<4!w*q(=%cwSYrtKw<6*lOrM=Ip|erZZ1v
zTES}HUZ79y(rD@I(wbmoMj@qiN-!jG@xrO1?b}nOdexaaR<71-Q(m($Rj|E+U3BEX
zlYX^v(G==WRqa~Ku1tyA^p`ABoGdU-@_xNq$u~W}9jvUBYfgLL$*nmcWCWwM7n*jX
zWFqo!cZ-g!7KUc|CC55+{r>B$dB!FEW0if+5-m$?&jZ_eYnSCa)kekk9jjp1tT`vQ
z;M5#Uh*Lyk<=TQZI~$I|D9Iqs&gQK{=&I4IA1xPA{-|APQTKI*px&TK^>TAgrM_rk
zZuo7{nYUXNUzW9NMgHVD&7;(r?OC=}D%bpIE1SJ=EO{o3iPBhb>*F}&wje3YcitnU
zudbAR;G|-r{G1fL2<jaRo|b?)-TrextEF>5pruWq_ow5(^YPyW`0p7YzS8E>vk3^y
z{8->U5!f~n;iLk(t+b`Iwe+lgD~U@=6Qxs_TvyiWeuU*eva3?D3MIR?ped!BF0H2X
z(pDKH(`?mhQ6dzDb4^f{U7Vd|;s(K2nPBWAj^)hHLkQ)q-K{3cgUZr2t6KMbE2Kxu
zE*8r~nRcbJgl0rPHhT1YyNP1+Os7PUPE(LuX;KKk(yHJ@1fRI&*@K~76Y4Esgi93~
z&eFu+F&~oj$0X@TzU%g0l7;YZVZxtzyysXEIR=@H$a5g_n_4|s_lA%oh7FF$Nfb)8
zxL&>pR$q0@h9rifA=Njg|5o7L(F<p!p<YhB7xuiKd2n4Qy=LYr^}-QDhQ09TC$Crm
zD)&hFKGzyQx??=os8`B`rO9HsNpGecUn?>GRCc`a-0k(6GYNL_9aZqC-JGhF=cF2&
z(nZE|zE@sA@p{vlY}kH@8}2O6WsW#YUcNXto;y-4Hzo^Brw9fv+ZC@@Z7M%yloySl
zwM6)+tFRxz>OICoJ&fmyHP4@%E7$Dik{(LS<Domp9F41x`X{NvcrJHq(RN@H9L`nh
z3zHS+s8b;%lxy?#aef8Kv*7r6_cF_0YB==KTk=qN+<HY$)Ggmmul;7r$u-KwNz&d_
zY>E&GDJc=3$H(y;)G-j}FHwmQl<Dwaf~E;zFn3^0zge#w&It^7D1Gbrj-8k0x8r|1
zrZ2waqRYm&S>v}(PwzM^{yL1xBzK*re#$qUqh)6?xs{8zo2}q4stb~UnQ>S?^loHF
zq>&xm2qtk7wv)Xe;1R<}0c2;Sjh*A*Gv>8lGXgW*uNmQ2ml2ebc~hE_2}X`pE7M-X
zCiic+0h@`;BzRJAG4N_R7_PvwYk?u*w)o__1*4_%LaBoP{22&2a>mH4{hd%lZIl|T
zWoX`DwG*mBTbjh?E5kY-k*d{Dcxfv3df}5O6)XQ%qyK}n(G%dLVn1Z4*h`>dQ+gb|
zrc$4?E0*ji)a{+GRsRoU>HmJC|L3&kg7sblF4M6*EZfj=UsbLZonwZo7v@Hy0T1*-
z6+pMc<(&vtHtce<9h_UJS0P=C7Wto{`Fyz*+6(PqtWYfqn|cxxJ1O6nh7R~`n^5%y
zpeh9QK<QZrfT+I+RwAxY=z?nkUq<Q645<a%Z#5%6!)Vk-;n|}qBV2`@a~Yq2iN0Dv
z653JnZ-wN)??m!MFia*2w}hYv0O3c+bjC{emflXI`T<7uurUGCJg&723QYio3QTB7
z1;emXBq#q?(EOqsnl%IsxJv-Ej@st1MKV-B?}o~-WWT|DgdhmoZ3j7Oy*}r{OKL}k
z7!1QFqCSWWO8*x@lo`KXm_fwB_u5+!`JlfThSCtB;(H<2O{4Q~6G{wJkZl2)GEgBc
zUhPb6rRah156qy1B(c0Tann^d-n{pwtM+V>=<BD7#IS3fv|>dklFg~5u}JsziqhHc
zCX^3{qk;YMp;Fni@c$HDsn;q?(nl?ZtdX}Ya<c09-n2Z&_u;pC+bm)ryn;O)hCaM)
zISPg#3RN$ZInJ_JhEeQO^ODeOt?C@SPs`d5qglT7tg5|)2n~6#h_;k#)NXFRMeM@e
z><)uKRIJ#nH!QE!Xw>1;QUIu4fz_s)s-r8*FISz=#T^Ttx&u^%kne*Ku8b1GieSxL
zt5R|NnMxT!InCjrWJP3-KFlCcR5iW^r_atF-7z~mjYt{hR|MobqYCa-L~xK+6NZaD
zBq~b6Kl$hm<vhF3&oB-Ij@)Zd4m>#)jCS;|FhV7=I=#<Bi@UkS)R2|C3uQvdKvk}!
zKUp{=R||#&a@)a4lVl&bS47*;9BD|k?r52N4pj?<QE7|NI?);=1pOkS#X@y;2*9CY
zy=s?hZFdO`1*;(>$sKFEx6_}j7|g$G^+};;mxI-{x_lg!uO~^TF2N{T8-A33Z$ybu
zK6<Lq`dVGSljW!->Ms-~?PU^F-(=lGnl&6>>3_)(LO)8r^tIsWvHD#H0NTNsQ5A1|
ziq-NI|06a3ttdbfrSHoZ!G*dFQiSpGg;2pis%jZg3CR!UD@D!sVwySy{Y2@frGJU2
zIYX1X_YlG8fXN;}|8J_>vwMID#!4%q!210-u-qKpx@+(g3mg=B3~-v3-8O0pweFru
zEuGfclKV8gIox*dqk`^P_}${3jo+y5-h+PLOmCS(-E*lJuk`4Z8?6H`JOtf`&=4$#
zdUMI5kPZcBDb{20#KMA9`XpOng{1$6o;&9*Nl9M~pdU~`8{ye^zt{wYR~E1$(hP$H
zMT?>)dL4vdUuf1_4UeL}Gz!Gntryi>v=ox7){Eu&CDO4~T9#PC>q_~EvyI-=@aBjm
z^(_`WL^xU$W_7Ltq#>b(C9q}^QukP}{G<U^YnCtaEEsA?M|wL4A~{h;dZXWUlV8a&
zv81f1YgSe#<#lBNk0yKR51LCP(sa8vLKUfXLPen{U#Kg{u4t`PW#Rr70Cs;yKX=g2
zztYd0>gknuT6TY%e_zGFujb#o`1dvZ`&#<#5b9Eh4l30zh?VL@+&aQZzFow5>-apV
zbk9fIVe#1+=+#ApPc%`|a(+~Qq`<ADu+G;?W}J@rb*Icom-ib`!;tsaMdZDe31CS5
z-USti<8dHnkp10&YSMJqpwUdS{|qXaDEqGi!>kJt(wgfb`=1pr`x}t1G;2@>w1&(A
zR;hr#>L`>=$Dk}p6CA)0E>%M?G{L8(a3*`s$A4H@uEA%*IxbfJ3~1RoLPQ?=>`1M?
zSQFX|J{%UuX?fd&i^W>QE7e<-qJ;%b^1)a;l;MVnm3&%d#AX9h088OQx<%UvXcfId
z&KXu3c?CrJZ5F!3DmU~Fx4z`TZ-6h{Y_>Q=rBHank3&uCwS7$M4UuWplpiDhr6`w#
zJh&*I0f0i3&(af%a(;TEMEQlWqP$}@tsQKN%JR<dg9`H<9Sy|_$H=l>XxV6azP_Ug
zDbTy#D<WBnA(C{7-a-vSq92M#^zn>9L#Agbs=$109GDrTdN;6|w%rCA%_P-dMg<e4
z`XTU6Gek;HsXk6pog|Pl<_{g*dyR#KHH5IRpz3RTK1)%Bp!;GFlqAD%0l;rl02?y=
z>oVk)Ai2q3hGZu*-g9amc6A&@Jh8dd@aw!os$76{hQP-Paz3}$w=zlavL7qId4C9k
zaU{QUkn+9cw*~J2d&m$nf<C}DD6GheO;|u{tBIvqCE=gqqf{jE;XX*>g-Ik)K7fVm
zFqjpFMJOgqN*RtG_LBM7js~3#)e4`D=E<%!O16x9lD-WMgIuu=SCA?$VdY&$N+tDc
zvi~Las8IE(K2UXA1XWs`q^L?M9R^pGUjl$aRsJPCv8v>!CrVXrk5!c^+eq5MmZ;iH
zD?6wP-ILO2tY)I}o%>k2wCXu2tx64>T1L^?qcL=ru5BMd4MW?`M6~Ue{>B8Q+eZxr
z^v~je&Y*j{LD$UUeg}<a(!D>Vf{D6!2F&=q5Jdy%-hKP`-T(!rwmm5w(XD&Ciz)=2
zdP=ufoTPhg0K6XMMflIqz26-~_cBmo4~2!zOVE_&V64ZWf^)Qt)~5><r-E~|54uYQ
z|7r|Y5s1|XffOPHqB$l-y+{TaT)kWh0EK#a4n47Y;io4`y=;nCFX0Bmc5p_AE|DJw
zRUG5AJu!XnVwYMNmUW~K&@a@?-xxFV=>mU0Y8V2)6cPAh^`kSwM{tPPo?0M@FQUMj
zi32NxNbd$t6R3MF8qFlq4^qKIkzN7=JU>K2Pmz8lxl`Q>B-mtG;RSaNl2IfIn+9r_
zUo0Z*IdJgcRlCXK(l+N~ZAKw>F$S?os=&oSeKk-+6@2V!Y#$I2GK%!^0!SD@gE>tC
z)fj^{u~;e>N<1F9{!-jVqg}uX=|WDT0y`tHw>ZB=oc^G_!9^<!y6v4;$RVt#R%nMm
zwyuZ>9d=Q`x?eJ@W1nzcv>`d*1cY2o-Ccc5T_tJienIqDZ!Xxi^6lb`6=sZgnrI@O
zVE3Q5{V-wjpJJnew}pLI>?EdhR5=wrEz>@AIu|C|EIM$*aca!!L&N99X`^V6v|kOM
z%j#qQ%Hu(i)!luNRU<-HTC}F<ekmyj*Zm&^fI|2GK0UGS=cgx1_iv5Y{d7V>n7Zb=
z+65hkKy0Z&t%50b{5m^Lbh^6N*T!NSkkT^Yt0JAx#*j|B@$dj@7{)^@i}66`EF?q;
z_5~MFV0|eLtPI9OH*lK5-A|#>Ovb~5R4~zaXn}+750TK*c<5LyGoqWOU&SVbat!;b
zqfqvDF(^wi3l=eiht&`avtZX=9ABZcx^#NTo~vW^ODv!n(DH^!bKMKEI;DBkAdW*z
zYG^<0V`xiBL;J>4TWw1Ada4go5yjBT>=BWdMTkO+gcPMGIec)Xw+R3WrFR}ZvC`wG
zCrar(BUb5k9)D{G=SB5hSAjuQ-LpGeVlCJ6q#aYXxuax5XFHPiyFVyuxip4a()HX$
zsA1^2J0g1SnSFo`hdFC;1@2XG;AYT&-9T$%ck^g8lm5Gm3MT5mJHSlaL*(?-e^VrN
z`G9DcL4fAY5~nTYs*PO3!(xw8AAQ$Ts5=~kx+FdLN(|-2YAA*t{Ds_Uf<1uP{|MjJ
zvNgC3r%;~9LL@erls$Z6|I4u^<ib;Z9$&FQ$!F0kj*UgEEl9aQL&xEEq*lO6X4RUw
zqU8GxZ+dEKq3k0DlLvcF9k{OM_}AHU-V~L-atl@_;p<_YF$er%Uk+(!!!@U!Dma)$
zZkyiaXn71E{AkkQUcCZGPs{;1<M7*?Ik$ybP!N^L<EJGzbavqlyAE9|rh(3w-*o&D
zp*I2^;i)n<CJsxGBuB3#Ea(behPkC}htx3mbu3t8U|Tm6_KWTPSj`1WYB=VmH~$Cc
z_na3AUWSs2E??UN_F#yXmYe0ayG+nyzx-YJ*Bs1C9$#|k!jDc3&}&}a(qnA29WpX6
zr&%#Hr%)y4M@z04HLcF}yeh)NsdeP8A}PEESM8s|c!g^JFZ9H!ou3|~YS-WgqYHe<
za8ev;@Y*c6Nsh@cGWP|(bR3>Ek22yYVcJo~iG$&pCfdsE9JNJ`7Q2SCMtrzkvX7F>
z*(<2o{PPUNffJbSLnvn`+&2Jny-WQp(j&98^2|NNXqc5qi>j4WL=*8>xLZTGtTn4k
z4jz^*>WbgW051_Ub-+SqM8l#6Eqd4UnMT6DV+<Y*4!TMByjb&2B`0Vjb4_G_u>KM;
z=!|&?Pk5#r{Ww)MLIx4%K48q6=GurVBav>rQ3xAd)osqF8)!MyFzDq?K%GA3F%pFb
zs=#=oIz2b8(+p--ch`ER-BoBblbN-F3MQIaZvs`U4u{y&%$g?JuVUL&wN(W*l3{{G
z5usgzv!5P}1do<)7Z8%4;{y;Ohbzv0EKMkcUL1qaB;)IMF~A*afCjG@_e+4W^9Rcm
zh(llxn2!+(!-jU~sxgYh8;fO}(!>s4F+#D)H#bi!G>f#8j0=fH2OQYM$>-v<q{UxO
zX9_{j>jOb|M-b#b7Y7SEj`6t9Gu{PP&CdEwoZ_dGiMy=%R*loP5eBhTSGMP{A#f2J
zs5s(p7bqDRood;}o284+Tx$V~`wJmGD9P*IOjFcxj&VfwB+<Bvd)7kq#Tmv)Li7bF
z$3paq#{{#&FSVET?Bko!|3U6Q`4A)7VY`52VJqyTDmS1C$sI6d1pU7W<CU;T=s$>*
zaafW8>D3F^8b}LaehJhZ9`-erZ8GL>r;fTYA9kWJ&wp#o-@zD29TD4NFXxd%FkU(+
zxC-giR92+_2Vn3Rcby8NiFB%xg!FB*v!r#x!?-w{&5MU{u?mh;B>aQmon!EaK<-_n
zeIMZHL@-QU(V)cdO8Qfy_dPt;RM;84@8mH8y%+M%#$J#qTvENPxcogJ=3ee66&@3p
zR3!<Qm(0#C+D+Pe8zo`2snTvV92+Oh>m+LFTm$7~6L`|{;<Es#6RB&AmL*<Shka?(
z{uvKFbtsJ52YJXq?N*a=dqAlWOtrHj_#R;EGu&G$R3?I{N)m#nXJ?&ev)+uNcab)>
zE;j2R)(JXpB0X+eOa+E%kHMBMEdMQ_>cldna@f4Y@hbjXWB7+W_SCU3hJV0g28MT-
z7|sT$LNqm!713`2)*j|gQ-L!PO;wT*4NX{p1ynBBl|)?AehmZFn~_mLYD@@f1aG=<
zK04Hmb2t^cCyDl9`ATE{G}P@p)z)bkkv`mja;y(8OTc^vu+<DuV_9e5t>}C$cb<6$
zsEVEeZ2@=sI&KXL)UD%(w5gE=fV8Q$0FxV_Y9b4OvWVqD`DmpKXFGorV-&9YE_!0u
zou3AA-G#68_?+1%uSukk>pHV<d>Y(!BU?G_0KSruqs}j4*$+ADn3_#T&d6#fDcyXf
z$nM2Vc2P1)cjazD4a1eYH{!~jkpdn>RMKY!PALwY3{GA*P@34>8_{ScC+{{YnCRr)
z3l2CK4nEe&OU&+M@Puq&V4he81cE1CPfyGf{PbkziS^NF#`gB(!U|BJkA)T94SaTr
z{d88iFQkUh;dpyGD;VI#u|oJ+vBJmVz{$W0-9Q<v@D?<hi51>U1ru4}?O=tsg@YfM
z6=VYgv%;4EfnbHdq$g$tema3zVaMaa3Nmx)z*^x^;IltgcqF8TkQMGrV}%HK-K?NK
zD^~bf95@+Rp&KZJ6~2Q;GqJ)CsbC^2+y_?pUO4!HSwS{1Fe{w1TC&2q^u(;dPfrjl
zOeCf^(w0m+=uitg1uszDvtr}pv^L##w_${=KOE>)N^;m&6#NnmK*Uy|UAM?iEAt~4
zL@Kvp9>pJvQn?hs_Qy#V(eQLeq<2I(>C|qRrFj?kNpa9sabRTNpj2Q^-e$?p=}~od
z@c4D6kFp~tCMKWUXh;n4hw9Ld>o7I#RO+}+1CnLd<_H0x=h$xwka`>-1EE<9stG3e
z;MAxI#n^Djdz(m4KQ-ZA2B6#mew;)h_6{)7c9aN1rRhniHq-hAGMS5whZO1$*B=+*
z#*38;x`QHg$;X1s<rNxV7lX!52V5o{dKW;yOM~7s@P0Sv_nw_4ey4cDb@ea~NdYq?
zZ57#8C+C(XIqPb;6Gks)@a}xVem<AOK?$)J!^YJdO)Tlym2K9p0|)n7NEm7(jd+2s
zagl*!J|B(tJbww%eZm`jw?@m)=R!TL;&Q>>;|65d^cXIGp}gjrN$+JG8%wSTrV5-W
zCZj)fh4*Hd6pD&a!;o2H0aghHN3QNy0IK<+Gh#tXKoY}y(EmN6e~rv*j?*+ryd1ao
z6usY{0kv|7?^8oeMTr@GBdoj`UBoSfygH;b<YWXjMi_$F87XA>)DM3}K3HP?FpcV#
z$C3W02Zt(=;Qu!x*&z7b?5rHMoZ2DrLKENDGt3MTJvGim|15*(dm&JFBVbFNP(|bK
zM|WQo-JM7@{^Jaolr;W9HN;eum^4mUNuu$inwsEbr_eaQKAuv2TR(6l(($@svM9Ug
zm`7&PF<xi_8{<mRFkh!eB|4_YnT|Il(lH@PH!Pq@ohC)OA3_HsqJtBOawjw3PEzhi
z)DTlqVp1+)C5dw9CB?8$oJ6@~O5A*4?+Yz)WeG@_a|ejsXtY(7vt@@FR$$;@7pyFf
zq-S1?{c*`a{U(y^RgA$7k`0HXNtRz|%G#d+?L@NFIFsx%<4Lv?JGut}R_a74+Wjbc
z+9i6@w43h_&vK~!R#SF@lK~}?5<jj0P9300i8Mw{iOJOx*NDi_(6%@(2w0ExP`cbm
zChIeI?tXDMUqZ(D_`+fqZoSEGpX7`|JF&-v)2tIIB4q?yAbdU+kB~u@IOZItl)@S}
zo7YG)=sPw@e4djA%3JQHiq6p~qY3%9Zl_r1R78vQ=8+tBBw+V8@<w5cwTI0i$VY`+
z{cv77zmP|_Fp1=?Xe~Gl$TiQ&1G}~?1W(Zs(p8c}<r-g#Xzs-BIiHgL&+lDQk^CEC
zNPfb-18;GYq#&SZ3UOL%S;l7~MfyiaQvNebiM1wGg|c8GQaId6sdrRoF%;h(181Cq
z)i8zKz%yg2?gtc*?d+_?CfTfbp~c!q2M6W+o?Mj;%wE3aX9fpxSn_l>NY>BJN@i#O
zMq+J^@m8bmuLg&!pIJ13icF;fDl(tn9~`KC;d~w!=_YtGj#rXZMX(lo4Qn2*H>E9&
zB7y!kaN8>}rYLJB+orh4i0%Lg<SjIk?e#@7!CF&s@cjiOA&d_GFw{&C0XNEhnZdhW
zK(bt1vKq?pZP>RitSIbSr|lcsN94_FWK8g7mUPyLhLj8U{O7HMLJL?<?PwVrgy@)$
z*x**5Coj6>*hkBxQ*g$IE*-(8nD!BD-(o#AIY;M?ct<SlgG1hP97@71t)1IiP8g8s
zIMV5H=+(ToZY0K!>17m-aiwHhp<odEF(}94KEjqDg4kZe*oTx2T~UC|{r1{=Vu(d)
zO)<)3wlrgAe*&zGFuKywDsR*LWXMV)nv~jy+z2E?%L6ZO9RPe{rT2Pz;^i%VdV-d>
zutF7of<s*u*>!?Le@WW=AQR809O2lgTEP;<Jo4>`%Sz3SKO?G$BxmD|B9KxHMW^p|
zD58cTQ2!L%rB84SN5BE^>ldoaqj6nkSR3i?Sks(4gGMtg;<{8YasA^@LDP0Pz}Q9H
z3FFAa1mqg@0Pn5Eq5=B}VODdAdtMq*3n1AmC}h1c23eivr1bP20Pt^6z#D*W-n@qo
zhLuI?q0R7Tj@Bzj$(y26C!B@d!J$@3D4EMEFyGb(n4gJ&+53dVvyt_R6eO>d@FsDO
zmX)9!J!IynVLLM|zRWl4xOo~{SuVhc!6+Zy{R6^`ST!89MK#=y^)cMfVz?hh`5u=P
zoBlUd`5=KCb70}pLpUv>&{1<1>9k(~XKyxJH|*Vm&B*#T7+R8|Bha*b6W-gV(ea>0
z$G}Z0d_2?#K0b%ReYQV*P?aQnT=YC#_e9juXqI7DIdoQvu3Gbe3cl}t$M&5UBe|Kr
zY{n^elE&9HE(U5&;o)!kz{7(W)c@%Z4^$-y5950ftY{D->>`~h^I&fynVUw7Csr2?
zv2cFRDpDY1D5-Gp&wb$FzhglE*dGq4ipGJ~0G+FWiLohSt~e?A!kyUbe2A`@u;v}U
z`BE*|g2Rp?Z8#so!~TBUrW)Q|AufxcJW%BV`~h(R@;2nKE|hYhI2jK@I<|R4mH0hG
zZlpAYW#=54H;P+rGk3QWXH&m9YEJ`&JbzAQ9=BXjW_Z5b5OR-#yL?{-Nk%&8)xx4S
zAF0C^K4?ct`Et0(l1`M7oSdDNw^u6<2YvBn)qGG_T$^Z3*cBi5Z7k5eh{*DX3#*an
zJ#=>LN_fVBto#R`8o1Mb$%b5qUxHwUz^i17mGq~sa3)tsH=fBSp@!Kf*_1j#y5TNJ
zaDYKio`hytzS0%9_6t#`mlW5trV`b&e5HH7qTimkN@9lK?nQD+)(G&Dg@Eba{8<v;
zzY2U0{xo?AJOkD;St-o5NtY})EfILYp-kV)QJ|Q(S0&S;TEt(?Ix^bpw-iGlkwC1B
z!)cWkC9pts%I?7$TEqw{^*UWugNz}0>t=|eXetnq8xl$#hR=L?A-t=VvW(bA>t%FM
zox@w4p`rWJ5Z}a89eYveP8=8mECz6@k*|%538edV1UNYyR>N%xp;VyT)@nGGN5d+V
z>UF?mL`I-s<Zh8L&3|rM$f4<3V}IQh#&hJ@0=xOxR(GXw8{1illcCA$5R;d&kkpGe
zZ_7xJ)G+hr!@nXko`TbL5o(akKB6c@SFQDn-7`6+7DHRQ&8{h?=zFiQ(4GAPvXV|(
zr*zsYfc@|K?QmG~Nmr+T5v-++XAmYc$B<RVTq3)4K&BFNrWP>V_XFC{2Z}ue^ud_X
z;1+TQC%mpThgF6!ze(463rF1Ehc?oD9Zs23tQT-V3I@}Z++R!gutKEe{d%?1<{Urr
z2G~DBgTZQGL_~k(eX+qB$^&$)Q9;%wzx_HcL8nvkxCSsz!+4^MP3;5Rm^_q~cz{Yu
zA`TkAhw!w8;xPMYTd@)f=7orYKC|f_YDC+dsdZ$iOhzFD7=v7h_;n0I#LB)wPaG@b
zr^gU0lc6bEbi<wWFc(cS-E-*rJ=bILy<9s&>cYkju_BIhQqqFZ6t<?qJ)&VK!h*Ic
zLjQpY!(*K)SaN(CQ>MaqfrHNd*JdCkyo=WTHch>`lbosGub~qLP4N<+vR)Z$ohj?p
zhsO{eJYP0K8<?jk=Q|dvC9CD}Q6zRX!-d*<3<ZRKp>Vi*O*anHgN3J{h7m0MawJ%I
zRyuU>DN;%(pvK~W$`DTM22Jy&`){CvOyR^4^qw3}{4ywMMTml);Y7|L%f}9wcPN^}
zdyMgyygCtP+&na=zOt&XItpczF(@;6!8Dt{iXm)OLolKT{}X1K+6}G!RyHyvybu9u
z7&xEJCbrx#ez`J9=bW64eDaja+-g+dUQYUOvBltx+`D8{Q){(Wbq+>&m?uX>T4fL{
z-($xU(1(N{VK5XPGI`(R#0jZGZtNeQpu^JU#N|A@hHVTx&KR<?<J3D{b$15BAP<(h
zU@Lh<BT!M7=wCBaXJp2tuCGO?E47YPjFO)QSBynKFBGFgPplaE={P9H<Etc;U)`xB
z)Q2P`(K`#+xv~wC!l4y59sV1m9%N}rKEvvTn)u&}p`LX0a64)k>fxIa^>BJ3U|`eu
zj|!9^4wMW^p&KAglWq%*W>N}wQo+PErf-7g7sG+~R0@~u!d<yxSk9V2h!B~z5J}+6
z(zmdY<#{daOtZ1K02|O?=K8IMvY`g7t<d<M7&Im+if?0B?^MGw6vY=p%PtH<3V2DF
zEA632D29RXwU11!p^b<j8QnDq?P2>lRw1lo=5f;nsYBU1#cXK!Fg7Ve7B=}LM#96e
zTNuS85!SIWHcm~*;Gb3%e<ZsW@zoP#U|QOLoM(3+Me!#Y2!j*_b-{{aC1E+G>t6Aj
z&-dG*>8go=YEDkmNZ(B&<NFcc)`S{fnxaV<vAx;ZD~Lg_oW6qD^GcW(@N2@Xz2ejC
zEX*F9q$xQ$Z2lpZg~San@)2x~>^E3Qra)iF<$`U(eXYa`VD~2S81LO9B8JFcj0J)Q
zt$8`c%LOHiIAI7Qtt)7vJ-_EL^elb1lR!@G9-`C-qtUVJMjp*LbJSUAQ%J1oM!FzD
zFi2ulLNFv==t}?AZ_kTQ)Z{3EE5@0PQXh#@s@~4_{<!^C6l)9jNMp+y(o90HV3Bk)
zg3Qh5Zf2#j`I=_E)p+h^xs?r+%A2S`bO#;BQkkz87Z>yMO~iy9?}%S-<Z-Rhl!wi2
zh`u;ep`$-Vu^rmq=K1nf-Z|zJ@+H4oxqv&pGE`G)O*%NS04HzZ1&<S|H4&e^mV9pa
zHOO15_A6d5b6p>&nUEZG+}l-jJ<g*@UK-PRv@b+ScnC6&HVvPp!pR^P)to>|Ha2+_
zY;p#-lH5JHByw9DmDhGmY9G=ik=ES6+uEKF_=HEYkDk~g;it#okq8e!!yjx8SBt$#
znaOg}uTLVHFeyC2Nf|L^8<)(yU_w^unQ1yTpEYHL&PnPm4N-t;qO@MV2+qE?zG#|p
z<nz<*bW&}B&(ex0s(3MQmlooqS*D!TFF-lN>-Yyir)3c9M<kubLN|;~ib@kKhoQ@R
z<*qJq_l7xjdR#M-*EV$apsBl&VH{*!QHP<%RIn*z2x#>5r`bIJ&p-+q9LR^IWF6<m
zChMRL4><kP4#uLH3*>utVX69fZ1wS5r>A!up1$~!i!K{K+;-bEc|!;Mwo3XDolZo`
zODP*Cw}!pKx4d<H$IeUh+ws30qV;W7v@b!YI`hP81+myhrv6q)zb|Iy(mmj}(s1<A
zlph0ny_=Gp+%7030mXk*pnNzElnfql8bI#NIJ+B$ha-tTK6U&$)97B;JsXe&9dFfm
zABqDZHT6f@NQID!<Z+uA2zi<TCzy1D)1yqVW0D9PD`{C0c)Sy1bpHo_k`s9R7_9tz
zC_yyUGq^Ag>jk?H5MXA?mNIy=XI*>f&<)nE8}^1K+E|dKsG5tvi<yh0u)$9N@WTpV
zLl8eij*5f>Zc>f%*OD(o@K);x5x`BLSV$<MCG_mvBOp>N;+AS0*UQl|A@9*WwEG4e
z<0~9-VE1xjXZG9CY6ZLH9OM@#qnMVWxYwrh(iW^&x=eEyg|3}k6-NMTKDKu`$PP`Z
z+N%!j1Sxw}WN9xSajZkv9pwG~bft`P$rK8oIs;M@{nI`s`d^YJ`T<Ndc9qDP3A1hE
z8avD_?Qsi_)6i5mY|JPf6a@){!52&qMeIePoXRI0Zk?lft9C3-;2tAN?Cn&^0m4o?
z>^H&-rUe|2!p*gF4v4_X73GFXwX+mQKM@&X(m^ys?4>KpG{0lPi9ZlEu|w;6n^JPy
z`OhO0s|8++#UTx5DWL|B;co(f!eTy;p4ejMr-3YHHX(SuKeEssoK>nXP9j26u#3)Q
z*^|~FEK}oZm$Olb!Z=ijqFko=nrar4;hAC<kC9nS_dLs;VQ62TEglOJzN#6V%rJvw
z3~xm_ZGh}Q<s<;5t>Kq|HxbvmwNgjtP16dd6fiPyTCNo;ElO|%uF|FRP3LIYSu`r;
zct^IlyP#HIG&YZ}q<*vod^rPen9|trs9}&6(6D@^EAGxPYF@xXISdqfO_}wH1JbQ`
zfpwY!OAl5;w?2eUe$ma`+%J%4Ng%rssODS1mdbrHhr#|;Cm9ppn$wkn(~01j<|Yx$
zndE6VX?=`ny_+V}$Xt+A3Z0)vbS`=_nij-k5PYv<3KPdNpqD7Wg>nYvk3=coicr3s
z#0+lWYq)!Zb_XMpH)a?GQ8IPMlpJ@Vk$^?dZ;VJ*M6rg5LgEB1K3-m6N3O?<bgsu9
z{@=yh$^ZK}&056&lQ1h~GLZj=)(!uU`|98SyFX^q(*3_r(r}djw|^ZGVVVO7z@&ib
zb^z(4VuL@AgC&CxlL}Fy2l$oa*jt<ns3s)h0`glm;_t`7km>@aj&(pEFs4n-fD=r=
zaZcdH+cP?WpT;QNNAQ#A1cHjd%AY`yOkUvT4lghwipd=kqFDJcnait*86M4SP3~V$
zu&+V|0lQ&~ymc4dp($KdWPJ%Qj}m?Y`~lb=v|nDjecRYK<Wj=9CEJ8dGq`YG4x5Lt
z&KA)+>^GA67WFg{x+>3$ySGr=V^6UlZ|U-!94kYGn<q7lYCg{BV?H(}&c{7B*DCO^
z>82jugNsEay&O8hIdW!aTg3+MN~Jwtl~UdF5oo)3`|Ru%<j}Ek5F(r{o=n&_Vs7Dv
z(;<tS_uRl!2(O)7a2&g;HsEvH&8EE+dTV8mPczZ{(h&^IERHr*!rgJSJTu-KL@h8c
zWULs9`^+Tpl?09(oo;Yj1~iijr;b^L&ph6EQ4}D?s^wCeVKA0R0Vlr08wN8^{DG*M
z-IIanLeG8wnbDa|B?sxcOSPh`t!S+bm$}>u2!-o@8$Ge>&QAlm?ri<VxbB<ClM$-S
zaA>4gVYu(-kxLWNdGLHfok#9Rs&B(iLyB+H;iY@!1%w%uwn+G@=JH5}xg<}fgmQ)v
zd0y0$kv=?kp4o>NrMvx}ZWmOT$;ibW_2HKoctf0$53gX5B6L{3(qi+K8AeTFlR99r
z*_RLB1s1tyor9Iot?&4vfxNq4AhY=J0=6haCB)75Tg1C^;?sP19$ShJFTVGnb0(=2
zI%nrxwA9mwPbsD-{}UO|OO*egP|l$I3!{`TeR%G%*-guW5y?>Kpxw`M_Xh0_MkJrl
zFbbk%>W(Qn&W9JUWFv}a5>ZH;pv7O34}WoXAASe<@IRtii}>&oW~EgI^Wk?ye0b`s
ze;@u|V<s)#hyMu;NBi&-J$?8cX+AtYDmEBd-|aYMS%*x8DA9+1+HveH)`yo967}Kf
zts3!#aWJI%@Tp@R(1(v{Q#0TM({HQ~zayg$|8r1``%DZq*@vGXR{p1uvU;xMcKYNI
z8Jod}Pb{w{=IWS<NzzSQ3HIHn(B;E_^7#AkA?SPyCoQ}pArRd}-J~3Qjn*92c1uoi
zi_l8(K7OuHatb)H$N>Vr9~EmZ*b`1meeg-iW<#dy&{a5rN1*2NP#<%-EpaXf_5XJ~
zN&Wvh#)_fz<NbetFKOZQ82^8VmSt`RG?V(Lj(^GizZk2QX=(od_CyLe@!jU9p8x;b
z8Hi5${})APHkBNt|1VXNvecrrGWh@Z07BvazlEOI|L3QH{C~C_ll*_78#4I+5&hSP
z|IZFbieGdFBGw15+HD;{>LigKinb6bWs>w+N$L+|m`(D7-iLCA33^%751J;=9BwY4
zm=sWSgaLNbZTB@F8dDyf3bWaYv~e*W(jPNmhOpe&)xMOH>mvPX@%ZTsV<YiMU9ot4
zhFk{6{WB>LE940nqx6|%vRqEAAh8&6r^kvlY&t4TYUFX+1HDQ53{jwKj#C3iJVPmj
zb0#f{>xFh@$SBfDE}+K$?F<Me;`tktGl=ImqQrAnNIYWmtFfCS(R=<8_iNAwM}Bx0
zFse(kK;%cf(iHL23;+{FPzQ<rvgkeAtnZ>(m&5<%`OBAN_m_8)zkKcnOi;vMmM|+R
zJea?{GvY5(U;X>bn*m(suKRR<`2re__Lq0}^p|(0`OEmIDE^W-STd}6r$UtIFYi8%
zy~X;=azdj1GQCwJz99~VRDU^jtONSXF>PuFoM8Hm^_O>M^q03_l<rOVN%og_6DwON
zB79Ca{p!M}cdU6U`5O9(Qb_eIrzWBqGZ9J3<|=}<u3$CRxL<$#{o~G|S%`{anH&F4
z-t9cyRT$nsD01k^eYFw=PbQEQw(sl%+t(yw`|jS$!?8=iI|uS$eXHWwo{vrDYMX*p
zZQ%tid^emzdA=;yhWcK+ek0?<P`UBGD*%_%8t1$2)N<v`84ygWm^x-v{GtKYt}|jp
z&AJ$+mMm#r>+=(5{nuVAZ&iLWY@Am!`;iRfCcW1E(V0yp2kEs+#h~n^Xsrxh>*oNW
z@LC_FC-z$TX&|qa?Y9`O^=Y(ft@qz5*=?*>pGoW0v7SMy!$DTP9(1rebnuLZjaL`I
z5PZgAN`+S%DV<$fqph`lmw?+-{FYT$BL}x9g-rODn&z)(m}c@wzKU|X&;19<LR=B7
z$AzPu8l+yEp(8s+>bcNvSrMGxQDz1=5m$|Z!6j3UUy!NLrm&?;CLPS}aprAYwIUCe
zggI6@4VAo@cLlDX!Tr8wduJxKCvlKmK%wQQz0u<SGogejX8+B^0RM=;87nzGVgs%a
zA$lkOIVr=Fpr)2l(5~6oZSW^qI=2w0!>Ev!5t5F351~vrJgy^#rwKMj)Vn|GK*`@T
zN>WdGyFcitBPlJy9IGhrnrE<vdXdZ+f=E+1W0-O%>_QT5iEaHtq4wDsP)q!A5n)Sv
zP%i?1xQ}9F@<_Fq{R#IUjCa9r$gBb3S(QAJaC-S#rRMk*q#4FjF0}n9iAWh%3JM_E
zNX_S4EJ7Y|e`2<Ie$O^}w2|}$?tX$^9HGrnUm@rE9>~!-1gHZds=JUh0od9{f6k@T
zg~49863t%2b==kXCyG?VSU)!nU2>Mw3#q})qoYnQI*F-nBLE8-24yf6*Aaut%v6ks
zJpvICO0u?Y4QXiW*4wO!9b0nKAeHIa@a1eQsch)1#2Df`1aVhEy|!RTuV9T)SYmQ@
z*t|AUU*8*P?(0wn=z28|1CI2n6$G$ugFbkMW{eXw264QEaDOK^mQEa_QIrTacrVgQ
zN^)}lBS8i>a9@ur%DUbH)b0U)h=Gk#@`U?`Xf@2vyPC4|QgU6VgLvdsh#z3kqb-<4
zRd!zYzf!9sI6N!!@O}bSjXb=kP&d&eyvs%sUiTrYuZBSEsI%(spCL59w+Ad_en_K_
zE4-_B1yhl59Whs#X`bhoXg&-hMCkqkMU}-^!Y|I|Vo85vS3N=d?lL-(GasxqOG%<1
z4vD^~DfZi_)I(HAs{aNfEQadoLmyOc({z268%wA9^%1Hs3UAYmko_;vOgGufw}3Tf
z$SY6n9&&$le-c_q(*Y@TKZ>gT(!Cx-2jR~VCV$SDOlCrp@VUazdRH(BpX-R}%1rn?
z#hUQb>ls!QD+y_jutEAXuQliSWxqw256r|`r$IiSw_e^v@PjggpxDc?;TEZ13(oYk
z^|H-$r-IkOUz?|`L&(nh3ds$p#eGvcbUKDgNVY*p>7F9{dEMurN@+{5_KK$G&p3@T
z?kTvkjjZ1%W0v%wG%|u=&v9@sF|0Vf07UO_oP^({7>H!087-Y9e2?%Bhe<LyC$Uqf
zYWqgh(Ly36t}4{g*D2Z}+;?(1t$X!Wvw$n(wg#umYdLAIH~|p0zO-M_o(NX?b>FVE
z_pJzWvJ8$r?_1F#>O3hJMGgd7Gn@(AIuNXtZ}>vs1B5DZhfF)zNS35uu6W2B#z%09
z?O^B@8<${sO6vzhNZHtE`RxOxQRHl2Ktcw-!H5#L7derbU2WixHFU8CK!q=OtR0**
zh3OR_z$dI7L4jQOXRBGkU+esOVP+0jX3<w9p;-l(n@jEB)Oj?6{X&lM@pZvEN~D7X
z!!ySS%Sa_Z3frXIm<f}eduZ?+@y4k*WEy)jv|>6_s8D7C`n)czpkAy6Wg|D=Oa)i1
z0i7oYxf1R-k$<iVHaf@3z#@$7mZ#sYDmrtm1++IxIqm6A0JQ6fboQ8zf<r?h_{ufl
zYzCK!)am8`WX^B-^OMh+#DaD^I5+xn2Di!9n=?pRQLH#k%m9H}@Y}(9fqA2qRoqHD
z*wpc*qY3xbBpXLXyBY>r``qY<j>^FX8UwC`^-3Z0w}W*RySC7>7aU-`h^t;tc53b5
zw5C(2H;WJ@bUy;R!SyD<%#dIpJdKo#k|0V$!KmHx>ofXQaB>;swyxN!Hf9t_0<ru8
zsU-L=Cu(p#zhPph+1IZcp3^GUXO7`!f&;+@oOi-4C^KeFrjmj`bF}PHS`un&2G`Tk
z=_Cw<LJWAdTCxh*ZY>4_8Che`3g6a+#b$)(37K^UJ)sjUlCm5PvrW+L22FbrQ$>w~
zA5RK462F0RY6~F5O1X;L5cY4_9E>)c#ti2^;hSdA39grDfZ72&u|{yF^xg2<%Qu$%
zQoY8x{Mx}7m1F==at09;$YvkYF^u<<&)9x3@HyI?FLX3dZ*=p|l+A;AZ6ett*hN=%
z{CVyJ0%3|$0fK!;a3wIfsOXp4`-X!}pvmftVoo)H8CD4G<zR!i1dsICOsTw3s^CA+
z@5&0f55Zcmiu|uLFKvOVJs|2d{#*Px!$;8Y8mQfbtSx{C6EFA;SY{NW_K{WtU5o-c
zC@|n(h=FBLPrZO!dq4xBTsV~k1r%LJv2vAYmrj!~Gp=Nj1d>6<@*+5R31Nkj<M`-f
ztbkHSX6QPt%8WX-2&gww%Os5{H;IsG%fTtQOt_8Q6v42NCSYGsBHerk-tcF{?G`+^
zjh)(;q`7-F_|#?n7@Qg@z?ni(BB~>~yhokQs{%tLaf{Siu$o?q=Lz=()bt_JqaP@}
z&;4se2i(7+pU=Vhc0WTuhma-4y^(%4)7jMv>8D9Qb^38=FYFxse3X7ZOh50&0>AqX
z`uQ6De1(3#K#hK$ezwCJawqBMdg}W+{Ir4*f{AVjVeQ3GEtfv9%m6JjFv|?cG6S*9
z04#Io%iQrYce>0SE^}wg+|e?3vfL_df>IRYTvK{q>E%4g(ua72rTa_YC_U`9agmgJ
z5B;n;89y87r$Ik0`uPt1JVHO$o`RqK^z$kDd4PWMgs6+?hY|G<J*`@WpB(+%IE0^D
z=;tl;b07VDhkhQRpKZv><z7TTcc>@257ng`Q~4?bmo7Wt{M9aHxE51DNl!Q@l}nkh
z+;7njKk>9sUJx-Ybi#^{ExUBI+5H9m@DooJ9YGOOMLV&0YqU$-r`_k$r129^AMLFX
z(?_vyUJ`a`+1M@94?ppgQb3NUl<lupu+9_(OnvKc-wVr45<lV%NqkvOaDn+olmp{K
zbX4c+6(wD`=;<9VRq2sPizBjEu5@aoea<^gqIj&ct?&zMDCnaCQW`<%fY%C?-H^E)
z7Rl<};rqM6TX(f@f^2QrO-Sh~?PFdLGV4^OmLjj$sMjnJ)`Xc@Ab}Q0(jhhs%^4~g
I;nC**KUzj)GXMYp

diff --git a/doc/manual/build/doctrees/man/cascaded-policy.toml.doctree b/doc/manual/build/doctrees/man/cascaded-policy.toml.doctree
deleted file mode 100644
index e16059fc452a00cf10d0db4f844ccf07f8f84b78..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 104769
zcmeHw378yLb*^M<w6r!$*4UP9*=-r4k*yg?w&g`O1|i8<2+770U}MZoPj}69mwLL}
zy+|62i2)NVT!bVvNl1V|9)7GLA%yq=VSNNJ%Ofwzd#s7WBZRPou*4xifcKws*Q&l%
zUDY!N0p`Q4nyR~;d+s^+Ece`V?;d)^f&~i~(Eox}rFyZ`u2frNwR*{Gb%Uk!V#cer
zyD#r<et!3^?ntn#Svc0JcbY}78!SMHV!2W+HN9H*_HKDWu%zV`+m(7vmoE>M7nhgZ
z-W|cmp?0NR^{h|9+MDXtN^v%SeWmK<udg>}3hgeHM&U(=z2nrav&@US1Wd5FQ9#eA
za$0M$5abH&cC#|sX#;YC^wdhJ1*n20#cH9|!b?04)e1A>X=$m`Fn>%IibtB>6qV@&
zOWK8L`qVA2DxY0m9xNNzXegf=ELNkxWoxO>E^IB=XS}V)D>L=l)>gB)wOD8s3nfqe
zJKCOUT(%YUx6Tx5okDf1s7-&VBBjv=V_~dapQ(;DTkUSJs9LFc-TkL@CV`1%7-eC)
zS!k3k)ZKC|=4@A9)XY~}`9i)}uT};2^Yy8G%WJnQwdq#AT`siqg+`+~n{U@qY`R(R
zG^oUL>NT&GKT@k7tKmy-w*Y)BpO=$Ttk>GjdbO1=*N^4p*L=O<H4DISzK%-eddm~d
zY{`3L(_>t+UG`>kn3sI3GF|gZWBJ2nfY&HYdwI}Q5i^9^g=!VBw_24+OuPoQP%EKP
zuhK-xsY0jPZjI${t#@+8LM=b-)wpMjpzX~xssJK?tkN!11wbJy<c}7r9kkzRVeI*d
z2{{|ON=_hbVq%QxY@|GVOa4(r_C;h@FdVpHtVJZbq*`fXHmVju2InMTTQK!-aAwSW
znD(y%CzsCw`<6Fg88{#RU4Z{C#D5ooHOrgIR}c{3i{W75n5hP^yu@l-%A3m<moM4B
zh&Z}DQa%+;jEW_#JQRFclKd3bArL2s7yJo|E#)V{HDwR<<TbbCi9VUK+w~^C5nqAp
zYEzZzPP0Ii+$glmxe?Tn<hTVSxYcW$Re{N`;<Y9wHiOYX+j*kxLaDSRKT|JNre;Ma
zO>d@t)RV-TXQ;Li9JPF>fknsD?8qEo5HF}Z-}I{WLJ35k&mXL#G%W!;6~PC$K4OD4
z^Klc%<Vua+^|4q`gfZ;Il4<XjG-PoTlg0jd#H<0JXF!UQBPiDca(*}M`RNC=GCYl%
z6#-H@n$KA@zaUsX*@2vBk5?;@G)k=7VtN^U83%*USf7Kh?iTU^oKdN@@gMl4mdB&l
ztQD$YgT^cg6|t~GsDsD_Eg!33tq1>r3LytNHRu<)Sc)Y{hO&?v`F&H8j%g*IDnKjQ
zVv#-CB>7aSb-WzJ8ns_(xANX`z)lrHfKhAh{IPm%Q(Lwv1Seq3SEf)AZ(Hp`6Y?e}
zCeSPm|NN^lZoN7@Wj@Di=>4V91;NQ56BB9q=M`!A=cT+LJpboTR3S8^<5|)?Pjvdo
z!WT=SMuqQ@LhW9)>fS<HJume{<`6TrdOJVqfz(O1l!)*lQD#}7L31t?%XkS^VzuxZ
zeACKZzUFx);xg1Od00D8u-?qK%9Sa4WUUgiYsw>KT&bi}6=<@8jb|a|M6ZyS#NA4;
zkvtW$%HqeG;_@xTn7n!r_p|U-EKhw(md}Maot7Yy*J4%f<>sIMiX%j^*RMPtv=n`y
z-$J4^$F*RxcckS=D%``7!R(DSSYc9Q5V~edsFD@3raY}of~#byQl$x-uHFQnf?3Li
zqa@r45TI-=PE0`JwY^#kCbwV}uqf$%XaHKMT*}8LdZgO%pBE%r&g`2v2+ZpG>5!0F
zrjewmeu$A~%73Qc+>^2KX%-@nO^0aHHegA&(w~VwK9QELsIa7~_|}8PLdEL_3rE>z
zdVwV;l<@-(3j{*Q8}qh(k_tObUdap9M!7%>v{z_(Tk^$np*9Usg0;5=pNFE*dV?H3
zt^5dk0Gi&>igzqmuGf!jhBDZyqy8No5HXg1*ic8kCSI_v1r?19p9<BcHk+MVEo`(4
z7RV`Uh6=R{N4&fTQB!OS3*Iu~ei6Zk10s0QNr84vx&Eop8$yf(^DV5c=_yf+HSGLu
znq1CJ_BHIeYi768dL~;f*b=;W>L(|GTC>juyZp2tZ~a(u$Jr>XxFe^uDCNCetzHC6
z_8u?5{{-(KIVy+E-x|U#DMkyG&EJf2q_xTZFTltb1S_R$Wqh()FCMWhuv?z7Xu$&T
z53lu)%WpioePb?n8!z_F+ttIE;J@23L(Fxh{NrFdRa+j49`R;Jg<AvVkF<`A!B<uR
z|IMPz#>=kQQQDY$PW0_Iyevjva#3oa&}r941v5V`-)_PbqXv54QVYFr3)Sg*6CS)7
z$2Z-2(`(e5Z9o`qKKxp@AATL_ApBAH;2m$!@)YeM{95-AejVu{{89H%f}^#kefy<u
z-F_Kq+x}E)jq0y7d53P;b?J^PHs%<|Qqz{>2~9hwqgZd2TDRxg?J8B=Uf!51)mos8
zG4j?H+MT91TB#L1UeibGQ&aHGazUblQY%HNp605RDX(3Dyg+}K9*Z^;{n}F<!-2D5
zRJE|Zrv*oW@SvsV7-Hu39E^rhU>mRqt_Y!V@9sT^cHIO_DtzW{V;?ry1){4`s7gmY
zjfA{#qs2Ph8D4W^u0QfjiRg&U7w1R>1Y;$y1^_T|vkk^%4I3@Q|MGJJ+Y6~XR`0YY
z0d9%LQY(!@_QTsa3X%G_{B2mrcrAN$iLq9&@N%J9H2hlAk66RPAN2wdUKjKl8GfyM
z2)~Z>5dNrpuvZ7&zWq|SZoiDQZGU=niLur?Cu3UTbnMY328v0aB}S`9v~!tccm>Oj
z&s2A|8U@;7UfO`UKz0N6Zl~(B>wF?uT7@Cf!S)O`O53zc9IPr=rps0Q*B&o4r)m2a
zTA;s^^eeILbD^bfbu7aySmH@-uAnxX>{r&l(=w$UTH0EYmUyEui?o)g{?=%CRv$Ew
z9!px{tzj*30$O51zpI{9txv)quey^;YV@^+VkRXNei({kXEIpbYLqLr<6|)5WVpak
zrB?EeTRN-Io?|!WfNE?p!##;@_mN;xqflvfgL8}Z8K|kHJneyFznSdAYw}X@?FPfe
znUZ)pim4t|@5_r1wz~zI_2&|#XZr@=gXK#Ob|(Eh@jh5YThKiKj);$|=;OGS$5ydm
zRao)nS(UYxaV?G)FuN(i5)GKN64c)s^S|%F{7A4A-H&o(2)+O~{OH-6p#GCl(ch0B
z8tw1lUyQa({}@xkQ{!F1z|jm*JcA7%DKRi1G<~YSHGFSHlTkJu36>Ll;7I}EN@||N
zEBe9t<~TTwA?M$RGR%gE-9R_pfb^=-`lJtQzZ=3quoU}D)Fn}l|0=2%<i^|e;y7X@
z+O6(p#B9)C3{`nCA?mjY0I?W&K-kOZPu>O=b1x7@{$)Gb#cYe24WSDUYyUFu%qr3x
z%a7c=_o+|Yck|von-x}5mDL#k6kv*C+@5(_5tL;+jWK*&kHPYSe3rv4u#HCk#5(yK
zwJ9jr20r;+*gdP`JAC*uN<?hc;guD8v4x{J5IR#YR-o;cRFnYPR@_kQ%uHh8&*u+d
zLtMRWVT*8<_6k6Ds3lyRxv35r7wpB9Zb>dyYStV1R;R&M9v1j~y;=fXvIB&f;3-ea
zzjXHu2fw@n)P(Sb41`b#6T%CXpF%FZdOIjsH!*Q^`^3af5sw2@BiJhHL-W5yB!v}g
z#M-@IEGjCRKIQ0k<JkFL3P|BZ^}mgB?ATcq>0ghTN~Cp}&Y;C_a*N3>CAB|B<-dmV
zg5l%qlz&wIFJdy~FQs~h$;?WnR0S(8#s3(!Z`PIaW+8UMm1tpWmk_unSTVAwEiTo`
z*6sTFQy{9AVBsTcuj^kxf3h^N|E|?xsgt-p5iF_I)#EDldXz-#EIzJ~AJyM$P(rSA
zEnR4Jt*+jwa?}#_Czpus30g&8DzS)>`t;Z{%3#$rD<Gp{gsra8tK=6c(&<ZBy^3l&
z&@qxUo#7i0mL_7@C?-ejdgxUm=Bp;Roxo|owU)H6D^bo8takt=BMR1&D43W~PB`qw
z$nZx2203>ZQ4zy0H*mKWbFHweD;8U-S~L}JN&zo18g;;ow#>ky2Q7LJlVqHLX<36u
zgA0Pi2#}ce?2wUQ{n%K3TzKh61^!2cBSHil#p``Th_$SM57xOVv+iCdykD~as09T{
z?~v}k4uOfIOaV{@JqdwDaKjY1*h?Y(=#J(%LBl?e=uYmjna0Jq5xAn}uwOAfDbG(a
zvqXu{Ba9doZ#G1USkx^_R9@f|1o<-V-6F`-H9?wI)R<OFx>R2bdH!ySK@fRTcd_It
zU`a=wcUl+;VPgDd-ho0O0OAoiMybxqMW;rdZuq+pz)Hf8_wz*PQrRmWkpZnDoRve1
zunx9za-OZdRE3L2ydO;<f06>XN-exAgckoUtkDsLATG8tWQ+MHP%+rxw8WG;*$vJJ
zn_~Jyk1ZA^T{6agqX)1N|K--Z;55}5>=Jg>GTul0SK5V^szPc~%nOaZzj0u1#J?ZS
z`2QV0A+y41TKz9HVDa7Efc`BZAVLsg$zQ5pXdwR43B&^g#Q#VJLfTEeKo~ahA4KcI
zZt~wxO@5%K$q(ZV45h!Lg8oPF$7cVd`0cTb?gsgMLXH>Xe2_|V*uTpVI_DW>4;BM$
z=+d4qMOmr&(5ql#8I7L*bf70rF1-LCKCD5sgz+~KFvuZ>fMa5Uwu>evVAiOmTA3^q
zqsT%*#7oGaC>WZERYz1)uF;u9{3FFeai}82AfZ9T&o?P*N(3~CcM}s#nAA&19B|0e
zq{o{AWdF>}cqKBRs<UKzwb?M6!3KJ*%`v?SeY9mRU}CF{BDFdQuoQ#J0S4NNp)GKX
z%;*=(tx=ohc=4&E-B_#oQiT!4DT}BXQ(+ZXh}VosE2j0E8s_!;_D2-82C$xyAgV*6
zT@7VOtPh%+@>$1%z|x=n1Zr@_2n{<sj0<h`-xDJK#5&3#QS2;yA6R?CwGu57{~|D&
zzYF;EA4^Y9q^C{#X#`Iv{LTD(G5=n|zgzfslz+$QH)1)kIAB){iGoK$MnN!*5<m6G
zDE%RYjH&>1wfY4c;#A#HG}%Yp_1kDEILoE$Qf*t`J%I_frDYmXxl#>^TzJBv7nPH$
zgkqVc`h_OLDF@eNl9Q8Yz><^qMdjp>0S`h_{-wKbJG;*yA$z+wgzn#r)>BEyG8Igc
zkoRGN#^p%+O2|FCa3Tt;I{CGPkmTq+d$p0rqe#T?=@DAt5m)aW_iz%A&Xj0TIzNqR
zga;TzKLc24l`qAhPv}8gGWXT&Y*cDu3%-0rCrbGz$Dloc6tLUe1Tj|j;C?(thgk}U
zEIy`ueK{kUfeo=B_X<oE5*(3{6BA1HfX!2B<-$Vp-jfAPBiDYP(Qip;I0DQNG@q(h
zrs5x^m^YHt)Pc0LG(Pm?i{1@`B*~nY#ZCU6eKI^7Q6*mGC>`+dK<d?M{TPu!r6zog
z6yA5VQpkI?qm^d8MtToU=^>l~#NCoB=WsATjp+ftI|Y^$b-z43z=#KRq-<QM`z9uK
z?>e-5*PgxO&%E*AUg1pj^0dpK0?)}Ku!R^N-c{u@N9aW!rxu%tVkg9u>b-u~PXXSj
z-}SU;Z;C2b*gzP{_?r}CCd&9U$}weJO}^N{z}JYT#?rcNUxCg)!JQ{7n#yfU<v)h<
zBvk;gnTI_FGl%xxyl>Z2)J%vloxIqVu%{$HQu2zG8ElNwae-;Cxmm8O+L`BnmwJl0
zzSs74q$XjNngjuXnTGE(Mv_NJ)9~+%35dc=#WZAsUE`lxNsIsAL9gHDUX!6y_^0wt
z{J$WCmZ$H%S>Yd&U=q8wI2u{PneZ05Unr6t0eo2R;iOeNKWxo3DV9A)iv}@`B_wVB
zDUdODZKW|vEnc_tT59Y%b$r*7L?;VK_Qpw=dKgVE>cIy?JsS|@*-tDJ^{huZX5!lf
z^*kb&H(*hBA%haTNxie8Mt55DlWAyc*6~@Ve0k7miT!thq+v!<I%22tPGY|{O6=qN
zZX$Yra;GJ1c}45;=uu%3jsh6#6zkrz$lM5sqKnM1vjc_8HP$)<N<rranTJy%^Qnvn
zEH#_bg00sVs+tz%uLKGYa98P2PUTag{H7akJ{&?iFDfpK_Z)S(rU$+08{<i^S^CVF
z#?)+`9+@rb%FNeuQqI>=HD8ah<|}r@rhTfHcCvmS$ZuwtEGlm%D_(Vs?xB(pH@1Ta
zwpcBlaeU;x;+5>clzqEY)PVBXZ5!J@whaN#IE(^O8A0&An?y)~RLdZYiAf0UQQiyY
zxn;^|vba*?OdVEW&G~)cSCrDXoMyo{JE&&Fe+}LSLs)x&zK|1}oGov}N8tVS^pDvx
zdJP1IIg~&6vhywnKv8!s$tcsk*b8T~pELqVu_LZB2Ee)T+9w7FQi~iHfbo<ctbmGN
zYaufUnKry%4#(Zu{%d<?A%1y8KqGDW2P-7;i}^LtWWfrX8`yJ1gkVkbtI#9y8|GT;
zw!z0p&sS!;vd@c%p@OP5)vV8u%b`<iHJ~F;fgkhw)S-wAg3&!g(hg4TLa_+Fj?=cl
zQ=#;^k;<4imM`EqaFZP7WoT^_*wa8$jb`O2vTESq81gdg6G!yhfTiT+7?2W<6E|ll
z)DJ2mltD!MD2<SuBGT_p=Z)d2mpncEOEe(O=HE&|u*zipLpjO9GKwcjS_@=gigH>x
z{J{RRK`%P+t|vYv!E>p%(uJpZXh?aA7t<4aiuq|CJjKC!guWvXa2%lnbkMx$mBuG$
zMTFm7U4JQcc$kc#;7n&hgd3n3jZ_q~9pNLv1_~t*J|`=pKyB)G{SG|1p7N561m{s?
zL1@o_LQqukvADnnuTR9wtiK$?0GPux8XtYO{FUMj0U+Lhu@j;b&e(JC(4oD%^N3ED
zIc&(`qWLE7v!=og=&qmrLD2|jqnx$s+#gzQ&ZFf9aRgR~{Ou`X5ia4rEfKY*rwt`N
zSBBa)8qj4az$ei}T><3bz!fGV;7H^uy(9Am3m0?V%(y@;(V@_1I^>~_>UD#&;kvit
zpF<yeHZ{yF$sp*y`|iVbgXFR2gMmU14sX7%uuH0W3BS}-HQ|_+Oq&bOLIW1Ly(zl6
zuq+HJPpk%BgHdyWkztde7Ysus{xi^es!fJTDwwp%@Foz|t#ZW9O@`RWDr>=44fMw7
z(K?o5-|uCBK<xYdCOz?L&QF7`=1h$;VsMVzer`^&kFWM{O6cP}aLPKnK_)*OmUS|U
zT~ISh=%uF6Hv!Yp<u?<f+%L&ShPuBw$|w|^vhgwnDfq;^&_F!k1R?{Q^a5eA$!pPi
zDmHlw6-;82H-k<7NRD@4Hc<@>%qE`&1cFUIM^DTq{B+W?37rLu6)2&P32Z{y^ioA~
z4cje-m+8nh^$NSBW|YuNO{3ohuII!k-;#tQ8RaceMoA}87A$swk%3iu!LV56Yk)Bo
ztNc3^Ok$O{fK|RBN9<&k5zAWKBqCg~RRskOHW*Y}1c$dOIG6#0jwy${^;)S+U0%=L
zSq`*CJqXIy`D1`SjPk<PF<{<8x(uS93asmr$vNp!f<)w(;=P1w9ob6AnuKl3aba|d
zgmX&4uC&G@PSlog+6A785yV^JY!mGF(q^50ijLJ|JFh|pGaqb0R#dW_#n}|fsY=_}
zz!kQu_Z|fdl_@@o&vo)tm`VynQoNb$Ktz9$qOL4*aeNppV=xk|u^jJRlPQd>D^p}S
z*JRF=(b2qA_Dgl7WucalABYmIpbQ=1rwuS_o|~E#162Fx9QW4r3P)5MJgpdHy|yKf
z9J(^@t<yrzS`4}}L+-}{wr(i`t&HF{#3vwm1Lyox2D>7NM`z~bn;Fe|kIle(e-g)f
z=MwAT@JR!y1jK&6%p^iQCJ3FP6)Emz|DpYeuX`r{5{K=^6NPn%+>zkW94N0txqJ~7
zf}lrE=Y|7@w0RCT0G)y0(Za;UMl|Pvkv77Vobljk6U$SL-br>5G>*M?$~PgyQCgj1
znOZ^vY|Ef_Oken%FBN8y1oDtLkOmN1ovEqHaf}IBF{+&snYBpXO5n_hf6C$?WLsrN
z^u)w5wL3}2Kk7eYEE!Aqa-L_)m|hvepc1dkG*(U3Yg3R28PU`Q8_|~!G9RYD9#E0q
zOwE;obFnl;H60(!3gqMFH0=q{4lzk6Ko_=5(TS`up0Y*x#wB_~d#>mRM5jBNF&#DM
zy(5sd?x<`!x@X=y0^{h8N~WXV$=cBnv!7|8hp2!(u%_<om?`?ktbOSX0zFGcX;V%@
z+tsI3nZF3Fr-^lx+g2%U4!3PeGyXx0PS__Orzf^g_-StTiPHb)7QTC7tjEjbi=vbO
zJw7k%bApkQ$?IjBgq6bK@w`(X_Ij-%ua_yQ$SL|-FH>K3&{igc{vkAAdA{BgwNsYZ
zz(V5azcmQoae|P+M(G8?kgorEw4TaF`3e<GvQgdx?)ah{t<y$H<MmPv3~bJ?U830K
zbb4ZT;itK=i=@Oyf?LRwWKm?4TOyz5gImH)+5{M}=vReHYHo?V)}*=xD4&y6KY|7<
zZu!gX+_KXNLI!T>1;OH$3(<NiZW*J3N!;?6;FgQzXb0vN)xf~qavLBJ!sS`?#N5J9
zCoQ*-J1K!%BA@4jTf$8yaZ9+Q=9b87%`F|Ed`{eQhom3r1AA|FZh4^-gbdu$3xdTh
zRkWUpTaHn|ByM>xxTPjXJ21DX1_tJq*8>8<E%(zCa|=J61l+ROsfk50#Br|AZm=<|
zk2wn^aE?+P`))>_<7zp9f!4XoD>ia})Xelg%*dRW>D`jNBs0A)J2QRK2|@;D>IK1K
zrgx(CRLt}NDwxDf?*lVEAV=$DCfk`js!j>h!KRQSRV0oj2c>qADi30iv6i02e{!HO
z&awOf4C70B7{;+2JYb!v)xKI4>cqYy*Fb0xbi9MT!WdPH&p1(hyY#?%`4PCGkbVHp
zBene^?g0Xd$Z<`z*;6f3u8^0>6yy-B9Q$qg$}IB4hFm%VdE|APc%%nlZ0GMX!Ywxw
z&M_I774I!ouS~@srkE*mGEoQYWZFRY`ov<&G(0dwE0*@I08!crLA1^_B?*9}_rRT(
z6%^YeArN3VKglEUp*S9RABFJn9UkzbdJVWgv9F-`RD04ug8E)Ixd+1e;jxiXMfyfc
z=9Qyc=Em|*#GP1`7B*ITiJZ0%=xiWgg@w$2V#fh)U%Gvcuar|wb3!uJA+F3Ke=?#5
zYZ@@zRfmW{ucp_LU-V(<h3$$I6rtQq9|=urA|WU@lUmLPcQYLTfI_!9NKdTW@YCFM
z8>K7E&2WB<Q@PQu9I@}#MZy!epGkgCP-)USn$C#ynV`(9jucgEY0rC2BhwBV$>eJ)
zq5;c#{&;p3rsD)5g9_6Nf}vmk*=RkL3R9tiNh-|8!6FlKv`!T!jju^HFt9!FJAgp&
z%<s|@^9(=Djc4Y?*W_jy?YN0yndtZVV3|mpNh}j7s#zxbUbD=f0`GIu`rj&vNNWAK
z$R(T|NV{Xnm+W-UzRw9l2A1gs!D5*=p!HNN^Ji2riDf<kmU)vL?Z7Of8W@;m9s&e{
zW&V+#m}U6sq-7cHy@_F&==b?xnMj*SEE6fJStj~kv&;{G_c^i5!;*+3%X~6B%Pd*u
z0wDv-^nzfq%(nqwDwg>X6-;88Pl9E>D@Qvp%cuqhW|<LSOR&sldSaI0r;~tXE_Nzr
z5jT!voD0M1nY&a1`zT$quixohXVVE>H0-RPcq!(q=BOt+$vH!cy6ez@rMG=5J4fB*
z1R(=Q^@3n=)YWJ`6-Vu%f=L|pDR9&^a<op4vRzMC#JZkv*JV+q<)IsKa7wL?8_GHS
zP1}xxR@d`db|5wCP*678r!g>356n2DZlOf)8QnQ#Iv0w#iIY;<6)C_^9!DqJJVyua
z@R99iGOXpDK=S@J6yCr0R$SeNpwFWfanMg>^yTz*Ncn<L#2OO5v|5GcEL{qEtbmw8
zkt>g{g;VXhS|FblP(97LA;O+Ny6_jyGPI8W3s->$6JI+A*zd;ijc7yUmeI!#c`PW2
zOMod_jIWeyv9kaXj(o4Fax19GeH5+I=Q3Yt)kJ?Z1JVEQ7@`kebUh*mZC5A}&ary)
zh`9oq52P|Z)Vwx*%8R3^RFa5>a*AwfiFA%dPSGP$G9Wq;ULz`js{$x?Q500n!j}qg
z?uM44m6HV;jpBPUp!hQ(6q_~K;S^N9Aho^@?hE<@04Ow$SJ4w|9Q-sljYG-rN7NT2
z;;!R;LGpWonvvZXB-%{SFO1JebuX;Rp7)wY-szx`OunGEqXA2&_<VMq;(t0p$e>g7
zf?(*^e=Ax~rBggW1(S4&&x1wYCP(YkDbo0YR09KR>Hh=>1kZeho|tF&X>L68v+xDQ
zu#9%PD4LC4(Ubjj>KTzXlUOEFR4L=Dqwh7#`~-NPlVSTqNkr1H{X%w@S&?&rkbz}-
zL9kfnVZfJ)WflO8M3(siSmyh3v;(t@YG7cN83mYvWya`<S%#lZT9(mHl^B+ZexDC1
z6KOMvWg<m2%S7L6mU)tsUNcy(yU~CpWxkl5WuE2)Ap^_wf?%=Cb!a^m%j~0qNmAyE
zV3{Y#(GJWqs)2!7<|rT#EOU&Wm}U6sBw(3Tz97Xo$-bce5=ZHhnSDW`=>#r{dV3Ts
zLSu{hsyXU6F)ecvLV=_)DTMw$J4e072|@;r>IK2#s28L4R2=o&R4|F7{vI54LXOtS
zQMNB=YpgGb{TFmntw^o{d00~0ewpj(nfwa}8soe_4`C?p&_glapWt&DT|e5n(k?ga
zo#`^4|5RZcIf~?<i{T1wxNvZ|jf`sY-q7ev^<y=hnDYuV9E{Q0#C{{j35RqDGDZjv
zTtMVB$ayWCvct6oY)d!k?#+B*hAu?rysLBoPc=VTpfkBh11wxa`NM~wVvOrw;t^_6
z_;3bN_)>@z4C5pi?1~8nH`u=b0EJliB0aHK;HSBX1+~b|&0yc?+#}G@5p-*DH#jG}
zHxT|h4{Fr9P>Tu6|H@E7r9wsCYRY)nK^d9M^zWbnOM&`I_T~Q6<t~YnVY%-G!BDOL
zO~99Gx&J;DOj_>00>=239IbP?Ph+O51_oB39s_I%PPvGlm{a&^Zk#eNX1beEw7u(O
zl<?R2V3bgcNsJOIs2L^vRx`?VPAbh{Y3xJ;7Nh)gc1C%M6NC(m(hGvcC_B)4Dn@w%
z6-;83e+HvmDMvdnqo@W3W|SE~AQ+`aPs}L%bkZ`4wsM_}68<_Lj1p=wiBUoYHKT;z
zYDRf6ustUO;)RlQqyh2O?2PgXCkPoBr56N?QJ#m^Q!&a3DwxD5Uj?JwEk`>rqo@W3
zW|Y4G1cFf>peJS&emV&lWyGm^MS>j!yIc@fz+7b#m_})eea-Q+9StY&&gqWgii4cr
zG#~vnCSy)~^hrrsl8^o+J0Jan6NC(W)C+>eM;}G&srcw`s9+Kw{R{Z$K{;9{AK8ZZ
zm9d7n6_g=UCSf;!rcw1MDUmkF2d=MY_CFkGjWf)@j-h=|56u|nx2#84##1UsC?5=;
zCKWMClnbUJuOXC&cqp79#UY|xV$eoDE@;CQWHE;HDGU=aCZ$~!X`My(ssgS>Eg}oE
zKEae{w71v?K)d4A0unv*kq?nQDyO^$$iYK9=M<n}W&Yvp(GeVoxuSzeLyRJGBxcbH
zVk+yj(CSE4#hc45q?+n0xO#l{Y-GRWTMDTgJ~Q;9lVUo|0D8ucBSF?wsnIXf?@ZP6
zvW~s@GnjY-UeCy~&Fr?Uqq7e@iN4L!=5Uqhe7)a{Vd#@3$U}ySpCkb=dd<8c#r&vH
zw(o>coH#8i<U~o2!97^x08nUA6ZFJd6hF;Pi&A>Y+&ozBY_+8pF147hBa2>nrYBo%
z=wpK7ls4GpEW1G{OdAi~uxs?v9ap$B*4l;DqO>CPQd7pPgEBICusUeKGR*%yswb`J
zffj-#{89t+Vka;eG^So)4E_2Iw4O?1x|0efX-xkP7HP_H_tluLIt;Ol{FcaKr^rQQ
zxx}sHkvKN;+8<I8omyoYyaA2aKXf2APG|ZL4DMBWa7Jee)|#|>B7?cP{?GMEcmBs2
zI{(jb=Lwhj;r<iJ19Y*Fe3UrTH)r@Cpn*hgg<EdbRNS#dHee*;U!{PWjuU?f<ycwC
zSy1S))7P|D`uq^By^mW<R*}^GZdCp~C{Nr62+aL@5;d1yb-6+f9(z#p6{_k+4c82z
z25$^%zRrV629i+oRUQo3U807e(5RuWX;JedwDx6gExA{P8Y*v4W7dGEY7xEdh)`;1
zKfa!or(LZB13M7TT&YCgS@guBkDuly`sT$YO%@ztuS@yRjRsP=pFygGZm>S$I6#hw
z(Wb}W66Br|%zYgOYpu=_90khY5dDh1`p`Q~cH4pEIXMPK(SRlJejF8e{f`Vj-U&hm
zG1m)%Ayt0_t)~)mmr=naG52F|!^Lv6eZ^dS$`3&eDkCyyeburpV=X<4&v2kHPN4l1
z!#J#mVF|Rmt=)N;`&&XF>LdvQd}Ol?Wj`5#^e%bi+~BMqUTzAvBndOTUK_;$h$AAs
zEw<*l0V+mY^>kYkN&OoR9Z+|e4hKJfKr~{#^oTvMaA63uh6ba{thHP!dK%nRcrG9m
zrovtH#OozL&27DuE0P&RFkGs&kiU2o2VF+72o|P2x{IgFyhXGYoFNKukcKHRh7uRz
zu<%8<)BRrMWx&y`@HSaX2Hm!ka0k$KQW#Bp6puk?fYiYpsW#H_8&Sw)avz|kp7<ce
z#M8||Cs59e<-p>F7>w4pg2xi<;cI`!B;aYT5c+)v!g4UJk8Mk-C&TttLb@-bto%`m
zagnk@U9%qNx>88MWoW}e;L1gDU@38h!cqu1#|b&syy@gC;!sPgGL59zEy{<Di;mTF
zkBB2(?7Z8(=MZJlp_KBJ!JQndbYhAUt-!4Zx8S6QBQ=$J2d8i9#|q67MGJW|dbR!e
z0ien3-6^I+dLj<w!kC=noik@Sb(wa%+6~r(br^crqr0dX)eD#3S9i&wA+mnAmz`$%
zsoamyRrpyW>F*s#%4C#(4h>jLx)My<o7X_YCG#5a-x`K*IAO@3q&Q$O4CMbEnop&r
zJVXT(w3GuYiAw&j9I#VOvDT-J#DWN5)BbXujz}?_W|lNXHMUM&)vHy;=pzSK6Tk~l
zfo7;PnP|}{51SgFraps8T8mO#2X!_&6k_undSbE3PlJk0W{Ay7k)NA~?FuJvLcC(N
z9HVuy(C#$7Q6%xly%<>aM(a~k(Ac`c)-dPxuaUslX?<}ceS2Z1ci$#;LEp+su%#%e
z$?tLp`DI!#wn=gn^mSlO%z`1uq!$eQtzmeg6NU^6h64se<^CmTKGlM81r<zMFxC+N
zjmiPL7mRc6>W-8*K#2oyMc7zzq-tPbyT1qs1VfhSi5Zfg=EjioV)tL><i}#EmB@@+
z!pzvGcmgM?MWwHVy(qbl1U@`3xu#;me#JEP--S7xlUrd{5~Sq7wF7YAeNGrMaG(PQ
ziv!zeJ{1T48Wl|9z_rAIN9BN>9B79ejFHS13qFf&BeJz*pzB?PWH6EGS*z)({BI64
zMiv3B?60GdyjG9IXd1UX0XE;wxcvs%DKwar-;i&3qC07@7q5Wk3vadv=YUFvFdMnJ
zi|*N}l;qVrGq_==SmAsLGmQ>i+gz;HkrJa=?^H`T34wf!cCU!!$JIQr6yzmfxk`;&
z!&On9C=4^9g1etJK#e*s@}cXSy#j8&67@Mf1YgaAY?7#upX!iQ#uZnT6#`}pYVd76
zMI0DFxIriZ0Is2`A7gXG>V+E<jf?pOVEB{TZXk|9sbY`faz1dW>HF;&==+RV`rbi_
zO{_=~F@d<64fnNy*r1&;vr+<&JY9-TZVX}5N*b=UajSTf?xVx?Q7~xTH%C!nbrlrH
zu7KFh^-|%hqL{#Otfe-cLua_wtur%;9smas9~cg<lLB&`zz-*GJdeK&Y71^GM;s1r
zoS|#aHCqtDA~CSM>k1(`#SZR^N6UOcRSmaFkII#b?vui8YoKJRL-5cl0MG<cQ*_M-
ze$mlqbiemANm+iI_)C>Onu7YsA45&DKPGgklB=VbOO-x1?;XWls`QO{?<nR{r5|VQ
zXo$%;d75G_Ra(8eSD%Rr!O%2qPR%F@@SHX=5oRK#hpn(*n+7h(3gua`T&b5wL1ISl
zao7M_{GS_M9uq4m!$IjigPZbC#HfYku$!LPa^R=ASq@6;o|`E@<}@98tlny63VSCr
z*g)JAwi@C~CKwE9P4|3k>trfidd%skTOV6VQD;I4O;*oxkZL9q{T4J}`Sdor4Foj?
zWunvH8V279Lk0uE0fV7={}7r_WgtA83MLr{8;P%;CI{>^5Yn6$Qw<DkqTdGy1fvD?
z#EiyIb7Qo5G0`t^@>$rbHB9!HFq6d;OW-iIIP^8iH@MqQ;IA{>H57Bjeb!WcKjvmm
zruXY4p-I#G!T~tz9ZncBaFzoGi?d#Z=2LOj8>nCsXI)5~^%^-~CuiBF_eF=Hz$z*t
z4c=jU8;d(-X+3eDa3C$JW2n8LiwN$IX}FD{9X!;>%2wbb{(Xup<zwXvnIv?t2Zi7F
zTE(=(R>wXau1z5Qof6EEl~R%E3@vNERc3n|=1vo~Obz>XWD87sbknVUbI3I?hxqDQ
z?a4+=K%r6_B?$;i0XDDP#xo7k-X486_QD%~Q3h%R&gXcBExQ2wxf*{ICS;JH*nQaf
z-8A{76huRcDRs^E!+CwstI1ISYq%~+@!J$jj$gH{Iz@Y#&0=}0a<9cJFI3K87Sqv`
zR)x)C;$UqS4`LPP5Y8g4VxBKDV?X!{KVU;#KZw$6ydAsnv|gzbUA%}6smWeD*40sr
z9eet`cNAmCUNr9=#n`b|X6<Nb3lU!OG{xAl`?B_R3c|AVk|3rj-I8!gcu7dCq-;SY
zhzGX?eT+}2s7L6DRaAbOn~JK`y}8+f+nqXUk2z(@fo^bdSW`_boS?6!wFoav>VWr;
z+(zNKN%fR0OD?3T>>dY=W-<-$Mgx{<xXrD=ZkHobrXl^UVfbw)3>g$y2MmS<{5#Qn
zDh2k}sbG=<yN%fFE;(SQ0-MG(R1FMl8omP%2)_GsdSbrgr@8UnyqJb=7fjg73h`XT
z1ruK~f#KAO(bquC$2On9ZtG(!DPBt`p^5xcn5sEhiVsS<la}K40T}HIP8c#Unga%l
z(LRjkQ!(17sbCVLZ6`+ih#at!(QHfcMzRzm3B&}AQRK5QiDYs%k-J{2`FcMkXBkmy
z>o1u1b~Q14&oL2E1x{I?mk}<$t#M(j&s(<gHW+q`N-!;9$El6bf=Wzojgy1F#hxmM
zgR4zgvPE+$H@?%D6y~bV;dYo(z?Bi-3EO-IyIC+3XuoZ87F$-jzfom;&{otW&T5cd
zO9}c>l%v+A$%##A>|0gq(P_%*mh=o6>(nb<L*eY4#T^hM^quy0vGqq5vl|FRta87`
zpuKNj?W94Rk%SA^&>~^ktY^5#qZXdE8c!PIrm<z*SYn7DA9<%v*-F4It3T7ZGN8`u
zxX;Nt?q!BNG=~a^%;J`0kY5qUp}{w7`;_t}67P{`<(Jtg|Eph$K^x+{EXtJehWRxq
zNspTBHOyTd#Te!X=DnjB!+d<+JBl&P@5tIw)G&8pFUBx`Vb;DvhPmh{-O_Mvcxgzi
zqzrSV_Y7{BzaHZg2EzUH#0COC&CNiNYPK0funi*DI-i8l=uz0FaIRA9S!;B1c9aU3
zLrhKU1k-jB*Wsf^s4L@iaGXS(P`8e(^gY}p4g@8fZaVV@Xd7q|XI|ia*Isk2@Wp=D
zV&TtIP!63`dOONlR`C;|tQ*BG*nF5ZmC)%S2@PEDX$~uWh~cmlg>xf^l|s!ab>XbI
z9?fF+@e~6j*CGMHE12uZl7P<8Ns{o~LmZ;e1yz4;ULSWJ%W`XGR9xXRS}FA;d<}o?
zF*6lxnjQNezF8Y;l1xkI=Kji1F*Qk%x0>|6@0giPo|^BW0gEQD?=c{U45aYW$iH;|
zLu*|IYzE`e(Z3-P|671AmGSrkDwt$EUe9Z;9Bg0X@eJZcoQQ>K(!}XEvZD~es+WYg
z&l)Wo9B7F%<!&Iz&PD~AhR}*|PxLr2Esk`dRLO>IMC>0b%Lhi(RAm}ruqE8LR)Fb)
z;MZcI<mEtD`9cYTcC(Hb#F$EU1T!h3bcGvE_#N82n-@i69POS5Xv~sw31i4wt4?=7
zs;GZ;WDKU6%TgekRwn9>SEjLyqt{a^05-Ilw0u1|c1mwNgnid?yWME*+`3hcYOGW*
zw#I5z+&fk+Ow!X<ueO!KI9u(ln6=hexjj?md77bpTya^Qb+;gGdM%=c4PN#O^ezaN
zHN7bh_mUO8?#sKIpWmf(BtyZDfk05xF<@<t%BS_2v|urS?ldc1{~0uG<xTz}{EJzn
zQSmIE5rYlgg&2Rj**XxOt;9-79s71@**w_6Iam9LPKx7i$1oP5jvc2bR>$~hP<4z&
z(mWl1JJ-2Sg5_cqSz^1vaCl2Zy`K*$xmq>`sWVlmwmhb}5&xC&YH8|SqB|64RrTL`
z`hN>3os(bnrD(tsi#PR%#ibzt!GPw4hT;#MP-GB}4k!$r`S+svRKoG)R4_?6-b5Vm
z5;^3)!tq)w<EB!V^Scl2#|euHu6*zcxSIjd<sR-sr0X1>i7$Lud_Nwv2%TFa8pRJd
zP#h;{Z>CZHxgMpZdOy62;LnfjuFp(XYLJPCL}+||zc;%%-!2@1YldVmj<xf#fysKi
zOyg3+;?+nvShwUlwJPQDr1GscQq_=Gw9&-<sg)vE?zBkEYV@$>K^JCN?McU|@<8D(
z4FFK9<NOO}+hqT!l+hdq#Ik^#t_`n=rl24o&bn5erMpp!UJ1%TD@R?B-K5iR>Z$k@
z9lfTZzsf*Ehhu5z21`A1=VuM^3X=@cNTJoL7b_g6MS)$0L*}nRJ<`9;Fw$GYBQ@)e
zL-A2kQ7s|bDhk(1Ar-$42!&Mq20gJ<<foHCDxT+*iaLp2H#jpa7tNOh$(S}SV1sUr
z46?n*ys_&h<Xc3VxVWr~%XAH;xLI#BO)NTnj-qk_8n8s=Z9SrLT`a&5o9>Sqy0uQ|
zGKf$IbcQJXAA!hHiO|J>BT<CjM(pxqG$*V$|3OP(DK8dj?MzmhCmaUn7n`$<Htw!2
zG!Ou4<zgJ6{AMIPXK=H2v$dI*3blBYEUOIYn|nhV)fYQZ9Vbd}r_pYb6Cbi!AChvZ
z)oC>9O=N&MT4*Bw3$`}gqZJvd^o~{Q8VD|U06Rz;J?TLJR*_YP#2Mj)L>Qm>)Pzkr
zq)Xy{Ze*x2IAd2H)W^EHS{$cBNg@NO7OKOT)^;(rM5`630WkY%iMA!PVx?dDaca7_
zDg#}NN9ZCUUFNeVCT>2oODtcv?Ywpp*@CWvlM@rFlagMw1v3IotDr8^CjF&Vc@C*j
z*jN^Iu$eqk@}>%%YCC`Fw#%>DoTsLwa$`8|XVKk=<<7t!t!sFSeAf1UG{*Z=Q(&B&
z8V690&Ed_dv1U4<%As9l3!@6k#RA2qQZW-`uNZyh0{$Nss$usmX(|)on5EgFW#~h0
zMWV8OJow~|Y?*!Y09Uvk6{L&JWF{R~)3jszr7={vecL>e;m@Q$Cmn_dsAgEwq5aX!
z_KB3U{UV+UO!CDx9VX+=^g^{W6XG9a1+5?b2`JLhpGWlfd>(W<`r`^t`r9}$5mDvB
zOW^j)qAQvI9&{W{lMCl*Pcv$YS4X}W%zq#y65q>1#r&=g%`ZUH>`O&b=FUAZP3U_U
zx0w!oTp<~K$m9!A!fAp-F!p8{{zr5ii$1HF2>SFFGv=@Gn3IP<%k=-_q4uB;plS3`
zk+kS56Z-yv+f43Tt$tj=iN3QzHhV7Jv19wy5vtqKLv=&zdeMfw)w;Su*An^0j4g+n
zQD0nCuOu`rK{=LYVJZVC8ckFrEt)EXrc=4ibZFuVPBh_+(B3_lUw%~tNmq>J#Hfvy
zaaLSOE@-dI%XCSFxgqYu40c;eylrvg?FtKTR3t6le8SsE2E1_vgSYr4G?Lp|NM)xH
z@ouQ<*o&wAcuT$4iXpWA$qr)u3N>+Jj*jB<nIeQdLTiT;(ksH}g@vG2%86)13O<-Y
zw$u{7!-_!F61!ZW;TMk9D^T?*EhR3at?3@O<e{U9z<|~avc-5!oS;KMAt{-xV={c?
zm9rX`d@~&UA`e0H+u;->s3KCUL^sxK{zSX$e{+|}J2F$JbhXkmsr6sB>>?s6f2`g-
zB6NRj!nVe8H)494#xmeQIl??5J+T*1GDUgLg&imI2$_(F+*F}bC0A&4Z3|9P0EbUP
zz%*%0Wgv|Pk;Y_-CFRF5jGZeOT8dv%tUS)j_cHJSiWdSv;d;D>p4j!sPjhoU3jdxN
zLU0D6n<@GUx3wUHr1tArK~QH>{4?(hL?V*<<Z(X05k(21PQw)H#9n4zyU6R}mGqJo
z^Hopz%Tr7_g*p8u%2^J<qv0^8^;p{}Av1U0OcU1hI_}r9tykF9mH1q$S~L>$O(_5-
z&4W5%&BGP8BziaVmt>e8Cqh@l54pv@e6Y?pn<GrV=r!9oWvpY`M!d1<F$%fZzxP&N
z4B^_<A7#p>Lc=>wn`&4Fb2NXOt@(2V#cj!B=Z#iO9Rbg0#s$j7*>7qo5*;Q3^sFgi
zkDCf8;V5Ntp~<~52B(g^ZnB=BBZ@`no{WPvWbwf$J<UC*_k$@Zjk;z^y8;`4B3(8)
zHPfS5Gou(pI<kCDm@FTWXgUN+RSMP7M!i}o&h|vpg}?UfhA5U%Yj^)(y7NLU(gp+R
zbE8N%h%9bRcVJzpidr^ShTm%Z{)b~mGX>Ut7Y$ge;PZO6Mb@~X2LCv|Xt)*)_gYgU
zeufPZ2V91V{C@@1sWwFZlL{uq6g-cJ?%yO5`o<JoL6Ygvjk_q|4s;|l<wZhr#RdQi
zEg{9U=o+-TM(eo_v__3orRm;HBU_IO(wk_^Ki92O<ZHm3x<2XNFV4{W3nINIxY&12
zOi<Dgx^oFyGH+$@{znMMlqnFx09goyI>4BXs>uH1Xt)@OZNe^9%`0A7M7^1H_K7J*
zMdJ7ID94N9r31jJaY(JCwQ=tu9A3lSrt=MOg{x4Z$AOF+t>mIZXhyzLoH3-lqlD5h
zp6MC|gs<xiDklEKpQM%}*oAXNH>?o6M7}XNp5{>}4}x%9;=zIrH>U?uqn0YCMeU0S
zwG-T1GE~Yt#TA^W-7ztN)R@O*P8vfSu<a4h*v>x<9~qw%cSQ2EUPC@;fh*0E{)+)i
z6t}n~)oNK`cbR@?@Eh>ZlSe}MJ;5Ueen(QnsnJVy)1vp+3B51k&XR#r=;aDd^xiiy
zVarS+Uy2=)8mCNE%4tNey%qnv?%D$fuDf>6p6jkXe*8LYx&h@Sr2K_vgzg7cFR@}n
zL8METq13P}rcG4NwVUrCeNjEXecQG?IH83z4IHnOFBN8^lNOwGu-WS#azcg?rwC|;
z{o2sbpQWUsw<#JrGiD}ClT<XcXM*iU*DNW>*7klhjeR&Pd@DnfZyM@>3KBvPhJs@e
z{b?%v->f}fO+jvhQJ7{o0j1G-k_@^R6T7{c=OrDxaRtL}@x4Typ)6sHQW0O#a(O82
zN~z7^N-3hPPCY}pJQmRtyFB=5P?rZQ@|))+XT(-#uodYjaaV7Qgrlz#iY6E!sk260
z5Z^v2_S@aJZJZrnOYulj5lzG!FkjJ4l}zTzdNg2}CokzSPw3V_Jqidm{kMkU5+@89
zOc4hRhJ^ifXg-xGay}JIGDTiOTzrNca9>j-Ynpzk;AgF-(YV`z#yHa>ppiU5kHn~u
zzXBQQb27U><w8_REe6f*kM!qsT@U0KG!jzPf5o!<{|s=c>HDb}==(R~=sWn~t{Tl&
zC__KLu#)d96QF;B{#>iwB!4FF8qP5jA+%o{s-wi_Dia}g5#{9{GOa`E{QQ)olk4ya
z3gKuK$}#y>UvyI7z^HHIJhPT#K0XJ+bP6IMJBpfQUqC3yzN@2{90;@X-cd{rg!{60
zluJfkOb&!sXYGiS>|196UD%7sf$%3;`x+$4eh)k_sO)U|6B9}mib=Bn!K_eHl6^O8
z=~YSqWz>%(tDqZRr4lQtqY+B|82o6&|HG)o{^XbGiIsJJnwzq&6yCWVvES53TUV){
zx<NipOV>r_Lpxt@^la5G>9Z;sedIu)D`S#W>s+5S(fpT#5Ho4v|A_`HE&P>kEnGpZ
zwD3?0{oI)@OCW<5?tsBiwEsOom`V%(2^CDz!e2>T^ROInUoAXk>TWqpDNE~#+vq@A
zoX-6R1o!!<(BtlZG|_in+#9A?4AD0~-;Cx)z;5Fiwse!ZC;GlB1<{ZWLtV2DlRDA2
z0M>9_lJI$TEIGdAq)-o$n~t>Mi3uoZ^bgdhExjr-OZbyfr@bjkH}N{{Eh*`Nn(WnS
zT^+^fwEnzz6r<BVH+x5xPU{*`j86L-Sv!jAw64BlblTTu?JJbmOLUZuHD4EI&BRJd
zFH{0?aJ}$@7@yD!KSWQg7xL4|pch`;M=uOz{k<?wHMC33hjw_b(GIPq+2QF<t{rm+
zgw#G_zG`jb3l0j*q$Yj_4OnX8{cbfeF`f3;oG@fi6CE%Z0{8z0&8Jcm|DFmasfqU!
z6aAeWa9=fX-m~$_DV_IrH8Ctat5;u-Q$626xcG_2h2`#jG|Ml=e*ZFM`CZL)VJWP0
z$?|(<3L+y_l{#hB1bg&9r!2qoI_}L`$L-4UD<Cq9Taq^Z<~R-w9@WNie19-6yRqVS
zMVTUA8{e05>Z!?IZQRvSj5dDTymu6%jn8E7$kN7LBZ|?+e=TcAQElASSBy6PTUq-G
zY2%`!bgcQOVb)Bnq_lCRcMPtL{~5+7wDEV)6KmuAG%wn?8APy-j*;+L4n9Xh8m(8d
z4v`GgA(Gy+9{rAx@M(>NBP3%Ks9W-C6zq+}zTR<M<VD#9)hPfzn4k}}$iS}QAZs<P
zE`2Bkz0jeP_oJMpBEJ(VvQd`;+%sSuIvEr2TL&G?9@`=+X%?Wr=I$-2jFZ;#powWk
zZC9+0d@;>@HpM7N9#eO`IJr)u2v`gWB*~=*i1-ywpheHkyT9IP#nC0|-C%9lXycbX
zHkyJ&MJn|V@L$PSw8LdjhdG_`{EI|aBD`Asp{ZtQeXo+8$>Lgw1}t)VSC7TDjI2ci
z8(j0&8x6<lPB=1HT@E-50r>v~a!F-%Edd;fR@b|Du|#vi$=xS?(dEP>JV7`Fl(ZNi
zx<ai5dMOyJvPS784wS~(Pw$~ojmW7CEeNh~e6{0qNTe>JlfsQQg{kf|jC^&5-rpPP
zJt0#6vDg6xol^|%(-5hDkh1T}V^#T)o3G!UzkJ(em*XBd2GPVeKZS-Ci5p+4no_IM
zB5K);;HfD_Kugg<l;fr7ygo4LnV}kK<Cx!1xOp;nkuI>3D?AAm1c8=K3YQTv;LB{}
zT^7dPj_o^k^kVN0YAu329Lpzkp)rNNA^zLo?<kKl8EC>^iwB2w;e3NXH&_~hR3$9}
zKR^hqb05jDs6cS8U=V0lk*FAnMy4|64HLyzv?5b~B3BZ%-iIrth)n%&7@1I`UQbV~
zM)A|2Y7|SL`H4(*C&$HFF<S4mdy?a-_X#plZNc}wscf}u46-LaIj-(dNX8}VZ%t<J
zWiks>O(x;^E;L{X#}D-gN0SRzuBqmQhT;=WC^Cpf2NZ_P{69zYsYK)ZsbG>r@<YUF
ze<6q5*CBb%$c>bEm4XY8mAx7cUQwJGE$EkRR!d4^8I7PXI}j8n=srv^{-cJ`(tNM9
zlJ&NZR2l*ly*$$CQ+@KQglv1$oJ&?6qZtkcuCK@OoebmnNbES?!#9PA#H!-J8sjv7
zBiQanBm<eM7N$k=2O4DyT8SPDXYaR9x3zLSH7YfPnjeJ}buF1lwktY=Oh7{N_N+XF
z&4$$$BqO9Gg+-jwpXyZem8tw}y@TWvE!^f^&kI;_DVf%Mexb*p=kuo-=JR9W`850)
z6*`veP^>n%4SvSiN_d<}Pb@t6X>P(pEz^}#tX$;l$HwyG;?(n~u)%TB&C!Z?Y^UIM
zJ1e}+y?z_51nXQiyM&A~K9?^!@JT|Tv7X8o+nMHrQSt#e^lyFFPF#kGF>($#Dk>I;
zTJin725fF8cn!`YuYo|1<&zMIvNBNgE2e31JLWZd{K3X9Fjyw9z!=I|lIqimUI774
z8n3|PxqG))K)0e+d+imFUyLgGq!gndRg$`k^$G}B5;;pJPW<0QO$sM-_6j`4=@n2u
z5H;H1oUns{sh~L~K6iVxA_bl1{{F6l9t5*eAG$KYZxSI0g{Y^vrmD7MJ~Amr4eABA
zxCr16{B2Y*5{ZDrH$`MQyYFb<OuT;ty{A%n2pNeg&)*WA%*eqwRUS*j=*P4Y?fr`B
zS?HqQe!Q)Y;{P84^tUviVVyRzASfTN8keRpgF=!@DU6f1phIDtyp^6<zVOqa@`Z_h
zp04iL;N;4tcSom!<Y?Vsb(kHu%?k^jrrJ-kOqQxbYGpJp^yL4QWAZbx;0Gl!NEZA|
zlm)GOI^u1UzjZ>9!8UO~VW`aiOEjN~Q9nurlWddE5dFVT4%x}5_La!zC|f`*zI2vW
zO^Mb~6U*pn`i28R5q8r;=W_((zi1e(mE)hRD-$Lr+RctfA%g{_D9BUdq;iY9HAG%F
znfI;HnXE$7hL;Y<%q!5o+c`QL+`yF=N1;+6mEROy2#j|V6KpI~+aVQ1oysvSRgfaE
zM0YV%XUB58!ddI+WRApJxn8I2bk(Z3WP>h9?%;G1rDsBS_&-^Hbg&E~5{RWp$K}>&
zjSlbw#-yc6z<(z&p}1rb{b?#JJg5KiNJ;}W%u2(dM*yV;oF4e$L6hiK0~iv%3Qatx
zXB|Q3=QD8{U@=C+zz*X@Q~MXf)Sg&LNhHO<gG;2#fl?uncF+?`Bz`)1B@)CC%$GWD
zlZr^B?eij$R;u=CpT@a=v{aQ)bZTDcnLp?t)lA~($!NgR2p{SZN6FVKKFisE20`TL
z-;kug7tN;<L^n~vBti5Lk^Ph8VEYQ9J-cv)5!O)hK8ZDzoMd|8r(NqYY}ty%6xsig
z%#PMmBwzK8!x7UiOjgZhjPui&p7OQ><#D3zOEl^`^r$V-_G*S+sbVq?MhP4-2uLpE
zP$98`<V?*?kQ!wVB86R31-^#S2*8{afFxUZqaX4uBA+1ZTq0>=LWy|F*#c))NG9ET
zvVds>$_p6(mOw<dM>7P?tLl}h_>vS8M}m<$kk+)uhn{`WyJ3-}rT)vYv%hDboDA&Y
zd6lCg_109qTCE==Lbon(<U2aO+R;k0UgNw`bX^LOH#QxmemXym=@I@>3N$J6>YpPc
zOxVHPH!-n$*P-3J_Us*h=8XsU(q<fO64Py^VV|kUF@!r^K(6gFc1*zc?Iu$55@t$u
z<t;UvobLp{go;QCo^WppSu5<<hBn@vV$ehz4=CEWdT{VHrm3;C+j;*&n0^QMo@m6D
z)pj0N_)}CM=>l>#`=R^IOdQ&K^S)hAQF9SaM<%j~+8Qz4(7_3v)Is~+Ez{3ahmpBh
z+uNU-ja6zk1R!QU9%9rakCf))i;NK{&vHHn8G@b<YAo%1e2wPgv)p?!lxjY>f^$Az
z5W>&X_uj1L1JXg<Hi#VONJ|alh3<XArAZ_MkotVLxVTps6wRaH4?e@psa%cZ+#<7f
z5l4w^U6sZtwRqjmYpF5h>XOEtW~tz00m)|RFc~qLTx5g~hKz>JO=k-&L^)paZxd|&
zh+y7;Mcsw6bFD)jte#m>qdP77$ux9k*6}U0lKu-Q(uuOK6S@C51G#erC%Io6CHL`t
zHxb1@nXdFAZAVeNT!1+4oKhu1+ldmYe<ctQU2le+9Vl$Bv6dXr3OYCFyf!5|uSPj0
zmrZHG)@uw^O}oZ?laRiH`%1UQaD|jezv;%C4~Njs3yTZqJ(pNq(}Upjjqx<tY<*@-
zV`{!mkIWZ!WoB$L<%~UB&DdkC8H*jUX`kw)ovweS>3U{{>Ea4zy5c!88gaw2-Dy^Q
zjC3kxRVZ_!NS9OKcD!aC7rZ0lpw?<Yj!)4Ab|v_Hi|u-IR&0&KMo>5F6^ccOoC-8e
zvaFP-8L5oH@)C!*QMe3&Qfk&44K&qgR*qJ%r|z{jkLCB_Vn2lbBAIy|H_J01CAzF|
z2Dj&u^a7t#@^Ozh`$&K(zZ_-Bfdfx6`f%{eGa$VL{CWzSRSNdM5lxwyjwcaoe_UDF
zgL{i!4G4v|=r#1j-XeaQ7jKan#7MA#HmHTgYQ?GxlOLNA{zY(7ddkKc3C^Q!>5z|>
zE<jMl$GS25<zD$h<XFDwcG@^EF9Swz#pRop*X7d-{pCXo7TneK-$>&<hg`1yO7Vsu
z5O1*JC+uLKPdnJgQ)~s+ljJg&DD*9->EusS&<X8f|1rv0gLyc-hrN+j1d2%)0u=Vt
zB=WA7((Gctj{&eOZAex}J8Gp~)AP-&qaR5z7SiXbOO~vz_;vx0As<B-_UtOg`93j@
z!pxj^vM*FiDvVH=s~q)9*Cf<RqgbpeQ?sM(dN(*XymJ=$+_RIdpwoQXe<%C&aGP*l
z-Uh-Zdn>e?9jpqMQ!^BOtx4^Bj_Jwd#{4%lVA0?YoNi1BE37qgYT_^5|H2I<X2VKO
zrlj?b{tcb@Uk7xl+?Wqj!6Y~44~VS3DF@rvjrn-uJ=*JmT1Acy!GrLz)gc2b#d7}O
zjfeMLe`_9JS_KGBc=+m_YKcy+Vgij2oO3%G(d!+Ej&olAh{k#bDo784F%K`sPL(&)
zXhUnL)q4h^)Q->)vQ*K~Zpr}dk7J>2?1B~o4M<$4fvK37*mu*;+erJvD!2t<PJB5m
zxtB08tQ79JOt@KTD^V*;Tk>=f%TDAf33C_G^2XbC?%aO+&K;L+M3aIeLFT7Ldo~om
zgNJ6Vtt&%NDUMyHAvIMWmjWxamQokImR_2DjHb69Krcu)ehhy@BA!eaH)a};;p?RJ
z|EFPcNUWr`*%V*v1vy+RMc_vjBN2+z3_Y>p#7~1NPAnr-;D-T+6`@hBZCI)kFEREp
zzw=3D(j~3nI#F^ACjyg|Bhn|Vo+(_M&b*)=f?;Uw2&`A(rpn8WOxQn>tUnE1596Vw
z=wAM%SAu&|kO=8Q&qq1a=Yd71pwk7xYOr{vRw1~@5fjkvzPzh0pHo+_Bh)fdXuQ()
zW~`FIj;&t1xV0#pZpc1eo2pEYwd*t0+#Y$ow6c=KH{`ymdct@f0T7GG{IT0RE3Q3-
zg!lp)FMrq{FaE0uCrm>J7M}tfy%K*jT5@K@7F;q0&8+t4Bn(f1npj3d`)B>3)%)a2
z2-H7eP{VpbL|plQY=*~m#PAHoDl)am-2Yuuhf&hye*E9VKZ-Dd?V;)6INXZY(sQj|
z7!z7fwf`Esm0@Qq3T-i8HNyTHO-1#h==iPaT}C+jq!`QFEGT-W^lUYyy`xZ|B^A-|
zeW^cudO~vq+&?gIsV9`{hykUZP(}hxs8Cyy>-{#Bvv@<TAE700h#1*k@bruL<xVU;
z3HIXBL!Ou4Rc+N3!p#ef-WBKdoqmpDUWRhks<#rWp8s-;OwqDj<ihm*_;S15Xzkpp
zR<yBFz1SM7Rcl_mT9~A#oLbN7HMV<DphJ6*d;-Kt?HBZIlSk_xUTc8!FC^$i=xvJn
z8aWsBK~AukPF*xBUG9MVBZtr{Xz&75>_m)>1g2U|bi0A;_=!w)ZW6lGEGHMzgS)oR
z;K-4oOx@E6z^hXX%33M8ju=!jgIFsiBjRj<h|o%zzxZM)6)(Q{S^1Ien{zusDmy3S
z%Lyl`oEELb7$QNr7|{^*+O#E-g5_3Wg~=tdd80>8^hcWiY?J}Ip2@=?OLPGNY}%j?
zeH^~FKwV3?e>yjoOdPAiC=qOMC)`lMiU!;WFh0hQgI=vc`*#tj;0ymvi!5$YZvlHR
z2JT_#!^`VPu!vg@PHnXj-n#_9qnMtq7p3_(q8p6n`8=9%8+K9VD{3G(3%4Yz)uSYD
z_G5*p8!W?EO7$6BW7+jzh6aNrc){oKgHyTga{TQbZ{RY(O1pc4KOZYJYu$UfYP-;!
z_Ha~EkC52+*9aeCtv;R5erF#*Z64tY$NN{XwF#~x<~B8tFg*~D2;mc6aW`rzE;$*c
z<mQw$J=FxO_~YnDE%Ct$yOiRQrIJTVhQQy8O8ry{$t3S$d^wneK4f5$VVbRXa%0I%
zvO2^hC1FVWccZ2nrvG{T(aRL-EnsyF`5^{3Owl9$Z{TfOp7<ilCW#Eq6aF7it2Xt2
zjb5ate*bk;+>9YY_h%3$KidZwo9?;7|LI@BrhBd<rYkkw^AyL?{WXR(aRH|`o0tc7
zM1)1jE-{gFijED5?YWrathgGAQPwF&vAZ`+Gkkt(rdflcu&#t;*<nc*`jCNX&Z4Pa
z$&Dp5%{gJFu?OH{pi9wYF9WH!fV&SWuH<3Ng_$nrL4{jz3YcDI+J&lFnaMq#2xF}$
zY;WrWn9W#RVYGh*o3Xf#n9|gY#bjU@E4iL!&9Jhj>;ll^g5b<nXA(D=v^(quahm?Y
z7!IpGw~0Uu8Cm*V?5#Dbg`&4}Xa3Gj$Lh@^tp@%=*u!CjiQc8S=XBRMt;@~;OD>5M
zEVp_JxuN_cs8Ze>thlz>YL9!3O0_<HUAKJ6ewrmSD1(e(Y0L9Q3uH|hw-mj@&4T<c
z!B8V>$!ck>JaJ1l->8U1wAz$k*|j6%szQ*{?jnx&=_7vo(RdQ2x9Xi{(d(8k4%Q*Y
zvDT`xZ8eTFD$^A4)x8VH&4$|bcA?tczaYq|GT0j3zo0|(xG-2Hue%(VZ5<3&s5fM_
zbq^A9+HGi<t!}Ue$`=Tr+8RSN0B*~vK_guJ^g^`*`&K!{g2mV*Y#>v`!Sbqu!7_OY
zzTQMj%jg2bR=Y6Mz#q$-^?Dni!nbz38!X(~4VDWK;A5*DL4ln7v(v2Nua)h3aeT5+
zJVIXq$`CBcCT@aWJB4Q8X!op-_XfCjx!A@XljFx}4xkpUq8RDMIBmqCVhatPBi`T~
zKff8LaMAH%wa{u|Fz8QK&@Wbimf`asui~Orp!1X<S1wfbpF_bK3RoD&=-Qo@Dl`-f
zmAuK$G}>E5`YGw@XxA&u;LS2jN717p5qy;za5j!qXLZu%p#pc>Q=?bW<~DW)!ym`J
zX0zTLFC(6>>NPO~1Zolb?rMQ~tCb;cr5kLBe2FySKLCyiR*7~E4663I;SZ6@!D%!G
z&|a%7*}WUAtQKn19c)Sg<0WMAI>oDXgVROIq4APOHVe9eLkxIWEQC5?q*77@QC=LZ
zDs<ZQaq}uTr2=wWS?bI*#x+R-vHXJWZfe%Ru4ra8zhPph**C8mEw59mj~|~Qf;tWM
z1Fn}Jw`($$6x-uRE3FE`TBxn@Ql&)!(-;V;9(c7xu?pC31qMU+J2Btk+e%q%T=;z8
z-9Ce!&<XtIymE@P4JAzZ@@C-}rivN|KQ0W`5Wj(PYSSRZYGnqN&4JT41*;lfW1P$#
zTuO_W8gv4auK{WY?8F+uS;}jI*R8R}ETW!kWA)}VIBJ+mG5{z!4u>>W<2I&aDc+A>
zwC!@>b5(Py7-^o~nC2g=ng{b1h-8l-kgnpjr??L+2wThTnJPM4hI13(qEfru-M=*0
z0GgZ`*UYI0FwP<XHrr{fS@?pEkC!Xc<tqLI{VuAK;U27L%@n|BcXYtjEg<T2{#*Px
zUacb@39o_L4aIT+@L=KvzX8jPLexIeX`qW$fDR%H_!rB-2~bbHNa68%U06#C1w>n<
z819_~?N;jr!HkP|Ndn2tOnN17@GKxGdoVFi1j9v?Ix_CTSgnrB*h7YT4Yf>L1}(2T
zCDybP!KsMF?;h+-1~{8as|nZ_lvsfUPk~h9!f@rmt%=H8TFw1g@Tt!dF<2Wa!281}
z5tfQvzD1o)=>p`}s+3qZ_#I?{fQP`xKL!8Ur}7_%@lSyxXYhq$SqhzC3Ds7WUP3Uu
zn0}rP2ZVo!ex3(+p?@d+T#mN<?eude{T!#CVZ_34U;a9JT0=ie>4&=Xe|;r>UPwQ0
zTZ5ms(9cV8vAh2g`uR(wdh*{zKbKG_%?SN)m<>nPya9XZ{_E-ID0SYVpT)3O{8Q=Y
z1q9@;;inTUqY;n?K@6P6aDw4K!LXlTxKA+5Cm7y)8P*dF=e-Q$35M?k!*+t<I>9iV
zV0iBJ36>KK#|ehv1owZUQ{DhE%m^zl7uecNC}V6<B$2?DPfz#JPnUieZ&woXXpa2n
z(GTN|pB|(?{}=r*2FD4FH`C7~{V*=iCj35wex5}?uce>+>E~<o^DX-M{9^n(L_ZfU
z!OsZ&RO#mq`gte)yqkWWy%ax1`gsHWyp?{wO+OFQ&(+KDa~=J>m44n%KM&K-59#N+
z9Da7w&x`3Npr3Ej&v)o&$8!Aaq@U-}&kO12qxADh`f04dPltX+h&o2;hpFQPJ^da1
ze2#uDS%sf%^wXxFS^7D&8b7zt&#UO?b@X%RY52LDem+b;57H0Q*xQNZzC}OZqn~@>
z==EPpKR=?M1*hYODUhz8_5YQAzDqxJgQ!oJjPfl;K3#OgiRyjIWiKd|Qmb$pMV~S)
za@HuH5=$|EajFbKy>vpK6D;_YgMm+Q`*g^gkI?ya%1+QWZRm15iccXcg34*rfvKEz
z+fK03UUZ4vgO%`-3C$3^FW!)BRprEbW4|GRz;Cfg&rH^<dL8GN>mo08>1Cl7m#JR4
z(%Mk_P?MT%5_-eYw&WLRtC0NaKKfv}3BiEww`8}t`x`pvU9hrmh7@ZQnvjPo5{9J1
zTCD)sugOEasx^zGvNP(n)?CX&(VZ^&_i(WD1}q&-k^*_LM&~z5MW1AZSCUD2Hc~7q
zMSTE&LS7?sPg^n<=G~TzwY3PZ{MmjU<r4M&A*q8d#I7(WNnNz>;Pp3>BB<>Fl2~4M
z|4}kj&*S#|^YM>zgvAc@x^x2_MXXx#V6RI#*lV&5*1rlh97DxIn{BA^b1EZBMPO+1
wFmFjY%%{!MFp;szjMEF2Ya(Y&VtJ)jtaeJIxl9ueV2i$3Z%XA<_>{-~KUlTWTmS$7

diff --git a/doc/manual/build/doctrees/man/cascaded.doctree b/doc/manual/build/doctrees/man/cascaded.doctree
deleted file mode 100644
index a26de8adea95fccba7dae2b7918fb461f8d1da49..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 24881
zcmds9TZ|;vSsw51+;4mF*vWd=)M9M+uBT`0#6ijW5<6?J?TkHMdpB#5*!0wN*GyGS
zbyvHpdUwXeB9Sn7#Bo5Rc>ts!KuUN(i3Klth!h0jYHSn*9zX~rBP0k9QGk#Of$;t3
z)VWl5b#=|`hM=spJyoavbIyN1|GE7i8~x=w>=FKt%{9V$C-H)KsTDSyxXUJ}py{-d
z?kBsaKi+-0TVa!teKig{QQhgX5kS;kFK9$gtNTLN9bx0KQ%}6GrQqFBcg!7sp<BVn
z(Zovv$N0qN&e?I@ZaCH>w$nr{f&}29OU^cR+4udGE+N6j+BSMjy6)k4-DXpEl0@Em
zCjrKU;X$tv0~<D859~NbA)ZHDc2hh}G&*hlvToP6B4>kOI&3_#H|bN?opX=7(`>S)
z$afF2F-i54%MClRm))@GEN^>2dpVBk%XLAC{98?$?RPJu{&Lf9b?jhS)TTEH(pZY(
zq{|KkUd!pO9O$gOQ-a5uXY;avO<de*h3(jj1&<bt0>KnuybNx*w}1uiNwD!p@c$J4
z--iFUgFN?6PS&DZaSytu-81f8E2HRhgiV5*_GV<aT~jot&bFfvrOmTzDQS&0Yi;c#
zPhYt7#M7%6Uszk?m{iz&+;+Xz_LALbq*^l<c!?9)K`l<Au(fHndMu|^MUm{Mt0+3(
zOA#ASvFh5r#61EIydMNDup2Dh!uw+)aXiJyL}j+07}T9q1nM?E(u+lJ*FPb;b_$vQ
zK+5!S0COR9)^!Co5li{nQgWFxLyD7VV7f<&1)4Mch!fW%ug%Sp8`uKNlqqh%G>lF%
zi>pS@Q(*UlN=2VNb4E(=%o)pzt;BV#1~+UAQmZ?0Y=s-vIbkS^mThfBp3`asJJuts
z7cV|~&WgRwme<;xio*bIC~PeW6@viB`c-Mh?5;qEJ~50c2C81=igW%tVXZj&YHY|@
z%GI<;sT4Dkvl))Y=flWqhLK}=t&K2h+QbygUJpBoW@9^W?AWp3#hl1WLeBM+$CmV8
zydwOh<t9lxKD#Vk&=LUP?1Pq*1ok>TNtQ3LXRdqa+M+(qt#Xp%?6feH$l=8uWv7PX
zD1}`DQc2?VA}wHJz@!s-UH5m%O@0=___XjOOBtNCy%x!GUdvKfVAB{-l^JRq?<p=Y
zb27F9GarANTeun@)VpHAUlp-H4i8^8%=;L6JjX`8R>RpgBqRp(fxeE7V`zq9)0kRe
zhuXFmb=ht8u!*6sVbNe`g&fuUtZKFHI`yq;J#1}wn_YHOz1a}ovLD>B)ud|^if@Cr
z28yd3!$ZW{J_IYkeU84=$gS8(C(5YVTu<jBNIAzQc@-W8Xr*+&n>x<kT9Uc`$PFVS
zz5K1fgL|7*-WEbBpu!&=bNFDB+s)u?+_ov6nrKH(>_k@_K3e||X#I{Mjs;Ha49AZK
zTZ&W+6nU7HkxGS4Q~zjGpfF2Sc~I1khd&Pj{KNPGoBbpB+uys^X7}q{gAr??gD#t*
zZo+jRv0pb!-Gm(k)EOy*`(4CpwIr<95O5@M_cQ`5dgI8rV<g^hrDNm*I{yZdZjcNm
zNz6!8MoGp9bmbhW6Ze2Zr8-gSGNF0SwwG8}y~MTZ2yU&rEpMYAatg!N6+7@6ixylj
z2fQa2kVXox#X*J3MC|Z`>Ru_~a*h(3%0?`fBhJn4aetA-%(+|`H~MFUI&g^y3Bm9T
zZ9u3=s*p4gnhX2wQG>BY*tES?*FTSz*f>-r*=ajn|1o;ymSMiP!m98&yKKA_%Evib
zTqXaq)7@n==|}l~1Q4l~#0qG>70NORM=eo*v6CbSH@dsTmw)G$M&5<T#^hQ4QHC~q
z@p$gn*ogtoE>7$ORz9!2oG2-DZ~u`+qT+sA7BDy?-hg%gg@-Ra{$Ls`eNTNKPru9Y
zQoSpM@xlK-ujNmn)St#r#+EZ4!i974HvnSzr{kS<|0s%d|0ZIvk8$~~`rih4fB)}9
zsec?lgZocCR1OMSEqxnJ2tVbYq9%W|ugN=5@<P`S2+*(K_q2Z+zgcH=9HiE%lv|2_
z7lHA)aE=E$c?mJ^W)QC1fhA<K;ROzbWu4ejj$#OuV$Uz4t6ugDvgZ@P@->BJ8GBYl
zDUH{>qxh!Kr2Q52<$s2Lo}{1Ork|(O(<+{J{ipfw1^)XC|9zJKUgW=*==XY>UIn&y
zbH44>yKGvUUA@aqj^Iz`!^@Dw|2&Z7zz$)W6Mhuf=do&ikzyPk-ALURafUY1165!{
z%N`4i9+m9>5FPi*zEavWzes57iT<rUrkUf=D*hhKZb<X&z@nvy!lNSUZ*z&drjA|B
z$_dG9*|#oG82ocC24y|oFuIk8OC_q_Rsa8)+y6CjKwE8vt1CNfXu6239d6IXUa;c-
z5peUriXUg7FT53A<_mx*;|rf4Uzm-<q%#acyRl?F;%wNRAi+XGIJLI6>?Fo28pnGn
z37f&%nx2y`?xjhscJl|wmfR0Zx6Muzbtkpw9fL5^4d2WgE_Ajo7KeO7009M-ru2l8
z7nWTgu+Yd18WDUi>@bbil$iGK-QSB2g?E1+J#p{OpMD_T9nKoslsk(I!p&;nTycUf
zJEnDCm+m*fI##W!My&gveDw08PxePy(*}@KolKds{b#|&{k!zlRQy7oE4THybT*N}
z5W1!d6b5U#80^9O^dq6YkN*T(FBNZHBEW$@<~Hd1N=ht<?2or9#+1(`kI?j5UbEA*
zV(38RB|Egth&g9$Z#v{$EC|v1NIQ&UZymuHCT$%jK5HcrCf$ou4QIWxxyV=87Oksx
zL@SVsmJ>x`v}j?)Ch_Wa@Pdln{_i?eQrpgv+MqD-b}+A_m}fBRUc=jB9iJ8y*VY!T
zPAi~wSxkk%0b@RFk*n5@cgC!({ol`W%nZjmAzPM~aELn66+Tgd6mpo<Fn5^NP!tuL
z1TtD5i`M8W88#Kxk^WSw<o^BX=RlP3r?1l!_ow{n2jWi)qGk9|BU%o0w0wN91Md32
z52E%PDj%%|6e^RU-hb)gXCHg?Qoo};Pz5G3QVz6Ey@7uB?^geWu-1|CnI5-#t&#GO
z=Ka5;U@9fbjFjKbC29|zy1!#1QXb{3mfTF=lp%dBx9_qsa(~C!Re{N@gfUPVB?^cC
z&c)%H=+{<W;kwFZGqD1etZ33ZEJ%J6i1}Z~&)^{W44liC08u7Le(pKf!Tt^uA5Pc}
zJ3+%*cdV-zcCgq<V^{yUg>^P;04-vDp@C6qaf&?kS+N9!!krjx>EY`8*1nR|O$YnU
zZ_wzp2+kY>{2szs$;kb?-6}d1Zg+{ExZCAV*Xnl9v3bNBG4|w|VZ+<-oQAO;&)z)e
z+O18eLE~x)X5GDX&(hshJ7~N1yUtn<HyZfNS0YK6w5vy3BtouB)+H=a@?lu4T8ps7
zT5dR3mId?_LCbfjf>pO$sO<#-=@1s2pi5}8Y42FA5NqFIv_%`SZ70H(E3k@jf?*0<
zwoZ(AXK8cEy6QsbqE3rKAVdaGFVd&PX*SaEM{oB25K>1+RK~m(KaQdIRoJPaa+H3w
z1f;T>2Xm~Z;=c=}IJY7cC%cA@<tP7se1-+Rm;UG>>)kw1nlZI09ULjj(ZH+jU9_sL
zXTg|s3q?xLa=;a1pPlqj53bMT;Mr^46tMMmv%p5VHtz)$=x`Pl6lhfH`$uIwwWe~&
zAc!TOs!=&auNslg{t=nY*m5~^=CN3zjb39lZIo){es2HBjdF*wXQVPxQ%Ge*_bdBH
z>iO@hR}=P_XD2#Z=$%Kf8O$78aezZ$m`;k_qX%FD_kzf*Sq@&OVTbsJ7n@5*25Ita
zJT2(58FR3p4Povbj1HD*FB}HFuWhP==pVayM)cp%(f^?37jeeNdkGtQe@Z-{-THkj
zm(N$R>sqbq)+jEn7*XqiDv*&AfQDB2ujFV~`K9u|%!=*a>pTG%()_>)z*lpL+Cu=`
z-?70;EKp_n4BwwAQv=mEbMYuU8R$nMGa0zn*;Rk@+H5Oa8O;SjO>wzU|F1#1|84vX
z4)yPa-Twt3L_nLfR%NWf{0&0=1kt`cx+UX%ob1}NaIOpcg;COJW2ka*xIpZqTf#B$
zvvgAwz)@t@@FJYF2%{aEAD~4m3K8DvQVI)gOeZ>Z7h&E8R=aS-DxN}ghnWTqWwC|x
zvzT*)TL=-+{gU+|oFKyiFgkbVSZy1JB>1TfiV`y`_*3Z7z7l%qpt<gCcCb3;#A<Eq
zhnPZT5AQrwe!BDH(2kn`FSKLuXh6>W3@rp`W!nFA=WcW;raSl06QAzzr)!<=T<>wl
z&5Sdy9%pVDu*&2*LA&ceObp%U5HnSEX^7zs^^Yz<L5?o29$lV9fBRovdYrJ;vHE@2
zd2|`l{J_zro=emoMwkAMjnQSyU@=W9(pP0e?cCnWjw$_JU)M3Ezj<>^A?;&xdf|wx
zQn}$|6;=HRKZA#p```f{1w@(QWaUESwG!_C2?;B~oe8UgHKZtk>&HGB#s_}fZEdaU
z(o%nbv-lPVrD9C}gjm+rPV064O4&xWef$#e&1|lYi4Jp(=~p>$p(o@Urqn2()*k7@
zyP#)-CfR$R?)}bQF*pGBD9shbYK7>X8_*#UdBTq71iygZ_Tc@c?Dy~e-$aMP`@cm`
z-23yV|8L&^a>n~#*53ct0p4FujQqbRp6+u1n5|x>0YJ9ZKL!91IR;$TV*eL(x&JZX
zp9o<+20V0~$ABTt4;%wVM)Qc;!x+%tu`vcrX1Pqu{JKQh(`+sdWk-U31g`5y(BHf^
z{0dh?c0`W^Qm4ud2LDRdIS=Xw4+amxf4rTl4pgRpAKaK*%n84p;-CWZ-eSe~<s82E
zF6&7@_5t9r2>3ntF^Ts6{n&YQDE!!C^u+xbf4W9LrX`4D$mxv<eH+6lD!7S3_aX{z
zVvL@rDVFpj>6_yG<r197JuClW%5lNMl}FL%2%B#>8#wDg*MMq)huedComxz#X$||v
z9-ta-<24OP_MSlpo2JrTel<f)k1o=jaf%Z}?H|JBzD#?A4@#xJbTEKo%ZtO=;)lc%
zadYu8aA*s!oGUoOA-Q6ZnXWD9EsI+UsFTtvgi*-;%y48?6!17O{W!<8FzWGtS`$ZA
z1aVqha{>+D(^ZHc8@w0a#~*dj?VgON+hO3<F=1D7mIZq8AQiLUHd|T9ZAJ2Iz*ohs
z-$YZrgJ+MgF-7}9kn$-(%Et^O`owu$inE^xiCGbdLhtv6qo;(q0^DBbxRn+rRT1Qr
z7AA3kgqh9)G6H?y@)bK;4!m`Fg>U(#u;qw*07|S>M9WE7%TcRBxq`i=pf$<FLKwxx
zFAwLUDdeX>;+ve2exZ<0NFnEuBrz-oQYgMX97QGQRp9pz9KX_nrYeG@(t;)~3=;H1
zeWFR|merQC6E8K^m8i)z(-I!UjeDXE>(a$19<vB2SKcQJ8<qSV0;L!_GPWnfz5r^!
zTSDfiq|67>CJ`+GsgOM~99bp(XMpJ(;5)_l=}n(aRRnRRrBD1AB>e~b1jS`4Iiswa
zi#}{s8(zF+aT^&Z`-R*lB`XJfRqR_H&OXz=FM_taI0uXE`_7USNi<8tE5sifj<}Nh
zC1Cx)-sDbI1fiwnPP`c;_ve>8F?a9Iwqu-z7gy%1jaHl}%de!DysL5BspIrX{j^2j
zt#z+OOF!fja0J9!-;vQ=u17dEv_r}I5|E1NKRKM~rnX!LM?PFaTiz$NWzV!rBCeqY
zMO-+XIHgg~fwEw48bwtEGfHa|@o$huJ=SmbO|QLN$6$f`ke-cXFL}es%2Q8V!0BfN
zl&d^HR;F#q`f|XE%dZXRvZ+FJ24%N|3iS^ey_8CPOF$}QKQ$a#r4k<oroXl~m7pqu
zxY8;?{1~JX59EqXIhO3;!r7y*GUmq>Iim-ZOmcF-SH-<A4CkIH>gPe)=SztC4(Tn5
z36fZr1y^XlIUH>z^cR5hpYKiRR7H?kTIj?XE%f4Q4MbwbWLhpanD@HbC`Di~QthO<
zgmgi{>Ikh=6s(R+Tyz}k;UEqr-*tiF?6*pAmexqV0XSn}bq%Xz4#<+T-*ibNJ0pJo
z(DWixGJ8tM&jR)&QQ>G;vh(8-iAeZL$mb+x{`@#F7YofLDl5huLA9c(v`S>cJD|;o
z&w@>}s5LB<HP%+vQDu@>DURJv6!A$)w-`tfRvAK=xvx?Oez%t($yiaLDuSe9qcB!f
zhznza3z-SHrP2<aIrF?#x##rMStQX>NwU^*2g<{}m4p_#uStbq(*}g(-8jzXQg$@G
z5AnegY(hFC|2#(=Ywn{XgraVMJ`A~YXu4VlZGAv6p>Uc$m*s&V;2fK2BfS$&tkkxV
zU&mOQ^Ec5ZslWdK&dx|4s8ZnFPkM`Eo}G;&y$o+T%{?)W!>d&YW8lHrElx_d4Ra-m
zn-4X>X3RWoT_nA8He?Em9W=tmQ6Nt69pv!Scz3qjw7ixeGX;I7t7P3*c~u<j*>sTV
zO;JS$K0M-qSk2r3o1G!JnHE6s>%-yA`6*Qqk}PcjBz&@fyk)4fN?jZ2{dRs=mz%_U
zdQ2h%k#8R-3!CdRmUj#SmzHy5YB`y%wH15@R28{V;x(DkZ*d-{X7nDzjOfE2%*aJs
zzs}n#_NcdH%qWAr$hPPEXhqq}m+;bWMY0rV4`IWfaVoOrQ1Q1>TGpWc7_dbni!vzx
z6>8NqqpwgwX*2SFp1||z=`kh`%>IKRc$vmT@LwDbZyFO-5%Mf;Or!#XjOji@o%v$+
zPLVMg5NlJpqm5}z26Sqih1Qe-@3$u7v$m%1fq7-D>AyIWbF7Iz?7^D0z{+p(w)SRC
z2J(5<bYddUnq+Clnv9k-8&08qFB|q|O}C<jeOl99sJee^GU@5DrU1-7J_Ik*nh5^p
z;qaz4Q57N2($+*OpslI6nlaI#m`=_a_|D<Yac3PDrV^fQvewAkMr2D%OV&rDPMoBh
z>mNm`#dd(J<7dxWKXoUa$>rJG?mTN<iaO5A(rAw5eN*x7b6`=gvQQ+#rj4F3@zV1w
z|3j$ao@O)mBWrBUX?wWlhdZ)&tsKY@rFntmbB=?%W|(Q|2^^JKX_;=@?M*3)nUvAc
zTsoSjN5+lj<d-zfX9i*3=s{z8h77mau_haOrRjCuGweorzk;^8dA?U%QRk_BN0TtI
zgYL=*o02fNbhk3nAr-s<=khucB?hjgZLP8yS;B91trAao&M)LPK7znaBs<<fmRj7l
zr0ivvd2Rp|sv@0PCu!q8)T%qT$|g6R7V_F+qos=%Bms7?F4An{WtvW4163%{c9-3-
z3^@uEuuI?C0svB)Qp)67CkpU3OKI;Y^)P(}Dx)GZ89TaxW^h%{F+RS^W+|s~tJAD)
zV@<b-ka7;mP`!4I&PkzSj0SHJB~IY*k{TWGtI71o=r661=0gTspu#vOSQAMzRt~T!
z*ACR{C_6&Q@{qn4SrcOkG|EPKsswa5m!?Ue1iy~mM9Cyira&YSeqIYatKrl+u0<lh
z8k_7S8`bw#d9J_{*^f2c6AGgmZoD-D2Z<sn(W{3vf^1%J-e_f%x6)-Nd%pBE;r|8<
zh0Td}H4d`&iR_1-%Iq-FfV(}hn_797%?7x~*+DJ|a2%5{b^yt)*)bf!52FTr2F-EM
z4JEu>Wn<#R1aZV`NQH36*qq%-!kR8(2Rx|TY@^d`*OW?vvAh7sI-RHmD@8N&yo4(|
zNnaPWW2e&yYsel6sKc0hgt1dIYjQ2AC$%eH><N{fuVI^r?ks^2o^W%OjZ0I3+0B3$
zI76h$gx#Uh*%YiMR)OH0ZlWi2f*h6n2nzB_qO}G@K8>v45S4gcxq%%adxPe*Hlc`t
z*Tk&osl#`&xwg};(NqamiYp1|1XIK|v>mvUX|Q+5)fp7WOYNP+MHb*N+Jr?d5F|$c
zkTo1>ffJ^5dJ`zG-hTJJ;OAVlQSWJ<N_6vg$mS`7H>vEF6D@g8vcda+Ls)i`W`NEn
zakmRr)JWX!$^<(Joov>WaVi38B5&s|JB;kjiM?HOy-hd3f1cKxQeU%~7zc5a+KU}n
zbqq!w<L~0N7KBJGf?}}tBrbXY9|&I98@S9_h}v77Hl~!6o1N!RPu;*Sv?r`nb`9kh
zj*_Fmh}Hw<HA#0V<q|hW$~V5%g~~M7odzs;2N<{xrl-4Xp$@36nuA=8K@BNJk&Tq{
zr@zXMq-ouutHFlwX}j#8)4I~djZ!utya~(~nuv6b{CY}FOnNzSM|y`@^5%XWcIxwi
zkR8nch=idp_Y8&{KBmq#6aeMzrEKqj9j8L^T=5fX`b8Qr6Zb{;E%y!o0@elnr|9S3
zuxRLijeY`x^6=APlT@4E#HMkE*WY!MUH7eBUUQe%+T}HnvhF0o@aCt{{G$7YdzH71
z<dI)@zr*tm^2~%h9hXl@!~8Ky8^E6^OO8)@ba)a1pVB4xvvkvlKhXs`pRP6ehv|eM
zf1)$zJ{?Q<chwUeg7xWuqJIYw#h*A)w2;e*;*m~=&6;Y<IW>zl3U1?MDx!qElY|oz
zGfM;<loV>-Tn__f2^{pso<apZnQ3uS_R1?A&9sk!CQ7<+8w<T{rC%`K!*|xh4tYj8
zI2;B6bRB*Qqv!a!wEUBh-7DQ^;Rldl79K^W03!Q3s$6KMcv=;6?Va{o^`O%rYuTh)
PI9UcSpE^Xb4zl#W@4ee)

diff --git a/doc/manual/build/doctrees/nethsm.doctree b/doc/manual/build/doctrees/nethsm.doctree
deleted file mode 100644
index efba98642f82d7980d69604a1a4365f587403ee8..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 49900
zcmeHwd2k%rdEXv9hfD5BUAyaTgOmyEaxM%mLL@B^1WAYl2oc~eSMqw$Gu^;6Ff%>s
z?jeBH%9fniUL;*fSsF(vS^h)iILRN1Hc3@vOVK7yqBx0?R1W7-NwFjOk5rr}aa?gK
zcFL*zzV98~Js8daAho-c02T+B?stCgyWjV|_sRXg_?^H10RM!?EVtYYoT{IxyO!;@
z!b9|+X4iw(XIcZFYJH;BA0GD1HQ#M|WxEwVfD+}3Q?)$1-g>1~c_2LK+vUJ<>$-ep
zf8{{s;47_uyxbo+LDi1E3j3z(fxYaRfm2^L)|{YXn8vIVc<!pbVa(dWmHC+#)kfug
z3-&q<V_S88wnc*t4>U}SENE38^Gjx!GK0W#O3eT>qnSMHSUyG_9xPW)-^WAzy}xeO
z#9xQ3W+VDiGRv!;y+mc2;laRMrdO@XvC8`@N5aEJ4W`P&;Q<AmOIgbd%xuN2+1Yic
z=GL>mSI(AAzie8z`kfAHjY1anvo*8cG^<%rJ6pGdieJlke$Wc{Rh_!sy82MFL~y9P
zK>~(<ccEe%PTdc@CWGEL+`17|9N%b|%eDas7)!1Pz+SXVj#)SIgGR;m1H-Ia2Ih_B
zO$8M*Feb&ojEd<SX4SJzYr`nncAeWct5w@Fnm(-)7T>rybpg$nSJA_1Zi$*mU3AN<
zwr8Mg8jq+$-IUR-*Q8O|a#fA8TMtZ3%gd+*K8(dOfeVdF97BFEW_LWi@8=;%3iv(*
zTB<w^0;)U<!h8<@e-!^u;Q#wU9F<d*!OB48`N|7d_n~m6*`x63Sm7g;{>sBZ^0Z(z
zmHpu#^}uaLUt_~<f_YS{Kv#*P5u&B+^>P(>d)uyVFdfjV!1PxQpnQdC00>G10=7VG
zC}Z4YET?h}&%Nzfww0oHhEpSYV&pdJuCZor7=Ckk8LvPZ)B=iIf(A3jT-7#x+wg-X
z$Ovtv<V!=b3h+FlQ`cB>FaWoS(YR~$-Es}zl~hsKgM@^{@gHVf(6o1LyR>%*w0C8@
zv`2-v(q3_fq(m3NvX%JOTyK>m1WAxo-Sui_^|aw+><s9oo?cw^TsK%;JPjh%d_ThQ
zx1_)R%JFdSUQev0*T?cnL?5g=f$f>qxEwpAW-r9u@o*mjBdS^NwX#(#k_F~?JUplX
z81L5J7E3;gMi#e=7F1ZF#RK7yQWes@__1bE{kV1hp$8rini{c22zs{xouOiS)*7iE
z&<C5I6KohY@W!fbl%ZG<za-9UIZ#?yA+wCqMoKAu8Dly)g{DMZ;-Rk8Vanb{BXC(q
zaLNXBMCdr~n(d*z(gt^&66(`wW3A$pD~4S+OH~`CY`1~V!Ci0Lp0l)J*z0CFfJ7jk
z>jVZNuAea$!1JMUrf4GNvhDj0YJ+=wZgZJb(;HLs3!n%r?vh!SijQf`U7egaPUQ23
zk6B|VZfONda7vf+(E@}GtG80g!t}-=5HOS4_@dMZ)6n<QCC{;z?L{#Z-(3m_h&-OE
z?`nC(1Xee$Pfkmr)DMcXj0zyZg2=L=Z34DJ#x$B<!-al3kP<*4ZHy%)s_>ws+6D<W
z=UPxhxea^00Z@_dFIu6JETzobAn_DHiFV6S770MMVcEBxGD}QU%cN52v{4CyhCiOo
zuC1+Q>QbrCl-*iZib7v1xl9rL70n55J-&xhdnnb8QW8s!-x_*wkKycw;Y70L(|##@
z)NfRr`g+E+ENSZ>lTxb)#^KhN<HGCNuFOhFv?sPQvZ&8rZkKQ2LCFAHX1f9LOAtJt
zW>NPW_d6qu005wGPewn1+5b5<^^YirMbe=X_V0+ZLLoT}*9Bxl9X=c7$AMqwtL#}h
zzJunp!tr<7S2MnZ;Q@39q2H=}mCV7fVLrd!OXv8qGy|U&lTSh_JY+W<;ThP1E1|4N
zP*ciEN?A?H_4KHE5I%j)Y}TO|kjRo+i}pk)JnmXXgW%iUKtS^*-_SS7qLm|j4r{7q
zT=?2cwo#47q6a}b3WT!<34WV&i8@pjQczf(so7>7stGJz-ww!FC56jkMJS~V;5DZ~
za=ij2j3ya145bE|R0D6dN%i&)LWA=6dVx}T6n<2Jl*!|$Vpy!1#xOgaJxOLZxuVGH
zlumm!BON$Kx&i0cXeNh$`SG!#p#p!%q8Z1{DlJ7SCgaj2pb+C;H>&~g$K3!B9$v3i
z$9;I);Bh_F@N5`QxAEtGxE%0kGdxr^>&s2}Cg3S7nSP}e9;-OZl`8%RMbld*Zzmz-
z|B;AzGJ;}6XW`QV8`D6Vv~WJAHST~#OFxe)#<(SlMJR@1F*nd*MUgT5??RdHofa-b
zZh6iFyZTtu@nJ~$3jAG4C`hin56VF|U`oPVc{j?%XmbDv^+%dX{F9S#?7$6UHiZ34
z1eX@}g<obf!!M^Bt7RWLf5U04r%v)O<@7Wf8w!yO{G1TpCD0;2ZEP6iVuwkjs@ZkF
z>Ddi4sNjjPUyPs1W@stBG9Ez_cfG)vomwDE<6K|1>3i9#Q_8N7jTA?Q((n#9*VD`O
zrbJsgw2bfeDbW1@%}6hGe~+bJIfMc$hv_4QkIj`M_>>f~auk0jsp5so`!rT0IQ3`2
zsV#S{UUf}jwo2c2T!zrXkOgRYa5Tb|2;9L+*6cMh{QL@*4^L^!-~*|}#glR+7Z-)s
zvSL>oaEXA8+YJy?4HlS1iwe7ys{*gk7ua{gbtsrP`7>tk?EtmPvN8rB!J$#pgz-px
z@CvsMsrf_|Kgbokdx_!C;0^%m<KelxgM`KjG2)1;DYg~oOG=m&k_#S@|F4}i)|PGf
zW2ODN49mA!V#{?_nz2br%X&6@dwuNV2t3K&&Syq5gUMoP@i3hvTM%*?q)MbuJVzmy
zWWj>VbggM<_)C56z8$|_##=q`XNROcl33{oJHq!$XtU6RWR1z3NaCqNOz-W5y2v|{
zDP82<iAlG<<Sc{p-<gpp65Cc;4L!dH^pp&2pj=D_o=tGQ?}Dj76{wSRj}22WI5>5M
zcDdxhKeo7-wS#h`JT>xpfxRG^`V#!TsfM}1Zs8z+J4tSPkaBwS#<cKd@<yxJNNiwF
z67Dz)?l^LD!JA|(&hk$1DL<w7?7ST`8%cg>oK^G+Hi-@FxWh>dCo72wx^uH}ezC~V
zB?kKZ_U9V$xKA;ZW6ZH99Moz)(+ylv2b<eiMq;8g5N4ticMa&Mb2+;=HS2%r`?&~M
zgOl4?V>!Nl%=(uIdG~L#S~u$x8|t)`AGO5(ToUFTkPIOO(zXrLJ3=>Bz+nli)p{U2
z5I{AzqreJGCbv@@78s@WV#AXH&(l6@fa!cb&8VJE=nXMlUY3V5nka)k*jwo;QtI{G
zSN<BIT;<ftm+(7GY3G8~y857=V#H><3E}f7ulNv<SPS7>{~kVI;k_?n5=G?+v5U9O
zYSSJ!mdvVer>gF9v1(&)cbuXdn#(DF!>4C(&$Eg>ZuHS!Q(r2D$ALedGK@6L?h;kF
z=9bMWy!}woJN}$7W`P*Ax$G%d0d@<}nI|@!&3b_540yi%vgb62ugOMf55edc7U+O#
z`-E|w%b3-84Q>HDCUDie9u1FvXvl<=82!phF5f2~E6#|=CCni|SQr`}5id=v=G197
z<qpm8`}|mkmasqL*})n707%q1i$r*e7+CZmZ8SZAt54y3(uB^M4F}pz9}1oTKfgx0
zFSdB3i-k>9PmbR(YUX;;v8r|vf}t(~h5T_NpVI{_ShBWP#29GX2<2=qP-{(N!B9OX
z8d}+H*73d|>sxl!+yJ_ub&J~N$3eMKB+c5aLN!+q4zRHi6&%T_5%8W3Ff9H~Hm<ss
zy~Sow)YGz>V#@`6kI6QvCv2NU4d!!F4(y@$9*Y0KqPSK@zYY=6%^`CKRX(6#zYbRV
zg@n9_WK4L1bWK*L;~p%MYa|DS+8PsmQE}G3h2Yd;P#5o_-jllAMZJG~j$(&=R(7H3
z>OjWhVTU&wTEEi+T1s{QHp<0RcQdZK-}>8lIjNu_H?oN>lg2Hytkc*ShtG+0^65DP
zTR?Cs3Rg0Fn(ED32~w_R2F%8>cbsyUxH^C=qV~wKTBrKdC?=ONphLr3v4*HXslStr
zP=;OX!Jl2l3+!J*pJ(@WigxAc&uF9CCYQCag*G^5v5GJOk3^xRgQ>{Z?UrskZqvus
zz2(+V1ylgxi|~nNj0xXZvk`f4+ol(b8X@4dF&3`Plbf8~<s?*`C8vxIv};amU#EK8
z5HU%MwLKA3{dBB7SQQvU3V{tgL+X_S4yZFi1&a6rz%Vo^{)~Qvb3&|<+sCdW)NDZe
zb#6Vhw~koH$R_z76GtVoN!H)4HCC2fVHY?Svtj;_sCa+4t5&vS((J0?l`mpc;g2hA
z?~cZFcS6wi4lP=<wDJaiX<PEb-P2i{<rAA}+DsEsg4omKM~x9@8XG1o90ak)q(Q7Y
zcm=9&gI9F2iw?kOQFhVFo0u}&LjnY_aVPGcH)u&Ah#?Yy-Hfa<gr<@h2_uUvulW7~
z7<uu^_4$Q!NgY20=cL-ZkdiW;uDfXwOGV%okx3-&Qj@}gZIA;SEZ(gWpJ%-q5mzGK
zNO@6Z(2#FnKQ5mcOx=W!y}Zg2q*3t@Su}3ctLPBMj-SirQ#b4eg2$L=GvOh=kgcxN
z1ergHdR1EnBQ(7`S9{6yNQRAb+*h-`bBbCg=FGdXut9n36alqbch{8YgOx%j3=FnP
zGnq_E2-voL#t1yNrL_M&*uM?1*W~jfpwwNcrM$h`K`mWLP*_Bj;o}H$5o#cF9)$SC
z*iQ74wF2?7i^@rAUKf?KZ&E9L0t?~TAq^zP0+ry}PEif3Gd*CXl+qEDiz%fW38i!$
ztY(4qGz1~o4Jez?^<3o;A;k`WDnV)5K&UWC4LfEPXm~_s9GefN$!=8a8imzzh$ctm
zg9}J?RK!Pc3<N2Fi0Q<38BX7juLa>u8!9Bip~zAd24TF6g9EjuACLx#6Dnw)6<;tc
z=)~~nwsARZ*wHHrzi5_x>`xQrN1;)YMJ}e~9v(c{SA@fe!cnOMsWU?hG-<wkSO9|+
zt0mmuID3FFO6ai^_X&=PBSC-(&eCvTHFaNS_Yz7#-ELMbsPdL=-X<><-cr}iy3lQf
z52d=HHOlaf`)maw-S0BvV9eY8WQWyJ*!^hRx<$=g-v%m^Po260`W_FT?6Bfdb8=Ll
z*P6`}Td_e6>YzlAsJ7W@Fn@JRgcG9SqVfE~I}f=upAgW9m|r)Q<l~r>;umo~5q|oz
zjYDB%nwfFNW%$lA+ncmSM~88wB_&8FWAxv|#!{7!rp4GDBGOZ!WDq|{gA6Yzok2WA
z_7s4w?X-BcxXqRsP%HRO9GV9HMki#t!@;aiC4nC~-9t3eQ`IZ`p79gXDVk2h{Tutn
z4q0#GT;J@qzSv`&1q|#ov~QM%U~nkF9R7-1MevdpFAEhAuG#=?Ow=GMJj<-bU%TG2
zS$AG##gDqFLovGs{qRm@%xW6^FgVvIBk$woh*{!X3c1?P^`Rj;aEXHfH5?Vl;A_07
zT{E3(T6#*(^*Qw=_k;1Gccb=x)NBToS8(hM{tg-oOFW6GNkx1datWGlO4gW@t`@F9
zn+D=F(Z(IB$JOFA{al#3JUwenPTg3TzBD~Ku`q=*4j;aWV-EZ_H8VYZVddf^y_lT%
z@Wk5kM~2ofzdG@e3(K=FUYMAfnW_y}t;>~HOY_53`|_ore0jZkjh<bcx;8VhdO1ZZ
zv3cXh^vm|rN6t)L$d1gqH?O_;p_PRXpF4*$0{EGly?Dp|CFR}P!^=Iqd`ID>X1hP%
zgYDkIy?rM;;!h_za}+N8<`vRvNrc7a6bVHLH=KPkjY;j*BuC=}Sc=Q%uKFh@2H5Q>
ztaWN56>kG^WgMjjnMg-|$^nGwEL3oE=HeU|e6ptvoSA3QIyoUuhqFkXpP2QD^N{i!
zb0hcTpphZn#lq1NNznUz7JAh`+hf(qB2r;ye=)hFTG)nv`J@OX^{dAEaPEweh6_Uo
zp?s!{cu#m($lH*Ht-<HX<nMDvc5?QdC>ZAo*~xRW*Rt2nX{nioA15JYv)54q6<J<p
zuirc;MPinP+l1H!IM*)Pl=gGK3|BAGul87^9g^nflj|6f=F)Xg)*5I{(5Jw8vNG-J
zQd&}IoZ$G#oj4K5LH!^+`2TI}PU950=hm2>CMP(?YHn(VNDO{1VZ^~Ad8@k9aQs_6
z;21~tFC>Aak^NSVJ&n=?l4y>={G=0+PBp|GwkSaAWfmziWF#e1#(k)3-E6=aL1qY8
z<;2`{f{BxVqocZ}w4XiL?E-cheg8oZ^xYvF_)AF)kJ!M^y(mr=!)%Rq_mXC(Ja`LV
zu_Mrd4lToP1F;%s5I73$LlEPbvhp&MucK@-Y4~tL3BMWHw0CefP*CGXzmMaId>FsQ
z(2e<JjwQ#cqz80;HG!z|w|XoMaTfB%P$%q-ITD+C)QlX%F1;|{>okbYUKlZs?KwEU
zn8Xv!3BxaRFt8P9u;sv_pJedeaJehU+%Qh@Qc3eM^&)(Q2s1OH97~sLr7Nj9;ffrW
zY)GxyeK1l@<qtl5PyP9CBv&t@@{MVEN~r_gN|zKu5CgkL2Unq5C+NCaN9>!?&-n}n
z_{2jh*l566OD<k@A|E^fUJ}X-z=@owA4=Dx<^S6_0uAlQdq6v`68u^clo26(UY>ZU
zty+#}h(k@}`^j<|1?0zys{$%l0Juo|Nr`lAXlO`L&d!@@vS?P^NydffGiUGYLFxs0
zuE&DxP{@5Xxn>&uZ_PlBn>Q_>>)Zwm%sPeNU@wO=d0^urNZ>o;x!Bbx(ROUp?jWxy
zw*@KBI2k|zL!w#im(cNlc>mz-qR1f1<-unSWVgK0<0H0+p2Gx<k(r2NqWv3?4#yjj
zt_`DhdZ|PA$l|1vmGK5|DiW!5v=7N@NN1zNc}aQO;Q1Hi5w5DUO8KQqHja1U=pOqp
zvs6EeV5HlAHaZcQEje|3CEzVCO3RqU_1U`tYa|P^j0lxo%EHl3Xw+F2Qb#P4Yj5ca
z-m95T?_#D;Y(<tX!+Ep~k(5;3M`#h%`{*tPax96IQDfa!Um>g-$3giZs$JW~P#$A3
zhF}kc|50;tFwyBjB!JohZK!b$Y`ad>^-p)2N!w-!DV7?E9|9$6W-120JvHw)lAJP<
zZoh~#!GcAk&YwSzG(8+yDftvXY9RhH=$B729R1ioFp%QILB3zj(i^{B43c_C;W&I&
zFtBYSZ5q967-yw?R6u=)j!rMZXL~H*4&~WzCRa(zv+xTq!J&#Bbwu>&Kv}SRX^yj}
z#*`79u--YCA~NnMYN2l9dEIs(Bs?AV$(~jf^4Z^Eqj~@xVzZ`-6oNj9P?j-C!zm?<
zylC&f{1yx~qJh7{3lOvGcDLXDMvrw=79MrS(&TtY&~zEsPVCLUx6{!a(yO2`Qvhar
z%;8@o(Jo>Re}0P%_|CBS-f`p7VE<;1rQ0Dx_^rgsM5`J0abO{x%2i1)d=4j#DVVVU
zuBfzhX~OMG(U8f~T_U<DMyg9h*HduH8x+H2aYPR#;I%!)!#ls!5c^*}AV#Ez6g4aV
z6Xjx2TmKOwiumI<z;sBJZXW}y%2F?vy9k(ir13!8rzFSmly)LPjr5IiR1Mf?GA@)f
zZNYj;T}SQ>#Fe@#37^Z6{f5h&R$Iu5dHS?(PRH(;XH#N9Hb)3vw59IHH0|_`<`l7>
zhxTzcgh;i%`>a?iDQ>eZQ9@^ho4RKf`N_8(k{ZVZNFws-7V+~tF<iquG&8)l*lBA3
zNSCI?lR+d%;bS9`gQFw*K4iis{E%C9Y!#t_*DgFO*X21%U5Q#qJC;GGDD^`+pd!MH
zjp!I<%D9WTWn<?N9IDFQg>Z<N5uP0YM*9n{(p{3CKgl!pU`?3?b{8(QeOPPq=<7t?
zF*9U`LhE-E6ckZi_!Lo#nbu;0DJLeT==~NJ9-UtxNzk6GiNrt`!IY7k3sO-AqmJcE
zCB2xBf>97IpSxBfYp2yTB+vDLq!MQ1C>IlEzn>6hUtiGjMa9mN-VevC7Wx1a2EQhZ
z0-QOwYe)eFq7t*COtH5elY)zNCJL5dlnqvRm~i-fnRaa`i9RRKk2OsjeI(*k4h{Ny
z2?20?nn1;M3VXV2l3+t)^1z&Okwu{tKNyqI3w(7O3#=k4{s45K7CIqG=Ag>J?B>K=
zX+C<APRq2zDn|~slnFHvYe73KoKASvAq$UBY8Ep2)C{g+z<LHy0X^D6(R(GSYfi~C
zy$ybtc*8u`uj#}QNa@1``_Zm}L_h;6ky4&$!N>^}g#y444UYiw0GD0VjsDzvZh$QN
zUc;|Kw@EWqr6z78D3JqLWp;yk(E+!mc5@J^DSALjyQ&5sr9aT`k#;JYIBKhFICzUl
zH3D$P8xi!cn^>xvz*zY+Zg}-&c&d1M$W9PA*!O(ZwoV&!2sw;BKy{riTCId(jMJ$g
zyjpU+8fTJ@zoLaQ5H8@MO#{bORi9K#|DZ$zE@iloaks|0DuNQ(T#6x;C#dHK_8`>-
zQc82!qpdyK+M_L7iwa^;cguw$+w$ce;%|qV;{Q%a$e5;>0TV@BiSlhYemc_I__(YP
zj)5;EOiYKAHC5<VPmQl@Dp1nPx@ed0y#^V_suC=E_!Vk4^2{T>O-*mhb}6A%il7Hf
zmCpFFgw8ng)Po6~B8BjfZ3^XRnA?{3^UVhB3&3)VDpQV{iK+SY<b}!8bPjnQLi60m
z^Mhlj2Zu*KaoVV?QThhH3gI+dL-LPhd29xiZ_H1mZ>14Z8n2!k96CLgKQkyBko9C~
zN~_kp@M%7TbJ|c{A+63vv0*xt-)H{HL_SR&-;<^W2Z!!qW5Xl&rZJplP||P@D`Kce
zF|I${SfP2&&-CCqJLBUs@1k^Sia#}D`QyX)vKasil3lERI$|F&p3Q}rkK$xgl8<&{
z&w>SZ;m@Zg^+DsVE?=e=3T{9wn@S=X$-G}?Sj9pW?twq`S3AMKvp<!(kAt+6?~?rE
zpF_FGr7-h;5)YAs{J(Ss0B;Yn2~Rl#=nybvxRF<Wk@+wECo-*NN*Jr0$woes*XD@x
z(v*Q1q5>`lcqHT{evL*|?le-Q%?6GP)4es+3Cv4Gz~CE?0`(ACMtvq*76&2W13|<Y
zF18^TA_t(0D*~g|)kfq!b$`FP{pI=!FBfp>pZ!1qRdWuS-!^ZEm^npkLE&XwTM55#
z0!Fcgqa;S!Hct7k{Ulrw5YY%;I%i~l;)T~@U;B2DM*Ou?BFJFtwoX>~w=#iStESL7
z$3Eg_C7iK0afW4U1?3974@Roj=HGTg(_Q;<XHF-VFQ%S9qrHWQM{M6gi!t`7Tqg*3
z<?YPBy72brC;5Ud@Rvz>ALtx*TFS&aka`7PNnd2dgl4Xmawk<ZOn<)zOqF*2J(P>F
z-@zpNUEea=h8Qiy)PfKe7wdei7eVvvmB!&G_;A4-$-PR<khTm(Sw!w_g*obxGgwJ4
zBwH{&>^sRzOG&gn*JA{cy!(GV<5)-qdQ_uRpgbTRM3oNg?;h7oV4_GSY8;&4c-Yr_
zqEYKxhV-t^Kv2W$cEiugdv-e1ci#!N8cD?XA_D0oqor4PW{9XtVM~H3zHvfP3GVpB
z;ciMUAkpMCJh2nJEz56^V^p3v(wr^9R!=~oLULW)!@>KDg1NRo>)VP?eQlhyV{Z!D
z_uaVly5)MH!VcBo(YB?H)UWr>vzQ@DR_w|$>GHdA1;j2T^l(4eW4J_Q3eC>8jYaQc
zhYNQUe-<R8#07<TxG@0AT#9)skPXV3Q0~T4Y3MhUiGboRbhfDPQ{x%}vppcN!v#Cv
z1|+>;w|)wn{gE+XGXI5-UM-$x+gnM8lJAIX6p?=i9GMa*(k+Cv_8f1G_-mD5r@K-v
zFhtxewzx<!0u)!UxJZG_)EaH37`XNq8AX=B>xoM(A<-}?-h5nZmb1|-Q6K``sovtE
z%6*Bppo`<q4(tTtB1DKB$ETc>I-d_Z71uSQw&+w1Bdgkoh1jIl>{HRCNqkXvau}U<
z8Zl4|rY#M>VV2z6w$kGvDSEF%Bq@H95hNzO?nY89^}seI)TmPyYR_+f>9-8|o*FFc
zokrf-zSM(1ibPbzk_5tS8DA71{YV@c75_S<5F@JiXF3fcrjBj_-v{p&v!lMZ-~k4$
zFm`cK4_ZBnDt>;agZ|XpPD0V(x6Jy9t>mTVek@6MQ6pd4DFhBGiq&jdjAMKH(4{sW
z90{uLMAAsg889i8avgsvjKfxSI;~dH=#%;8l_ZPB_C?1Gk%^H!6jx`ER#>P<#;L8W
zoOX6IxwKhrR7_~%#3hweLhKfE5TDquzD7sFNJ|G#W5z7m9>rm(eRd%*qie5DskQha
zn5o8%-|T^2I~3v9lIRoRT=+aL44`yQIG-nNRG~~G!J!!t^7v`GGlB3UX0pm!uq$OP
zr3tm!m7><2LuO~#0_<YIJ~Iz@G`d-!EMXsU>G+rf|A#;ug&5rnX_$Ve2TY06l8^AW
zQ7&er-bfm$^V&q@q=m22m>|PR;S<Ih4;cD|xCoAg`=m6!h3F7jSF~r(3AB3qeQ8_I
z|9@;_{z@@kAcRqXh}&PcMxpbaFyt{$x+zFvK$alkvu+$1=aW_#zsklkY#C?I8dKLV
zrDBh8L6Bh-aCrm$Mo0<&%wM12-*rEp93?{rKdX7kr+H&+WC#t64&q~Q2>WCBUBJ~1
z?cIpRqi$yB#gn?9!i}6Af7FP?cyJc`%pfkF97N;_%>z7`6YQjKD1sR800D`wdmt1L
z-W3QnHvdTvY~CS<e6bDTwUHApKnk*@kf3)((&UIj2(nvt$Pq!BymUqg^9JrF=C9&z
zcJ{>+F=&ea{xq(Ebo4-Phm#`t#Wn~;Dn>0*F__&^04gHyct4^8nkNVyI*0J#39*i>
zR5~M{R4=&6*ki@j-{M|1%%1K6vmGK<xecrlVuh0x8ws)*Q3!Du5ZV9~xrT&2%7+Vq
zgRnU*3!!&z9f5Kb^eA&?r^K0R9FnLuks_DTFfw_Oc|hFvKuwZ*hMj&Y0}t>TZDE0#
zS{fnWS%cDx@<NYAi92;FZ4lRpd}|Xt<D}xy0^XF&61R26@Gk`~6g|Qvt_bGf@N!<6
zQ?W9qq@pWv`;<WLQ>pKMzGb{*B6*YuOE=;DS<^vAaus6D@DRAtHL)3}q9W-IB>4!d
zG?*J4rh88Y2N&`~<3oevgSi)Sxp4@${(QyA=WCFg*i&3~2cl~EGb6?YR!9nzkczJ0
z<9t+%8+7<yZ0?XEo`Z4^7mVfeNRVp|`;iTi+jCiGYQ^C7;7;SfBLp6h7l5l%$SQkN
z1TZq96>b1ns*_=%Rl>h`D+(WF7FgTjs`Ds?26b=bQ&C^?qa%f}!IAvX2t}z#bk^04
zHdqZatVT4f2v9i<C{>;Jw$S0ODlgGRU6q~Io<y8D9A2mvEe<V&kDwe8K*ZlLN0mR<
zG6s#=`KihN!hl}Rt!0K8#K2zc7W2ybMn6Bx`h*(Dc7jvL=#>C}$5IQfyNaPu{lG=4
zYP!>rxW*t*2eJ%kVi=P$Q9fK?U`FG{B?$&zz&HUYG{EXNnk9reR64CCk<FZVjnQ>n
z?C7-+K{{9(X)B`BF+;;c1q!>ioMq#K`Y~M<PH*B=Zd{z5zdH4@@j~6@m@Ak50<zLC
z+kztafe#p$;W@+=?O>AQ^fi6{{FSMRi&Hnwo=qclQ5nJ0;|9{J-gp_y#ykVD$JeKB
z+_-)N>E0|{8<rm#E>KO5q#idu=6yhv$E(xE#O(Y_Q#Zt)Hy5s4zcIb=GQyeh;^M{W
zh3V_F6W8!EMfF8d1M5%E$2;q@?Ygs^pfNZ+3N*_XjE{ovV_eugF60Mug;%)g4>xTD
z!PC8F=-a4)6HtfqQ#W4Zv8fBzPZ0e2HADxHqWR+702O`d%GB(*F%RmQb#EJkgGPR2
ze0YSI)8y0wvo0z%Gk@8bpZ>@cE`2NCCeRe}N*mr|%C$YFtfbc-Q|`>V_n7h?Q+`XB
zvevlI^w79>Xa=n&mGYPe@)^=b=$<FI_|hcY)8yilLG3Z0BbS3KFfzm06)041l<VSU
zWEWl+FXJg_MwBd>`7m2YNMeTX*o2g6;F1o<ZI{>3T<8H!<$L@v%Ef$-zmW7j{@hI&
z=n`#-$|S6dD$N|!Hs~T8E+eB`*gHuf_%3H2<~(#TH|5<%;;KJ{O(1WID4;zSh%i)M
z4haRB0h%Q@h07dL<B9e~N<7h69O#ZN(OBsOrp`NZ)DdqdR^QU8>lGCfjqtczG|OiQ
z`PI@Uys1Cm>9~BlDbBb<ZH>;fV}AtnLCASGxg@WW>5tVE_#D%m$A*Rq<Ea$h8`Bp%
zdO){6T-a#X^mIm_=n!SZ$$c0G(wDk`bA;l00KOxj`v*56i@?j2_=$ZNJ<;1#VX0g;
zm&OW9OM^ot%O0|GR>8J&g%J~3D+(hx95Fglvc^oVGBsJ8!^sO{YVzXzM3K}DHiV$H
zDt&ZsNfI!}m$z?8G`0OqC&m!lCEuYm`U`CY89C){EWi^NvDeu7-9<Q#>P&?!CKNYC
zIEZh<+@>u|^5Utz&*&(*W|#Y@?TA%=x}8<Nt8>2+F~cLV!9=Zmt`lTBvrOucS?1WT
zr=k}`41Rm;?+b0vjvR7NJ-qGnSQ6gbK8(c<gR(&k?K%s-4}j(k{4dU3pPq$f3MNpZ
zv;WaEO0t_98p`Kj?3%fy!I9k1$VhI~%#Y+oM#siVOEBocQHI9ygTrTr#;j4x93Hlo
z?BTKeQlUI*kCpAE(qL(Lv}Bd-p)=<2*x1mLY2~c35pytC8np}dNMUJoaKyC1vdX!!
z!Tgwg=1hLLoEse-LUX0DLA$UtIBLm3P28B6na8MdBPeTPa|=BbtXv_N&yAu8@2PWU
zVC<Z2lL?~Q^hH?*(=8N6Mn($wm&dO${x(v;RrDi+BSUar(Er@X5S|ayUj-_V=hAqF
zzwv&gP#DEuC|?*Gp>y0feRCPk1pcW*ox`IE-s}|5_|cr_+@}4K<m%iPQzC7Zj!R(%
z?NdVn03Y7@+qh#xW`m18soU^t!2=a|aGH_Nl;A??BH;0g&ijlD!K7r-9)0Z5N5sAM
z=)+g^q2<uu>?HnnuNeGFQdC9qEj$Ioiflx_`EwO&bXwVnY1}#n$-mWNRaNe6R&K|5
zWgD=I@ya?oivoS1I{rvQ>Yw+3lrllTfpReu^vg*Tv^5Po(F6M<v$8#@Gr*EGn2|N7
z>efZx8<TgtI2kl4QrLBjWoMQ_B!~)jX`i!!txhzKgec&Sv5iiOp~EZEvv?aoxZR^D
z*lYK4bdiqrEe2g@qgIVvX=w-LgQ)iJb^?574UIZt4Q*tXfY7Tgh8*E<H}mw@3F+0c
zC(P3_o2PO{agZmrQqo9PCDv*;d#7c8HD93kvU|CGN;lQ<wco2Xr!k&YK}xYO$1Krs
zwr~m8;awUlT)H$kbm8LE&{XbXVQLDt<HY2|#lpzNsmali3m3;Gij8LJ$Ia?8-NIF=
zoy!+~jQ4cT(dLTfLj9+EZgJxl+(sE}gwPGr4tDC1{U3^g3miro$>`jX${j`Yf;$6j
zCGPjY{nmh6Q_27BM4G#o9$#xCq{ys%l}tZU_B;?1?Qxn_B+$pE`r>vmaFK9`7@vrw
zmB9prLD(M`u?lEco(kr}0bn6+)sL9td+s!bh*cdq$XPKT2p<icplTOAdkGODxZ<<*
znU=m5_xbIQSuw@_?ane9%5fe_TQbeq(m-6TJc%-3T{LQG*X|ZZ8Y2V*w#PUBVRE^n
zN?{7?l9n>rRIHbuiskdW`>R>zb`kkUu-{IpvRwGW6^Ikh^mN90Ly==%hY6DXm4_<>
zmFFuj%>3ho(C2`~X-H%+IzIT)Xu!8j5(+2H<2hY>>I2A&=V61ZLD42uU&JkuD9<2e
zXC1Z?ZAQByLP=#NLG&F$5#X^Nx7_mh;(QHfkta>hN>d>DS)aa^=_^FYd3nPFk%a(1
zUrmm~@RnQS>sWD(_axHKP+C8Z#)}AXQG~J-acx-<$pSqG_axdyevi{ih=$mDN<c#d
z9w6NG<{C9~m99FroFz#&5%vA4cK`q*>bk^uQTbf>NCUSB0T{(~(0ZK8Pi_a=0{I>Y
z4><KI?)He)U%5dTb?}uIwh4|VmMj{?iye@&KitP72_N<Ys}&x^XBx}ivMX)0zd-H3
zZ)Fa@nx#9liSPjCMGb`NG;Vm9pWq7MdTYf*_3$7buow;>=8{M79kLt;rJbPlI=@EF
zx;p-(syL&#YzM9IXae(E#E)iaOoD>GLA-&W%!~=idx&-K0xctG$t8<U82!j%SCmzZ
z;eB_;>!|S!jMVP}MlufQWU`*oKB9=I{+7Y*=1k3>-RU4sY=;0fFBD^pxU}NS@ts2z
z49m->m?D-ilH~iQ>Xx8tV7B<8d-#=YOhEPUF9|_9_AvI{PqqX%WER9ieGzGr({m0^
zywAYNWSp%8LBoe$yV9uPJKb-6ezC|aPWy6Cc4#45tG~gcth}iO`un%vI#F|CD6-jp
zOy(<Sx3a(eeOKb#M`txbO35Zyz6i4;d}8YyiO4EnLsv8fT%`I2%IR4g?+6t^1y6sX
z)n9q`74)<MI5q%B<k+c`6n+jI3Y;Z+0cRY)klV@3KboG?TKNX`2_pXzI$e1aA6IDw
z#Ynb?RR6kd$sY*cjcZ_$+&pMf7+uk_mpGB8TaPi)5T=arnuiPSWnA2Ar0rFaqjr4U
z`1mQLKwkA5_;zaCSn!(mCluK~+3B6e)c?ddu$66wM`ArCl$4d<rsW+7A35v!LD6nF
z$Y*=LRe9m+LkT>NAQ2wHY$(k)Ybg<=#bc?wbltWmEhN?+?r9HfB(^~^_+=3zV5WKd
zo0Ki>Nl^<LFRhZas?zdMc4B^<H2L932fF%DSIj*i!rxn!=fkI<w$yzjBA_+oT=vM>
z(*nkY`#FHJb@hQTrOMbAzBUPu9}JI`MHppKwly0*qMoocoed8`8KLR=t?+S(CZGuv
zdR!|DK-3`}54=cbgs-tBJRp20t=Y=4+3>Jbpj@woFLXyG+$FUJz8vvfH^5MVZ|kk_
z!E7r$B8E^zzpE&al3$x%72l2qZn;=8%d7MjL)nkR)ZRubd}0aB(DKG!z7DwvFB!79
z7S}009YXV%4`r%REW0(3R^X$-r^OSyYV(sK1#%S2Rh*;1WYC|ipdUOU?3-d0KJ;qq
z>O*0wVpaq7b$|G{z3v1>;S7qN?zikxa~bU&Bk4^#4%)TN8lD^`FT71tqVYL(_?wC_
zb6nDdTH)blu#_I7+kRW&Gs%}l+w)wn2n`aK|9Mye8fqEZz@q~4u~znTE3NR^wl{4}
ztUP}R%<h<IHyVSg{Y>&jTjlUEngejpM`$iH1#q$|)Y~TZU;uFo%=IC=-U^=-G2mb^
zr0<~{q$vO#4hW|NLBz2XLR1cf$4o?l7o$hvLk`gGsMV}BNIw=R3Bd9L-suFTQ-hE4
z6GnDg{peA{x0{w*T(1#AJqGQ{_3dK3CSyrCDBgCkhr%fPXc0F*&`t>^LJ7xE@t`6V
zkliDg3|$Ptbcc6GWw9bhx3|F4-$j3+6N-8!+LW>CSn?yDxu(BfeK35S=na@tUj`yp
zof`DMna56r#~OAcvVmzbP?sCPc8r}!BYcmNQF!cU#1&B)*INcf9jB5!0F*4MR3)wO
z5T2*spBn-^k9kYww&v+c)clXB=0UtBq3kM>)j)VHaUWm^*-B8WqO-%;Q34fNL8W!|
zQ1~oxvR2f@N!lzM@kJICt<CT;f1@6l>&1$*T&dze@OK~iX<OkVtkf1i)?}vrdiW%N
z7hj8<m;rbL&_0VCp0tr=dxG8oWd<RPvDIb+T^z&cgbzWmflXi!4oTt6islPX5Tk$q
zY%Au}2zTi`B@^R5W=TMqTFJIR!5cWbP_dzaZ-&RqD79MT3(t!<83W6b7|844<J2;(
zINjPUc-m(8Fz)Va%{EKnA?Yn4w)mI>>xV+UibAdD$vxgKm5H0L{5QzI6_%Uf6Nv(R
zB?(F-Wha;Ssk0?rfNT-RqSnHL^icfWzw#&4^dHm5Q>0uxP9HV;SfP(^(#OA}kFU_j
zm+7N`M5Ze_`gn{!j?%|}$7cG<f2EI6<PTaIqK`U#tkTD4>7zv-zegYcnLfUS^Dry_
zfj(y82wS;IAODCxzD^&5G@vYf{2_h(0e$=%`uJD)XoiPr24ps|tm8Rs^7uD-?3+C9
zO&;^>Jl;(n>+3wuO&;SWk8hL5w#nn#<S}jXcs6+~n>>z99>XU0|9Z3XETk&~ta5~*
zRr#g>)w?yQ8X8o8o&I7_eVhJbP#q+AF{no9F9sD|og+X+>F5QhC|jcd6(wjBprWiq
z0#tN9R)C6Py9B7njV?e%x;=wx<)1RVj>ZX+ao{NIOQAIYFT@k#yQ-YP#rP9q7W@<h
zTr0U%P2>FVskVo@^x;H{hgGj!>4`-95TRbs0z*9B-j;j=O$Jh-j07qmePDc9oMZv5
zK`%HsDW87^82+=Z8{lva(*v)>l|2*`AUf2-A@TT#evEdZp~$mr-~-FVZ&HZja!K`r
MZahm$TC<e-|Kkk6!~g&Q

diff --git a/doc/manual/build/doctrees/nsd.doctree b/doc/manual/build/doctrees/nsd.doctree
deleted file mode 100644
index d2e18bbf2e54d6df2865a7078885c3ecf058fd9d..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 9600
zcmeHNTaO$^6<%NVHtStq;tf#}L&e6}4w;$wk`NXG7&{JTowXEiz>x^OJ>4}^z1z2R
zRqrJvQjmz0l}dTQ%^Tu@tKcaT4<O||FGz@g0X*;@_)hh82Ja<cB7(Bg%uZLGI(6#Y
z>zsaj{3q$zG4rSA+{j6l=gUqQxm;#?iUtB6s_b5N;fL8<*?B#k*c&oR6NhJd3=od+
zd^h1?_F5*!^rYmD@}jVU7vo|=Oum+#$K<&3l+PPe`sB?}@j+rMFC4H9PYJek=Xyr)
z06)CUH)-P?px()dAUzS=*j;7fnC#iQWh<3<y;OmEqV|yIN>HXJ9p9D`gZMoj+Clzn
z%1z_?p=Ud53GWk3swb5_ps7sEiATkZp0+Ahh(mg!<iNGAYb(1eqJVcdy&wv^GI6?&
zEgjqC<^Q${;>%sE?*?|5+I}}*-3_JNNu<j3Vc!dRws<h@;n*`hKXTTr*V9N1@hV&b
zIqVKk)_KCN+Z>y*^I+En*4tuBw?eMiExRX~Cz%~GJ5?e|JO$RSb9Q~{4x`gBX_j|d
zt#+FUrDD0zHDrJ|2;Bz~A2{%<YotI@n+Ahz$S4*~$t^xWYI1?k>j#Q6R}aYU3iLue
z24xVZpjMy5=Lvky;Byv&7U#qzaX~yOzPLC6;7%@rQj3N)S$}pPEF+FVi#U`LCQ_OW
z%;1Jm>-jyARD^$fH^TJ<Hc1mN6F2A#-vaH|(>)IQ&ElX_`9b**SM(H*y<E)pD2JYE
zaA-!H7l**5R_+gK`#xF@=qFy0WY5q|W<wcSoOpqqY%vwFYq@2V65j`8#SXC>JBSBl
zsGO)PsGR|omrJ7VzI|Y9Y&l}7<P~8dOJk`LZU;@{U{Sv$lWj#Q3sR|=?YcO~8&Sw{
ziWZ$r30pBEXxTVeeqcDkD0Jz_4WnZ+$`{e<4bS&sjG^1I+0yOhn>Su%@JZ4h5dLcW
z4Z%aK;rYgnu)_f->vr??w(mz96)@-u>@`ltfA_}AAno;(gL0rtxWmZ{5T-PS!^#nM
z*zK5nHPFC;kg$Nb5KzkjnjU93N8cNy38yXLo(Y8{N3wk9=8J5N8=;b~feZE=!b}jw
zi3lG^X%#1vokHxN%Hn@P7L{SG?`2q}gPbi5tZ7*KPdB23@l893{rp({i1f1b0Hp>Y
z5FudoJplC)PbjG%t1`i=Slw}=pjFtIQAlHBh-c7Y=%R^TFhhj6FiwqT+oirTHxGzO
z8iuqpwi1z4t&3m2)VcWVbDgI<mzeKK#miYzQ<wMc)K@Hy62-1ObLG-P>6iYm&QuBd
zNBb4@$%dfE^sMhGp4h%+5|c(q)9;h87Fx`>xrI^*j2M~uqj?hf0y|y)?2t=5jWzTa
zM#}4NEwF}|zCnV32U&dK)dDC^qIJ*Z?ah8N1UUpGRh00yXJEFtES5TO?y50d%J-8;
zcqPPaHzDfj&A?xfu}#_eRGe^QGe~*+5hd)~ddf!(NfBm{5*O;9={eyIgpZH1>|{WR
zGlkP17h&{~hB8#)RDbts9RiA2fzaxbsqPUD5L1F64Jlf{BghVe|7aB+;Cqz?{&(<?
zEo2oVf4dtan|a~s1_SO@`NRR_6NrDc_Mb-7zi45Il-u?Plzod}fr-F&+EUn;o_Q7%
z07|%mJ#;#q=bt~_YMIzhSavib1F@SG?QBLRNrgEe6WhU*Mgi|{PHYEzy89_J;B#u#
z`onIjC4Me`A%3|nekFb_elu)pXB(PUo7$^)IN#&4#>1`;M<-Rc2!P#`Qt-Bt-k>8?
z;4?S?7QjWeybwPFV|#f%c3#Zu!?Z<B|A(?CZkC#^zrOpeXV1M$r~4n{sZ96JyYaWa
z8U3Za8GVR^WnMqL0~0E=IQH<JX!IUbCPG&lavIZzlovOnqW3Znc+kTw-Q?bWWWy~|
zR*V#TI2(dY;G&g{^n)gg3qq?*^s$`Q4X;s@<MVzWb(SKZt~KT3-g#bsj5}6h`p0h4
zZ#wQTK}>(&>r(vJBFqu6xjhagw<}j&m-0!HL-Wd0T$8BS;?kwin45uGSt+VNjEs*`
z+?5q}?bgi}g+1Jeo?^T+=pY$|7-f{lJ2JtGA9<(BURTNe!emi?D^j(lI-a~AMWsz1
z8zr_zI%AOTS~^*s28?*r>~Bo$vE5Eu3a}t|f2Ow35K9$&^$VY8qlB||ySQxUQ5eq%
z!p-Q5kv#gA!M9|>1Hx9F@5~;Yt0I6t+_R;~M#I4KjWbuqefKP|F6RXd(#DW)u;r`8
zCEQbanSyRfF?YPaM;CUg9zg#{f9u*sp}8G)RmwETbsLoo@;^}Kk^564F~3N6DsxkM
z=5mV&sIPg2X5(6hYD(%TS>4Jg8${)Vz*klpx4e~={GOK=LS5VlqrgBJH<*_=n<iDJ
zCorXk6}E;l&9Z!4o74xNV0P7Zc-d&vY776WkbHE6o24etG<aNN_{tvo2%lM6GHqro
z`Kga0pn9wO5qo51rIuew=~OvXuYKv?AoI+A^r14$oVxuvo~sQbtR2rwwc{~`3es-4
z71IxC8q4>~<6$<Ae9zgcstrvM6(!*ZjI}y1--DxjIieS99@I?JPvp5Jx)*I*w(WLN
z-fgR>T{z{;F6-<CFaz+v)Pif^MlpUGTbdGcqlmjpsrk$+!=+}hy{Npx^%SnIRJnb@
zR=lHn@m`4rD$c8K0j^PWzBQCS9A3VC{dT#3{!nf3-aa-c6V9c^M%Z9Xe@3P~iFO*g
zbx~;HChvtF{cHw)+%Vaj398p<7)i{%iDWbOQ5slSU_Usw5hZJ;P;hR6Ehi~|t0eQG
z`^{BU|7-`U^-N<Y$iEip>Q9M77xa;@qSs}i$>2wWuVv`B92`1SL&46BC|D)b`>R+E
zUaMFIPWkt~lng>^Y=6?Lo04scDs5<QL#3PZc~v~0ua7K9iw`xl0-e2`6RE13D4x_O
zRbqz{cR3O(ZtDZw5AsgtxQdkRXNzOHRl;x=k11um2lSkiCe#PDiq7PcK2naD=Hilu
z$5qs4MO*hc^)gML7l9Xt4PEq6zhnDo7*q<RC!$oL%$hBUxg|Y4;2~;&D6(aEpcVqI
zEkTTjnIwu7NQDY+X8J%k(=#~<7WQ2OK&yC66CY2rDsn99w9+g{83)bDR;Ew%fd=J3
z-k5w>&q9_eOap6^F0I+SdJY+e7h9BZV4(!U$MO;G<I;r@iv(ts-CpchEGXK)U<-@@
z^<K;8>m2Mns9VDJtH*JDoNs#IA{wWuEP=-LxXXL#0Nc%N*a_8;0YQx;j7&ou4yPj#
zeWo;Rq4yV2-j(U;RQ21>wQ&{5^y9;m7Eh8WvC!3VeV#x9M5=>!@X?&}4J_jZOQuha
z%#5H|{Tob8&*gY)8p_p=4^NCN*2m}!&^;*%KarvITa*jIaThhigXr_?htN-o5*J=4
zhUQ=!4{EcdC-QqLal~^=g%A^Z4p~}c)kFHA2X&iu(;&7gl>}qW0GVEbjuat0YDSE*
zll1GMSn|}3ER;F{b&PMuk>pl$rO^^cS?iwka+N)5xt_FpKF2|*qlJZ&rK!N|j^HqG
zr=hVs%*_^H7M0!1O9KznFKmK>s<BNT5;hkipTP?e5LN!Tct9T~dxPeL11O^J1)j=Y
zI(AOa#XPpE#xNb`2#w$Zz%4Qj{YY76!LaPaTj<}1ohTW=qUH(G5CBL^akN@sfmGq;
zar^AkSHRD?r0<NNr;!@{7fST>!UC!68c#YNSADYwy_`UGB5XFT>>jMhRU%uQ(x;%4
zfmIo2bpR_bGH>f+aw}B!rd8FD>2-#PRR4%X*H`5)GDtA$A@gkBYk*}%j$N?!6zUzI
z2ZGP-4O})X#Ok#)M$wvHOEIsG6mDP}+7mfc$g2Fp333#Oi6da>I}acWRA7uT(t8$b
z8B_+<85b731quY`3VX~ufLgP7V0*rWtd9IHB>%2HPMFCXOYZk`pSG<J@o+s`N_%=L
z_a-o3XrdRo9&AHdsOSthyc1qFIX)Vw$(yhK4tBa~La9D61VC3<f*1~`242!;{R)8k
z|MYSTU?*uX|9yV-148{r`g()DHt6g3^z}ZzQaw$uYAZIo<j~s&a@#;{r{WY|l`sgz
zj9D$XS!xoURL?e5!R$Wkn72&8AyAZ$kj0m9ITxBEIUINc)d_l$Uul;CJvlO1K~E21
zoGy1Yi%tyTHx;!ErZ_)}tC&Fyg+Fqll)Mdi?Vw|sOBoSq@>(%|54?RRdl|NcH(+3;
oWgDBsdZKbmL&G!Gu+fMaFLeCWB@G<Vs+LQhvv4x`dla320#Iaa82|tP

diff --git a/doc/manual/build/doctrees/quick-start.doctree b/doc/manual/build/doctrees/quick-start.doctree
deleted file mode 100644
index 85dbce7874e70fde8f494eda439ee1df4477fa79..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 33044
zcmeHQYmgjQb=GSo?dbhjYy^%Q8>|)5%u2FlTZ1f+WrStfvhc2LVOyE$o$1}~*_rNf
zch9bt*og@Nq|iz67{bdHrzpypgb)gwkV=4}Qk4+$pr|+nKLS-LDvyE?s3IZ7uT;Ks
z?xSzd%+Acp5;3t2Ztry8*E#px^SbBU`^3nHM&Gf5|4BAigGwv*>QTWDs!r5S*3*lI
z<Hzj}w)ecF{djvk84c})C}@Qhr=6@oiHhshtD)n!&$ZnZ$-2m?#9rX*^6rSc)?Ih5
zJ&unfu@~1J<5RNXtu3!IXHCX-7`LeyO0Ai4&QpKckMC+z_sQC(jlNKJYcy>qIXjL+
zZ@Lv@tTeXOUNyovl69539YuJFzejw#A^uulZ8g&$({^PpbY`ebD_IxYv-GL$ZgzLM
z8<NqI2HahptX1%ynyA{bJ>dooXX3oq2>gjCtV~qwsA5+g_1}ElXx=!1`V$S?Z`t(;
zQG4Q10yQ5IsD&_!+sT@`=R56Ft6I~5dK7@!v!UH|P5k`%v6<Kjts+`0mOUSp>!>tq
z9g%<AgzKYa>$n(#wHUOlitSroqv2FNJ9g@e7WZhiBGk)y@jk2N*PSThqQ2u)tvImk
zYONK;R_r?X6O&1}v%J`<dr|E8krnt>5L&8qBdB^ai#aMCIdP13BP(?37z;**)~dDx
z)Oc^_!4-H~$KA1Ht$?L1W)f&FMAONZsOftC`2xC?B)75Y_*Jx2I*-{gaWN1Jih$O7
zK4VsqEJ*MTOj~0~F2!LwjyHmo+*g5q+-pF9*Me4)HQaf!I*O~HCOq?)fwtqm1_iFi
zzpn$)xVzok0L9@}M{ToEvKBy4)ntP){cS8Fdfl)+zwO?Yti!K(v55t>T9n0a=X|s7
zRlK-;fj=+Up^rbQ9tddG0r_k+X@G}wi@V2ty}S3+8bU6pYAkv3MNJtdB{-QGFmXtT
z-e*9z!5w#3i#6jlnn4)b277Wxk{_RF)j{@lD+YpNuVT$Pi&hxa>yZWCVL84%T?g4u
zFIrV+#%|T)f^`Da9lKrx>dh?#;oLrrw$Q=6VL@1Sr9!KQ7E8TuF&lBhc_+l;nBj%<
z_Q1#L@v)v<Cnva+MehpMNh*NG@qa&vEqmVf>NJLZR>Pjd8fsxw=(vcvEtacZMBjQ2
z|A>Mq@bi_xj{(%tvRGhlUa;qvD*VJ?zW56|@hK<rqiOe6J(0IuB1H&3cvQ9Ho|nw;
zRefkH9mCtZxS@N}WQ3s7-i&a5C`RZ$kYRqmVKP5zI@y3{Pv+-7l5Fo@02#)&9*oat
z#<#MNLIkW1$6cs;tsfM`id@NxsBp@P)=I9N%A90Jp<tDyZa~X*#+xmQsWD}Z$?1|2
z!0tifY|d6=7@r1X-=zAaF#yh-o@1$FZBZ|h9ml!HR!Blwst2O?vEJV_GyY;H0hmK1
z43LWS95G>uiLDq(%6^jDHDgWLXyAh*8`=cv4)vg7*WCbmhtxTkQ<4U=0FJK4oCC)d
z6<G^G#ZZ+8SB`^VUq+J=cxI03It|Gi$C4M<pfsxgVi2m8+}o~Do<a5BP63U@8L#dX
z%M(s)Xres#1qi@;*`n{36c>@grB?IySqrXLadT8ET7<gSu$p%4MhgE>9Gz%iR;NqV
zzVWc-`$S=$&vK8H>e(=8`PF@v`eZ|RTF@A09MasWy>QPymX!5iRyUREiE9X|boD+D
zo(Q|5?m-c@>sf_x0O*R|uU-l{X)oXHoQY%&HQu&O;!oB<;zCOkpJ*xkBj)9KW;oCM
z!r)m`A22%{UmWX6eRI%j*s8Du-LNHrN!OGU!Az3cQDm43ksGw?(7znZoArYbsu;AU
zoN8mnv12UXi0GsWvI0fgRlSaXu6=4m{j8HXOrkK=(^ndZf=Ne<4l2GA8dNK-;o7>D
zD^@6Gz4W^t#SB)v>3%Zm6#5mlcf3_l)OMoBVFCFicUNs2$`25RwY4aNqML^=x`B)K
zfNMMj?CcZ@-Rn!hh!hMkS=la^rG%^&qM$P8#N{&VT3D>mv6*lnHKsj~RVqC+$0Ioc
z!nf-)M4VDI7A#Y2k$7r`!Ms;>syQirWPR$PT-LIyc<9D*ITc)9<dTU{aczGVN<A!r
zwA*RH7Fob~WJ5^fJAf4tqNk+*%MoA&>t2`_3-%&4Uky-J7!>#gcx6?whAMI0g7Hr%
zsRRx9AgW;cb51S_g!)0M@-=<2tJz}h044(b_dAMGlN~)UuLy5T$DE|i9Oh=SMt0{K
z0xRY2n48Z19A`5fW*4+uJ7-#fy3r(nw1HF0h4a*9B%O2^U2t65tesmfG~>gPYM-HQ
zFPA&XSRs9L_Cwl8u-t)e>s}d}O$y`<Cm1czYyq8vW>+Meq>56S264<8EI+wEYGKJ{
zM-Mk0dkqx>Q$P+?RuA^#0LYWk^No5jYTD$jUEhRUC8q_PqB8+Ga4#n7>)=!^dzQ4C
zX*+UZd$``LTgSg~363W6t3txn-h+;$y1zRGI@S7FpM$h^Lg7Z7fxjhKAhs<ua%uUD
zC4&oU;C^=iaHizls|QuPfNGjw{m#RaEFaG0uD9;@i64><O8ni2ml=!^T-BRl6JkL!
zZ)GJ5zE2=PVCeN;$X$OodqpSX(6Jl0<;1T$;1`DXwsG4L@b@t9HIG6v$ZxWw`9;n4
zi*<N<4n8wr4r(7pf!ast@liZ3);@-3vL+@Me(g#8-9<imJyWT`PYy%p_sKg3$FkCA
zlw(Z@Qy38tWaFW;NBFa)+}3pU0$R|(ehK3pRzo_Z!N?Nak&d-4oZ)%+#{(N$Zk7>X
zJ<@i7<^_r@URWa<p1&Rd&k~cze4zK_-J+rH%OI6rD3raSimu04ThqPt!XEE>yfTPs
z%Y$AF8zWYPq_EocUL)$q0}y3$nj=8L4|%YC^%;eN?+;(}UzbFI0o=PEq?IBxVz~ya
zg)F>%JR;KkS6Znw+o8}t%z`022c=Q&;2FyCZc=##9~VA_a;iyAU5W9eqJ8744h3|h
zIaW2Z>(%hniaWVt-zg&Ny+$3d%K3`kfTt~X4P{FQQq*WR7^q6C->}>Ptt_UMMc;iF
zlHMaZ3aCaIsw`)^ULh$b<~p)&vmU<AluFlOXN&e=$C9DS>g98E0BB3_nLa||n1;b1
z{jal-P+OcCF~CcJq(id~Rfpxfm;{y@C>q0{gIg;{ONFF8oQO?Wc+HSDNv(Oi-Xbp-
zi5Q^`gi>!I>negR=*`0$Gz*UeZ8$|a-Y;@GykfB7eC%*9TGEF>9xyo+VTQpI76w7Q
zM+>e0M-XXZI6Z(EOkR3IPji-3?^epOm6x7#Ybh5VN{H#5n76};x;L%1;V1ZYp*pQ-
z`tmla;eBKPyh{*&A0c~}#!BA>uOy5R8$%TpLN;48*&w#y^RYc0b^1HSuJi_c$~$$3
z13}0d5N;o}32@rod%9(~633GrV)60jLtf5h+kMud&2_T-vn7=J)4lKEn49gRaIW!&
zi`sTbUWt7ogqxIT#|XaVic>93FP1ot<MDRwJ(w8xnJBrcXDMv6JdPou0JwjjeUz(D
z`s8><PzwwJ<{nb&DzaL-fF_am4<Hd*64+F!{Wgs_-B-C6BTFr;pDJk&+(xiK#K!YN
z0KNu}RAfd|1WO|;q^R9vWyzz2m!CLNltTl6rWLfJ`Xb!)PQ?Lt^Jn*25gf7vCb7Y0
zYZ?X+Vl!rW7n_O&VO8=-a%^?=g(#G}Pg>*B=ad(w6(Mg1EO`%Y)zsxEC_)A9U+Ji$
zm<*am?v};|C%bmbF_y_=b^Q?Fr}FYC#<+WPvRN7B5t{X9O{;uI7X;O^n$-1@Xsc<H
zpYAb<$vTPf?7E>P@+q3jT{RjAs~2y(ViS=LQ9xaL27PJ+czYL=8pw4L$h3hk^?<SV
z9A0L&L3)8Vbwws$uOI<gmT`4D5Y=AUTaA^JSwZ&+cR3mVM5znd6$2qg4(SVaOjiDk
zhrlcuFs10th1B-3$^r_<p+FFLmGPTGJ0dN}uSC-t_<!gzD@y_YKnD1%RE=J%I4yw~
zx1!vnT=0*!oR(9}Sr#-b%?0=+xw|W^kaq5{gX=V!@nRvDOB-Ueh^<}oH3!3x14S*U
z|C7Eo2ER7|gUgrEZ_D7Bq88!2$b>fjh;Z4-j|Gnelk>swB5U5Wtvjct&P<Y5zb8|z
zDh6(DP*7-|ZUZ$B9K5BlAOAa0yy?)5hYPv4$tXZ$X93fQfTt#+B8j7y%g~xQe91a;
z^32iVku&$+H+2-Y9~zSl<IkL}*s$VVYD*VO#Rj~z7vHcE0E#FlG0~~GdMScWa%!VF
z?I~yd8B-wWWDCc@rYegmkw%r+?!%&2tsdy3s;xj7&?oiDvgcancba0lsIGIESqZXC
zIk~gP0Q<@iJ<KUdW|x)JJ7F{SvaVig87QW;v)3v~8@!<hq@8@3Tnrk(H@uMbrJ0!^
zrQu{@1>OG_lR;lkNbM&mBh_lEq7>1L_^c3RcWV<&TVOBX24p8U>~PU)I5tHM&%nRb
zp**8hx8|5KImSFKqihgJ?G8qDmM)j2+1%Y@uKH3X^~j6o;PL@XNu<}fm${yP`I1Mz
zUahCj@eD^h?h=G>_I~&&DPop_yyJia%$lvR8IY$$X-!e9$(|Ccd?rK~2&TOiSx4MB
zZbrq435Z4cuHXd|N6V!g2O+^cfNv891h($sYGG?jNEtF7B1FnoTnp-0`7NP6WBYd6
zAdDV*Q9#`Z`8PL9mQ49r9lKK42gfc~m{!S-0dd#SgiQq@A14sY4$r*!Eh}<!B6b*J
zJ3?GP1*gz984)>4Z;mRM_sF@F1{SbY<JcjzCyL=F=^M;opHvv7fHLyp7DviQLWUCc
z?-?4s>D10Moj}4+jJPm|P1$n8a1)_eUoM?C*~K`>;R*DC2xIeOzX%a1MU+!fyMSsO
z2@i)rJ9$NKD&TF#U!@Lq)d&_WzE5c@=9Np$+fgxK6;YYw(rJZFCfyAkZ)E_#9#QT6
z)E#W_r<0t<UA28`Wjd0vq_8{^?VOj|ub~eO&YqzuSk1>eN%F>Ie3EcAlISnP%*1C<
zr}jQPl2@x)=(TkE&c(IqT=c5jIV0<2A!9m>S6y@Q90td8QF{u1W#?cdN9(yiYVW#y
z%U$7qqsc&w3HVD45EGF7Jj^V70~N(A+^S|FC0pW%gSk=P8G1uHL(6TqbM`hePn0~+
zn8MEYUGw;@KJ!@4U1>(Dl_kLyhZA^nO9{Ncg1|dgMMxErt&sfzry0Z*f@%@H*r4B>
z)<NN14#HkZ4<h#hkt+QyHh{?zthTT<ftc4wvJ&YAlkP8w0;+=T2hkEcC*UP(Ahisl
z7C9n_6Pt#REwGhNU2t1c_CU{Sco>}=n$a_SxE>;{DF7RNlM0GR6bikiO$?;7aNsI*
zZb(|r>FP1~nDSI?HXBhfUw7u6I;=&+hj4OWZ?~S2R3=7FTO%@AMq&ezX*7;j+-xDj
z?Iefq+4YFLEihCm4F&^*n^2F7#+&A<WtxR6$F3tJql#o78I&wgzt2Lji{+fR8%+dC
z^P+}~J-g=RN##jR+3An4WHZ5j*x=0PjR{u_af9(Tt^VI!y|10YJFe6XYt~=*#Uvoj
zTLiv_<1LS7cuUqVcW3HOt2)yygiLYxC}Dn<^hIEs797&m@G*CsKk~|v@8h5-zNz`S
zd<|+?H?QgMc38d#?R*9!hOW1h@@9~l=aI6U7Y;`0XjN*SQtZ_Bko);$OGgb7kS^uS
zJZ|(uCa$?tm0WEYsClwC^lnwEJep;MO``nfw(6hy>fD~9-J3r9N?Y!b5L#!*v%IM0
zuIs&?f|~|R0S$t7kq)4ov5WKs#*w<^z9f=x;R`}KQYJY_M2!fU1hS(f8zMgTa~Hbp
zI)0CsVoC(BS~D={ARstOP9#Er<<1}_#nm6Bzc9_5ltC<KPu!O)lJqK;*=rn!@EyQ_
zfw}k)rBtflD$|kdqYu3(p-5Tb?L1XRD&GymK`4koXYSSRrl}MW8Jn}nN&7n8gDl2%
z%HDd)T_)`I%-O5mh01+3R+Yb;P1~!TMLi>P5AlBJp>OKmrp#pW>Qw2<zYd}$jImHK
z68HG!usJH!h@yPNk^LteTH4(D;S}^Rxr;$sR0KWFG|{U8JQtu(Ytg~(kMLYrQ<Ep(
zl0&{BToOnkhC`rgfmBK7W6caMc=D!0#Y4K&EZh>jZ-PQRPhcz9GA>xh{6*`I)02~L
zJ`T&0H&DSr5c?0k4jYnQv#FK`>1$kb+JUyBH(?6agUDFsU2fLZsuV)Vo)uPVPz%BT
zI%Osb0>8@<{}Kd#EO}`GtwqH79=xE_BdxYc-;D(m4_N*XDW+?fs-$bokSaf=#f`Nf
z%!E2tlF;+LQ0Mmv5h0{`LC8GbO{Fk#%dsP9?M|LjS>PShr%KqB5Qc!&K$5-(<y{CP
zHj^O0I8Fe0Fm(I`CAg6H5DNm%Hyl-gA<%M)a%r|%=*)Z00u~&ZS#GdERvfl{#qvzY
znO2bT3B0h$l*>_zB1nwvF}c#ll9wp-n(C5eP~Cf%AfdB!(j0@zVT;Z7McR9=k_v#G
z%L*(z4#838>Qo?3PXHfg>Vaj5Q!&KeJ?3};XE2BaE;J|4c~H$F#}#3M2>XMfx!~*u
zJ0`m07yz`wJ(0C5x3<BKbL7%x?u_p!D=cu*WVAiYIvfp{)&K$tNFO4e&dIk_lI!HE
zI7^}epE;*-MfN;(i)|B8o6DjH0^1SxJRkw^M0>@cN$!VYSrpErB?{H$<5$Qht~5H-
z@ci7Mq+so8KKtsI@!l8jsiO5UCUZln+u3VQgbJq<=4zirEp_-zI(2EQPxn|nsrr^9
z^-autw*p6di=ROCOHtrHhkAwrw^sI%RpBmj33>F)1`I{*{<TlzFov7~4%r?`oqHdK
zMYv*hZr9Q@n&LoWRwFGLnAEPUrNNoqwXgL+@X*QKDIlg^D#kmU;ZNA;DKjsg6v4sL
zF$I+nl2Eu0i!z3;Smu0@*m2TSPA~`QADnh7wqRUNu7ks+Y=(+M7A}MyVmKi|1vk;k
zFzSbz7bLru9#T44-(!4cw_<nn7_pk7^$Lcxi68Wul64a3B}3_`W2UJ`Xp4~ZTCW5$
zv{(~>4mZmm&d&0RWHl5PbNlW6YGafpkDai}NhuY63TubNs!&q!Oe+M-4-3|$1ICXn
zsbcwfx4~{5k$wmnB8_9f>}iDjP#_!B8?qO)P~eRd1brdbNDidSPI!@ykj(wVmyEoW
z=0-=@xtX4>vv(PY?X=5xpfSnRd!DnRX=sdl&H6-B?#>5`VS2k+I}R4BZA0BlVeQwV
zp26BzQwLeTZXPKHM&9eR8O6+>#6SpjyzuhNBQT8xf&1ZB5_LE-0CF-*R-=rJSov6H
z@nwCh56d-TX{AppTaUrer#yN@e`Zn(_%ke%3CU79;VGwDk(EU@pW<*=v=5EMV*t2c
za^mtmu)mkVTRJ`CwQ;aoI!y5ZC{u^*YY(f`SKHk_*S_)kPt<-BP8kH|KL|)_zeF;i
zmWVghpLhd0>*F-NN(HPU!ZEZ?aI`L&o@yqR{I0QB8h}ORM16$FD-Fee8skcxs9&Yc
zKsHp^C}58cyg9QJU!qtQxG!aVilBNnIb}pWf;V;2zY7b1!tvP`3&t<bc@&0f-VK7e
zsLUDxVn?Lc$T{!egiaJCBesF#Ajp9Y2bI{Egw2DU0wg$dh7%7Cb`u3?&WeD3__0tl
zmH20`6eKC*Z7{|SwRuMmC_5SK0-;|xJ~x`^NSj^kF_9gdmCjP^b!20$g}Rr*S>K6z
zCTHzFtkKk%!CA9oH<jdPu=WTu%vbNfGLx){UQ9u{z}1>Iw=a}ihz6#JKST7}r)cjL
zgeNRvXpTDiz1Jt*`BOb6YAK)8XEL2<Ir%+`2QyjIND!UL+Yi<evf%QR-}ji;%;OXC
zs-vU$F4?uxj*n2)JXzy1%wa6K%&lsu|8M}*%jedg&EUr1MpKIAFpuz|`OP{wbBG-r
zGQJ-tU`EPeET)gx2M*7rfPPXGiB%Cx$x#XraVW)6uT0|_O<x{>CR#FzGC!X|KuXQY
zRWxX@xIA&aJm+xaX{L>E6;(tqMv>+rix|hbc5dMj*Y6{Zb{uz|${g`la^l?QL~v6o
zy!HI1!T#0|VAEFK^C)LXp+C+n$lVZvycI!iO&)^C>L8z#T%@$4saNUH<@GTCd5B@E
z+4&P=xY&Qm9KvyJX6edN_E?Mq%juE*WWdOlzr6l5Gk#-vZKPPtO!NpWlI%-8tW|6K
z>u4r9e<jml24QCxp%zVYiVnQu6i3U8ml@w~ITQ+Y-7U9JC7atV`P}Z@_nvH9585~}
z54I#mZ^LD<U~YU7y&CN>OW;a(gAbsR+9NxFlpy&Ep7MkH4<5?zKb*gD|I~ql#r^w>
z`w#7<=YDJaAo8MSgFR{SLx*p+ZqK?w#rZc-SgieU3PJ0sM%?Ey9Mmhau_+5tryqfe
z^)U9qiGipHthPv>--~tx+y&7JrE?>XTjnzY2(-%F%xFb23Y0-|6Hb<^a@9$&4-;r|
zr>aT>^Zvs(?%z+SkOh09;%0@40~!^w_>D9q%AI7;d&11Bq0r4}^>%kY1Om>8giQmG
z%-GY<Oh)<;V)7Q4`9n7ylq~FJA_OrSlW|~(IXLz*5pve>WgtS$Q@0M_sY|f>K8H(u
zHN$xgRv(^F+cv_H27Q7BtWFUnzDYa;@bM~=5uBj|>ko#Ph=a+M%h?5mNJ(*Ci%px2
zR;BL2MB8UMh1r4*M@&v!p1xB9$zr@2=}tIVt#e#TTiKlbkTx<t0Qn@)Xd8k$V^d~V
zA5is_ilL<%Tt9o{o0-YVh{<Gk)tj~6q{nXMo7PQ-ZaQckqd*Nqz9}$=F0V)WrUCFT
zL417<cX&Pnk3oE2#&N1daO4wUZSMAyr|+=JRUelzRPqoBbmxN3prOMp4;Luh6*NiV
z;uJRS_$qS+-ti{VU7~^;H|p2ZCXyFb@G_rijuLM;EgvDsbh8A7FDsg7X^U|{*b&t;
zxx?KKK}I{62qsqh=DZwIIv(o@MoLj<7^B&Ai1L+&QW3zW4ES<Tl-P0>qe3Wu$M?QI
z0-4)VMokgRe~*ggzbtcO2KW=su)5N8m@}7~5Cno$cx5LZ(pbn21nB_CG?&Juv4Sf+
zo#t=I;g2PEUN&me3sjKPaIECpnWdLuC1<Cx4gOl3Qr(lE7_3C_mdC6NAzAsrWH%Ok
z$MZOT20p?ZY0sq9_R!rqMu7L8cc&G0=W-A5QdedrR}|ud)?s?CqFtXw?p^FQqGB#@
zz4`bZlgG{+JaqHqoyYLZJw$O6Gkg(-5Lm_BF;$`1S-NPQnmmOgL=NDVi`bh-j0-e$
zT&q#dPb1f1KlIo6U=GT%)#smwhG{{r!<VuB^TD=WB~M^cUf#U}68g$Jk%_3@!GZ(S
zn+Lh#*h6-TqzpuVW~rh-_i@6I)1!|QCU=_7@tlmEW~8{h`AVbU;{#AYJd0c|A3-_8
z<??UneMPci8Y{_(OMIe5dc{L}v(+elDZ$`wn47+ZH)9p)V{~ZwBC;QLE3Aq*<O`QX
z-l(`OM*7_JHbd?6G!)?kUv5hp?B|96Te)z)5AZ*S^8Lgf&{X>@jZ54#L{<KPe)5$(
zwLik2I_maT;pZpwp6=lR6U6RB-ZXWkMSsNf@T)NIR5Pl5ojL#>#*IycTQ0G2K_h8|
z^*3eP@aeo};7C&~=I>Fhb3qNe`|u6a?T2E0XH-Yb^><LO|L#M_zV6by4?n=P{S6NT
zaGQ}W^m5pUYii_c17PVO7pk%pxlD)|6=(F|SQI;~BJ#*V3<M&#DRt}~B+wy(<%k<K
zq8?PTVqG_t6qeU!CvmKkO#(^QpmC+NF^XE3N*g1ndnvTB1ND|g8*2!QnJD~!$K0&q
z?mK9LUJgqW)X4uVk0z+fQZ%vW9uL{WBJR_NiUlT1d?aIfuxi!CJ8!|DCGT8DBbsd<
zW|*^a8%u3k{SW{gV#M_=Z?a9QvJ}j3D!)ZWb*e~zZS?td--+uurmx`RRzaNK<Ka%S
z33yVGBZK3F=!gOw&LpT<i;?8$3u};@8_ybSx4oby#Q?{WEggUw_Sh6n-$-|fzH38R
zWZjj7c{Z-hvq4zQSYAA@hUK+4O|2f(PG>6h7Q`nL`R3)k8rxIqlS)3pr>=x*hlbK&
zSc%bPS@;>e9Co?>2k7u_Ze(cEr79`uE^T-vYlY6#PFCg_qn`#_Fti4xXR&^D6%Jv<
z(vETWXyD7-Kl(GHOd&1sG18i(cl<G!C4Aazv1t9uZo0LPkGbDnw5GzAgR>ol=Cq^N
zH@(h(i;>k0JmRI&p3>PMarRzRarYz}kKm}dlGF5%rHPr|dukOBlLD0@CdtuB^EjlG
zG}KfP=C`o2#M?glFEmi2vCK7+X=~!Oh<?uum(vng8wxFM8|?-+r8arfsr&k5Cnw$^
zPM)R&dn>cFsm`~oj>G}HMeS27lAJ2z;JAzxEh5jA2qzQg#g$}Rr<0B94PVQ7I$5t0
zJle@N_^!l_voMD#lm)k+t$l!x<JFU&tQ8sJh&tYUIvJI_+d<gI58TH}XQ(%t__2Ww
z*TqngSa}{~H-V@(F$C!C{u~O(bj4CDtmD_FIH;89!YcZTyKYC|l?@l$$@UpEgP>W*
z_;?}NM8{(Ltw!lQcGMcUigPn3aFr+&6%`{i_$u*69+VoDX!o_GZlXnhvVy#t7HAQB
zdnL~9#XYb|4wurv$e?83_NkF%8w6fl0(3a4FMT`0X~5`ivpi1*CEy2a;LRw>0f#`M
z@p(S7>Pt8l71y=;v$%7#70={v&BGngPF|h;Si%i7L0Cd&aTQ14U<PQY72GkpMPS}&
zWrSO4C)ad*>1d+%Z7h>yvuHORgR1@N?1zrZ$yS0P0-{{G#@o1ELtaz?j8}16#VXu5
zoa_)gYv34kX)L-y;2!X>R)ka$M!c#b2zPC=8R>jMDSef!qRaL+Ra=c_Ns}ZH%P%-H
z7zZj)gIo9w6Fbd*`l=Z@h$1ZEk`0vFibOq}&rmXJGL_(nS{xZfXC+ZvC3(RF0HMGy
zyjrK03YOhQ07F_1uRDC(B#V{EQ^Xe<zk>ckCr|)*ZHlurs+jT(xSAPLMS<RQd`+^A
z)*C3tp9LY-y@nUJ@7cOL+1zxR=>c>E4DQ@*g4!{5S{ljKN>t)?RA?^ZG=0AigtJ&t
zV^op{fRZH@R7rP>IL-X)_TNO87lt#Hj^^o2+WZZwdAdxQNOlgf&Yly`a35d@6Xdl<
zXQQy5v5Mg0Zl7A8TmzbHl=R}nG8d;DmBjTX7n7~gBGN9;m-GcDbj30q`kHKva4cC|
zdbEXA9RX20__z33;-qDP+G}8+lPcweV!Z*&j6&3&Yc+9Q3SE#b4)7Cf;3B9esCfPi
zXh8CX?ZhY`&pL|XV6<7xg>VOoyPxOUAeqKAPA!h&MNF>iI5GMdtDw|e$-(Ww^^y!`
z;!$s-mWdljPJKr3w2R4V$DeQG_~m51;3inUphWBraHdg7TuaGxv#nFe5;w1X6zjCc
zVldgBDZq)^D3KL~Tt1@CW^@6{5vGf`=?3LzalrF4HV2TNYja4ajoY=Us4P+Yed_R2
z^xy-UpRK(c!49=|(xX6OpnK`@@zr>IgdSg^$Dh&TpXl*jdT;<K$BaIJIFQ;TJ-$hg
zzoW;8plH-SK#!0f0X;rJ{XIpGfF5-`TFEF4i%z)aq4U5l@}Ms8m@e{oF7j9|@Hj5;
z7%p)C7i!e^Meg?^_j!@~yTE;2<bE!++-raoh89OxKkGinaN<7<B%QJ+fc$_4@(UWs
zZ_{54B&ClCAo(u_l0x(ZkmQ9EKzalz14()a16iA4NH>|QhM-M0Rge(E#DvKcZ-_an
za)MyYH?*SpEmm1$I;iV~$S-$xyws&fGcAs)UbzzA=BmDvoWmXP;96syZOJcCH^90p
zxJ3=?6J%Mz6+>b{KzOe^F5iEUi27du^{JK7yW01G9l^T>#)doKBdkEtvF7CFYr3Ic
zUNNO!YZXM@VxM}Ygzpcg@=bSwf<n?Eko!kBb6eNRa3`6UaUCV}Q4$U?D32*mFQ={D
zzP{UA&~0h%s=X2A`l@atQg2v^+jsab@iiw;pSYJ~IR{C$AzS2y^P5PGy^Y(e9mRi?
z$4-KzEk_OFp>7ZnYGj_z(I3WhL&Esba$&4Jh#Ea0d_0BFNjB)&X5P5L^DFgMm3Z-N
T`&>Ig?i4mPrMMM-%)<Wy`n9mY

diff --git a/doc/manual/build/doctrees/review-hooks.doctree b/doc/manual/build/doctrees/review-hooks.doctree
deleted file mode 100644
index 773bb00e380a795b68f9b901141e01a7d29518da..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 22569
zcmeHPZH!#kSzg<_-rb3J{kdtI#L3M%!RuycCUzPTFK&c!?8dCK3ARbxB-YHGxp(H?
z@yxxG`>`KxOp4ShHXI13Qw0htst{`V5%B{>6+ft;DJn<^!4ISg2_aFGf?5PWfQTQc
zJn#9q=iWQByR+-02_;cHJ9F>(c+dO&zUMvXvtwVp_sR(Wk4;;CJ&xRVSn_<!4ts2Z
z9&~Ik>V2Vi>=%1CdUI?tFjqo94(fJ~ji5!{aobj4d%deYXM~N1c0F=^FKO?LIlG<l
ztGzkA9E;qjZKqzbJs0g|*IqH6^!;mLkJ_Qx=w*AACd|G4e2)NNySpZ4i+aw!ux7G?
z8AX9xiz7fw(Cu=q5RkC(dfN;`JjC}g&+LeA6IR^SKWb+ET3|P*P0Yq4vq`Ud&a`uv
za|fHOBujU8vE6FL7s{3ynPtcC*yUBX<9p>WsF&+zST`+O{VhhF?jvRNFLz8YHrr*<
zyBzSv79Cn_DF~w;8*RIu-CNul*RbwMtjuf%X4grf=*r<8BO_<T_=ewT*g<GSE50Gd
zGH5KL>$_eQ8m?!!_!GKK&-I!{*X`OgywUIj!;B-pV@9@BxbEZ8ve|aA5D?0!tr>A>
z2SzvWmtD)Y)W~5yaJx}hGA=uIXsf3jcB5{hpItyd%ZPlVYX_L4W0>ArdgREl#n6HM
zQtSpc0QU{s3**2x@Xiek4vQNW>V6P_ZwwRvx7$VtTG-({I@3C6)VauU1FHxGMQg_}
zjNc9oFenDKN`h@>K19@}h!PS6_AWtmoVy_}&S6O0efW1j{vE-;2O$g2QD@#c=6u|F
zXmONe!I^V*fkBHx0XSn<o(D^wRvaPtgqTlpsT&%mQIA7#9B~ymx?|J>o4Aj-Eny4O
zvp{*T;Woh$7L7o!h$oJQ;OVwoUz;~fFtp>Z5Wltk6>3yHBl~dvtyW6L`KTaS5G;lv
zBxj^~5p!|DFu^!xmw4T58<2~@ZV81&yeSt@SawZ5jszai*sE@2)S(kg#%WLgf<PJ%
z8y(y9#Ke-H<qWnpU!Zx3E<WH2QXTvI2uKt^&p9*f`um6DUcxG;Lav&iCvB)*D1BuJ
zoH4d9PYNlDY$`({IoKR{=^T3HUd9`+A{!Mdd5Mhy0N3iVDaA0H_?%atz__Q_1oVsF
zUbd~?P4Mar`|BS&wn&r29!h#A2T3n`=Q2d3;llnX5#~mOq;}bK+h(n88)hQ{yP8Tt
z8*LxvjZ3c*@|q2mZx<jI=tw39oJ*#{fCJ!z>C^UUz|bV7N?Js3E-IcM8EbZAbmLmv
z4IMS6989VjvOYqFZ7sqISTicvE*Cb)CjP>733H<C#Q)#*Ck#{{R{ifC#6VZBL;as`
z0O47(NRntxI8XQ|r4F;c48MiE4M7w^`W3g`CIb+;UQ8ZA;Kxme`e@e$+CL8AK|z@N
zClne}&sT80FtSZ+n0aAN499GfNg@?Zd<Sh`x8Wc);(++41gCVx2HdbgMi|#ZI5F@$
z+iOY~)>{${&BucOX>qQO0+SkZucv=)@N>Mj9m0Q$$g?4NQnrB1r9yK-aKB>X52+wj
z()&e)M3`P0R+tVA6sDgW;7h?5w%uj;%YogtmrV~k)*}a7IP7N4kHIO40);=~ExUp5
zQJhv-HUpPbcxXU@5_?OxY5@jxp(?y8Xn*K<5t|sN#IvGM@kJri#d^njyjm(;#w=MW
z$Go25K~5ldKDqZC64OEm2o@&CiU$#L*1?dWW5bT>Le{wzAdl<xm2(%31=yX=LX|&+
z*mxn_4&&7G6tk$Gk5{=+si1=pAp;D{s5^EYu@(12$c3`<F4TL0TJ0>o64uz>u<N+q
zY6&QjLG+%k?OBLqDyyJD+JE}Qc8H>)<lU~vgGcR;IgAI;GweV=nKg{Rmgm<wHp&5G
zyTS+_);K=F1&yAa4+?%24E#$Qx@)`94`DANcgaRPT<jrdK+ij->-C)9V&nJ~t#y$<
z*hTZOJMd|*cH!^4QST;yy<!F)zEZ!)44O7V<&Un%r`!p=DFc?f0ply&0Sw;<?$uZZ
zCpfoMz{DOLime4@UsJuDHzhfzGSZ;u_<A2Doi9luP7o1Elm=7r4~L?n^VJOD{xn6n
zQ9kzilylx-QyHOMhe-EtF3O3b1xkl=dx-~B(28slY<oItxpHvl$jEb~#gr>c1~-OF
zNnxvH+DPgcD{dq`5v9<=HE7cgf=D}9cI(J}cy2V$^DSJNir0o&uX9UI+PC9E{ZbTS
z_#V6l2ji~<c%~Xb3qp4ls?{=dcDe1=RQjk|H7sN{>X9G7{8Io4z3MI_em2k;xutZ2
zjAtZ$1g)RNgdwt3<OO2@OlorVKhM)b_Nv+G!WQ5$!gb_jh}CF8VF8|6m!#N_LqIR&
z8Rmo<AT<MD1z~yIwhRkh;j|zwAFz;8p#aBi&5t=qG>w1=UqnRQ_UqiLVMrijO=gxT
z3k2uOO6UMAU4&=%9O3U7Gjc+p!0+<>m9#WO55BOHamf}&salmpE7_}d9X(+2y2vaQ
zC?VFN)uzm<vKczd;leV1$R|G{K1nS0FMohgu2t=Kc@|{64fYGncG`v?8pQTOlh3ey
zdC}G*{%c-&=dJDcp~b$-E!oG`RR?-F0`LdQa<B=dClnx~q&9Tx9}YixPfz~AQ8juc
z*>!J|7_I#f_2E&nqm-F{IHNQRa{fa)i^{(Ce@rvZuygMY#0mCV$2i_ojC-J8&np(5
z&Kdwc$noKb$0y_RG`qR!(4+T(xG!&36o7lu)<zF-W~<=cyNR7r4w1y(aO_9PSFqp4
zjsIRc(f6kusDe@|Y8!8_dXP`#DsOdA?$^1iWetG`Y`wKiw4)sd2}?08GgnUG<z*k4
zc)4qkWJmZ$*gW?%LgWucP{_9y7lfa%P)&lwPa>3z?ZT<lg9i2m?8mEe*Fo|J5<hUh
z!meF+8)Dlc8w!i<De~cxIS@AU?LFgE^6itx>?}skdMhIEdx6K?K}igIwJ<OgM_+(Z
zhRY&5@pNg@DT&`j7FEXYh>_DVpxl&A1;*tqVo~#R!0DI@ZswEKrx3axhJ~;sma6qK
zQJc1XXV~6ccRl4V@F}x9R&z<LQ=nK!ptnETffa30zH%D@PwOW7rDC4la*p+*9(D&n
zS&+L%y(I)e`%-J-JeG-r$^eeg$+gmB+hsnDr#{lmCZtK&G0&KJf_w$=NP<kLPI`vl
z#oN50+yW(jhc7lu$h6<XR01IzdbZv`zb#Rs^_%EH1ej85Fh~y9$Nt`&fa)dpA+@+A
z;T8Bzg8J5<0WihzIr-OfejAO}NArdmn$}zByB%)-8}v)zc$3r&P<v=lLS}soPbf8}
zm$@!#hf{HR)c#8vwb>!`oZr6<)P8T9sQu6FqBf(`*GKK0>nQugQxJ&W*!Zh0e^N@y
z2B&Q=d-I~G)sclE#vDwN)OF!814TIq-rH>i?ZPg?O>&GP!tQy>4^Rq#_U&YXxPYV{
zuPfqNWW1!Ecy6x6=<|kMYL*s^e*Fb8mKz~7e39?%AsHhuHQQ%*Raig6N?QY8bIg9^
zi!#yGWU@5DfirB3FI9K>81J&ao}&^AvP?8ISN^AN2T6Kf393#!p1y4a=IuifAWQvq
zG_6}VAc}^sJOD3SFdq+bbghrp^~}df^h>F>%?<f5=Ht;c{Zb(zC+e`NN*Y89TS`Em
zGgVnmzU0A7*XblX{K{Kq1xlv#N)1s7v627&6t7M*gkUIMp2|K=bVzjo?b5cJc$)n8
zt7w<<-xtz4<jOv1!cR+80GFG}!Faua+>4Sr0K1-W;;}8<+{BSDkeg`?a^$7E9eWn`
zkG5p6sia_Qo;D?mX-iJ%HeRweKyl?AF9b0iEL+yE(Pq_S+r^9)Fpm>y6X$$gtmS2W
zl}Op=ob&E_%IgF8Vhb|8jPBcUS3ZY++mq>yeezRaVZtI;%hSp$6nvx?-G}Gfa|(YO
z6DmZn>lA(&jkfC)eu=MW>zeax=$FFsyWtdO5IjoKHUwI;-rRaIui#(pYyU|at=S>;
zoZq|+w0>ioX#LCWqIG?TFoV{a!XTZb*WAax+Xxi@Nh5bap!oKNSlu*a|Ho}2_TRIJ
zeRnK<2DOt~ZzrZvpfhE?H>jwk!IX(in@09cBv(CO6m(0|K&3#^VMb9Cirkfx%u9rL
zO*NiN+nK6rg%6;rT4~o2n{8B*B#N{X|C~}}XD*yq%L$DIIqO2TF3Zhnudg7>x{$$w
zT^!g1P|<W%?Q4Jb{a%Y^^*y_|_x>uImYX+~FhZ?NGrfm%-{5s6OINPZp+ShzQ{Bm@
z$|_kLL=a}aXXc!x)*&<pGZ28>*yMDf0K7GW*Gb0p-obz>0w_2Srs0$?HJHZ+fZ4hq
z4>yG{?d1yahU59u8J^dD*p%R1nY09oq~NF*lHc(nRhypodC9}vz{?#!EB3e*a+2SP
z_+A)*kQ}kNXL}y)Ql9O(wD?{bg=c%7iX9=FYFB;5#s)UdGf<UOl^?nA!on#hin`%K
zxlHBcH9KgQ{GeHWV(C)x>C+d_V8ak6GraKeYK7!hp3@Nf*(%EAd+<CtU8tfdlDkDz
z!68Sj$F8}abrN}H(}I|zA}1`le%bcQ%O^`G9xfe!gbt?AR(M!)qE7orW|X4*Mba+@
zcEuijk<MKJutFX%VU;*oS_j;-5jHe8KF^WwoK1NA#MUvDkX9m3j*dN#R*h&j#>Ul~
z4P8x9ZQg334-X~d!0oXIhoTox&Y%*#Me6}$U;tUTr0cWToF>r5#1{)v2Q)PFT0oKo
zC8Ci)+zJT<=V&X!-`0z;h>JTkU^DE2VHj%z0>$qO(<vHHWq373=~uB@I$e-`KMcKJ
zBRmE8U^PYS_fCFtjM9oRZ^HZ7lzQ(Wcs$2lIgDu@>w6)Uu;#Sa0sID>c6eh=ktkrH
z1GHUGW+1KgReJJCu(DFbX$8!_g&i%_B9Q`~H=uc`MpYLanJ8DX>1Y{0)rMB6N#`}F
zbSh1i(u%|-)uE=#(nN!#6jzp*8W-#c2ZKUXcJl!mK9wv{@Gp`WvJ~q@<Avi_D^y#C
zl8iV+ofit8+GX&Us`iq`uM|4f>H;SX<pN&+K(1ya6|4OLXwR!+4m5l}q9VIWl6p!z
zSEGagCA~Y2YsK<Md;sk((b>)8+6Pd?cb=seCs3FQJ0^|;eU*6b>*x+%ATXROi#xyz
zGi;O)t!I!RCcBO7fnkWCU^O<Qm!9aaa!VP+z?APLfH<H#7IbF;<#61;l;!>rHl@7U
z8W`(Z3h!5*g5p1NKVJiJ8!E9O0)+zYju-7hq3t)DNR1V{vg8pbek0U18bzFQlkWfQ
zv+|TEnEHXwoH>2z%;_i2R-S))>Ff<U$AL;n7l-Kdn@eXeo<DuzhS3Oc@GtZD*|QgK
z%oYkqjGyNxI+ca5l6-P`;v$ssZ_t=_-?O$R*CFM1(AZQXAH^QZ9NRcJXt_<C)M!FP
zsru0l0v{)5QQC<e1J5!8%RtJm8%L#5$yh=yB2P9-4TAh>fx7>6ei4=P&)guC^*w*)
z>5G?d7_<60$I`5*X@A*xv0&gow_&`1HpgdaFH$Xb*0}mpw0e&>p=L*f*M}p8mJjU&
zx}bK{vrwgZ);jU%qsLDsEu~Xq6t54M8eq~{+9Gdlqr4&Mma&jV@g<|^59nXE?Bz1{
zvt0pM!<BOJA!B{WSno1pC62&9Z=y%p<Z7qA5Oz(vd|(3Q$yAMvuVavWJi5gu+NRfx
z5!m$D&d}+xX~%6kZTyQW*m0yQ0?2f{O*TUuaK4yTsIRiU@<36?x7>z{<D@D7y>i;3
zQ;?`QR;P{-OO+ljn(eM*o>(x>>T@`dVRa5iDNd+I=s~CuuGn%<Nr8yiNuRT3Ka%<8
zoFrk&?%QO6$~11;E}`i7=zyek>wiE1Hii>2!0(`ACaqoQmI}3-+-Tl87{AhzQnaVL
zEjbS@p_4ZKGu3Ji<>#NNR@H*`_r25h`K|#=$fpO$xc5ztePK@O;Q;(dAArOY8pMM+
z5b3Q3a(??jCRv?97+l{iVSD(2tTwL0z;UzQEeIB_4Y;fILlQ1szX#H37ccJ@u~Bgj
zXpfX9!4Zge#c5HTBT5SxmtA6=)bO^HU(h<K+-HkRxIlyl0dW_%TnGo9(izFU0_1q8
zvukqGQAP%IHlPN7K%N>F9ywggcXiA}Jf0qcY%20`<Wgz%ajo?|AR-AIzjMS`wCyf;
zqr|}qxq-@W1)%^(mIJ~+MuG}XPoa?8XhPChWR&5Z@anzv?*3-3FpjVaXAEB63;bJB
zpm<y3&ME=@@m*lT3s*Pc1#RW}ty=59zzwZ;=;Ocf0lD%!?YymPWf&+WFU~pFgGq<e
zoQj(f@Zy9m=P1cL{7_VX23o!q?a4!@yg7~xrMRvR2bPkJoSGEgKD31ywUYBWhO#N~
z0ecczfD{MKsIVsUS`WT50R0=L#R(d2mkw{d=7hik{Pi`e(4fLES;^9BgiWX@JMECX
z_H^JjiFPvSpwb&E0gXb6OVL}u5AOu$XMYCK(e;kKhN#c?3e``!(UWn_ND@v>H*(@y
z3ELIrr3;=NT`+5*%2AZvFpTZ6eEj5NNBCFT)WB)u;v<hdcJkz-Kl$(@$0;vdko1LZ
z$2Agm=9~;7f4Re*&H=nW0O>i~+WI2e02{w9(5<!nuY8~upRo4A_QBH3_<I~LsjT>=
z_kdoCAiD)C$l1vYc!N+r#?*_AO*qfVwBAG)kwpEJN@3n6M<tn3LIw<8CR6&e?;hg{
zG$hIP-2!Z#h+_IlUjp=x3ADacy8w7NLBF1`wr=10bLeoLhlRi-S^m~r^s4n2_;h$0
z>@^~l&>1w8N{z~t*a-UwU0s2D*Kn<y?^P@u?!-aK>;-L%av(1UxUfn3T`xnOblV8B
z78Z=p99{8)YdqvSx?o&Jz10oHHwOp3OSIkJ0kC|z3W+w#=k-i_VT8r+@U^f#r*Jn-
z#qPRD-ym82(BjV2!qR70*tk@5DPpA_ZLnvEy*rKW+-Y@<czKGQ@5zT5P#xNY+?Db}
zaf90iZmzmM&iObyq`YP#2QQz+fnk1i-B{#DI9s?l!cbv_n-AbwBRpChiODYPVAJ&&
zm!x@7MP5a>#P+Bs{2qWMHlcjJ9@~#xskq1w$v7{<{R6l-59vH8@x*?x-68{qg9_72
zY_e&4INOLrz&-pRuNjFloEcmKy^!Aps9>Gd9@|j{1qBEd%zF(D3i4+hwDD^y^6M44
zT94l13c)eJ9IW-2P7~{wH`x>&P4VJRWfhKh2S@&=u|4m0E7HJ(81QcK1Xp2@$q6gu
zhE&w`ewa^okoWxoEnr@lx(cq&fC*aM$qIDQi~2dn_S0ovr~)vfIMh$auo)XSG2JxX
zJ%DT=)d|>U2TvwJj=D`y6MU|RtYHOLVIe_)G6FUkM~&iRML4}Zc2D+Yg=ZZrB6}Br
z0t9LucNy#zm`{x|#z*O~!?`!PAzBZN!MmFl<7yaG?|ZT@a-G>eS_AkhbfkRaJ}s3n
z0md!Ln&2Wwb`Xcp{lJ2@pqnc&jSIF}V!Oq$E5e9tDTZ)%vuV0qu%aKao&2UQEADhF
z2}=U8`~hw%v;%l7G~izTgflx)Uq9-Gc5L|-Bzw?mAMS?mL%Wjh$+@H+RhHe*6)d~A
zV!0tjqF4wW4nxOrB`OfRJy;CXAd<tR`@l7_S%n{Vr&}WLq;Hr6DJ8BdMP(|AXdwXR
z3P?qRLmqdq{UmST9IpvR<mdc*PwhL(rn`1mZ-LNaaPdbMq5#-QG}uR#VZ`IG)Llc>
zsK+<|du)bUasbe>f{O;AesOC7a$I(|_~65zfcQ=aje2f)dZLH_2{k<3P)RI%4VM_X
zcGTc=Kp~WAuOH$&iHIFigwlZC;siSkp6pbVcd2Knh&0<Rwl7@sB6GEpq|)fxN~)k?
zd%_MbWURatWAi5jq7L%k;%9|#bm1{jdl>#d-~r)<yaCG`h3I`P?jmhR_m1+rL8ThF
zg>78FPN(w|y>NgO1#DTancG3K4|AD980kLEYdx?`r)FD_;5FQ2;Mll6<QAK$qt&&F
zjax|C6(kzyz8Vhoet9|$yxMLEopy`u!hT5)86>(_j<ktQYH=T`D)_|=6|uL^7q>re
zU`d;|-i9e_aTCZ6WEzmSL@lyrkhc$MvW99fmoNOrA-QuVgEMfo*P^{MGv*tybm1w6
z8>fEa`&{cCn*BfM<I~s$a-M6QL;Kbl`uI0``UCoSg?_$FA77!5FVn~0(hKrFTHmH`
z-@-@CCTVC&)Nnh+2fxJ!zQxDA#mBtG$GgeLy2;16$;Y@EJBM-6B!>pKay-Y&-32IA
z1}8uvuSI~eoPhEh^o_h7zE}Yi#Q+?r);Bn0Q)#y4cyB;ID*S}NpbJqTOAEwuG)<AN
zQoRKI(oaM?uq>FqQ}f%2T=1rcau1W%lj#w8q++s3H8<~iATtY$PY{tRnaPhR-@pfe
zKCSyPX-n`*9lOimf2;%+b^MHc{srQ+6Ik)$&hYcSi_j6cAQjpM92Qb>56RwvM7?Gn
e-;q4#oPCGu)!VT}lGLPL1&b_zRF)#)RQg|paj}O0

diff --git a/doc/manual/build/doctrees/smartcard-hsm.doctree b/doc/manual/build/doctrees/smartcard-hsm.doctree
deleted file mode 100644
index dc9c3ca03dfa7c7f1171868e6fd351870ec277f0..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 25679
zcmeHQUu+!5d6z6x5>J0D%a)@k5i*hLkdk@F`$HbdtL%azC0mh22|6iJlBRciyL-1w
z-tAs?_e3&Q&=^S&v)KMYazTnV{RgCIiar)an-m4|QXoxIKLkjdBJE4ihvua~fuaHW
z(*C}go!MRTct^`|As3>dBX4$g=9_Q6`To!6&yIa%+1ST_!sCXk_X4}^=N#8C{eF0u
z8ak#E^uOG{@Ou9<{mF3L)7E{r=jmoY+=m{zWw#B_bo!s{Tl>O8zNrVc>!|+Ln03%P
z^vV7t9*zZe&^8l~LUzpw%$BDGw$ozkc3?4$RXds&ENPyReWiM%Pw(Q@C-0aW1jHWR
z_(Gom4G(rTKo#_@6MjPrGg=UMcB2<yRkVr&w&4Tf@Q~itd>@VYd(6=~;;+L-uN!}9
zX!@FGHmOf9JQQdxdepa$TW72z;do7<$T|=nl$g0OZD@fuZMhwDdc*Fx&b068)4JyC
znqkV{*`U)cP2>IPj^^~V_Oy6=+9wR?gaOO%<UBv<hflU`$LwE!qSqi~IBt+a<Lh@U
zli7|Rcs-7NpScbTEZb*Ytz|MGf;C-_X%1U98#aCwip+BT04)Z?`mx2Cz|sP?BmiWV
z<}<DBnVPZ58m8&+!L@eVG+584y#fKS<tvvlzP^Sja&n)>fprZV+O?9~{HVZpDtrVW
z5%dY-nE_#1?*lbjXF=m1z`qaT-+BCd9+YNHSVilCb<uj^`jhCK>y79<mFRrLnzRmp
zRI=jCT4P~2f<ibAuuZpzQ`l}}&!c?~Kv?`hf;2oMV{Yhe5Ws!2y~!zx9tWDg#y~q3
zCngY7$8K2x#_8f2p6f2oxDzn9$-h>YB4Q~$%D|m^#4x6a=GDCt%^?uYD|;mx>MV(7
zUwEX^cJ;N|r+R5Nb8ln+zI`d~%)ntZ)~5YlH~Fr=0xDT2ep5B|o@WP}?1pRf+QgkC
zYv+_SmAPT-o?BgJ;7fO_mx-D>tf}dN>tRe#QP;!ldO$SkvD?)}-gsqciLIHNJ`HC@
zQ{^(C?M=?)G+j4+-)>;O!1CN)i{#0z>q}L3zEHqBf$3oiGsiv#Lf63udp@Vp4hvk+
zcGvW55_UoosrN`OxjiEA`^5SJmvtfjz#_p}9Y(J?bR-zWRW3963Z|(r!)0L7{2|t`
z?mC8vbpdLC&;fgHGE7Em)*QfdA(P2wnH2<GzcM|&zP_GIivZp2a0WYRsY7$`Bab)Z
z9oh^b%T7JU@H<BCeZ|h2du3-w!J!&l`#B<2xwM)Yo*jLDpgWC2lQW?hLVcAgEmYJE
zu4bMZHHHHF!7#AHgO~%%uWxOT6#q0Jzdwo*2a)tXDVAxb^n&oP*|mjIrES*{>d}jY
zpO}M>*&S$Qi4}$yayiBuD;4~1C3H+M+bn5%rk7jowlWz({=4ZV;Q?A%`2JyI^ur98
zt6@V0=IVC1|6<?zx=+aXY6R}H32-w~5s;R`Q?em^?=>j3&^x*2aLdESeX3{sHVqr?
z*pMD-xBhI{ZV^<Z%724&rU<&zoY0Q7F_EXWYg`;Ak@@_2rga0ba{*j-ler`W^ypW%
zyQcevf&_7oy%o5BJq+A%e52E@_|Usye;w|6rf+)p@#h$X37WRT!)?uJ^=S9QCmWh?
z^~2*9L^BuCHO*_0{X=X1X0+Bba_zlFOm*RVqqSwB!DTT^0`ZzuRaGaxJKH-Y^w@E^
z*$MOx+4R%b3<zPnxyi>Ry_4PM^eGX#dk2NX9}mN!-0~kKw)_LwawS~DOHdFzXb6~E
z91YgdHrcu<RAWeQjTv^6Gm?PaHywjpR|X3<yV4dq^)?4lOZn-jrARa3gFrK15|;8U
zb%efjUQ%V?x^0$iXU@Y4B-IMWoLHRCCcC<?U&yR@ImXp9#;%%L&;xZbwgPK6lV|w(
z7=2Crh<$?Qv-IlCyUVONm(R1?33DOZHuj07rEAOF)aU9K3>-4*Plb;nXbSB=8-{l4
z@2u}y-`ldjADuDl&Gex<A8$qCP@T3T!se%n8~9=a`tg}keK_$aC=h*y94R8-p-0NG
z16ym`pB6S5*Wzh#xfQ3c?bbmeWc4Hz&S5x-PSxsD=$ANHFQg9EKSEa*=L)6+EW@VV
z0+ks;<0fmddXwF{w!)QtDCeH|0zU@+q{rf{DFr@b$6!y|IcWCHUK_S4vBls*j6yOf
zps_n}hF}yZ?!t>vfsp~Z+NsoioqR1>IwJMVx@GGY**185AA4qS#T~Q9{RO|TOaDiO
z<8cx+{p*j^0+ph*%J}YuPx)QTb~bXFVMH#z<5J4Od*nK;q?mgyUT+dVl4g!18smvx
z7(gcBp$O3+;<S%r^#W1L84ex@<y3fPckIV=h{dd4#Jh^mJskrZZH|QVp!goY{?Y&t
zSIcM|3Eg<S;p$unVB%vg#bffgN*0~PQswzbap^xj&l1>V*=&NavsvHGc40f_3&m3M
zAG%R9T4!d<_|n!IW}B_NnpM_g<}UZvMKUaMu+q7&u(!*+-$f9sts<Lw7z-Q4)(ffa
zi?=*H9d8%s?P>#3oIU1M#LAL=hH!S`pF=o1t6J{5VssNe^V{${*betCa8G<BY)5xg
zX!_I$G)YeHpkIR1&!ss1=RRseNAkOEC{E-fg14FUru&)=GKGVN;1r&oKwC4(TVhfN
z(!2N)pfOC=>-l;eY}}2Qf>O!^rQ>;$*r_Wyq<r7iZI~WL%$1jZ4#33x<5xL;U`!s0
zcxRGnj&YzR@7bS^U)vgu*3~Z(O3$p)44fUlZ^-K7kp)1jZ{RJ(4^M1Ijs)pw5@+!k
zzxxo-o!EhJMMDCl_=pVSiVIk=q@^TRy!UOube;)oipyqVa-gIvC!Wk=nwTn?D$#zP
zP3AZ97apF&vB}v|IhV_27$|QI!4E-gk>XoPF<3Tv7g`E5mJ6yk#d64z3BAT+6-M5?
zC2-s&xWUnyGt9Urf^2Q6Pgl63@_b>InVnvn$XE4iwzZbhyeq8jw!rndMF!Prig`|J
zDuOg-Lue;GD$#)9q{|d)l;^{Jg1IZKIFl=s@UUrn9qzhKKEyLT!V;l8GN;#((Bi#i
zIAaUNe0i=gi!LOHI<|vI)`sj;Vdd$<Y(#dC_fpW(yL&Iy@&5A>++vg@y_7ogF`EdP
z4|x{bM?OF5(1v1p7TZd^?@-w{)Mg@iHB7R;N-~QiHMf?yT@3l!G0Bjy{f=@$v5_4W
z+TI+2HYr)ZhkgmkdOgJzzdV2|c0`m#Xu6UADd)SAU&cU38X*_4d0}>GuybG&A?_ha
zl(WxFwb$*s9ytl(mn%5v)mIj?g(-;kmgxuLd$BmPtzovDZYa%f>oHp>CVJdho=tqa
zeeKqj8_R`qKGF8_&FY=orI|u<<||9f)x{}_2UTI$zW7>Up*S^LEPQ5)S?g2Gw_DB>
zF*-Psrr4DwcC~hk|E36a2M!R==U;DLTjsxe4x%iC2%mFaK6n<3<)9CkBRPJCL0m{i
z_jr2*VLWQvqYmLek2r**c-IZ^E_pyxPE)Ss#`=Gj46Ur6jn7ZQ8W0+>vIDqJB+Xrh
z@-E^CLwMH&v<=}}N%$<H>=W+jXn3~KGV7dX$!(E|Ux-!0pK(N`&Fr(WnZ4V181CfG
zXYsKAGXVcX&2NGuiReMPBwYBb|A~GHu2~0;VwdhuhXT$V(=>cAK(^+<o?5ry@uqK0
z8=fQDrJHc@SC=9kt&kD?Hpdoy*~CN>><_%zb`eh@w-JWWqEwr1w{7dlbaKI#GzUfz
z4_0T;155{&4MNu(3cS}4u5XG!Q{Xyc?wuaw5i&F2u|gypV7VMJO619C@#umPP5#`s
z?LANIG@gfU+cS6pTW~7;{{JiNDn3H%^AkanL1ZZ%KaB)=CWU$UM{xXLFS9nwnry;<
z@GEV*QR`~RgnN<Ye))w5iLd9Td%ib~hUty@a;-cAQ^@IUWLr*edb`{|_h5oen}NzW
zOPu*>;dRXgZihkv{-z(89X)6>#In2qe2Ay0C0>wr<GTP-wKdZNXf^419L3^WsqIRr
zr|%cogKY=yz5`RSY8v+&gwdg_o!Hh8)_!pb-aPn9G$^DT0Cvj-V<C=#BrN#MeUUPw
zk|$4vZ{-z*!Vix?p;T30M!y8p?WCCQYde7L3Sf1SOjxfgFIc_Ko&NCKGn+I~nVUmt
zHNYX|9%kzGok+)f>paO!h7wH8YugBBE7|se5kSO}=^kHm+K+N91*1F+;|lKh?fPhp
zN&gN_#98CH(Tk2J7zEyPgK;9^94d&thXD9JyJ1@qj({>gGsD=Ti*qIkD8&~4;=DXJ
z$e8NDi3p01Naq1s%oKN<=1*+XkFy#SdrR@w^AzLZ0dp^F8xe=y-ga&$jcsSAyG<yu
z{w{@HZQ-wtAdFG$(@Sq_tc1O{%7qLmRFZocnu+vi;i`qMFr<e9?{`LkN32N--t{yn
zaa{bPyUIQTVlkotNpqe_8eN8STF@CZHlg8FGTGRV&k$5IRYdh28(*Q}8zay#YL_<C
zs8PFgj~vypJ)m(84ELVgF~z%g9uzQRE{1p#F+`<<Gy~FbX~U6I3NDV=Y|n8hk8-#^
zF32Ls?%>UOokGEsbziS%;NhpyxC0}Kr-R!QS8BRFDC;Ul0Ei<|K>D`O;_LM;!UOBB
zXT&3^FtZZvhRSUw3ob`-h!_Bn22xqu@U1`<CrBvbj5WrN;wXIVa8R^{iv$UCLjw~-
z7OViCJPmEQAfR)3go=79j*(G5<$67LL5Z<*qqig$6@SHPBQ43^j;Q$d2wKCDld_Gb
z=CbYL-f3Y6;Hl8=&%x&W!2tM&8ZT-U$5@gScL17-xg1RriWCNiCGEuT{_6l}lIrOo
zY`*mNC_kQj5NQDL_+Ti&WmEj_e?0`?FG#@maM0qJc7amjvMyW~5Eui{d-%XkOLY`_
z@4OS|diZkA?0)R!7Ce`X)x~@v9{0>cEcFR66(vLjp7*A$y`B~rN|xTE(;CZ6C{!d0
z;d@3BAzcG7@u%E4gy)d85HVqPPUJ3}lkzrUb|S4|E|<rDh0G$!Rd)TxwObU4f=ic8
z>=Zo=J#+c2*6vywYzJbi(tjeDGtYk5nIaKK@F>fNi<O5>jgWyucHgFmcf->>nHd_p
z<R_G)_%YV#GR7zOiZw;D#St_=O7D3iMaD7dhZl8jT4yz7+Y6HeE?q4k3ih*f8-<88
z;mM8Of<eAbY20Rzi?@bkdXVWn#PB~~MMML$+<|+YecW|S5xwETDGD%W6BhrT`YMFp
z7=ch}>VFvh5~lud0A8guhE-){BRe}_pC$mI`H`M1Y+MdK^e`k!6H6e~Notfr!Xi8k
z?<x0+(wlamjDmM$Y_<GP>|y!RocJx!jzmM!V7)iTSzu?)u)VZxN{H~eMG>%<20WUM
zbi<qj&&Q=p?8?onxQfKpMQTDqE@P!KGHdaJfIk1J-dyCr9Y2@qDw%A$wZP`fGZ<j5
zh>zk7!esbe%I9}XBL<JBS*eN^$Imz_|3G#Uza>Nh9>y>@SauOio7MrDfM~A6vbW{g
zs0_eBB<voeP@wdoP^gI69zo2bnB$ky1RkI7JCMTMqDdWZd4kEnQi)gmY)9T2VGhDU
z$62dL^u=9clQRf)z~7m{6;d`wASLNA_*xnPO34Ykv4+E$n^18?<YoX>r_ME09^v;?
zZbNAj(ix8w96oB|JWD0;|9)bHxG#=C+$d`LgETT@Y6_PuQ(qGXqNE1S|M_imimg*-
z6H!$c7BW%?asLtsM-sd1AQLH(4<hr09o$St%>qt)v0s2+wWJAXNYV-U?a_!RA%(y(
zqclO75|0*8Y7@RXViS_o`}H)!74_b`JC;<@IjJGw6ZHHfAwo4b%m5jh@U_EJM^8PI
zvOu^)gugVAAkc|O&yHw&LJ{{w<|kk4vyW=HKP7xA8X|z}D(ehsp0p*2kvKQtFTE-v
zr!ohPvd^L>L^q20;%v5%&*m5I6lN;3^OZv3g?zpOaW+{jLw9Jol!h1eFD#VVWllmR
ztU`y+$7fB?#a&;_-NYJ2=!>-eJnRa1e+-|4u-Jq4fq*I{|AS&A<p630)fDnoA=^O0
zz@J0;to)9EKtxWA!Uq7YVr~=HgL%A`#!8MN$EIXHXiY#nA+E~FKkf(4s=g2k3i<p(
zo-jil2}Jce-NWA-lH{vA>IdLPyf~|{D_=xp-1e=v^5&9@AP&EF6mJM2A9*;w$TZ^L
zu&$R)2N&;%cxKs3^~%y@>4MtAL4ADSA-b-_AH$@eZJYLq9B_ru<ata(d);x}HGo3Y
z5V*K<I2F-$5#&PY^FBse>UmUB1Uf3Qp$fYip<oczbbAdM?x(b7NjdTM?SX`D(HI=Z
zJ6{Jl@na#6R5mOUJC*TVnVFp_WtLZ}KqF^<l*4tsdL3mOS}h>BFbj~Vjp4RdbThWX
z);e|<H_>-m+0(>7r<bnGUn%A1FBeP2rTK;Y<=L5hxqPL(Tw1z1KRcf<UcFqtT%5Z)
zUjr6?No%)UR06O%FBVE4;^~hs7H8-9jEg`duO&fjnDZFgBTzJ+emsV8rj%cJ%P`K*
z<(Fr!%w3sVEC9yE!pw4MasKLZVdnDk(!y+Mxj3_sUnngv><(jjB#g<lug47bF@sG?
zp=!jNA2V3Nh95K7#|(Cx5ZEJwRf_N*k5Gh1StEavQjQajzw;z^;PxZaHcP@ZOU~l>
z8r?RJAMegI<RM5$7xyhI^*8E1#MMWxvmvfNDr(S$s>D@Q<=~?@th5P-^ib&f_6T%I
zx8C2NU&5{Tos?Vezwe3?If-y>;yw;8z=|8Rv1T2IbwyH|x+4qK3cQfl5R2ln6d8ts
z1M9A_iq%F{%c6XH>C((Wf#Y|V5jrN#okFtkeBvg4+g_tOR0zW&LnPRo%AmX()0)Wa
zR*psTC`!+Rk6LWP{DTvht`79t2K0X6iQEPOkNa|5Q*!KKiGw(7@+QY^I>$0`T{ej#
zxn)NZjqyPLFkq901}14{>=1Hncj7)Cb`X4T;fCzLJv3C`ls9DGecP=LjzC__ABJTx
zeHT1M9-x#%`1iR(II-t2u1DO`h=?%56?>gsM^&qv{ABzh-Cw}J+O3<{R_?GOZu>Uu
zfJ_qER)PMWpP4D-XY%tiMp4gerADDVGix^UbLRZQ{A{s|Rt@blGX{)<xqPXZUodoI
zVcwXTpV135hSqG%=}j$Pnl<Jc`a-^>l^f-SSyOKs^QF9AF60|#X(8XxicNh1TE3>C
z-h)vr8RdLgE6wE%tza(bS_IVM?Zq2aK$S1&=ZhK~(DS-kGV-{;oG0C%$KeQQ{3QGU
zS#FMG*ZegU9kJ2x+H%wh{d9BQgw@f2)uF@cXmG2;EE^@g$*qoNqueOYHRti#T^|Kd
zqBmhX;R*;E7kOwwv^rq&(ZRg;c&8ruol-}0-;={b`=eBVH`B*8c1V7Hg)Sh=yVS69
z$v~#!boA%7<yed$H(xrvJ6eD`5hRrAbxzPe@}GF+&E%c23Z7o#7CL1xy_CHa4KDve
z$(Waj+L7#|B+iR(3z}FAoZ#q6rvV|0Rst(U(?QV?zjt~BnxQ(#bRU|6%cExpEj=D`
z5GY8j+8bshpuez}?(v)#A7UB%bMgBE=Di7mf7*?*p1k51GUgwOFN&Nmj|Na>GX8kC
z3Fd$D**-&ZSXAJaUmvM|SaY(sY=jhVAl}L@$=YbET@*M(d0#Vlsa{j$_RN40Vl3R^
zKw7V<tL4w{eRSw4$5Nm~!%ku`_b@I>lWu!HtWp{(-{J`Mx4)tau7xLeu9FwLLJhW6
zS_TMpUw9BXs4X)tX$%-n4aAV3I#~%VJhlp)c7ape=yLo-27r2itCIXdr1>kjR#$0m
zoS8NJ4l}9*ozcI(UqQAvGW(Y_73>S&<M$dq3M->-v+L9hll-#uXR;;%ZYQz_9<C2X
ze#8gxrXr_WH&G1kwF#s{uJM9m6BTyH>zSXCr|p?R&lK%`4r>`yOd~v!m<d>l&7jrS
z@rrdJJbDQ=jccfBhnws#^-<vViPWNEMDPk@WC+EV>PR!+W{y#<GG#3(BaDsAw}7FO
zm<sx;Dn%{KKW$e7Fxgk$p;Z$Pw*C$zEG$%U-o5azsv&J%44(~f)yqfnJ8dnuv~WF@
z*RLMqPU`-3P?PLqf|~aA$f(;N9!J&{xvFbXJ?fS4sBGbdq*ubjxM)FDw^8K#X;t+b
z;Ss9UYoL1eN3=E~5{ihzgNVR&dqIE2I=&K)w}gY<_4@e2%lrk%SiqMfp6dnx6=b;4
z5BE>^!y^KO8s=R?hfMUf=e6<eSm5e4s;^B?0m>L)_BQ+B$tH%Ok|2qPZ-mFFxHyUs
z)Hdigc>j&?IOWfFYe=WX!3%s0_&(8MwoTqrBg4EVYkXtA=!K~0H_#&DTeY?cKQ!uV
zhZ#$22lDG!__VoU1B*Ns7PpQWW~0}_bjMLJf&A6zfgnK#E#ue@-J~TEe6|Ce)lhBH
zHPEXcj`xCQc0LPt1C>xrJ*=6Y=Xy1&qTDt;>;QqPqxAPv0`rMc#`q}x@a(oH+lE;E
zd*U|7#kesH^6mGhA8dO$JV9#!?fD3Qa9#nnD@zLk;|AF96R7$gJ|kjl;5@h?iTY+b
z^5cPrgCd)nFk%~$AgqJoaShS6THF*qVT0U`8NE)orbrTq<qdQsk@wxE0iWV6oY-mi
z<EE}}_6)a%vWVz)0_AvJ->fCy<W!;uwfj^#l9TLHHB_dds2vtU_hj+nA$e4A?2ckF
zV5tZx5g!HBMBQpUYDlHxpQFDp2}PFZY(_CaZ21wC$5&sk?+>4*^9IUsS|G%>-LZrI
zjS~~$@vhmeDLFukIZ7=k*l5=1XoRPwBtx^G>u#b1v6FMX7EaVD>d65>&zig*L)9S7
zZua^74Dfl}YwFvEr<Qp556R)FOg)k88g5KMv^Du0RFd8bI&Dlg9%v1mA|tT+*AIth
zL6e=DI-F_&HBpdqD?H(EqRh!gO_iLa()CnUEIi5?q$n!w15wZL@4UveU*mTJKsP|`
zS(H}*JlJ?~-hgF}Le#`x>vd7!lKv+J{C^}6v4Jg64+{RELWJTACy7x&E^h0_>z`sS
zO&mt5slV0-$#fc~ffKxmkg#P!G1v-E>FBjqGdqZd*N}I>%K{M8Pt(Y><G$H$3ZAwV
z9x$Ez{gqxLJS?~gjxQ(?H-~MUji4sf4ZgUiw+n0H=BvMnbGpjKX?QZ#fwUd!krt`E
zzfY4jRR=0LOaDs)^gTq4;_u1TKcu05kHqc|tskr&g->F2oIcj*!=jJx(8u4>$A8er
zzthJu(!5s}>EmTMf>xL5<6HFcm-O-5H0D?6<34@(_~?b>G%J<A<noEnyJh`wi%+@5
zr`zIFZSiTg_!L`w_$@y479Vzt5BWyVI*YRS0`4Q$53Fx+psgPXh^c^@fS8H~35dT(
ze{qQE61aevE|v+1DPvDSOs*OZ@oI;IeJn}K9DT=h8z+Lc7$_Aj#Ij^Rv5m<V(GQdh
z+V3>nwmKfX>$BS$RqyfCh~sir{?f_R_&kCHO))&ReXQsSlmIYP9oJuQYCtTy2()7j
z5UGcjqV_L?IKI%o4d#Ff7+^CXE%K6x2^C*WH6KyUoTQJ~BFP3vs6|ILV^CT}#3f0;
I={0iy3oo>9T>t<8

diff --git a/doc/manual/build/doctrees/softhsm.doctree b/doc/manual/build/doctrees/softhsm.doctree
deleted file mode 100644
index 12312cd9067cd0bb52b3e0f866d42b277840d1ec..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 18007
zcmeHPU2GiJb(Sns5|<M7V>3w|3%QjLQ?j-Hv%6fzc0rL;tV*T~QBGyU&hqZe-JKz4
zXV&vWY7-f0iUu)(L7Fz(hXMuCAGAe)07mmxw0SKG6n$tO3iPQ!3iJ<s?Mu*ye&^2b
zF4tUHQBt>&1TMLE?$5dBo_o%B&$(xQedc#>T|XlK1@oG%`krCB1<TfiI}A=zK~GrT
z@H@jRUmw0dyd2Cre9yIgM-{{12x_RhVQP-BhVKsbBf$w*sGeb4Nqv1rKdzs6cX$~O
zXFS6*MdnfP+zrbUU59&y)n$8zr?XAF<Gr@|`fg=Nt<dP{yW&0#e`wur42ihlc%Oq3
zZ>XPj+dRl|&vT5n?_nlH`7uLtL1l14HM#4e5P#2Dychm;QuF)imo`^-9MPdVesIF$
zU3xUs=k@3GxnQ=Huth%>9FMv2#iGVNUexWLDBd@EwpDZ;wWxAe<(i0p=e=IPT15L|
zk6S)Bi(za0>Ug@_D>$w<44yU(OAK#5<+q6emhFu&?Kki0f*F?UIlknz%WR8zy5X`u
z?+OMMu#W98Zm~DpzUBF>q7+IB({0y7p_aqsv8HIjJ+>NB$8_#8ZaRW%1J)M8lKpej
z6dLngS{$r6TU)<|A=Dj=Qizvl7A)sj!M>hd*G~|M3&AIYm{3F^KMG`1|11PjzW@RM
z9DaToKbP?Hc?g@ns8{qW`iuHYH=jo3f<LA5)lB6%{jz>c%FJBbwAG!~d;X~C+%t|I
zITGzK26=&q7`?tJXoq7DLX7MV<4ko1eb1JQYN*WhY)BMWRpGiu+a$qpY`?2Bo_piw
z>gJ_#8N%WTr^8iIU~kzzQ_-*QLPkC2*-YH;o76*GnYOv@dl0!@5-gs3jXT;NN$sXk
zeaG+y>~&l7O>}m{V|x%x+cCO^1!){GP3#KO?n5j|U?Gi;M>Ko7$ldM>Yi(n5bA6Td
z9eW#k=qkhJr+HfT9xA&Yq@SC%CE^N&Sltl0F1u!<21b)zZEoI@+sN?TF@|7x(pa|T
z7IL|Kp6Q;~cbALBy}i9cyp3(ATa;VmvR(}pr#^G<))VeOR_=#7XyFN8AG1^s6J53O
zu)1m%y6RU$)e~FYQ4|n-=Fn{dJ2wk^D`36>EMl+$@USIez``NT6JoW)hz*XTduW%T
zzC}8=4SK&kO}D-i>DDvh<iv>94o-@`5gI-|uEAf68WLAxrJRe^K#YgZ#09~*8!+Zj
zZ?QIt!Oy~^C&_ew<FM({90{y^jZ8vB&3U;#r%eOOnwu?YA~LKFI+qylLtjS3<OeL$
zW|iEf<j*|eLzd4Qmf__+dk0V<pEr41m<g81=lh1m%9W~uN3Nay)^P+-6al-1pWAQ=
z!+z&5h6S_td*-qWcmrH}vhN62IJ@|B22ct``@u<*TU{T}2k@-TU40nL>qb{M@#D3)
z(<O{aT>o~&?Pp`|`|VV4f^!jf!54}5u+%)p0LjCc+45lq7$oA9S<pkoYH`)JI!4!r
zWnG3vgsk?Kw<0*22iDBD9YgDit;kL-1i7?9sseuCwu3WnUpK7#1+Hn)!C*d?BA`&)
z>So30!t}wg`sWW4l8*Vq@s$crL=ynF#?aDVg3mw5@;GK^7E;kx_%O2-p2Jp1?ed?(
zE+0xXvxLxG0y8@VCH8daDf-qiERC>7x^WXo)Qcd@ikkqRun4dPjZGV80*!!^4P+8R
z^M2nnR0%Au=D0P8AQz1TX_O}}AQ=#XcI|;2HilGT&#dPI;kO0DN&}E-IkY6=#(OWY
z>o^|7Fi;)?3~SdmcL9N9Q-WpG5TMA($>)c2$MG%9$_1HR%kKff#c+{mCup`++~rQu
zG}`eoXNzfu1B7Nfg95uHyhWF}0%(yAF{B9nKAltuu>s!^DH<0zP%THI`d5kSd<??&
z597k7|II`p`w?Vj;oecm$}hY)q&xLTZd-q>tMP9iXElP0Y^v;y(t0E~Bb^YfNnj&5
ze^5|kYjt*9gwuZi`vA#fD(WZDK2myu#-qx8V#L7k)SOIGb@A!(`B>#aY=1l1FMkb7
z4*iigSYEJ2_raI3DO-IG$IC0M@XkvQGG8wieRpKj(guzZ0S-DBA1tz>@DdM4#-tQg
zX?Y5s-7|q5RNdYKOt^!Cq4b4hYA&;Jz7p0LxSr^#o*5~CgU#Yq`TsJVczL&<g?c$m
zob*4?|4{#<ef^Ik5TgIdDC)SBu6ima!SmsI014zL@G=D;X}t+c1=D*779opz2o|}r
z3gbX_Awh|6*sykF#^8mLr|-xh#Y_7!S|r>nPT^jJinp(#UIq=km_-8tKR{|fBvlRl
zVOv|#CfM2vjT8)5=;<Jz2WRkJf_vmT%WX}9TU(*;>@q;m=cWvm=$P$S<jinNIuQY{
zEaIBWkQB4;L_}oT#TTbDXM3F(^PC)wtX;sS%`ojgq;UH>dPua*rzSHXrtvTgxc$~6
zkbAT+PEWcC4%3xaG3Qt&M%3k>LwQ9WQfQ>UNg^Cc!vp3CF`@vA@`)kb80EzJZ&c%6
zBIqqo7f#;LBE36acJbgo9oM&$hl_dpe~|KI8^1SY>8B~d;^=ZFKtK4U%>+=cM$4K7
zmJs+uY9!=+eF}M`WnwF=jFOTX;>t&wIgKo4L|r6n4t$<mi<kCMnkK~m))eBW@wPrX
zp_I4ZOb?Ht4ulUNW^$rA4@xzZs5Ak424FwTl!a3Pjtw|=&>@K$4hZ8}bS63c6p~#@
zQmz-L6O?L;?@G2jKJE2qQ`ig{iIpu4EtTzy56_8l!XGOJ-~Nk9#7{gFZ70N^Opa)Y
zsD(UzI1T)TQL#$*$$zDr0XmYw10kJH2s4sjBcG=;D#hj!S%dcp0j@pU(Lxv0L6Jjw
zqfo;Ca&ASV)AY^PZ@d9m41bTq7AMq4%|a>9&A!e7RY(%!gLmivlYz@o9~gw+HEl0B
zWy>!&)>!F&xv4C*c}HWr24_Ij4tEChJA<qjqv+Z~@C!QoM1=l+k|btMSJSlBt0Q8S
ziehj@m3TDI6F?lQ+B_*E5-K<L&}IB{Q6pfyNJwHVkb>A4bsdV832z>Pl`m`>T?>QU
z6>#UgP2s9+WIVP4Q)(qF{Ld*Yj4|=Qqh1CRuYtx?xo;*w6~T0meT9gEZ-=Z>h!7>k
z@Yo2;rF}`-dv(OZh7o2NM5LC67y5Fbr++4WC)5AQLrgz5*4H5|F&nZl@LmI*Tw=W)
zIITtzA2Gs}_S$2wPIy!l_c;Yv3##2?FTc#zZ(q-4iV6(>s`XNde&5)jPsTQHugKpB
zFOF1=HQi`wnJv{7bkL~aqoS0X^t)Or9T-OTiH~@gjm@yca&z$BP5c*E4e4PFokMF@
zpf_nA2ha65%xC-oMai5<T%WKo<nSZ0FcIdHPyKY>f!9U_Jl)@SVF=|FkCE*i?_hGp
z!lv4)LFXUZ+Yv4ek()q#oDTPz)Ke0<(b6Xy{Abg7!j#WUVM-Q`-x*~<3Nx$}W=Q20
z;*8MiK0&HS_B9Yk=pcxcKW;oEn?6Dqvd>I$ti*rb!zN67VG7fx8P+#P8JS8_u&N7n
zCq%L&DRSm?yGY(Da$zTgc2(MpzJurogbtUIG|iy<6x>8W1o5_>41(nLbVJoqqMAM~
zqe;0lG~84%I)-p?D@0!VVALf+vK=v?I`Ag#QFI2{QcEQ8lSNdr2=yt8kd@rGM;V?-
z?!6OFlWmFtiDWmzCZ6wR#SlPQ6CO9nDTOmIJ#|FiMsS60ipfTc8Sz|<U~VMWi;-Y2
z=6?M9L-uPN0Uj;9Vunb_9s_K4qq{@2;+cMA&$7|2Fy0kcE$0}Eim+gnQl*wJm-40Z
z-AZ{`QI^ZqmrA8&7_!Ud9#iUw33cr&X_IoZ&aSbJ1Di?%b}+5bWej0qB_Mg6BQ;l!
zyW#_E@IIo4^0HAZERdaql&iQN1Q#`=7A&(kZa7g~E>dxYuou|@#1k<qVeFy;dZoUy
zy~KSx;yoWA37jTwZAytx>rtF69-8J|E|tn9Vn<YQIy-6!JEA64A`9moS5AN8y!(DT
zjxEx@IY_`mFyRgA!__hQgUvyI`dEq+--WahGwE_-a^PB4YDzU1-O{2RyNs4MH*YfB
zu<WAea=q4EqB6$r#J53~*-p>s<9<~n<C*9|k-8|ZHtUt@`pR{no|WrM>&i-X?RtH!
zcD=r`R<AddYf5u<b*);dw7`X5;bs@t$vnOHO1b(%$K+l2l}fE4M_j>eO583RNZldj
zJ6cjaeLJPGR%(=$k4s~9wOLzH)>o@5<@HMa+G@SAzFMkQ>&*(NymqZpuHaX7ZRw+F
ztWTk_P>4^BPgKGamGDF*JW&ZbQV9vzSepVirXjv}M*v91m2!c!BpfMpbjXwL&y%}i
zg8M{PgkK{)V@SWoL%B@I9dVe;1UKmV(sK+vuo<Qhu$yAQHtF(mjJ7WvUMpc$YYMAk
zm&rS*mvNcwjkrv@7))O3BZ#uK)!$Lwav3+~Y!fc;=r&V|VYaq#tJrc?dKTWWmlzo+
zHi|6*Q@~FcO>MUl-6Jpu@s*f`;8b?NblrP$GNYdDGh_6`44TVOnfBmMXGiSIroq4k
zT<<zK#k9joBq3HBb0DVXcvz6O`{pAMQu^5ZOvE50GnMqiB8UU*j#wN<Tt~lmjNtj$
zy~=Q6@StS)4Tv6H<C=2s0u`m(`M|Bqk*k)sa}toLau?ig({=bSu=Q1jpVk|<Z*1IU
zm0F#(al0M3A}(77?kXutxuh&L)n=X78(gWCJC%C7QPWClyVERHE9J7*(3YANQLU@B
zMuRs>4N+DU-fUD$%}%A%QGkyWuC&`_wboXu4X&1yj#}oGj-mkYR%+Ewz1i04T2rev
zYHC~HTfJNnWv$*(D{>GmB5LK%%Ilk;s#Gs6RX99dORA`9r7AFUgI&H2hk6<Qs3ip+
z`cg@$6{_&mH|V4wz40_1{L36j@)Eq|zvAxX0R~a;##&Sf^{Q&K#ucGfd0Ak}YP})U
z2%~YW-3CU(ud23$W^cN<2pY8n8a6tEtAvX2`wpNu{z9D<>Ff+E$w<~uw<6_QxxqWU
zyrij}l4v)%P-{z?sJ6A5Qd_Eta;+ljRYizuwW2Coql(83p>*06(MFJ?sZ=X%QBhP)
z5xlB&s!F9<>U7Y$Q)ytrowC~De5q2eSHzM)fTDustyGtq^-j5|p%=`E#N@HBh=lz4
zorx;~8LU(V?*Q5J&XQ1gRqND2ah+>~?AuCHRW%^{M_rLf)7*QqNuO*|=nM)sKiQ<_
z1hx6Ux=9m*{M{+`e;S1S>Zp-UotC#YY|l{1wGH<R;WhXbU>a~Knc$;z2c^gh-buJ6
zk;4XT7CO;T0~fL*Z+UzQ4<2u)2@^h?!i22T@LL}>;iuOvEg>}gk__;}k1@cvM+Z0(
zeA@NfE^gQ&OT@NXn!pWt>DtX+SHrP{J#cVWJ@O+xAU2vvyjWglUtL7xen+NZEH1OV
zjxXMi;oviqo+VWO-A7Oz%w<Lzxx%>pw`ihY2~NF?oZA+Xc}%<e>JWLCPmN3}#ecyC
zBRpjwNG#&>O&+3>mtv9$6vq{%EJf!VDN}L9LoQO{6p<P7IZCa>rF=?|9ywRZ+>j`F
zG|1KpgT>LHvewvO$1+D2WEg*RE^3n5tiKpM>mjGW#r-#0R(X0sHmJ<1p7D@1X%255
z3372Aq2a4ff_OBT$2|?o$!<ki(i_34xI`v7Zv-cC^Pi@Nbn|mb{yChxn7E}4gX3S~
zCj6<100qYpGU)r>a6_Np2xhy&qHIjt8R84_uW<-P@C9Gy9NYFlDn#)9FgRKq26G_^
zEsVQ^3c2X3@0j>@+OyRbWqs3AkTL_Boxw0T-$6H&ft`8yL2#PV+%3P?x=-PX;RnGy
z@?ea93t?W$rFGHaXTuT^X4kqcI_tLL%yWzvHHcEt!In^$v`oryMecWy)4A!zUuS}I
z;=TbcO6PrAI-`lU-^FnA$e^V-2x=f0*F(uHmO}-SQ+J3y!vfD*$gZ<B)EWk}zSqew
z<#Bc&2G5T^YzfD)otBQUpD7%y0FkO9E&WW$`Ajb}vX^0SVeH9R7u%o4DJYl^`%P(x
zTR%VgV61U)mgWH2bM;7141?2gG8Q<lAtUQ4yni5gCUk>C>)<GjK#_{8nBc>4L<5ip
zMI14-SRnM{!8}K7pp_N{PZ<!m)0*Gww-S*AV`YKNa7KWNIy@swq_ETKr$v2N_?q29
zA{lC(Mcy+^L@V1;N{Q;Vb`94EMfOZfGhA|$V<HiiC*rMwZFdTjfjYJ1zC)*{qiQV~
z^Pm?Pe2V_UAh^CH_huBqz>?45MGaUg8PFKsJQ|#%{RYXgx)4Ou=o#Md^|On?d|&j_
zYzUgnDJnsVn`qJ2NHZ@{>=yb1SU#&D^P7VOswoLT%~pIvmh$IBKmYlX0)Ear9d)dG
zDoMM4A<he>mnV?O?g*z~2(Kf@pcf_RUeCn#o%MJdyGZl&;mwo51;}Ktm2A!=oud_|
z@a+d@-2sx?@3)d9J$kJIrK$y|+#b@3!sK`tjCw|Xm$~w8OM<}gjSv@99q%?!ku4eS
zH*i_95UqFoK2iedbs1qcNvH<)Aw39^BZQggh4Z8+U=zox89kgIF%}OuBfaloX9$t$
zwS|TqJU~E87sA6B3o2^uv_uc#lokS|NCl%;S9}nhqn=3{yTa^*I&D8VCam4zhTjfO
zM#zNJ;#p*=$!x0@ZohT~v=ij!+_<48ZNB}FFp1mJlm_QVDui#wcppkMYffc-mj>%3
z6)4Y^UbKO_C#W#|`||dGP}l!TCinaL_qMO#M$PsM^zkqB@z3<}7S;F?ef*d{{s|v`
zFiU-SgFfbrS0>0__Vw@Y%MSKs<9*q1UpCtJ^$S!@jx(o!Pyd=6ME@`xf$n&RBhWP;
zIfC@s_`&I{BuU~=s|Mte7>o&pC8RLodLa|DC1E|V7LwO%+h!u1vg)&Ag-Pw%ksfE`
zQDvj^BmG17J09)ih4H?kCosWKXR3{tevsatQ*C4+gs%v}Vys5x-vJ}PF}#DViMJ<U
qljHp-<jn{NOtjia@mx}jeqmapm^=iyOR|*HDE=7fC_)#0yYN5pqg6=&

diff --git a/doc/manual/build/doctrees/thales.doctree b/doc/manual/build/doctrees/thales.doctree
deleted file mode 100644
index fbd5243c08878cf8b671776b09a557ac887feed5..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 49865
zcmeHw36LDuc^=LMFpGoNiV`W>%_S)u#LQv=9^jg!4B`-B5QhMegvDdFXQp?%2Q$;d
zK7d_{iYzON0jcH0)>u;6QA*`hTq?)0;}q?x9FiS5u1YzMlvL#?CzfT$E|(prl2nw6
zEICs0{r~It`t?lDOwaBt0ZO2a(N0gl>%ag1{qKK2w)tni^yPK@U$nF4R>Qz)_@$Ox
zv;0o9l^!&$R?zuWXYWTkAL{Ihwt41N-wnO0)rr>OjjHW5YM#~Vywb7PMO%EU8aQrC
zy>D-}C+sb+boSuK&4Cj%EbXW0{*$f1TJ+4oX)PL8oxnCO+GfM@jiU`WtQpT<INhPf
zXuIj6wM4VX)8u0vnrbxBHZiZDW8dai%&1@nf#+1h0PCW4Y;<Zq<{WLQHca2gL;StD
zWj4iMTWeuE`BE{fmpyBN-U*{Efw@ROb?lw?J@#a@t*n4#Z;U1+Y);J7%)p$n-KI6O
z<TTyZjPF%vs-|BxYnJ@qV$f_KnnC-Srr8S3#*An^6EGA?o*#6gO%11Ibxv&vD*(eb
ztjPqx+O`hH&s?-E!)f_}7c%sH!)+OX?f6F9T(k^;!B}uTBlIl+<N&YF$B;gTSsLd&
zHxP(J%fc}Wv#A+R+Ck9v=Vs(=tgzHHy~|cms<qu#jbAD`?u_p&w!-$z)AMCx&#`mv
zvAu?Gc~_jORbu4rv8SR#E0|zMpb;=G`Mh*szyd-+c#;_H&C$iRScf3GsYp^|Ul_%6
z+=EFT#$<-SA688JUXY)CAE^2V@$Y{8djS6)0{LxXvKr8fAut2d1}s9)=|rW`aMTIy
z-S%SyQl_Sf!1NZagt@VV*^$vMfF&0df$oTdi$wj!wxX+|+bRl@>6mii@?C@8HIjFU
zdeyrUIC9DMkI))UMFm9;wa%&a@sg&Z+j?kFCnKvb@Tt@N_Fj9R{qU(x=xx&8V{ZhI
zibCuGGJg&l1_Pzo%(vaE2K@_M!wXx+92NoYY|hQcj9#?;X0hTqwMA>**h735xNf6x
zREPoMNT1qP-Bt_yM}M9>b@ajmv$J^AY(p+q8kR8!0Wmj^p8WZ}G`>><PaDVF>SfC-
zplM)2LU;!8tk#he_(sF=1FL1UT`w>eJhzEv#G7~-;=pXVn2^`gQNp$l<XCdTrj}oc
zcKL1FX)Tq^S}j%~I~z`5d1j*w>EyN+b>6*iAh;wG-q8!nWXv{1dkUw~mKX&fGmW<h
zy)B^C0!pW%CsvG#WMr(?ZbsYNR;vc(RbB!)>T8?SkS12LE}C#!EXxz|W&Z@Lx2b3o
zVK?dg6Wz<&6K&!VqK$q~gVMrh5meE!x)*sJi~QI?DMO4zO`{3HsU4_vdeQ_Hb?i?^
zTktJdZbQ9q<ku$g-CAlloT?LauJg}VO|R9t#_eJW5-)(j{Lz?;wkU90Zw=KdMh9y0
zF*;4LhtV%Bu3xuKFqZ)hx^ExYWZyo+vtA1w&#DoRk|LEX3`QDA#-+kVQpDDh*=&QC
znd9T$D^}H{u1G9MH3pEg!3EZbChk(f_|Y#xFw88rK`%3nuw~9XPUeF@)3SoAu6KFn
zD8vDbo*5ETW}`7vZ8-Q^=C1{O2LXml<)+hen&8R!SF>8Re7_8}UV}nuk|u}wSB1F*
z@kHWn*$s`V*)lBCcN)tEbVebOQ!KiiD^9RXurZ|)d=9fq>^OsFM^;|w)2DzyB54ZZ
z0RcSWf;U<3PxK0oEiqE0h}Z}eCC$Fn%{<*a^3Q<wH(3z8dk|Wa9%&-3QUqfVTmPnK
ziXY4rS7MgCbJ9?H!jG#7|IM3>xFp){icL@ua6<F(BFLorFVMQ#?+g@hu^E-!(mojl
zX`6}IXBAA9lc$vBMJRnvp=RkuvADp2vfA#FR$B@ciKQ0*ZlqCVD$`Y2XWwA!%>DqI
zWP*Gb-zs6E6ae@&p90vfDF8UHq}L#wbUpqGc{I8nSnw>XWE^S15OV^@Y{0IvAi_QR
z6Vl7PVmb|ztTwos1+uR!a{&gB;RO6MJTj-2c91k1^DP*S+_9~4QA%ReZ->%@l>4Hh
z%z-kt{w{t!ZF*&hS?-o4?HPvC_y8wy9Zx(Ty6>{@sqetd2Z;~RZ+#N)#8%85DGJ#H
zMU!$r{{j}WGTHsMRdp7eDsT*Y+g)JAp7IweRs-4;WMaE*cyJBqQr~HUV7vl3=w@r#
zXd?3BwWJb71Vj>xan-hno{V!xPeK`cwf%;NxP%dc4#}LaQpltbyWabW{EVxXVVhSh
zqXo6hDxMUyA69LOtbkVGFa&mp+0aXF3$v+Ma2J?-1Gj)s3Hopll_7c&%334V@4vNA
zMc-FzRy_7p4sMsu^Si)fPvqdS#}gjAJH=xg1E;M?;7h-U7hkkNmT<61IuACt4HI;2
z_{;Enn@Y~^H=GiLHkh~IfV^YtlbmJgI>QTB;WB0Vf{Ea0Ln)AnZU$@xUv(M{qh(pO
zLhJ{y@jfpGtOgCks(~GQUDo+|^5{9PMm%T*hL6Y~+=9R}3(0f?iiFZ+FdX$9TS#5D
zw6wh;D?(@*nvP#86iOwGQL~Db20{aKb4GyP3kAb4Ub-Lxa<9;r7lk2y49-k7aJ}WH
zW<uYaK@)@@$pa8R0UU*jKl9il)Z%#SiUZ%B;=oT$AGJLI*S+k((^zm8Lkixyt#f8z
zXLmGBJ)E|h80nbRT7J<(IN<n_g*dbIRLf;EWKSYgE<Jb)+eRL2$AFuPcBFVCQRpuM
zkYjdR>SgY;OY3KPE_E876@Pd`II;&0u<qhOlqOrEhvxHeuJl*#AIjy)uznV((gCUZ
zYj_9JQh{pCMMN?^K^^(5CIfT4Akeuk+9AVvEM#<8{!}7mMieotlrMvY3(Vb{aAr!i
zesTz%MBA2{jXA$<(tg|4wucZj;<wnUg1v}G*Q2csv$Ysvn+N*`B=9@YPTN_u8~7KL
z5#FcWF0yGqLBuBF+Yc#(4kUp3`;#U=kf`YTVLVoD!iQfJ`%BQRQmw)kjnx*yhL#uj
zB?G#`4;v|!M#iTI`V>-5C0nH;Fl~l`?LuEb!@xcjTVot9Z&+~DU@3d?7E_`>qMKtr
zQ#XDdio$+r2!)ZuE{(SmDB}xwf0%>xctRQb6Uwj)k}Tw&?=JZuy5~rh<EL!ZNc-h9
z+b>eQ4thnc=C^XJ2K%!0-=rC03nwP|gV06ER?fd8uWiA>_NoCpu`NQnWLm1=CHY<K
z`NUz~{m^25h_LBmVw>Te0ybH!#sYix4S4#sW!lEN;`lI$EI4TJ^e7~%Ej{K834z#x
zBYRKo<dF4eu_4EXorpNYRFxY<YL00$A$HHEqVLVcDFXPnIS4?K^CKD|gq4)wx^y4<
ziIE|kVOaTOp<7;+LODQV4V&r0NsiyEx#U6^P4hCx>>Up>X(1s0pir}}z_o|8GcG&9
ze)9dV+7A3|LS+}OK@$`o*l)DM3N}>`q+d>=My0~pmStdrjwpz_5n&_5;4uIK1S-08
z#WA^aE&3D(9K>V`y?fU2?y(k6pcx`Yz&;H&Tp^_4jRXi9AZpd^?%x7fjM5<ho4N(4
zp@34%{Kq3O^BkD@>v(?z-E=s`|45(NWwo%=Kr~(})84pdze<&b92@$j3^%o@{T!Wp
z&Rs<C0ODNp%Q=opyX$771fvJ6&H99O1-8y;+sush0>{|QRsn%HH*5u^f>3*jQaU^4
z0i;?Td%p^M8#a)O+2szVeH>+3ycekWZVv4IU%V6RY-;i?`pTIY_3z+MWllWvLM;E{
z$c7P^6$42J(BNscsH7bb2XsJ$_JjYCRd*>NK8BtYjPDr%#?Js?@4)-RI7EXnHR%WA
zA3Tn&WB|;dv?NX-V*thx=3WB+fx+)f=nQ*JE&bpKOFxEnltx=RHR-qXD|_5Fg|*Da
zUgM&JAUpB=^m(XAI3g!bp1Xj3W9UjpWZO*}6?ds*oPgs)6ehyvmeD{S1?>P0X@~%R
zfFZ0}FGRx|G7X8S8#KDY|BsA-{}VvwiP7*+P5R;g#8Fsg0_#ltFs+#OTh`Tn@`W=l
zEklz>z4$ynmTo0}#?+gFcVz^4p9Jt;9Sz>pq#wL@CxDqg0~kvv;xU5G;IA+U+*U6@
z-;=MMgjn9!6-Ztm0VJoezAK}FgqrjN$^Q3I&_kEF*x@5+NP&#)K<s7snS$ft5gJS2
zjMPR!=%+`3&}l69Cr5)2HR%VTeH!wQ!uf{dl9z7w=58vXGeQdmn_nCOHfOQWUl<KG
z)TAG5X0-(#bFa1<u31Aemd;JkY1m{k+ie8XuzMsHnwX;pM(sgDYV?K*U|${qVDHE3
zzcd=as7V5_{;|(!E4c|G2XX@W_7#V+B@ugFaF#mu1akbt1^P2uU*gc}H_1rt2|2wt
z6>>Vk-huG6B|c2!11HZRJ0C|V!0HqUK(J>TdxK%S_~ehCeg1s;=yNBJpSf5*bL8~#
zr%SIpZ58AhS9c2Ze>4K<FKCO^7kTN20Em+!Kbh<vOqkCe(BBIV9qXW-%ASB0{oG}=
zbCO^I=MrQxw2*ua2a%V7*_H^owW^JfQgUN)S*RieO<5U`4<Z_es4~PTKR{SdjS+|9
z5NS)cHF?@GW(xE3YVQ;IVy%Vw`FXTQ7#k6}Bj*!5id|(9D(sH_pp$rGl{Q$9ddqFv
zN<CQe-T8TeT*}We*Bpq+PSF2g#E&(-vHs00V#?kpq~Up=@a45cUH5Y9p6*QEnSog;
z&31L+Jn3oM#-ZM?+~HG;JUBYRBm)XerKf)H0D6*3xVsO<B|YD}f~7$ADd8bz)?c9N
zTMW;qgh$dQx+e~k7r~yz_T{QyoSiKSrqqs%$hX)dqqpd+gnBDJEJEXLllv0d4#1%O
ziHmUPx_S0=dVgZTD+&}(4+kZk8>{~i-qZFcUe@Jk^x0>SO3nEwt^<P)MxcR{CSjun
z>4wNOM4Usp<Q!6>xbQMwhQRBQu7!cJQk(%<HpFIIm#B^7T!~yRAWEJ{sAtDD!-R;Q
zW5|tH5M9i|Mz$cL;aLzJS_xbf{>3U1vX*C^WTvdn3a@H(ki!2bo)z)_{Y2&1m!J$J
z(`aDt0gkB9q!fyT-mJy81e9tVmyv3ZO$#U|5YO&7Wr>29l!lKe1@iiMe*)W7B1}oN
z!^$i^%@m(YXex{2rkaxicOwhIeL|3xKH$FeFqA>O#lyRIe7tHgq+?d%*d#HRY0Ssl
z)zJNM+8E$@MC4WWgdJl~WSr^U1#zMy=LwFIft`7QMVR?wHB3xM?9}&q*b9({S%^CP
z<cw$xltc(n-e@8Oa6F6;>ka~1!r!kms_f)g!Y{wQ04mk#p%sup3<Vr&sQ);?fO8Ei
z>Sa)1SDqe?JH}pSek$$U=u;7OA`XbaH98nE3g-wktAi1Tkeq^JmPG~5V&E1<GIh}`
zHgLwN$cfi{&@&dnnz<4;Ph&$gheV;~B5&Kkc`hlz(Y*W6YyDFMA6PY~#K{T?uc_z*
zYslwH$_m!ar_`*Jl&zoF4DCz50b~CnIfHHkdGI7vV+oSZ0HQ<d*m#H1qm6Q>8X`X)
zo8+F=u&$V}hlK7cw2<w@`)&RlWw{oO`8W!s5`2%2zysaqo-w7j;8+lj+KH*36sJj?
z*IC!Jj3aG2aml&0#yNrlZAYwPj%E$XD`kc!^@Q_*e0s%s-J*x_sXsB5WVrJ#IqfSy
zgxEc(8oumN&of=$Q?p0`giIabEE{JLdVx!C(A?H=Y6PEh)h$;;n$-g|o1<reEfx=2
z!gBQdnh>;9Hfz+o;_P36T*<qI+XQF-eIcjUMU$NWS$-`{ABed$4;Fvhav~<4B0HRT
zy)k@<iQI55>;}e7#)HV_n5^Igl@;{K<VYtB{QBEdIS4tRqVo0M0so0|I?9e#&k#6#
zay1%IGg7}w!)#t<cX_PU)lK+@o2|bq#9?B#UR{Ms;xqbPNA`1`E`GYpYJIZG`(dz9
zS7*M){TL=4{Dm33YCHDp1Tf8x6#&d<S+=2n{v`u^V9HTlOK+hjzs*h3(%^609CE&!
zyZ;JP?dERz4BY)tF6E@L@w!dS#yQ*N;n$p9fiYiN@hSUmtC37Gq~vO*sys|z{|@8U
zPWbQDRq)^Nal6^<AvHBv?M1Uy#BQpz+KbA#)!e~U1BBaX`&Bj&&JG#pSq|WBK&8$&
zV&(Z5=QVJ_w?<<eYLdk`AGzUnNjJ~zCmQDhbBRWj&%iUgy6h;8J7xuU^t_RW4|*Db
z;u~Y5cttw>{UpT#B_a$xa^jAW1#(QJn<sXuHbr*wH0n=&GUQJ^fsP|xbS{>ckIp?1
z?LG!aZUsS2vgrJ?X$5h!*}jQE_zDqm7x~L)ApZwbDx=RbG@htXcbjuI%fl%7CIIef
ztr_=_knVBi75|i(U^Er-+8Xjt=2W^l=s|jm6&`67;H+5XJb|JsLLbam8e65_=UpN3
zJ~oR)sDzj;OQ(3Wbj=tOpvcE-J{adE23>Amqb7pa`VSFJ2%iqQHAT*?`7JVu#IZ#(
z=6)lG8vA0pi3nNr9}*DIPdZ-4C~|W)wJB$x;HV`7n6mtRR0p7H9@qpza2Th_n)oTM
z5<s=G@Q{ye(McV-xr%o=qmRxF6w=!&h-zYg2h}arj@w%|pb7_l9vICV4hmC%s{f@H
z=oM!v(kA!Uo(WMX)=;ro)E}eLq`oQ+gx`W(Azb7Ib%9Q%{jEGwxf<VVzTBHV_xs<=
zt7Q|6@{}IRwaQq%fLwl!$xGV;%oUZn`S2}l(0t*RzO&b~?iT@<oZ*)K-R057Z}V^q
z(ND_Oy-C6?s3kp{C}i5bi&h&sp?biws9OCiv~HoOuf=QxFicVYsS@3Sw+5;?br@?2
zo%|}pGPm-kCcjK%%7?M~H>>|XHUR2hqmMtphdojMI{p2J_=q+`!FfUFRDo1(oHQ#{
zZLH&$x{v8@f?7FmwHv5^V9d{-IDhuE5ms<wCY(EXpmg97l+}qdVUCFa6$x@x1)EQB
zceOgmtxEHS0vAq6wj#+mPPK-zuCUIcUu5^BwNQ9V%qXcr%$cPqCc?S9&E+cRt5U`;
zCdjkcw~rEfQAaeLro$P)WHuBi$xF-T!K(Nu;S;FFg+oU&=|UO)(erBp6(!oY%I*^i
z`zFxuSJL^1Q(e#%IFa)4_8xpCz5PG#tv?|Vjl=~~Xke!I`-dVs=|9hG1ubOHmVQfm
zyM6Oe!>DJr8%py@2Vy$;*z-f+wQq<uC;0vcZ%1;Sirzo=X(uq<%ScHR<U6vNP~!NG
zUJgzAo6V188k$LRLa=wziI|jDNO7xVeL06sBngrRM~9DUqhf7c4S9IQGDIm0G0A+?
z_+dqj1K+P}H9<azCQ`6Np!d24ds4o^CEA5PlB%yk(vZ_zNdj{QtgKUR#Et`w@p?5%
zmVlTh0WC5~P~T0H|Dx6~dt91m?Uld~=qTQfR2-QvQmB|d@*(3heesA$rj*s1<Fpkd
zUn7I3+Jul#7k3MB@PQKpsY)D=pY~Xgu!3T3XRvoZ$GIz*J>_!7TP&hXobWDfs%M9}
z)lgQB52Qj17K>au!nZLlD*SNmT=qSYzd<EOs7M7@3R1Z;nRzzxiFInAj%A=?kLz31
z55aVB`mkPH9vP)vmY!NED55-u=qbZ123%0uf@{*t<U?8CFNV79qC5+Z)B>Z(#H5a7
z!Fn}7M$J1Q&gPnT4@!6vYKs`_W$J?dD;D`oC!tP%7{k<f^sy%%o1+i?M;sVI42H6?
zpDN8%oE9qMary0PGkL4I%!ES22(p-aI*I9H8JI&6rD3gxae6t4N@JhE_mOv5Gn&gP
zbn3h6DR%IvGCO`1f6&}hLr`=FxxrMNKrF1yP*+pn-^J*>?rO%*dh@K`t2T;ES?#Ow
z2zZ5snVtvp-@m^YI9~r$^yb@f-HG<GGju2&Qi|o8)L9eaLDH^0Tx&^#h=yQYd0<p2
znG7eUIZy#9@8+Y>J~bXQUGe8(PV*j%oE?jh9g~F33_6Z1UVCM$K)o_R<1G1G;1dTg
zy0lXt@KKQL;SqFuLhw-rU+ze$e#x5KlsS;J?&RlA8i={`QkN|;HX2W+B^EW_BR;>7
zwbbk*K5D6dEp;(YU)yEPI7`{#0wDRs+Q%W*t}(I(JI$IMPQjvB5=L5h{?bu=>0=-D
z8b^w}dMu-2aj01&Z6aljC=+MA29fGN%Nk1mm^OvdzjfI`=^uNHpqK-1fip1+(-0dG
zoQf^}MHWwMr@HDt2Li7DZTk2eKCajQ4nCtzWczpOpU2-lB~SmB;)H?Brss~48DU}~
z8Re%geHP)&i|{+CKt7fHK~zB$?ygukF@}nI;^@_2{|PT)pRgc(N>mSQ`Bk`gbgC6c
zU+JPSICwZ*MK_8W`^5cS@a^ah0N=K7s1N0tkkxNC_6dJ7Rs6fx5wcKqn>`^ylEGdK
zzXX5f0VE;?M%czhZ0uZ!@8nCPD1lML8Bv}b`5g}!+Wg>4#mDALvS4`kxpt#?lA6h*
z?y9!o!P3D4^uuXfe7Im%gV4jW=)Vi*f^`NL4B^k`oQh|9%lw!>)M4!8QR=TfR3vfs
zK<SCS)ckqAYRIQ^lZQl@hHjZd1zq^XIChWnDSHkq9pYC<UsW+C?z1C~^qjj0S8b6a
znXWOdxq{Or>gpVd+u}|r%n?g@9<d7J+{rU@#*-JHJ#L&ka^b>@XU`uq5J57IK701U
zapU9}<HE(`=M0>JKJv`j7mh#O>zRG>rlM39nq(I}kYiej>F@_E62@yf{Are$$u=Em
zc(#)6Cf?3q+wPgBqmsM2xLVq7lNv82J^W?XyfpErg~rvqwkbi8^b^Bu9qO4h+Xy5%
zzFyGqzJU@&&hXv=Vka4C`^50@cmeM~q^cROpG(?{nGO`q%Dwv>I{8nGj(W<d`3mH|
zGHUwCx|E>nC*?*L1}6*I@~y9MTa9GPE7nF|Mk3SljxkW0tyYvt`|1{EyA;;jAG6BT
zdvJ*47~RzSypj(C<%w?Ukw{5Qz5dMxY;M>87dGrpP4?f}{wUOk3Z_Iy&QRtUrHk=L
zeD0n#3kAH{>>6l2$_-)Y(HvbRlJ<ug-s9Dy&t~B;TaVK4tVi|K1u>`oU<Xi@^#2v0
zD%n~}+C=w|F)kA(Nv&p=kBQ&n?G1V>Z}}K1&@!NW%;A#)X=K?^NvNZ76)E~Y5Rb|n
zx_3Yi3HmOt0s8#>=%eAoA$RLhbsHP+Y1M81QJzh}_ra$E*nq>3pvHCwg-Cs>K080J
z{1x~_xHXyUqk~hZNC&+o@-t)&eaqV)A2R13#a+BHU-6l0^uZ~d6eks!8&WHW3V}S&
zi6_RvN01u8rCAL4Pe>Z!Oh&kIHKPJgDf9|l7CO!t>DsL7+Vj)r#4}O3E94epFFUNc
zSTJ4Y#sz_DE)HbV{$A+gy7<O2c?{MP>Qz%?{a$Eo7Y;j!sAU&dnn%GGG~nx(d>M|%
z4x>*U&Ch$T8=w%Gaok}q(-Q@6)ih#Ta5-s6`?OWJy-d4U0TN?ePt1r1K!-TCgW+iv
zPth`jcdQx^p5u*Ey7d6kP+v8>LrK{@c*pP&#cPCd)sRctU=(c5;WB1bM_1pR`r7w2
zVJR8%uD;7mB*;%Px2N3`1eP`SlBWMQ^(<-q=`2~1?V8X)Eb3=R=GSCAF<bkutHR%R
zX7I9@@W<sl^<O0EgEJ9uGPmmtmUR0|8OzvX|4fwQcJ2BXcwPNtu$;Dsz5I^-^ZL!&
z^<PK3{FiInU+9`UDM5L)_L~r~3cPppin3&(G5p4Pd2#)BGk|Ajt9v!cV_ZpTl>)ST
zS&8-^RAq~R^>M~odOPqm{KboqBRYkwNCb~Z{*FiZ#-e@Il6NIySFoY7aWCBhu(<Fs
zQ?;!az!W;09!|FjulyOaYg*uMl`37z`c0&wlQ#b|i^a3WJax}v-W*`1jE6;%`Sn?o
zFkjS~=xfqu!<OMOsyN|Pt?9OIQz+@K&lH5grlybv>s>3DLP=P{bTzQDcrvUm$@qgO
zh&W`*B9rr+)Sf0iyk`Z|-JR3OOGa4<AP=u#W{;H$D`Gkost^;+r*!@)l+K?pXY@A|
zC|00t*8XFqrv?t8$1O;;{RBqI+M@c0P;X~YA#1<5k(MmxfsQDstEccWyd%ze!!>8=
zG|TP-Sn_<E*bEXyZqYc-5JW;Bd==E|3fNRXdG5+1Y^;0O_klYTdoDD?Zl7uJz7~00
zMaL*w#%}+OS5f5_rL1sS^;4ynAATeGW=s#f;I@0eYWj`c#*7tIXL|4Ooe>}^1#YuJ
zZq9=+Y_%C6N7FN&GHCSp&uOH?)Bok|li5-CTfY4E$6&lBoW$>1OCka0nVZKOld`iU
zM7EJi!?Ona^v%fw-GCY>9#o+0pF=jh%qvT6lSE(bqT08bZ@PwGHPc8H_C2>QrFVWT
zi<C8EZ1fQMZ!6juNK3k^A#&=cYCeg`9R;B&(|WLuq0lI{-%-aJH!ETTosUhC;Fp;U
z1)s9{5eO2ytOoYN9h82=w!X7KHL>vvbP?TVK~}ZQ`d8<xh5kVl(4))E8_O99;_6cL
z2eFOoS54fPj@p~Wis#gD9=TY}Bm9x};0HC!<6sx{6Bsi=vz?(bN?0VRikA)^IQVFB
z_CWE#p^FC(%sp~=?$G0}7%!bXbK>kP#&cMX3>@oc|JAaf%s3BXBt@2MSm>`f-=b%*
zE0jlp&|RDEx1;GLTbz`;F=wb`i~%FPc;x(<SB&>rExL4%I-%=Qi@vjn>rwGHt};e~
ze+|hFP5}Ehxv615modx`^R!yjBdm+rgO9VKo#nj!`Q8+W&)lTssg&bZIl)BO|17ip
zc(vlsXNi(*tw_VOR>Tc(Z#CC;17V<)QX21fAfi6avrcKeOaF=!1IEDY!#Vv%u=&t2
z$HU`&hFLL#_vvpqcgG6<7Fx$5y8EEv2B1~hJO3n0NDa4lNU`_H{``uP3<D*JZtsvV
zN$j2e&4#7~?9fsI?ATY254*n!`KrRD(KFA|RS&V<<6GKJSK7PAxkxHKgX~2zgTUO0
zwIgleadf57@gIhuL*JeMkARw7q`tUI4hP$Dq<}Xt&z!wT7n;Nw5Q9xdv@t6<;f8Aq
z;C{<X(8>0Dj?!3<Hr%jA*AncH!;iFUs%6y~#k1IWj3Z|SK$rJv`Aj`!%v}Ne*s7!s
zyWpIROnxDc3{6ND>fjk8JCN$yTt$X1j##=VaFg7uO=ImZ#MgQ6=bK&lPB6ZH0}&HG
zo@~eyk$6BGq5)k6BTq;2b_L1=p}Lc{WqrBnv=6o~`_<W5?H;Lja=<GC<cWg)6UOd%
zt&IPcMKRe{1`W?v#vwYmIwGRGSCNi!-_c74l0SB)2_)&~yIC{WL=W+D93xgUKR0gb
zN~W_G$hmE6Mi_huaxPQG>sv(A16Kczgzt2Emsp+D9wxm^uVB4;a+1J7e+8h6zu!xV
zzobo6j5itKub@n5jc$|ROXlc%uVI>$lF=Ko8Ll<Va9@)mZ#1j!8?catGbn}WS&{RZ
zz_@o}^ArV^vQQIJnkNoP%=n;fstM6!f{Wvfi}4DZ)A{jB!?Un?DBn7i3Ka8B@R_yU
zOleQgU;r)c>5oz>a3iTe#KdvkX3I$5vNS}YD3Q;a3Y$NLdWei4p)0t$OpJ^D#udk>
zSUr@P$df>5!^asCE?PrLME+&m$p|Fkjl#ZZfuCMHi^CFer_)rkhA+An5<t{tkk{Jt
zBs4|T+u1yM=oCZ1`LRczNb(ln*$)^Ay;y5NFU|b)Lc=q?JSLI^Nb8P*f}VvWX)Kc(
zdW8H+(pNr0R3y?@HWB`kZa$hZ_q=H<ALhmM-;L^*w(?1|8!2r?%$Wp`Ojr41u!e%=
z-F>JrS*5^weG<m9OzDaC<|bCD4R+_G?quA*n*m+BOZmr#7}RQ}hx0}<fLPdg#ow=G
zO*&hht4Z(d;z%Xu!~_S+x&5*8LP(YJPM34h51-`A(uJ6aWr&bfB4;wT#YqYw_|LNH
zqPRy4x&v0=oW$VjJ5me#*I7_XqgI8H{w%eybSUX#dMJtSY!XZ0YtU2_GA;>HB(0A`
zNO*Ok_DHb^Yu@7`9NMuj^`k2Jk^ih$%6p%kd*l%Qzx2rA$3E~14u+jLD@}yCxe(Py
z{JA-*v0D~l*E!=w4<%&~Km{UBoyJAPaX6Ol7c_R4X2_bFfw;p(J%uARay0d~cJ~T;
z<3MS)bf9Q9aMlQZ3w13$DskG5RaI{V6e@K_XY_FB5AG5j%ez2dscxzaeB*y*^qKC;
z-7U0;J$308LL}O5G(r@w{pTUP)@QqFK=|grrZ`dynfw%GQwx<$CXeDSxRUf;QXf+n
z(_NgIfZr6eiFXU?JLlG*x&tK!iV}P{S}EcMS8;DNNiyadlz5^s(m@DGm(fi)GlihP
z7=j?(qxnWZ(0~3#aae@{RVq~<l@!{Xsg4aXDfyd-QNeWqG`Xm?I5Qpl5Ok#(;yMIJ
zO$89+5A{M`3vul&ZzGEBBfj7p{o$%V+>g8HCwAtmYdh0Ky?=}0I$rg@ep_yDorX`m
zo8j<L^dRP)PwW4me)Mql1P(|5&DN6Hq`Qf6QElwwpuCk^b#Snp`Gs^m>j8xB#P%zE
z16+Zz%<e5kyExaVKwE^U$o4v&R}jHa>C*V_LIAT^cr^){t8c*s5?sHF@uKCW?-T~T
zoLsj}{{Y^PZTc<oJ4t5`Wgt1PS${v;4y^o3MPxIw(Pz+ZB(q*kTes}L4RRn*Fx^eC
zWv`W_6+p^ISk#kdPOgjY_QMJebOj-my(`zO1r{K<9OY9T<rS1rMDGm`zA(0t=|IpM
zvM}r1obkcke5kIC6tmrP#zil*J|qpxJF|XM>~J~*8{`H=liEnBNK5?`n%H}z?N54s
zP`26*HvLi5|KU>`Qj1Ce5k1A`QAX&8ZWoP(qxuz(AR+OOOfgDU(Bea)BWdU9nGCS%
zWTYlG)ndP&^d(*EC^{N&V>-eY+LZ67<29&6LCUX494sfKu0PeLrN1oLJsy-_&K`QB
z7CG54n52CivZ`7gdtY={;F&GI!DqV4Tq*-c!#W@8?1?r9E>2N)POXay@*S&&uOZRz
z`e-NYau0b2<+!gi(RTR+7c5(yGtt&q)BBz1b}$g=u;G`W>iCoqiZj1pHbN^oQ6EhR
z?bkVD?>rN2TNEh|u7{qsQCSU~>1?*~Ws<UzF;x)s5^gz|0bPkH;2OKuWxRk523lP?
z^cwiKBXFzbidnr(zhWwzF=ubN6Wy_ZZg3FH(tf-a?Vw0aD{PjRa9*w1xfbmtb=b!3
z7tJOb`snap@dS6N@{=;5vRrLIN@Fn?FK(b7Y)7qQ1aHc?d({FsH$(-HkNUbfx*fUQ
zfMQ?<p)X(B9Br;ym2eUL?YxR`7f1$g;7YP4o@@g;sunGY=I69vF_f(qYM0=xPP8oy
z7K(={L!=YEJN;uB2{*1+Mk&Ht!}5Runrb!ZM7sp!wO%%JFP-SVu3x&ksDFl};7-wR
zG6&iE-RU2?8b`O$8bEu#9hZadL^~R&lNch}28h?JPPD;lb)q|wi-h`)kYOmIf?SuX
z!;qc;dm;!-5OHdfAnb`~rx^xrIe8RqaBAqe7B<Os6Ln??u>63S5*}rPP`8VpFtHQ%
zlSggeLUw<7sYwKNn<(*F)>|@_RD&`{51C|lm1~Yq+c8*3Jj*STRls)Ju^2jS%Y27U
zcf_xi`EvRWgylQvFAM^wk_EWcqTXsi`J`uF1**i?Q|qJKiQhmutwj)G!)ZD}=k#s6
zqn&N5T?Ut6QxtJGTFiEOLMJYnHKKRQ3uExuFSVBg+ijIxZxI|dMQ`#1z(nN$)h{3+
zfR3$rUVP}lBY@{lZ=u@NJv~Xfe~;`Q%xe<K;`+OiV+9L51_Z(k?uBh&ux)`^0T<N*
zyK`!5bRTH4Sys%c7Ety{6LqdfxB1Jsn0u*gJBxM$|3JT+8ZMFkcE5@8=;BIMAAq`(
zzw-^N;4HUFQky_~9|}=nK0v(SH$a&|h}M_GHip=V*+Fvx{z42~2lc=NYb}5VV!41i
z$khNEw(B)M%8Ic#AB`qPA_*kZtXMU0@G@p#TULNErXb19%Vi6-NgHKK;)LAA^sYs>
z$H8LIYGXmjwCmAEt97MwCagqTg){;Cf)brp&7nNKGRnd)T98gy-0j_JpQL&HN5Q9c
zR?N{IsTU}iLT{v%Gr#ZCU<>L6vV)u&zq^GViof^N>(uokDexEU3-)*HZ`Ti_8gczm
z`mhj!tXJscbM*CR>EqAo<4@`19-R2E-%TH<=;K-Xc!NHc>EpdH$LmkhM}<Zx<0Fi=
z(a1QA%X1cEU$<YlW`E}zk9wU)yw0Ot<B_iMDA#y|Yux)a?)f_RdOfu7gRT?PpTzV}
z+uyeTx0w5HB2*>jPRHfN+&gOSe@K7v+;3NNe@4ySr@#I^eSDQZconp*&#PcFEsS>P
zG|ph%QFXv6WUT?z;t7c|`JO<p{zSY7q=P4#6}O?-hF`s_>!EskTdK!xa#U_~N2-5l
zCAx25eKghGSNsc%0|?rxiwgxvqfAzD#SaJ)Yk;cVax{MaDI&qY2Lzs4?|-aw9>N1v
z>>!3fdOl=54ZH`}(eCt@k(1bzk2OP8+=rtDE}lFNB~2-jh^o;c2?QE2Q{xJm6nwm!
zYg?O*;_RF;J$qo<*b_fMajU)3j9pzP%HI7h7B>9OpL^<mMHE~auz|2SHWAiGn~20A
zJ}3rBdRm!lBv33E5wOAP-$H+|k7Y3j?E;8z;}>b;_kgZ^EEHEJ(m8hei~L2F9|kcO
z;3e)pHCA+I>9lYtv3a@X<0u5&Q^<#ayYb#21Te>%Q8yauccI-7B>XDa95osS0)8}d
zo7HJ{c7-(C-H8I(qd7r#a0tj&1gtKKMPZk50`8CwxI-%hTz4l5aOZLY?(|v!PG*KB
s>2Fqahq70t++;aEsUEYbFzK|ajj#qY(Oo1fp->}}I<`K=>9^AV2X17h<^TWy


From 0426bc691350c04068dbb01500e9783573142900 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 10 Apr 2026 22:48:05 +0200
Subject: [PATCH 023/113] Remove accidentally commited sphinx-build outputs.

---
 .../_sphinx_javascript_frameworks_compat.js   | 123 ------------------
 doc/manual/build/man/_static/jquery.js        |   2 -
 2 files changed, 125 deletions(-)
 delete mode 100644 doc/manual/build/man/_static/_sphinx_javascript_frameworks_compat.js
 delete mode 100644 doc/manual/build/man/_static/jquery.js

diff --git a/doc/manual/build/man/_static/_sphinx_javascript_frameworks_compat.js b/doc/manual/build/man/_static/_sphinx_javascript_frameworks_compat.js
deleted file mode 100644
index 81415803e..000000000
--- a/doc/manual/build/man/_static/_sphinx_javascript_frameworks_compat.js
+++ /dev/null
@@ -1,123 +0,0 @@
-/* Compatability shim for jQuery and underscores.js.
- *
- * Copyright Sphinx contributors
- * Released under the two clause BSD licence
- */
-
-/**
- * small helper function to urldecode strings
- *
- * See https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/decodeURIComponent#Decoding_query_parameters_from_a_URL
- */
-jQuery.urldecode = function(x) {
-    if (!x) {
-        return x
-    }
-    return decodeURIComponent(x.replace(/\+/g, ' '));
-};
-
-/**
- * small helper function to urlencode strings
- */
-jQuery.urlencode = encodeURIComponent;
-
-/**
- * This function returns the parsed url parameters of the
- * current request. Multiple values per key are supported,
- * it will always return arrays of strings for the value parts.
- */
-jQuery.getQueryParameters = function(s) {
-    if (typeof s === 'undefined')
-        s = document.location.search;
-    var parts = s.substr(s.indexOf('?') + 1).split('&');
-    var result = {};
-    for (var i = 0; i < parts.length; i++) {
-        var tmp = parts[i].split('=', 2);
-        var key = jQuery.urldecode(tmp[0]);
-        var value = jQuery.urldecode(tmp[1]);
-        if (key in result)
-            result[key].push(value);
-        else
-            result[key] = [value];
-    }
-    return result;
-};
-
-/**
- * highlight a given string on a jquery object by wrapping it in
- * span elements with the given class name.
- */
-jQuery.fn.highlightText = function(text, className) {
-    function highlight(node, addItems) {
-        if (node.nodeType === 3) {
-            var val = node.nodeValue;
-            var pos = val.toLowerCase().indexOf(text);
-            if (pos >= 0 &&
-                !jQuery(node.parentNode).hasClass(className) &&
-                !jQuery(node.parentNode).hasClass("nohighlight")) {
-                var span;
-                var isInSVG = jQuery(node).closest("body, svg, foreignObject").is("svg");
-                if (isInSVG) {
-                    span = document.createElementNS("http://www.w3.org/2000/svg", "tspan");
-                } else {
-                    span = document.createElement("span");
-                    span.className = className;
-                }
-                span.appendChild(document.createTextNode(val.substr(pos, text.length)));
-                node.parentNode.insertBefore(span, node.parentNode.insertBefore(
-                    document.createTextNode(val.substr(pos + text.length)),
-                    node.nextSibling));
-                node.nodeValue = val.substr(0, pos);
-                if (isInSVG) {
-                    var rect = document.createElementNS("http://www.w3.org/2000/svg", "rect");
-                    var bbox = node.parentElement.getBBox();
-                    rect.x.baseVal.value = bbox.x;
-                    rect.y.baseVal.value = bbox.y;
-                    rect.width.baseVal.value = bbox.width;
-                    rect.height.baseVal.value = bbox.height;
-                    rect.setAttribute('class', className);
-                    addItems.push({
-                        "parent": node.parentNode,
-                        "target": rect});
-                }
-            }
-        }
-        else if (!jQuery(node).is("button, select, textarea")) {
-            jQuery.each(node.childNodes, function() {
-                highlight(this, addItems);
-            });
-        }
-    }
-    var addItems = [];
-    var result = this.each(function() {
-        highlight(this, addItems);
-    });
-    for (var i = 0; i < addItems.length; ++i) {
-        jQuery(addItems[i].parent).before(addItems[i].target);
-    }
-    return result;
-};
-
-/*
- * backward compatibility for jQuery.browser
- * This will be supported until firefox bug is fixed.
- */
-if (!jQuery.browser) {
-    jQuery.uaMatch = function(ua) {
-        ua = ua.toLowerCase();
-
-        var match = /(chrome)[ \/]([\w.]+)/.exec(ua) ||
-            /(webkit)[ \/]([\w.]+)/.exec(ua) ||
-            /(opera)(?:.*version|)[ \/]([\w.]+)/.exec(ua) ||
-            /(msie) ([\w.]+)/.exec(ua) ||
-            ua.indexOf("compatible") < 0 && /(mozilla)(?:.*? rv:([\w.]+)|)/.exec(ua) ||
-            [];
-
-        return {
-            browser: match[ 1 ] || "",
-            version: match[ 2 ] || "0"
-        };
-    };
-    jQuery.browser = {};
-    jQuery.browser[jQuery.uaMatch(navigator.userAgent).browser] = true;
-}
diff --git a/doc/manual/build/man/_static/jquery.js b/doc/manual/build/man/_static/jquery.js
deleted file mode 100644
index c4c6022f2..000000000
--- a/doc/manual/build/man/_static/jquery.js
+++ /dev/null
@@ -1,2 +0,0 @@
-/*! jQuery v3.6.0 | (c) OpenJS Foundation and other contributors | jquery.org/license */
-!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e||"function"==typeof e?n[o.call(e)]||"object":typeof e}var f="3.6.0",S=function(e,t){return new S.fn.init(e,t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n||0===t||"number"==typeof t&&0<t&&t-1 in e)}S.fn=S.prototype={jquery:f,constructor:S,length:0,toArray:function(){return s.call(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(s.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject||this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]||{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]||{},s++),"object"==typeof a||m(a)||(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(S.isPlainObject(r)||(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i||S.isPlainObject(n)?n:{},i=!1,a[t]=S.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},S.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e||"[object Object]"!==o.call(e))&&(!(t=r(e))||"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.nonce},n)},each:function(e,t){var n,r=0;if(p(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t||[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:y}),"function"==typeof Symbol&&(S.fn[Symbol.iterator]=t[Symbol.iterator]),S.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var d=function(n){var e,d,b,o,i,h,f,g,w,u,l,T,C,a,E,v,s,c,y,S="sizzle"+1*new Date,p=n.document,k=0,r=0,m=ue(),x=ue(),A=ue(),N=ue(),j=function(e,t){return e===t&&(l=!0),0},D={}.hasOwnProperty,t=[],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked|selected|async|autofocus|autoplay|controls|defer|disabled|hidden|ismap|loop|multiple|open|readonly|required|scoped",M="[\\x20\\t\\r\\n\\f]",I="(?:\\\\[\\da-fA-F]{1,6}"+M+"?|\\\\[^\\r\\n\\f]|[\\w-]|[^\0-\\x7f])+",W="\\["+M+"*("+I+")(?:"+M+"*([*^$|!~]?=)"+M+"*(?:'((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\"|("+I+"))|)"+M+"*\\]",F=":("+I+")(?:\\((('((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\")|((?:\\\\.|[^\\\\()[\\]]|"+W+")*)|.*)\\)|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+|((?:^|[^\\\\])(?:\\\\.)*)"+M+"+$","g"),_=new RegExp("^"+M+"*,"+M+"*"),z=new RegExp("^"+M+"*([>+~]|"+M+")"+M+"*"),U=new RegExp(M+"|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\("+M+"*(even|odd|(([+-]|)(\\d*)n|)"+M+"*(?:([+-]|)"+M+"*(\\d+)|))"+M+"*\\)|)","i"),bool:new RegExp("^(?:"+R+")$","i"),needsContext:new RegExp("^"+M+"*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\("+M+"*((?:-\\d)?\\d*)"+M+"*\\)|)(?=[^-]|$)","i")},Y=/HTML$/i,Q=/^(?:input|select|textarea|button)$/i,J=/^h\d$/i,K=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)|(\w+)|\.([\w-]+))$/,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t||(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10|55296,1023&n|56320))},re=/([\0-\x1f\x7f]|^-?\d)|^-$|[^\0-\x1f\x7f-\uFFFF\w-]/g,ie=function(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n||[],"string"!=typeof t||!t||1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e||C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)return n.push(a),n}else if(f&&(a=f.getElementById(i))&&y(e,a)&&a.id===i)return n.push(a),n}else{if(u[2])return H.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])&&d.getElementsByClassName&&e.getElementsByClassName)return H.apply(n,e.getElementsByClassName(i)),n}if(d.qsa&&!N[t+" "]&&(!v||!v.test(t))&&(1!==p||"object"!==e.nodeName.toLowerCase())){if(c=t,f=e,1===p&&(U.test(t)||z.test(t))){(f=ee.test(t)&&ye(e.parentNode)||e)===e&&d.scope||((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(e){N(t,!0)}finally{s===S&&e.removeAttribute("id")}}}return g(t.replace($,"$1"),e,n,r)}function ue(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===t}}function he(n){return function(e){var t=e.nodeName.toLowerCase();return("input"===t||"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t||e.isDisabled!==!t&&ae(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument||e).documentElement;return!Y.test(t||n&&n.nodeName||"HTML")},T=se.setDocument=function(e){var t,n,r=e?e.ownerDocument||e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e).appendChild(C.createElement("div")),"undefined"!=typeof e.querySelectorAll&&!e.querySelectorAll(":scope fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(function(e){return a.appendChild(e).id=S,!C.getElementsByName||!C.getElementsByName(S).length}),d.getById?(b.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n=t.getElementById(e);return n?[n]:[]}}):(b.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++])1===n.nodeType&&r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){var t;a.appendChild(e).innerHTML="<a id='"+S+"'></a><select id='"+S+"-\r\\' msallowcapture=''><option selected=''></option></select>",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[*^$]="+M+"*(?:''|\"\")"),e.querySelectorAll("[selected]").length||v.push("\\["+M+"*(?:value|"+R+")"),e.querySelectorAll("[id~="+S+"-]").length||v.push("~="),(t=C.createElement("input")).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length||v.push("\\["+M+"*name"+M+"*="+M+"*(?:''|\"\")"),e.querySelectorAll(":checked").length||v.push(":checked"),e.querySelectorAll("a#"+S+"+*").length||v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='disabled'></a><select disabled='disabled'><option/></select>";var t=C.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"*[*^$|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&v.push(":enabled",":disabled"),e.querySelectorAll("*,:x"),v.push(",.*:")})),(d.matchesSelector=K.test(c=a.matches||a.webkitMatchesSelector||a.mozMatchesSelector||a.oMatchesSelector||a.msMatchesSelector))&&ce(function(e){d.disconnectedMatch=c.call(e,"*"),c.call(e,"[s!='']:x"),s.push("!=",F)}),v=v.length&&new RegExp(v.join("|")),s=s.length&&new RegExp(s.join("|")),t=K.test(a.compareDocumentPosition),y=t||K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r||!(!r||1!==r.nodeType||!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},j=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPosition-!t.compareDocumentPosition;return n||(1&(n=(e.ownerDocument||e)==(t.ownerDocument||t)?e.compareDocumentPosition(t):1)||!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C||e.ownerDocument==p&&y(p,e)?-1:t==C||t.ownerDocument==p&&y(p,t)?1:u?P(u,e)-P(u,t):0:4&n?-1:1)}:function(e,t){if(e===t)return l=!0,0;var n,r=0,i=e.parentNode,o=t.parentNode,a=[e],s=[t];if(!i||!o)return e==C?-1:t==C?1:i?-1:o?1:u?P(u,e)-P(u,t):0;if(i===o)return pe(e,t);n=e;while(n=n.parentNode)a.unshift(n);n=t;while(n=n.parentNode)s.unshift(n);while(a[r]===s[r])r++;return r?pe(a[r],s[r]):a[r]==p?-1:s[r]==p?1:0}),C},se.matches=function(e,t){return se(e,null,null,t)},se.matchesSelector=function(e,t){if(T(e),d.matchesSelector&&E&&!N[t+" "]&&(!s||!s.test(t))&&(!v||!v.test(t)))try{var n=c.call(e,t);if(n||d.disconnectedMatch||e.document&&11!==e.document.nodeType)return n}catch(e){N(t,!0)}return 0<se(t,C,null,[e]).length},se.contains=function(e,t){return(e.ownerDocument||e)!=C&&T(e),y(e,t)},se.attr=function(e,t){(e.ownerDocument||e)!=C&&T(e);var n=b.attrHandle[t.toLowerCase()],r=n&&D.call(b.attrHandle,t.toLowerCase())?n(e,t,!E):void 0;return void 0!==r?r:d.attributes||!E?e.getAttribute(t):(r=e.getAttributeNode(t))&&r.specified?r.value:null},se.escape=function(e){return(e+"").replace(re,ie)},se.error=function(e){throw new Error("Syntax error, unrecognized expression: "+e)},se.uniqueSort=function(e){var t,n=[],r=0,i=0;if(l=!d.detectDuplicates,u=!d.sortStable&&e.slice(0),e.sort(j),l){while(t=e[i++])t===e[i]&&(r=n.push(i));while(r--)e.splice(n[r],1)}return u=null,e},o=se.getText=function(e){var t,n="",r=0,i=e.nodeType;if(i){if(1===i||9===i||11===i){if("string"==typeof e.textContent)return e.textContent;for(e=e.firstChild;e;e=e.nextSibling)n+=o(e)}else if(3===i||4===i)return e.nodeValue}else while(t=e[r++])n+=o(t);return n},(b=se.selectors={cacheLength:50,createPseudo:le,match:G,attrHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){return e[1]=e[1].replace(te,ne),e[3]=(e[3]||e[4]||e[5]||"").replace(te,ne),"~="===e[2]&&(e[3]=" "+e[3]+" "),e.slice(0,4)},CHILD:function(e){return e[1]=e[1].toLowerCase(),"nth"===e[1].slice(0,3)?(e[3]||se.error(e[0]),e[4]=+(e[4]?e[5]+(e[6]||1):2*("even"===e[3]||"odd"===e[3])),e[5]=+(e[7]+e[8]||"odd"===e[3])):e[3]&&se.error(e[0]),e},PSEUDO:function(e){var t,n=!e[6]&&e[2];return G.CHILD.test(e[0])?null:(e[3]?e[2]=e[4]||e[5]||"":n&&X.test(n)&&(t=h(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e.replace(te,ne).toLowerCase();return"*"===e?function(){return!0}:function(e){return e.nodeName&&e.nodeName.toLowerCase()===t}},CLASS:function(e){var t=m[e+" "];return t||(t=new RegExp("(^|"+M+")"+e+"("+M+"|$)"))&&m(e,function(e){return t.test("string"==typeof e.className&&e.className||"undefined"!=typeof e.getAttribute&&e.getAttribute("class")||"")})},ATTR:function(n,r,i){return function(e){var t=se.attr(e,n);return null==t?"!="===r:!r||(t+="","="===r?t===i:"!="===r?t!==i:"^="===r?i&&0===t.indexOf(i):"*="===r?i&&-1<t.indexOf(i):"$="===r?i&&t.slice(-i.length)===i:"~="===r?-1<(" "+t.replace(B," ")+" ").indexOf(i):"|="===r&&(t===i||t.slice(0,i.length+1)===i+"-"))}},CHILD:function(h,e,t,g,v){var y="nth"!==h.slice(0,3),m="last"!==h.slice(-4),x="of-type"===e;return 1===g&&0===v?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]||(a[S]={}))[a.uniqueID]||(o[a.uniqueID]={}))[h]||[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]||(d=s=0)||u.pop())if(1===a.nodeType&&++d&&a===e){i[h]=[k,s,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]||(a[S]={}))[a.uniqueID]||(o[a.uniqueID]={}))[h]||[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]||(d=s=0)||u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]||(a[S]={}))[a.uniqueID]||(o[a.uniqueID]={}))[h]=[k,d]),a===e))break;return(d-=v)===g||d%g==0&&0<=d/g}}},PSEUDO:function(e,o){var t,a=b.pseudos[e]||b.setFilters[e.toLowerCase()]||se.error("unsupported pseudo: "+e);return a[S]?a(o):1<a.length?(t=[e,e,"",o],b.setFilters.hasOwnProperty(e.toLowerCase())?le(function(e,t){var n,r=a(e,o),i=r.length;while(i--)e[n=P(e,r[i])]=!(t[n]=r[i])}):function(e){return a(e,0,t)}):a}},pseudos:{not:le(function(e){var r=[],i=[],s=f(e.replace($,"$1"));return s[S]?le(function(e,t,n,r){var i,o=s(e,null,r,[]),a=e.length;while(a--)(i=o[a])&&(e[a]=!(t[a]=i))}):function(e,t,n){return r[0]=e,s(r,null,n,i),r[0]=null,!i.pop()}}),has:le(function(t){return function(e){return 0<se(t,e).length}}),contains:le(function(t){return t=t.replace(te,ne),function(e){return-1<(e.textContent||o(e)).indexOf(t)}}),lang:le(function(n){return V.test(n||"")||se.error("unsupported lang: "+n),n=n.replace(te,ne).toLowerCase(),function(e){var t;do{if(t=E?e.lang:e.getAttribute("xml:lang")||e.getAttribute("lang"))return(t=t.toLowerCase())===n||0===t.indexOf(n+"-")}while((e=e.parentNode)&&1===e.nodeType);return!1}}),target:function(e){var t=n.location&&n.location.hash;return t&&t.slice(1)===e.id},root:function(e){return e===a},focus:function(e){return e===C.activeElement&&(!C.hasFocus||C.hasFocus())&&!!(e.type||e.href||~e.tabIndex)},enabled:ge(!1),disabled:ge(!0),checked:function(e){var t=e.nodeName.toLowerCase();return"input"===t&&!!e.checked||"option"===t&&!!e.selected},selected:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return J.test(e.nodeName)},input:function(e){return Q.test(e.nodeName)},button:function(e){var t=e.nodeName.toLowerCase();return"input"===t&&"button"===e.type||"button"===t},text:function(e){var t;return"input"===e.nodeName.toLowerCase()&&"text"===e.type&&(null==(t=e.getAttribute("type"))||"text"===t.toLowerCase())},first:ve(function(){return[0]}),last:ve(function(e,t){return[t-1]}),eq:ve(function(e,t,n){return[n<0?n+t:n]}),even:ve(function(e,t){for(var n=0;n<t;n+=2)e.push(n);return e}),odd:ve(function(e,t){for(var n=1;n<t;n+=2)e.push(n);return e}),lt:ve(function(e,t,n){for(var r=n<0?n+t:t<n?t:n;0<=--r;)e.push(r);return e}),gt:ve(function(e,t,n){for(var r=n<0?n+t:n;++r<t;)e.push(r);return e})}}).pseudos.nth=b.pseudos.eq,{radio:!0,checkbox:!0,file:!0,password:!0,image:!0})b.pseudos[e]=de(e);for(e in{submit:!0,reset:!0})b.pseudos[e]=he(e);function me(){}function xe(e){for(var t=0,n=e.length,r="";t<n;t++)r+=e[t].value;return r}function be(s,e,t){var u=e.dir,l=e.next,c=l||u,f=t&&"parentNode"===c,p=r++;return e.first?function(e,t,n){while(e=e[u])if(1===e.nodeType||f)return s(e,t,n);return!1}:function(e,t,n){var r,i,o,a=[k,p];if(n){while(e=e[u])if((1===e.nodeType||f)&&s(e,t,n))return!0}else while(e=e[u])if(1===e.nodeType||f)if(i=(o=e[S]||(e[S]={}))[e.uniqueID]||(o[e.uniqueID]={}),l&&l===e.nodeName.toLowerCase())e=e[u]||e;else{if((r=i[c])&&r[0]===k&&r[1]===p)return a[2]=r[2];if((i[c]=a)[2]=s(e,t,n))return!0}return!1}}function we(i){return 1<i.length?function(e,t,n){var r=i.length;while(r--)if(!i[r](e,t,n))return!1;return!0}:i[0]}function Te(e,t,n,r,i){for(var o,a=[],s=0,u=e.length,l=null!=t;s<u;s++)(o=e[s])&&(n&&!n(o,r,i)||(a.push(o),l&&t.push(s)));return a}function Ce(d,h,g,v,y,e){return v&&!v[S]&&(v=Ce(v)),y&&!y[S]&&(y=Ce(y,e)),le(function(e,t,n,r){var i,o,a,s=[],u=[],l=t.length,c=e||function(e,t,n){for(var r=0,i=t.length;r<i;r++)se(e,t[r],n);return n}(h||"*",n.nodeType?[n]:n,[]),f=!d||!e&&h?c:Te(c,s,d,n,r),p=g?y||(e?d:l||v)?[]:t:f;if(g&&g(f,p,n,r),v){i=Te(p,u),v(i,[],n,r),o=i.length;while(o--)(a=i[o])&&(p[u[o]]=!(f[u[o]]=a))}if(e){if(y||d){if(y){i=[],o=p.length;while(o--)(a=p[o])&&i.push(f[o]=a);y(null,p=[],i,r)}o=p.length;while(o--)(a=p[o])&&-1<(i=y?P(e,a):s[o])&&(e[i]=!(t[i]=a))}}else p=Te(p===t?p.splice(l,p.length):p),y?y(null,t,p,r):H.apply(t,p)})}function Ee(e){for(var i,t,n,r=e.length,o=b.relative[e[0].type],a=o||b.relative[" "],s=o?1:0,u=be(function(e){return e===i},a,!0),l=be(function(e){return-1<P(i,e)},a,!0),c=[function(e,t,n){var r=!o&&(n||t!==w)||((i=t).nodeType?u(e,t,n):l(e,t,n));return i=null,r}];s<r;s++)if(t=b.relative[e[s].type])c=[be(we(c),t)];else{if((t=b.filter[e[s].type].apply(null,e[s].matches))[S]){for(n=++s;n<r;n++)if(b.relative[e[n].type])break;return Ce(1<s&&we(c),1<s&&xe(e.slice(0,s-1).concat({value:" "===e[s-2].type?"*":""})).replace($,"$1"),t,s<n&&Ee(e.slice(s,n)),n<r&&Ee(e=e.slice(n)),n<r&&xe(e))}c.push(t)}return we(c)}return me.prototype=b.filters=b.pseudos,b.setFilters=new me,h=se.tokenize=function(e,t){var n,r,i,o,a,s,u,l=x[e+" "];if(l)return t?0:l.slice(0);a=e,s=[],u=b.preFilter;while(a){for(o in n&&!(r=_.exec(a))||(r&&(a=a.slice(r[0].length)||a),s.push(i=[])),n=!1,(r=z.exec(a))&&(n=r.shift(),i.push({value:n,type:r[0].replace($," ")}),a=a.slice(n.length)),b.filter)!(r=G[o].exec(a))||u[o]&&!(r=u[o](r))||(n=r.shift(),i.push({value:n,type:o,matches:r}),a=a.slice(n.length));if(!n)break}return t?a.length:a?se.error(e):x(e,s).slice(0)},f=se.compile=function(e,t){var n,v,y,m,x,r,i=[],o=[],a=A[e+" "];if(!a){t||(t=h(e)),n=t.length;while(n--)(a=Ee(t[n]))[S]?i.push(a):o.push(a);(a=A(e,(v=o,m=0<(y=i).length,x=0<v.length,r=function(e,t,n,r,i){var o,a,s,u=0,l="0",c=e&&[],f=[],p=w,d=e||x&&b.find.TAG("*",i),h=k+=null==p?1:Math.random()||.1,g=d.length;for(i&&(w=t==C||t||i);l!==g&&null!=(o=d[l]);l++){if(x&&o){a=0,t||o.ownerDocument==C||(T(o),n=!E);while(s=v[a++])if(s(o,t||C,n)){r.push(o);break}i&&(k=h)}m&&((o=!s&&o)&&u--,e&&c.push(o))}if(u+=l,m&&l!==u){a=0;while(s=y[a++])s(c,f,t,n);if(e){if(0<u)while(l--)c[l]||f[l]||(f[l]=q.call(r));f=Te(f)}H.apply(r,f),i&&!e&&0<f.length&&1<u+y.length&&se.uniqueSort(r)}return i&&(k=h,w=p),c},m?le(r):r))).selector=e}return a},g=se.select=function(e,t,n,r){var i,o,a,s,u,l="function"==typeof e&&e,c=!r&&h(e=l.selector||e);if(n=n||[],1===c.length){if(2<(o=c[0]=c[0].slice(0)).length&&"ID"===(a=o[0]).type&&9===t.nodeType&&E&&b.relative[o[1].type]){if(!(t=(b.find.ID(a.matches[0].replace(te,ne),t)||[])[0]))return n;l&&(t=t.parentNode),e=e.slice(o.shift().value.length)}i=G.needsContext.test(e)?0:o.length;while(i--){if(a=o[i],b.relative[s=a.type])break;if((u=b.find[s])&&(r=u(a.matches[0].replace(te,ne),ee.test(o[0].type)&&ye(t.parentNode)||t))){if(o.splice(i,1),!(e=r.length&&xe(o)))return H.apply(n,r),n;break}}}return(l||f(e,c))(r,t,!E,n,!t||ee.test(e)&&ye(t.parentNode)||t),n},d.sortStable=S.split("").sort(j).join("")===S,d.detectDuplicates=!!l,T(),d.sortDetached=ce(function(e){return 1&e.compareDocumentPosition(C.createElement("fieldset"))}),ce(function(e){return e.innerHTML="<a href='#'></a>","#"===e.firstChild.getAttribute("href")})||fe("type|href|height|width",function(e,t,n){if(!n)return e.getAttribute(t,"type"===t.toLowerCase()?1:2)}),d.attributes&&ce(function(e){return e.innerHTML="<input/>",e.firstChild.setAttribute("value",""),""===e.firstChild.getAttribute("value")})||fe("value",function(e,t,n){if(!n&&"input"===e.nodeName.toLowerCase())return e.defaultValue}),ce(function(e){return null==e.getAttribute("disabled")})||fe(R,function(e,t,n){var r;if(!n)return!0===e[t]?t.toLowerCase():(r=e.getAttributeNode(t))&&r.specified?r.value:null}),se}(C);S.find=d,S.expr=d.selectors,S.expr[":"]=S.expr.pseudos,S.uniqueSort=S.unique=d.uniqueSort,S.text=d.getText,S.isXMLDoc=d.isXML,S.contains=d.contains,S.escapeSelector=d.escape;var h=function(e,t,n){var r=[],i=void 0!==n;while((e=e[t])&&9!==e.nodeType)if(1===e.nodeType){if(i&&S(e).is(n))break;r.push(e)}return r},T=function(e,t){for(var n=[];e;e=e.nextSibling)1===e.nodeType&&e!==t&&n.push(e);return n},k=S.expr.match.needsContext;function A(e,t){return e.nodeName&&e.nodeName.toLowerCase()===t.toLowerCase()}var N=/^<([a-z][^\/\0>:\x20\t\r\n\f]*)[\x20\t\r\n\f]*\/?>(?:<\/\1>|)$/i;function j(e,n,r){return m(n)?S.grep(e,function(e,t){return!!n.call(e,t,e)!==r}):n.nodeType?S.grep(e,function(e){return e===n!==r}):"string"!=typeof n?S.grep(e,function(e){return-1<i.call(n,e)!==r}):S.filter(n,e,r)}S.filter=function(e,t,n){var r=t[0];return n&&(e=":not("+e+")"),1===t.length&&1===r.nodeType?S.find.matchesSelector(r,e)?[r]:[]:S.find.matches(e,S.grep(t,function(e){return 1===e.nodeType}))},S.fn.extend({find:function(e){var t,n,r=this.length,i=this;if("string"!=typeof e)return this.pushStack(S(e).filter(function(){for(t=0;t<r;t++)if(S.contains(i[t],this))return!0}));for(n=this.pushStack([]),t=0;t<r;t++)S.find(e,i[t],n);return 1<r?S.uniqueSort(n):n},filter:function(e){return this.pushStack(j(this,e||[],!1))},not:function(e){return this.pushStack(j(this,e||[],!0))},is:function(e){return!!j(this,"string"==typeof e&&k.test(e)?S(e):e||[],!1).length}});var D,q=/^(?:\s*(<[\w\W]+>)[^>]*|#([\w-]+))$/;(S.fn.init=function(e,t,n){var r,i;if(!e)return this;if(n=n||D,"string"==typeof e){if(!(r="<"===e[0]&&">"===e[e.length-1]&&3<=e.length?[null,e,null]:q.exec(e))||!r[1]&&t)return!t||t.jquery?(t||n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof S?t[0]:t,S.merge(this,S.parseHTML(r[1],t&&t.nodeType?t.ownerDocument||t:E,!0)),N.test(r[1])&&S.isPlainObject(t))for(r in t)m(this[r])?this[r](t[r]):this.attr(r,t[r]);return this}return(i=E.getElementById(r[2]))&&(this[0]=i,this.length=1),this}return e.nodeType?(this[0]=e,this.length=1,this):m(e)?void 0!==n.ready?n.ready(e):e(S):S.makeArray(e,this)}).prototype=S.fn,D=S(E);var L=/^(?:parents|prev(?:Until|All))/,H={children:!0,contents:!0,next:!0,prev:!0};function O(e,t){while((e=e[t])&&1!==e.nodeType);return e}S.fn.extend({has:function(e){var t=S(e,this),n=t.length;return this.filter(function(){for(var e=0;e<n;e++)if(S.contains(this,t[e]))return!0})},closest:function(e,t){var n,r=0,i=this.length,o=[],a="string"!=typeof e&&S(e);if(!k.test(e))for(;r<i;r++)for(n=this[r];n&&n!==t;n=n.parentNode)if(n.nodeType<11&&(a?-1<a.index(n):1===n.nodeType&&S.find.matchesSelector(n,e))){o.push(n);break}return this.pushStack(1<o.length?S.uniqueSort(o):o)},index:function(e){return e?"string"==typeof e?i.call(S(e),this[0]):i.call(this,e.jquery?e[0]:e):this[0]&&this[0].parentNode?this.first().prevAll().length:-1},add:function(e,t){return this.pushStack(S.uniqueSort(S.merge(this.get(),S(e,t))))},addBack:function(e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}}),S.each({parent:function(e){var t=e.parentNode;return t&&11!==t.nodeType?t:null},parents:function(e){return h(e,"parentNode")},parentsUntil:function(e,t,n){return h(e,"parentNode",n)},next:function(e){return O(e,"nextSibling")},prev:function(e){return O(e,"previousSibling")},nextAll:function(e){return h(e,"nextSibling")},prevAll:function(e){return h(e,"previousSibling")},nextUntil:function(e,t,n){return h(e,"nextSibling",n)},prevUntil:function(e,t,n){return h(e,"previousSibling",n)},siblings:function(e){return T((e.parentNode||{}).firstChild,e)},children:function(e){return T(e.firstChild)},contents:function(e){return null!=e.contentDocument&&r(e.contentDocument)?e.contentDocument:(A(e,"template")&&(e=e.content||e),S.merge([],e.childNodes))}},function(r,i){S.fn[r]=function(e,t){var n=S.map(this,i,e);return"Until"!==r.slice(-5)&&(t=e),t&&"string"==typeof t&&(n=S.filter(t,n)),1<this.length&&(H[r]||S.uniqueSort(n),L.test(r)&&n.reverse()),this.pushStack(n)}});var P=/[^\x20\t\r\n\f]+/g;function R(e){return e}function M(e){throw e}function I(e,t,n,r){var i;try{e&&m(i=e.promise)?i.call(e).done(t).fail(n):e&&m(i=e.then)?i.call(e,t,n):t.apply(void 0,[e].slice(r))}catch(e){n.apply(void 0,[e])}}S.Callbacks=function(r){var e,n;r="string"==typeof r?(e=r,n={},S.each(e.match(P)||[],function(e,t){n[t]=!0}),n):S.extend({},r);var i,t,o,a,s=[],u=[],l=-1,c=function(){for(a=a||r.once,o=i=!0;u.length;l=-1){t=u.shift();while(++l<s.length)!1===s[l].apply(t[0],t[1])&&r.stopOnFalse&&(l=s.length,t=!1)}r.memory||(t=!1),i=!1,a&&(s=t?[]:"")},f={add:function(){return s&&(t&&!i&&(l=s.length-1,u.push(t)),function n(e){S.each(e,function(e,t){m(t)?r.unique&&f.has(t)||s.push(t):t&&t.length&&"string"!==w(t)&&n(t)})}(arguments),t&&!i&&c()),this},remove:function(){return S.each(arguments,function(e,t){var n;while(-1<(n=S.inArray(t,s,n)))s.splice(n,1),n<=l&&l--}),this},has:function(e){return e?-1<S.inArray(e,s):0<s.length},empty:function(){return s&&(s=[]),this},disable:function(){return a=u=[],s=t="",this},disabled:function(){return!s},lock:function(){return a=u=[],t||i||(s=t=""),this},locked:function(){return!!a},fireWith:function(e,t){return a||(t=[e,(t=t||[]).slice?t.slice():t],u.push(t),i||c()),this},fire:function(){return f.fireWith(this,arguments),this},fired:function(){return!!o}};return f},S.extend({Deferred:function(e){var o=[["notify","progress",S.Callbacks("memory"),S.Callbacks("memory"),2],["resolve","done",S.Callbacks("once memory"),S.Callbacks("once memory"),0,"resolved"],["reject","fail",S.Callbacks("once memory"),S.Callbacks("once memory"),1,"rejected"]],i="pending",a={state:function(){return i},always:function(){return s.done(arguments).fail(arguments),this},"catch":function(e){return a.then(null,e)},pipe:function(){var i=arguments;return S.Deferred(function(r){S.each(o,function(e,t){var n=m(i[t[4]])&&i[t[4]];s[t[1]](function(){var e=n&&n.apply(this,arguments);e&&m(e.promise)?e.promise().progress(r.notify).done(r.resolve).fail(r.reject):r[t[0]+"With"](this,n?[e]:arguments)})}),i=null}).promise()},then:function(t,n,r){var u=0;function l(i,o,a,s){return function(){var n=this,r=arguments,e=function(){var e,t;if(!(i<u)){if((e=a.apply(n,r))===o.promise())throw new TypeError("Thenable self-resolution");t=e&&("object"==typeof e||"function"==typeof e)&&e.then,m(t)?s?t.call(e,l(u,o,R,s),l(u,o,M,s)):(u++,t.call(e,l(u,o,R,s),l(u,o,M,s),l(u,o,R,o.notifyWith))):(a!==R&&(n=void 0,r=[e]),(s||o.resolveWith)(n,r))}},t=s?e:function(){try{e()}catch(e){S.Deferred.exceptionHook&&S.Deferred.exceptionHook(e,t.stackTrace),u<=i+1&&(a!==M&&(n=void 0,r=[e]),o.rejectWith(n,r))}};i?t():(S.Deferred.getStackHook&&(t.stackTrace=S.Deferred.getStackHook()),C.setTimeout(t))}}return S.Deferred(function(e){o[0][3].add(l(0,e,m(r)?r:R,e.notifyWith)),o[1][3].add(l(0,e,m(t)?t:R)),o[2][3].add(l(0,e,m(n)?n:M))}).promise()},promise:function(e){return null!=e?S.extend(e,a):a}},s={};return S.each(o,function(e,t){var n=t[2],r=t[5];a[t[1]]=n.add,r&&n.add(function(){i=r},o[3-e][2].disable,o[3-e][3].disable,o[0][2].lock,o[0][3].lock),n.add(t[3].fire),s[t[0]]=function(){return s[t[0]+"With"](this===s?void 0:this,arguments),this},s[t[0]+"With"]=n.fireWith}),a.promise(s),e&&e.call(s,s),s},when:function(e){var n=arguments.length,t=n,r=Array(t),i=s.call(arguments),o=S.Deferred(),a=function(t){return function(e){r[t]=this,i[t]=1<arguments.length?s.call(arguments):e,--n||o.resolveWith(r,i)}};if(n<=1&&(I(e,o.done(a(t)).resolve,o.reject,!n),"pending"===o.state()||m(i[t]&&i[t].then)))return o.then();while(t--)I(i[t],a(t),o.reject);return o.promise()}});var W=/^(Eval|Internal|Range|Reference|Syntax|Type|URI)Error$/;S.Deferred.exceptionHook=function(e,t){C.console&&C.console.warn&&e&&W.test(e.name)&&C.console.warn("jQuery.Deferred exception: "+e.message,e.stack,t)},S.readyException=function(e){C.setTimeout(function(){throw e})};var F=S.Deferred();function B(){E.removeEventListener("DOMContentLoaded",B),C.removeEventListener("load",B),S.ready()}S.fn.ready=function(e){return F.then(e)["catch"](function(e){S.readyException(e)}),this},S.extend({isReady:!1,readyWait:1,ready:function(e){(!0===e?--S.readyWait:S.isReady)||(S.isReady=!0)!==e&&0<--S.readyWait||F.resolveWith(E,[S])}}),S.ready.then=F.then,"complete"===E.readyState||"loading"!==E.readyState&&!E.documentElement.doScroll?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)||(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){return t.toUpperCase()}function X(e){return e.replace(_,"ms-").replace(z,U)}var V=function(e){return 1===e.nodeType||9===e.nodeType||!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t||(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value:t,configurable:!0}))),t},set:function(e,t,n){var r,i=this.cache(e);if("string"==typeof t)i[X(t)]=n;else for(r in t)i[X(r)]=t[r];return i},get:function(e,t){return void 0===t?this.cache(e):e[this.expando]&&e[this.expando][X(t)]},access:function(e,t,n){return void 0===t||t&&"string"==typeof t&&void 0===n?this.get(e,t):(this.set(e,t,n),void 0!==n?n:t)},remove:function(e,t){var n,r=e[this.expando];if(void 0!==r){if(void 0!==t){n=(t=Array.isArray(t)?t.map(X):(t=X(t))in r?[t]:t.match(P)||[]).length;while(n--)delete r[t[n]]}(void 0===t||S.isEmptyObject(r))&&(e.nodeType?e[this.expando]=void 0:delete e[this.expando])}},hasData:function(e){var t=e[this.expando];return void 0!==t&&!S.isEmptyObject(t)}};var Y=new G,Q=new G,J=/^(?:\{[\w\W]*\}|\[[\w\W]*\])$/,K=/[A-Z]/g;function Z(e,t,n){var r,i;if(void 0===n&&1===e.nodeType)if(r="data-"+t.replace(K,"-$&").toLowerCase(),"string"==typeof(n=e.getAttribute(r))){try{n="true"===(i=n)||"false"!==i&&("null"===i?null:i===+i+""?+i:J.test(i)?JSON.parse(i):i)}catch(e){}Q.set(e,t,n)}else n=void 0;return n}S.extend({hasData:function(e){return Q.hasData(e)||Y.hasData(e)},data:function(e,t,n){return Q.access(e,t,n)},removeData:function(e,t){Q.remove(e,t)},_data:function(e,t,n){return Y.access(e,t,n)},_removeData:function(e,t){Y.remove(e,t)}}),S.fn.extend({data:function(n,e){var t,r,i,o=this[0],a=o&&o.attributes;if(void 0===n){if(this.length&&(i=Q.get(o),1===o.nodeType&&!Y.get(o,"hasDataAttrs"))){t=a.length;while(t--)a[t]&&0===(r=a[t].name).indexOf("data-")&&(r=X(r.slice(5)),Z(o,r,i[r]));Y.set(o,"hasDataAttrs",!0)}return i}return"object"==typeof n?this.each(function(){Q.set(this,n)}):$(this,function(e){var t;if(o&&void 0===e)return void 0!==(t=Q.get(o,n))?t:void 0!==(t=Z(o,n))?t:void 0;this.each(function(){Q.set(this,n,e)})},null,e,1<arguments.length,null,!0)},removeData:function(e){return this.each(function(){Q.remove(this,e)})}}),S.extend({queue:function(e,t,n){var r;if(e)return t=(t||"fx")+"queue",r=Y.get(e,t),n&&(!r||Array.isArray(n)?r=Y.access(e,t,S.makeArray(n)):r.push(n)),r||[]},dequeue:function(e,t){t=t||"fx";var n=S.queue(e,t),r=n.length,i=n.shift(),o=S._queueHooks(e,t);"inprogress"===i&&(i=n.shift(),r--),i&&("fx"===t&&n.unshift("inprogress"),delete o.stop,i.call(e,function(){S.dequeue(e,t)},o)),!r&&o&&o.empty.fire()},_queueHooks:function(e,t){var n=t+"queueHooks";return Y.get(e,n)||Y.access(e,n,{empty:S.Callbacks("once memory").add(function(){Y.remove(e,[t+"queue",n])})})}}),S.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<e?S.queue(this[0],t):void 0===n?this:this.each(function(){var e=S.queue(this,t,n);S._queueHooks(this,t),"fx"===t&&"inprogress"!==e[0]&&S.dequeue(this,t)})},dequeue:function(e){return this.each(function(){S.dequeue(this,e)})},clearQueue:function(e){return this.queue(e||"fx",[])},promise:function(e,t){var n,r=1,i=S.Deferred(),o=this,a=this.length,s=function(){--r||i.resolveWith(o,[o])};"string"!=typeof e&&(t=e,e=void 0),e=e||"fx";while(a--)(n=Y.get(o[a],e+"queueHooks"))&&n.empty&&(r++,n.empty.add(s));return s(),i.promise(t)}});var ee=/[+-]?(?:\d*\.|)\d+(?:[eE][+-]?\d+|)/.source,te=new RegExp("^(?:([+-])=|)("+ee+")([a-z%]*)$","i"),ne=["Top","Right","Bottom","Left"],re=E.documentElement,ie=function(e){return S.contains(e.ownerDocument,e)},oe={composed:!0};re.getRootNode&&(ie=function(e){return S.contains(e.ownerDocument,e)||e.getRootNode(oe)===e.ownerDocument});var ae=function(e,t){return"none"===(e=t||e).style.display||""===e.style.display&&ie(e)&&"none"===S.css(e,"display")};function se(e,t,n,r){var i,o,a=20,s=r?function(){return r.cur()}:function(){return S.css(e,t,"")},u=s(),l=n&&n[3]||(S.cssNumber[t]?"":"px"),c=e.nodeType&&(S.cssNumber[t]||"px"!==l&&+u)&&te.exec(S.css(e,t));if(c&&c[3]!==l){u/=2,l=l||c[3],c=+u||1;while(a--)S.style(e,t,c+l),(1-o)*(1-(o=s()/u||.5))<=0&&(a=0),c/=o;c*=2,S.style(e,t,c+l),n=n||[]}return n&&(c=+c||+u||0,i=n[1]?c+(n[1]+1)*n[2]:+n[2],r&&(r.unit=l,r.start=c,r.end=i)),i}var ue={};function le(e,t){for(var n,r,i,o,a,s,u,l=[],c=0,f=e.length;c<f;c++)(r=e[c]).style&&(n=r.style.display,t?("none"===n&&(l[c]=Y.get(r,"display")||null,l[c]||(r.style.display="")),""===r.style.display&&ae(r)&&(l[c]=(u=a=o=void 0,a=(i=r).ownerDocument,s=i.nodeName,(u=ue[s])||(o=a.body.appendChild(a.createElement(s)),u=S.css(o,"display"),o.parentNode.removeChild(o),"none"===u&&(u="block"),ue[s]=u)))):"none"!==n&&(l[c]="none",Y.set(r,"display",n)));for(c=0;c<f;c++)null!=l[c]&&(e[c].style.display=l[c]);return e}S.fn.extend({show:function(){return le(this,!0)},hide:function(){return le(this)},toggle:function(e){return"boolean"==typeof e?e?this.show():this.hide():this.each(function(){ae(this)?S(this).show():S(this).hide()})}});var ce,fe,pe=/^(?:checkbox|radio)$/i,de=/<([a-z][^\/\0>\x20\t\r\n\f]*)/i,he=/^$|^module$|\/(?:java|ecma)script/i;ce=E.createDocumentFragment().appendChild(E.createElement("div")),(fe=E.createElement("input")).setAttribute("type","radio"),fe.setAttribute("checked","checked"),fe.setAttribute("name","t"),ce.appendChild(fe),y.checkClone=ce.cloneNode(!0).cloneNode(!0).lastChild.checked,ce.innerHTML="<textarea>x</textarea>",y.noCloneChecked=!!ce.cloneNode(!0).lastChild.defaultValue,ce.innerHTML="<option></option>",y.option=!!ce.lastChild;var ge={thead:[1,"<table>","</table>"],col:[2,"<table><colgroup>","</colgroup></table>"],tr:[2,"<table><tbody>","</tbody></table>"],td:[3,"<table><tbody><tr>","</tr></tbody></table>"],_default:[0,"",""]};function ve(e,t){var n;return n="undefined"!=typeof e.getElementsByTagName?e.getElementsByTagName(t||"*"):"undefined"!=typeof e.querySelectorAll?e.querySelectorAll(t||"*"):[],void 0===t||t&&A(e,t)?S.merge([e],n):n}function ye(e,t){for(var n=0,r=e.length;n<r;n++)Y.set(e[n],"globalEval",!t||Y.get(t[n],"globalEval"))}ge.tbody=ge.tfoot=ge.colgroup=ge.caption=ge.thead,ge.th=ge.td,y.option||(ge.optgroup=ge.option=[1,"<select multiple='multiple'>","</select>"]);var me=/<|&#?\w+;/;function xe(e,t,n,r,i){for(var o,a,s,u,l,c,f=t.createDocumentFragment(),p=[],d=0,h=e.length;d<h;d++)if((o=e[d])||0===o)if("object"===w(o))S.merge(p,o.nodeType?[o]:o);else if(me.test(o)){a=a||f.appendChild(t.createElement("div")),s=(de.exec(o)||["",""])[1].toLowerCase(),u=ge[s]||ge._default,a.innerHTML=u[1]+S.htmlPrefilter(o)+u[2],c=u[0];while(c--)a=a.lastChild;S.merge(p,a.childNodes),(a=f.firstChild).textContent=""}else p.push(t.createTextNode(o));f.textContent="",d=0;while(o=p[d++])if(r&&-1<S.inArray(o,r))i&&i.push(o);else if(l=ie(o),a=ve(f.appendChild(o),"script"),l&&ye(a),n){c=0;while(o=a[c++])he.test(o.type||"")&&n.push(o)}return f}var be=/^([^.]*)(?:\.(.+)|)/;function we(){return!0}function Te(){return!1}function Ce(e,t){return e===function(){try{return E.activeElement}catch(e){}}()==("focus"===t)}function Ee(e,t,n,r,i,o){var a,s;if("object"==typeof t){for(s in"string"!=typeof n&&(r=r||n,n=void 0),t)Ee(e,s,n,r,t[s],o);return e}if(null==r&&null==i?(i=n,r=n=void 0):null==i&&("string"==typeof n?(i=r,r=void 0):(i=r,r=n,n=void 0)),!1===i)i=Te;else if(!i)return e;return 1===o&&(a=i,(i=function(e){return S().off(e),a.apply(this,arguments)}).guid=a.guid||(a.guid=S.guid++)),e.each(function(){S.event.add(this,t,i,r,n)})}function Se(e,i,o){o?(Y.set(e,i,!1),S.event.add(e,i,{namespace:!1,handler:function(e){var t,n,r=Y.get(this,i);if(1&e.isTrigger&&this[i]){if(r.length)(S.event.special[i]||{}).delegateType&&e.stopPropagation();else if(r=s.call(arguments),Y.set(this,i,r),t=o(this,i),this[i](),r!==(n=Y.get(this,i))||t?Y.set(this,i,!1):n={},r!==n)return e.stopImmediatePropagation(),e.preventDefault(),n&&n.value}else r.length&&(Y.set(this,i,{value:S.event.trigger(S.extend(r[0],S.Event.prototype),r.slice(1),this)}),e.stopImmediatePropagation())}})):void 0===Y.get(e,i)&&S.event.add(e,i,we)}S.event={global:{},add:function(t,e,n,r,i){var o,a,s,u,l,c,f,p,d,h,g,v=Y.get(t);if(V(t)){n.handler&&(n=(o=n).handler,i=o.selector),i&&S.find.matchesSelector(re,i),n.guid||(n.guid=S.guid++),(u=v.events)||(u=v.events=Object.create(null)),(a=v.handle)||(a=v.handle=function(e){return"undefined"!=typeof S&&S.event.triggered!==e.type?S.event.dispatch.apply(t,arguments):void 0}),l=(e=(e||"").match(P)||[""]).length;while(l--)d=g=(s=be.exec(e[l])||[])[1],h=(s[2]||"").split(".").sort(),d&&(f=S.event.special[d]||{},d=(i?f.delegateType:f.bindType)||d,f=S.event.special[d]||{},c=S.extend({type:d,origType:g,data:r,handler:n,guid:n.guid,selector:i,needsContext:i&&S.expr.match.needsContext.test(i),namespace:h.join(".")},o),(p=u[d])||((p=u[d]=[]).delegateCount=0,f.setup&&!1!==f.setup.call(t,r,h,a)||t.addEventListener&&t.addEventListener(d,a)),f.add&&(f.add.call(t,c),c.handler.guid||(c.handler.guid=n.guid)),i?p.splice(p.delegateCount++,0,c):p.push(c),S.event.global[d]=!0)}},remove:function(e,t,n,r,i){var o,a,s,u,l,c,f,p,d,h,g,v=Y.hasData(e)&&Y.get(e);if(v&&(u=v.events)){l=(t=(t||"").match(P)||[""]).length;while(l--)if(d=g=(s=be.exec(t[l])||[])[1],h=(s[2]||"").split(".").sort(),d){f=S.event.special[d]||{},p=u[d=(r?f.delegateType:f.bindType)||d]||[],s=s[2]&&new RegExp("(^|\\.)"+h.join("\\.(?:.*\\.|)")+"(\\.|$)"),a=o=p.length;while(o--)c=p[o],!i&&g!==c.origType||n&&n.guid!==c.guid||s&&!s.test(c.namespace)||r&&r!==c.selector&&("**"!==r||!c.selector)||(p.splice(o,1),c.selector&&p.delegateCount--,f.remove&&f.remove.call(e,c));a&&!p.length&&(f.teardown&&!1!==f.teardown.call(e,h,v.handle)||S.removeEvent(e,d,v.handle),delete u[d])}else for(d in u)S.event.remove(e,d+t[l],n,r,!0);S.isEmptyObject(u)&&Y.remove(e,"handle events")}},dispatch:function(e){var t,n,r,i,o,a,s=new Array(arguments.length),u=S.event.fix(e),l=(Y.get(this,"events")||Object.create(null))[u.type]||[],c=S.event.special[u.type]||{};for(s[0]=u,t=1;t<arguments.length;t++)s[t]=arguments[t];if(u.delegateTarget=this,!c.preDispatch||!1!==c.preDispatch.call(this,u)){a=S.event.handlers.call(this,u,l),t=0;while((i=a[t++])&&!u.isPropagationStopped()){u.currentTarget=i.elem,n=0;while((o=i.handlers[n++])&&!u.isImmediatePropagationStopped())u.rnamespace&&!1!==o.namespace&&!u.rnamespace.test(o.namespace)||(u.handleObj=o,u.data=o.data,void 0!==(r=((S.event.special[o.origType]||{}).handle||o.handler).apply(i.elem,s))&&!1===(u.result=r)&&(u.preventDefault(),u.stopPropagation()))}return c.postDispatch&&c.postDispatch.call(this,u),u.result}},handlers:function(e,t){var n,r,i,o,a,s=[],u=t.delegateCount,l=e.target;if(u&&l.nodeType&&!("click"===e.type&&1<=e.button))for(;l!==this;l=l.parentNode||this)if(1===l.nodeType&&("click"!==e.type||!0!==l.disabled)){for(o=[],a={},n=0;n<u;n++)void 0===a[i=(r=t[n]).selector+" "]&&(a[i]=r.needsContext?-1<S(i,this).index(l):S.find(i,this,null,[l]).length),a[i]&&o.push(r);o.length&&s.push({elem:l,handlers:o})}return l=this,u<t.length&&s.push({elem:l,handlers:t.slice(u)}),s},addProp:function(t,e){Object.defineProperty(S.Event.prototype,t,{enumerable:!0,configurable:!0,get:m(e)?function(){if(this.originalEvent)return e(this.originalEvent)}:function(){if(this.originalEvent)return this.originalEvent[t]},set:function(e){Object.defineProperty(this,t,{enumerable:!0,configurable:!0,writable:!0,value:e})}})},fix:function(e){return e[S.expando]?e:new S.Event(e)},special:{load:{noBubble:!0},click:{setup:function(e){var t=this||e;return pe.test(t.type)&&t.click&&A(t,"input")&&Se(t,"click",we),!1},trigger:function(e){var t=this||e;return pe.test(t.type)&&t.click&&A(t,"input")&&Se(t,"click"),!0},_default:function(e){var t=e.target;return pe.test(t.type)&&t.click&&A(t,"input")&&Y.get(t,"click")||A(t,"a")}},beforeunload:{postDispatch:function(e){void 0!==e.result&&e.originalEvent&&(e.originalEvent.returnValue=e.result)}}}},S.removeEvent=function(e,t,n){e.removeEventListener&&e.removeEventListener(t,n)},S.Event=function(e,t){if(!(this instanceof S.Event))return new S.Event(e,t);e&&e.type?(this.originalEvent=e,this.type=e.type,this.isDefaultPrevented=e.defaultPrevented||void 0===e.defaultPrevented&&!1===e.returnValue?we:Te,this.target=e.target&&3===e.target.nodeType?e.target.parentNode:e.target,this.currentTarget=e.currentTarget,this.relatedTarget=e.relatedTarget):this.type=e,t&&S.extend(this,t),this.timeStamp=e&&e.timeStamp||Date.now(),this[S.expando]=!0},S.Event.prototype={constructor:S.Event,isDefaultPrevented:Te,isPropagationStopped:Te,isImmediatePropagationStopped:Te,isSimulated:!1,preventDefault:function(){var e=this.originalEvent;this.isDefaultPrevented=we,e&&!this.isSimulated&&e.preventDefault()},stopPropagation:function(){var e=this.originalEvent;this.isPropagationStopped=we,e&&!this.isSimulated&&e.stopPropagation()},stopImmediatePropagation:function(){var e=this.originalEvent;this.isImmediatePropagationStopped=we,e&&!this.isSimulated&&e.stopImmediatePropagation(),this.stopPropagation()}},S.each({altKey:!0,bubbles:!0,cancelable:!0,changedTouches:!0,ctrlKey:!0,detail:!0,eventPhase:!0,metaKey:!0,pageX:!0,pageY:!0,shiftKey:!0,view:!0,"char":!0,code:!0,charCode:!0,key:!0,keyCode:!0,button:!0,buttons:!0,clientX:!0,clientY:!0,offsetX:!0,offsetY:!0,pointerId:!0,pointerType:!0,screenX:!0,screenY:!0,targetTouches:!0,toElement:!0,touches:!0,which:!0},S.event.addProp),S.each({focus:"focusin",blur:"focusout"},function(e,t){S.event.special[e]={setup:function(){return Se(this,e,Ce),!1},trigger:function(){return Se(this,e),!0},_default:function(){return!0},delegateType:t}}),S.each({mouseenter:"mouseover",mouseleave:"mouseout",pointerenter:"pointerover",pointerleave:"pointerout"},function(e,i){S.event.special[e]={delegateType:i,bindType:i,handle:function(e){var t,n=e.relatedTarget,r=e.handleObj;return n&&(n===this||S.contains(this,n))||(e.type=r.origType,t=r.handler.apply(this,arguments),e.type=i),t}}}),S.fn.extend({on:function(e,t,n,r){return Ee(this,e,t,n,r)},one:function(e,t,n,r){return Ee(this,e,t,n,r,1)},off:function(e,t,n){var r,i;if(e&&e.preventDefault&&e.handleObj)return r=e.handleObj,S(e.delegateTarget).off(r.namespace?r.origType+"."+r.namespace:r.origType,r.selector,r.handler),this;if("object"==typeof e){for(i in e)this.off(i,t,e[i]);return this}return!1!==t&&"function"!=typeof t||(n=t,t=void 0),!1===n&&(n=Te),this.each(function(){S.event.remove(this,e,n,t)})}});var ke=/<script|<style|<link/i,Ae=/checked\s*(?:[^=]|=\s*.checked.)/i,Ne=/^\s*<!(?:\[CDATA\[|--)|(?:\]\]|--)>\s*$/g;function je(e,t){return A(e,"table")&&A(11!==t.nodeType?t:t.firstChild,"tr")&&S(e).children("tbody")[0]||e}function De(e){return e.type=(null!==e.getAttribute("type"))+"/"+e.type,e}function qe(e){return"true/"===(e.type||"").slice(0,5)?e.type=e.type.slice(5):e.removeAttribute("type"),e}function Le(e,t){var n,r,i,o,a,s;if(1===t.nodeType){if(Y.hasData(e)&&(s=Y.get(e).events))for(i in Y.remove(t,"handle events"),s)for(n=0,r=s[i].length;n<r;n++)S.event.add(t,i,s[i][n]);Q.hasData(e)&&(o=Q.access(e),a=S.extend({},o),Q.set(t,a))}}function He(n,r,i,o){r=g(r);var e,t,a,s,u,l,c=0,f=n.length,p=f-1,d=r[0],h=m(d);if(h||1<f&&"string"==typeof d&&!y.checkClone&&Ae.test(d))return n.each(function(e){var t=n.eq(e);h&&(r[0]=d.call(this,e,t.html())),He(t,r,i,o)});if(f&&(t=(e=xe(r,n[0].ownerDocument,!1,n,o)).firstChild,1===e.childNodes.length&&(e=t),t||o)){for(s=(a=S.map(ve(e,"script"),De)).length;c<f;c++)u=e,c!==p&&(u=S.clone(u,!0,!0),s&&S.merge(a,ve(u,"script"))),i.call(n[c],u,c);if(s)for(l=a[a.length-1].ownerDocument,S.map(a,qe),c=0;c<s;c++)u=a[c],he.test(u.type||"")&&!Y.access(u,"globalEval")&&S.contains(l,u)&&(u.src&&"module"!==(u.type||"").toLowerCase()?S._evalUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce||u.getAttribute("nonce")},l):b(u.textContent.replace(Ne,""),u,l))}return n}function Oe(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n||1!==r.nodeType||S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return e}S.extend({htmlPrefilter:function(e){return e},clone:function(e,t,n){var r,i,o,a,s,u,l,c=e.cloneNode(!0),f=ie(e);if(!(y.noCloneChecked||1!==e.nodeType&&11!==e.nodeType||S.isXMLDoc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l||(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o||ve(e),a=a||ve(c),r=0,i=o.length;r<i;r++)Le(o[r],a[r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEvent(n,r,t.handle);n[Y.expando]=void 0}n[Q.expando]&&(n[Q.expando]=void 0)}}}),S.fn.extend({detach:function(e){return Oe(this,e,!0)},remove:function(e){return Oe(this,e)},text:function(e){return $(this,function(e){return void 0===e?S.text(this):this.empty().each(function(){1!==this.nodeType&&11!==this.nodeType&&9!==this.nodeType||(this.textContent=e)})},null,e,arguments.length)},append:function(){return He(this,arguments,function(e){1!==this.nodeType&&11!==this.nodeType&&9!==this.nodeType||je(this,e).appendChild(e)})},prepend:function(){return He(this,arguments,function(e){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var t=je(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return He(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)})},after:function(){return He(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this.nextSibling)})},empty:function(){for(var e,t=0;null!=(e=this[t]);t++)1===e.nodeType&&(S.cleanData(ve(e,!1)),e.textContent="");return this},clone:function(e,t){return e=null!=e&&e,t=null==t?e:t,this.map(function(){return S.clone(this,e,t)})},html:function(e){return $(this,function(e){var t=this[0]||{},n=0,r=this.length;if(void 0===e&&1===t.nodeType)return t.innerHTML;if("string"==typeof e&&!ke.test(e)&&!ge[(de.exec(e)||["",""])[1].toLowerCase()]){e=S.htmlPrefilter(e);try{for(;n<r;n++)1===(t=this[n]||{}).nodeType&&(S.cleanData(ve(t,!1)),t.innerHTML=e);t=0}catch(e){}}t&&this.empty().append(e)},null,e,arguments.length)},replaceWith:function(){var n=[];return He(this,arguments,function(e){var t=this.parentNode;S.inArray(this,n)<0&&(S.cleanData(ve(this)),t&&t.replaceChild(e,this))},n)}}),S.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,a){S.fn[e]=function(e){for(var t,n=[],r=S(e),i=r.length-1,o=0;o<=i;o++)t=o===i?this:this.clone(!0),S(r[o])[a](t),u.apply(n,t.get());return this.pushStack(n)}});var Pe=new RegExp("^("+ee+")(?!px)[a-z%]+$","i"),Re=function(e){var t=e.ownerDocument.defaultView;return t&&t.opener||(t=C),t.getComputedStyle(e)},Me=function(e,t,n){var r,i,o={};for(i in t)o[i]=e.style[i],e.style[i]=t[i];for(i in r=n.call(e),t)e.style[i]=o[i];return r},Ie=new RegExp(ne.join("|"),"i");function We(e,t,n){var r,i,o,a,s=e.style;return(n=n||Re(e))&&(""!==(a=n.getPropertyValue(t)||n[t])||ie(e)||(a=S.style(e,t)),!y.pixelBoxStyles()&&Pe.test(a)&&Ie.test(t)&&(r=s.width,i=s.minWidth,o=s.maxWidth,s.minWidth=s.maxWidth=s.width=a,a=n.width,s.width=r,s.minWidth=i,s.maxWidth=o)),void 0!==a?a+"":a}function Fe(e,t){return{get:function(){if(!e())return(this.get=t).apply(this,arguments);delete this.get}}}!function(){function e(){if(l){u.style.cssText="position:absolute;left:-11111px;width:60px;margin-top:1px;padding:0;border:0",l.style.cssText="position:relative;display:block;box-sizing:border-box;overflow:scroll;margin:auto;border:1px;padding:1px;width:60%;top:1%",re.appendChild(u).appendChild(l);var e=C.getComputedStyle(l);n="1%"!==e.top,s=12===t(e.marginLeft),l.style.right="60%",o=36===t(e.right),r=36===t(e.width),l.style.position="absolute",i=12===t(l.offsetWidth/3),re.removeChild(u),l=null}}function t(e){return Math.round(parseFloat(e))}var n,r,i,o,a,s,u=E.createElement("div"),l=E.createElement("div");l.style&&(l.style.backgroundClip="content-box",l.cloneNode(!0).style.backgroundClip="",y.clearCloneStyle="content-box"===l.style.backgroundClip,S.extend(y,{boxSizingReliable:function(){return e(),r},pixelBoxStyles:function(){return e(),o},pixelPosition:function(){return e(),n},reliableMarginLeft:function(){return e(),s},scrollboxSize:function(){return e(),i},reliableTrDimensions:function(){var e,t,n,r;return null==a&&(e=E.createElement("table"),t=E.createElement("tr"),n=E.createElement("div"),e.style.cssText="position:absolute;left:-11111px;border-collapse:separate",t.style.cssText="border:1px solid",t.style.height="1px",n.style.height="9px",n.style.display="block",re.appendChild(e).appendChild(t).appendChild(n),r=C.getComputedStyle(t),a=parseInt(r.height,10)+parseInt(r.borderTopWidth,10)+parseInt(r.borderBottomWidth,10)===t.offsetHeight,re.removeChild(e)),a}}))}();var Be=["Webkit","Moz","ms"],$e=E.createElement("div").style,_e={};function ze(e){var t=S.cssProps[e]||_e[e];return t||(e in $e?e:_e[e]=function(e){var t=e[0].toUpperCase()+e.slice(1),n=Be.length;while(n--)if((e=Be[n]+t)in $e)return e}(e)||e)}var Ue=/^(none|table(?!-c[ea]).+)/,Xe=/^--/,Ve={position:"absolute",visibility:"hidden",display:"block"},Ge={letterSpacing:"0",fontWeight:"400"};function Ye(e,t,n){var r=te.exec(t);return r?Math.max(0,r[2]-(n||0))+(r[3]||"px"):t}function Qe(e,t,n,r,i,o){var a="width"===t?1:0,s=0,u=0;if(n===(r?"border":"content"))return 0;for(;a<4;a+=2)"margin"===n&&(u+=S.css(e,n+ne[a],!0,i)),r?("content"===n&&(u-=S.css(e,"padding"+ne[a],!0,i)),"margin"!==n&&(u-=S.css(e,"border"+ne[a]+"Width",!0,i))):(u+=S.css(e,"padding"+ne[a],!0,i),"padding"!==n?u+=S.css(e,"border"+ne[a]+"Width",!0,i):s+=S.css(e,"border"+ne[a]+"Width",!0,i));return!r&&0<=o&&(u+=Math.max(0,Math.ceil(e["offset"+t[0].toUpperCase()+t.slice(1)]-o-u-s-.5))||0),u}function Je(e,t,n){var r=Re(e),i=(!y.boxSizingReliable()||n)&&"border-box"===S.css(e,"boxSizing",!1,r),o=i,a=We(e,t,r),s="offset"+t[0].toUpperCase()+t.slice(1);if(Pe.test(a)){if(!n)return a;a="auto"}return(!y.boxSizingReliable()&&i||!y.reliableTrDimensions()&&A(e,"tr")||"auto"===a||!parseFloat(a)&&"inline"===S.css(e,"display",!1,r))&&e.getClientRects().length&&(i="border-box"===S.css(e,"boxSizing",!1,r),(o=s in e)&&(a=e[s])),(a=parseFloat(a)||0)+Qe(e,t,n||(i?"border":"content"),o,r,a)+"px"}function Ke(e,t,n,r,i){return new Ke.prototype.init(e,t,n,r,i)}S.extend({cssHooks:{opacity:{get:function(e,t){if(t){var n=We(e,"opacity");return""===n?"1":n}}}},cssNumber:{animationIterationCount:!0,columnCount:!0,fillOpacity:!0,flexGrow:!0,flexShrink:!0,fontWeight:!0,gridArea:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnStart:!0,gridRow:!0,gridRowEnd:!0,gridRowStart:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,widows:!0,zIndex:!0,zoom:!0},cssProps:{},style:function(e,t,n,r){if(e&&3!==e.nodeType&&8!==e.nodeType&&e.style){var i,o,a,s=X(t),u=Xe.test(t),l=e.style;if(u||(t=ze(s)),a=S.cssHooks[t]||S.cssHooks[s],void 0===n)return a&&"get"in a&&void 0!==(i=a.get(e,!1,r))?i:l[t];"string"===(o=typeof n)&&(i=te.exec(n))&&i[1]&&(n=se(e,t,i),o="number"),null!=n&&n==n&&("number"!==o||u||(n+=i&&i[3]||(S.cssNumber[s]?"":"px")),y.clearCloneStyle||""!==n||0!==t.indexOf("background")||(l[t]="inherit"),a&&"set"in a&&void 0===(n=a.set(e,n,r))||(u?l.setProperty(t,n):l[t]=n))}},css:function(e,t,n,r){var i,o,a,s=X(t);return Xe.test(t)||(t=ze(s)),(a=S.cssHooks[t]||S.cssHooks[s])&&"get"in a&&(i=a.get(e,!0,n)),void 0===i&&(i=We(e,t,r)),"normal"===i&&t in Ge&&(i=Ge[t]),""===n||n?(o=parseFloat(i),!0===n||isFinite(o)?o||0:i):i}}),S.each(["height","width"],function(e,u){S.cssHooks[u]={get:function(e,t,n){if(t)return!Ue.test(S.css(e,"display"))||e.getClientRects().length&&e.getBoundingClientRect().width?Je(e,u,n):Me(e,Ve,function(){return Je(e,u,n)})},set:function(e,t,n){var r,i=Re(e),o=!y.scrollboxSize()&&"absolute"===i.position,a=(o||n)&&"border-box"===S.css(e,"boxSizing",!1,i),s=n?Qe(e,u,n,a,i):0;return a&&o&&(s-=Math.ceil(e["offset"+u[0].toUpperCase()+u.slice(1)]-parseFloat(i[u])-Qe(e,u,"border",!1,i)-.5)),s&&(r=te.exec(t))&&"px"!==(r[3]||"px")&&(e.style[u]=t,t=S.css(e,u)),Ye(0,t,s)}}}),S.cssHooks.marginLeft=Fe(y.reliableMarginLeft,function(e,t){if(t)return(parseFloat(We(e,"marginLeft"))||e.getBoundingClientRect().left-Me(e,{marginLeft:0},function(){return e.getBoundingClientRect().left}))+"px"}),S.each({margin:"",padding:"",border:"Width"},function(i,o){S.cssHooks[i+o]={expand:function(e){for(var t=0,n={},r="string"==typeof e?e.split(" "):[e];t<4;t++)n[i+ne[t]+o]=r[t]||r[t-2]||r[0];return n}},"margin"!==i&&(S.cssHooks[i+o].set=Ye)}),S.fn.extend({css:function(e,t){return $(this,function(e,t,n){var r,i,o={},a=0;if(Array.isArray(t)){for(r=Re(e),i=t.length;a<i;a++)o[t[a]]=S.css(e,t[a],!1,r);return o}return void 0!==n?S.style(e,t,n):S.css(e,t)},e,t,1<arguments.length)}}),((S.Tween=Ke).prototype={constructor:Ke,init:function(e,t,n,r,i,o){this.elem=e,this.prop=n,this.easing=i||S.easing._default,this.options=t,this.start=this.now=this.cur(),this.end=r,this.unit=o||(S.cssNumber[n]?"":"px")},cur:function(){var e=Ke.propHooks[this.prop];return e&&e.get?e.get(this):Ke.propHooks._default.get(this)},run:function(e){var t,n=Ke.propHooks[this.prop];return this.options.duration?this.pos=t=S.easing[this.easing](e,this.options.duration*e,0,1,this.options.duration):this.pos=t=e,this.now=(this.end-this.start)*t+this.start,this.options.step&&this.options.step.call(this.elem,this.now,this),n&&n.set?n.set(this):Ke.propHooks._default.set(this),this}}).init.prototype=Ke.prototype,(Ke.propHooks={_default:{get:function(e){var t;return 1!==e.elem.nodeType||null!=e.elem[e.prop]&&null==e.elem.style[e.prop]?e.elem[e.prop]:(t=S.css(e.elem,e.prop,""))&&"auto"!==t?t:0},set:function(e){S.fx.step[e.prop]?S.fx.step[e.prop](e):1!==e.elem.nodeType||!S.cssHooks[e.prop]&&null==e.elem.style[ze(e.prop)]?e.elem[e.prop]=e.now:S.style(e.elem,e.prop,e.now+e.unit)}}}).scrollTop=Ke.propHooks.scrollLeft={set:function(e){e.elem.nodeType&&e.elem.parentNode&&(e.elem[e.prop]=e.now)}},S.easing={linear:function(e){return e},swing:function(e){return.5-Math.cos(e*Math.PI)/2},_default:"swing"},S.fx=Ke.prototype.init,S.fx.step={};var Ze,et,tt,nt,rt=/^(?:toggle|show|hide)$/,it=/queueHooks$/;function ot(){et&&(!1===E.hidden&&C.requestAnimationFrame?C.requestAnimationFrame(ot):C.setTimeout(ot,S.fx.interval),S.fx.tick())}function at(){return C.setTimeout(function(){Ze=void 0}),Ze=Date.now()}function st(e,t){var n,r=0,i={height:e};for(t=t?1:0;r<4;r+=2-t)i["margin"+(n=ne[r])]=i["padding"+n]=e;return t&&(i.opacity=i.width=e),i}function ut(e,t,n){for(var r,i=(lt.tweeners[t]||[]).concat(lt.tweeners["*"]),o=0,a=i.length;o<a;o++)if(r=i[o].call(n,t,e))return r}function lt(o,e,t){var n,a,r=0,i=lt.prefilters.length,s=S.Deferred().always(function(){delete u.elem}),u=function(){if(a)return!1;for(var e=Ze||at(),t=Math.max(0,l.startTime+l.duration-e),n=1-(t/l.duration||0),r=0,i=l.tweens.length;r<i;r++)l.tweens[r].run(n);return s.notifyWith(o,[l,n,t]),n<1&&i?t:(i||s.notifyWith(o,[l,1,0]),s.resolveWith(o,[l]),!1)},l=s.promise({elem:o,props:S.extend({},e),opts:S.extend(!0,{specialEasing:{},easing:S.easing._default},t),originalProperties:e,originalOptions:t,startTime:Ze||at(),duration:t.duration,tweens:[],createTween:function(e,t){var n=S.Tween(o,l.opts,e,t,l.opts.specialEasing[e]||l.opts.easing);return l.tweens.push(n),n},stop:function(e){var t=0,n=e?l.tweens.length:0;if(a)return this;for(a=!0;t<n;t++)l.tweens[t].run(1);return e?(s.notifyWith(o,[l,1,0]),s.resolveWith(o,[l,e])):s.rejectWith(o,[l,e]),this}}),c=l.props;for(!function(e,t){var n,r,i,o,a;for(n in e)if(i=t[r=X(n)],o=e[n],Array.isArray(o)&&(i=o[1],o=e[n]=o[0]),n!==r&&(e[r]=o,delete e[n]),(a=S.cssHooks[r])&&"expand"in a)for(n in o=a.expand(o),delete e[r],o)n in e||(e[n]=o[n],t[n]=i);else t[r]=i}(c,l.opts.specialEasing);r<i;r++)if(n=lt.prefilters[r].call(l,o,c,l.opts))return m(n.stop)&&(S._queueHooks(l.elem,l.opts.queue).stop=n.stop.bind(n)),n;return S.map(c,ut,l),m(l.opts.start)&&l.opts.start.call(o,l),l.progress(l.opts.progress).done(l.opts.done,l.opts.complete).fail(l.opts.fail).always(l.opts.always),S.fx.timer(S.extend(u,{elem:o,anim:l,queue:l.opts.queue})),l}S.Animation=S.extend(lt,{tweeners:{"*":[function(e,t){var n=this.createTween(e,t);return se(n.elem,e,te.exec(t),n),n}]},tweener:function(e,t){m(e)?(t=e,e=["*"]):e=e.match(P);for(var n,r=0,i=e.length;r<i;r++)n=e[r],lt.tweeners[n]=lt.tweeners[n]||[],lt.tweeners[n].unshift(t)},prefilters:[function(e,t,n){var r,i,o,a,s,u,l,c,f="width"in t||"height"in t,p=this,d={},h=e.style,g=e.nodeType&&ae(e),v=Y.get(e,"fxshow");for(r in n.queue||(null==(a=S._queueHooks(e,"fx")).unqueued&&(a.unqueued=0,s=a.empty.fire,a.empty.fire=function(){a.unqueued||s()}),a.unqueued++,p.always(function(){p.always(function(){a.unqueued--,S.queue(e,"fx").length||a.empty.fire()})})),t)if(i=t[r],rt.test(i)){if(delete t[r],o=o||"toggle"===i,i===(g?"hide":"show")){if("show"!==i||!v||void 0===v[r])continue;g=!0}d[r]=v&&v[r]||S.style(e,r)}if((u=!S.isEmptyObject(t))||!S.isEmptyObject(d))for(r in f&&1===e.nodeType&&(n.overflow=[h.overflow,h.overflowX,h.overflowY],null==(l=v&&v.display)&&(l=Y.get(e,"display")),"none"===(c=S.css(e,"display"))&&(l?c=l:(le([e],!0),l=e.style.display||l,c=S.css(e,"display"),le([e]))),("inline"===c||"inline-block"===c&&null!=l)&&"none"===S.css(e,"float")&&(u||(p.done(function(){h.display=l}),null==l&&(c=h.display,l="none"===c?"":c)),h.display="inline-block")),n.overflow&&(h.overflow="hidden",p.always(function(){h.overflow=n.overflow[0],h.overflowX=n.overflow[1],h.overflowY=n.overflow[2]})),u=!1,d)u||(v?"hidden"in v&&(g=v.hidden):v=Y.access(e,"fxshow",{display:l}),o&&(v.hidden=!g),g&&le([e],!0),p.done(function(){for(r in g||le([e]),Y.remove(e,"fxshow"),d)S.style(e,r,d[r])})),u=ut(g?v[r]:0,r,p),r in v||(v[r]=u.start,g&&(u.end=u.start,u.start=0))}],prefilter:function(e,t){t?lt.prefilters.unshift(e):lt.prefilters.push(e)}}),S.speed=function(e,t,n){var r=e&&"object"==typeof e?S.extend({},e):{complete:n||!n&&t||m(e)&&e,duration:e,easing:n&&t||t&&!m(t)&&t};return S.fx.off?r.duration=0:"number"!=typeof r.duration&&(r.duration in S.fx.speeds?r.duration=S.fx.speeds[r.duration]:r.duration=S.fx.speeds._default),null!=r.queue&&!0!==r.queue||(r.queue="fx"),r.old=r.complete,r.complete=function(){m(r.old)&&r.old.call(this),r.queue&&S.dequeue(this,r.queue)},r},S.fn.extend({fadeTo:function(e,t,n,r){return this.filter(ae).css("opacity",0).show().end().animate({opacity:t},e,n,r)},animate:function(t,e,n,r){var i=S.isEmptyObject(t),o=S.speed(e,n,r),a=function(){var e=lt(this,S.extend({},t),o);(i||Y.get(this,"finish"))&&e.stop(!0)};return a.finish=a,i||!1===o.queue?this.each(a):this.queue(o.queue,a)},stop:function(i,e,o){var a=function(e){var t=e.stop;delete e.stop,t(o)};return"string"!=typeof i&&(o=e,e=i,i=void 0),e&&this.queue(i||"fx",[]),this.each(function(){var e=!0,t=null!=i&&i+"queueHooks",n=S.timers,r=Y.get(this);if(t)r[t]&&r[t].stop&&a(r[t]);else for(t in r)r[t]&&r[t].stop&&it.test(t)&&a(r[t]);for(t=n.length;t--;)n[t].elem!==this||null!=i&&n[t].queue!==i||(n[t].anim.stop(o),e=!1,n.splice(t,1));!e&&o||S.dequeue(this,i)})},finish:function(a){return!1!==a&&(a=a||"fx"),this.each(function(){var e,t=Y.get(this),n=t[a+"queue"],r=t[a+"queueHooks"],i=S.timers,o=n?n.length:0;for(t.finish=!0,S.queue(this,a,[]),r&&r.stop&&r.stop.call(this,!0),e=i.length;e--;)i[e].elem===this&&i[e].queue===a&&(i[e].anim.stop(!0),i.splice(e,1));for(e=0;e<o;e++)n[e]&&n[e].finish&&n[e].finish.call(this);delete t.finish})}}),S.each(["toggle","show","hide"],function(e,r){var i=S.fn[r];S.fn[r]=function(e,t,n){return null==e||"boolean"==typeof e?i.apply(this,arguments):this.animate(st(r,!0),e,t,n)}}),S.each({slideDown:st("show"),slideUp:st("hide"),slideToggle:st("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},function(e,r){S.fn[e]=function(e,t,n){return this.animate(r,e,t,n)}}),S.timers=[],S.fx.tick=function(){var e,t=0,n=S.timers;for(Ze=Date.now();t<n.length;t++)(e=n[t])()||n[t]!==e||n.splice(t--,1);n.length||S.fx.stop(),Ze=void 0},S.fx.timer=function(e){S.timers.push(e),S.fx.start()},S.fx.interval=13,S.fx.start=function(){et||(et=!0,ot())},S.fx.stop=function(){et=null},S.fx.speeds={slow:600,fast:200,_default:400},S.fn.delay=function(r,e){return r=S.fx&&S.fx.speeds[r]||r,e=e||"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},tt=E.createElement("input"),nt=E.createElement("select").appendChild(E.createElement("option")),tt.type="checkbox",y.checkOn=""!==tt.value,y.optSelected=nt.selected,(tt=E.createElement("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.length)},removeAttr:function(e){return this.each(function(){S.removeAttr(this,e)})}}),S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)||(i=S.attrHooks[t.toLowerCase()]||(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setAttribute(t,n+""),n):i&&"get"in i&&null!==(r=i.get(e,t))?r:null==(r=S.find.attr(e,t))?void 0:r)},attrHooks:{type:{set:function(e,t){if(!y.radioValue&&"radio"===t&&A(e,"input")){var n=e.value;return e.setAttribute("type",t),n&&(e.value=n),t}}}},removeAttr:function(e,t){var n,r=0,i=t&&t.match(P);if(i&&1===e.nodeType)while(n=i[r++])e.removeAttribute(n)}}),ct={set:function(e,t,n){return!1===t?S.removeAttr(e,n):e.setAttribute(n,n),n}},S.each(S.expr.match.bool.source.match(/\w+/g),function(e,t){var a=ft[t]||S.find.attr;ft[t]=function(e,t,n){var r,i,o=t.toLowerCase();return n||(i=ft[o],ft[o]=r,r=null!=a(e,t,n)?o:null,ft[o]=i),r}});var pt=/^(?:input|select|textarea|button)$/i,dt=/^(?:a|area)$/i;function ht(e){return(e.match(P)||[]).join(" ")}function gt(e){return e.getAttribute&&e.getAttribute("class")||""}function vt(e){return Array.isArray(e)?e:"string"==typeof e&&e.match(P)||[]}S.fn.extend({prop:function(e,t){return $(this,S.prop,e,t,1<arguments.length)},removeProp:function(e){return this.each(function(){delete this[S.propFix[e]||e]})}}),S.extend({prop:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return 1===o&&S.isXMLDoc(e)||(t=S.propFix[t]||t,i=S.propHooks[t]),void 0!==n?i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=S.find.attr(e,"tabindex");return t?parseInt(t,10):pt.test(e.nodeName)||dt.test(e.nodeName)&&e.href?0:-1}}},propFix:{"for":"htmlFor","class":"className"}}),y.optSelected||(S.propHooks.selected={get:function(e){var t=e.parentNode;return t&&t.parentNode&&t.parentNode.selectedIndex,null},set:function(e){var t=e.parentNode;t&&(t.selectedIndex,t.parentNode&&t.parentNode.selectedIndex)}}),S.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan","useMap","frameBorder","contentEditable"],function(){S.propFix[this.toLowerCase()]=this}),S.fn.extend({addClass:function(t){var e,n,r,i,o,a,s,u=0;if(m(t))return this.each(function(e){S(this).addClass(t.call(this,e,gt(this)))});if((e=vt(t)).length)while(n=this[u++])if(i=gt(n),r=1===n.nodeType&&" "+ht(i)+" "){a=0;while(o=e[a++])r.indexOf(" "+o+" ")<0&&(r+=o+" ");i!==(s=ht(r))&&n.setAttribute("class",s)}return this},removeClass:function(t){var e,n,r,i,o,a,s,u=0;if(m(t))return this.each(function(e){S(this).removeClass(t.call(this,e,gt(this)))});if(!arguments.length)return this.attr("class","");if((e=vt(t)).length)while(n=this[u++])if(i=gt(n),r=1===n.nodeType&&" "+ht(i)+" "){a=0;while(o=e[a++])while(-1<r.indexOf(" "+o+" "))r=r.replace(" "+o+" "," ");i!==(s=ht(r))&&n.setAttribute("class",s)}return this},toggleClass:function(i,t){var o=typeof i,a="string"===o||Array.isArray(i);return"boolean"==typeof t&&a?t?this.addClass(i):this.removeClass(i):m(i)?this.each(function(e){S(this).toggleClass(i.call(this,e,gt(this),t),t)}):this.each(function(){var e,t,n,r;if(a){t=0,n=S(this),r=vt(i);while(e=r[t++])n.hasClass(e)?n.removeClass(e):n.addClass(e)}else void 0!==i&&"boolean"!==o||((e=gt(this))&&Y.set(this,"__className__",e),this.setAttribute&&this.setAttribute("class",e||!1===i?"":Y.get(this,"__className__")||""))})},hasClass:function(e){var t,n,r=0;t=" "+e+" ";while(n=this[r++])if(1===n.nodeType&&-1<(" "+ht(gt(n))+" ").indexOf(t))return!0;return!1}});var yt=/\r/g;S.fn.extend({val:function(n){var r,e,i,t=this[0];return arguments.length?(i=m(n),this.each(function(e){var t;1===this.nodeType&&(null==(t=i?n.call(this,e,S(this).val()):n)?t="":"number"==typeof t?t+="":Array.isArray(t)&&(t=S.map(t,function(e){return null==e?"":e+""})),(r=S.valHooks[this.type]||S.valHooks[this.nodeName.toLowerCase()])&&"set"in r&&void 0!==r.set(this,t,"value")||(this.value=t))})):t?(r=S.valHooks[t.type]||S.valHooks[t.nodeName.toLowerCase()])&&"get"in r&&void 0!==(e=r.get(t,"value"))?e:"string"==typeof(e=t.value)?e.replace(yt,""):null==e?"":e:void 0}}),S.extend({valHooks:{option:{get:function(e){var t=S.find.attr(e,"value");return null!=t?t:ht(S.text(e))}},select:{get:function(e){var t,n,r,i=e.options,o=e.selectedIndex,a="select-one"===e.type,s=a?null:[],u=a?o+1:i.length;for(r=o<0?u:a?o:0;r<u;r++)if(((n=i[r]).selected||r===o)&&!n.disabled&&(!n.parentNode.disabled||!A(n.parentNode,"optgroup"))){if(t=S(n).val(),a)return t;s.push(t)}return s},set:function(e,t){var n,r,i=e.options,o=S.makeArray(t),a=i.length;while(a--)((r=i[a]).selected=-1<S.inArray(S.valHooks.option.get(r),o))&&(n=!0);return n||(e.selectedIndex=-1),o}}}}),S.each(["radio","checkbox"],function(){S.valHooks[this]={set:function(e,t){if(Array.isArray(t))return e.checked=-1<S.inArray(S(e).val(),t)}},y.checkOn||(S.valHooks[this].get=function(e){return null===e.getAttribute("value")?"on":e.value})}),y.focusin="onfocusin"in C;var mt=/^(?:focusinfocus|focusoutblur)$/,xt=function(e){e.stopPropagation()};S.extend(S.event,{trigger:function(e,t,n,r){var i,o,a,s,u,l,c,f,p=[n||E],d=v.call(e,"type")?e.type:e,h=v.call(e,"namespace")?e.namespace.split("."):[];if(o=f=a=n=n||E,3!==n.nodeType&&8!==n.nodeType&&!mt.test(d+S.event.triggered)&&(-1<d.indexOf(".")&&(d=(h=d.split(".")).shift(),h.sort()),u=d.indexOf(":")<0&&"on"+d,(e=e[S.expando]?e:new S.Event(d,"object"==typeof e&&e)).isTrigger=r?2:3,e.namespace=h.join("."),e.rnamespace=e.namespace?new RegExp("(^|\\.)"+h.join("\\.(?:.*\\.|)")+"(\\.|$)"):null,e.result=void 0,e.target||(e.target=n),t=null==t?[e]:S.makeArray(t,[e]),c=S.event.special[d]||{},r||!c.trigger||!1!==c.trigger.apply(n,t))){if(!r&&!c.noBubble&&!x(n)){for(s=c.delegateType||d,mt.test(s+d)||(o=o.parentNode);o;o=o.parentNode)p.push(o),a=o;a===(n.ownerDocument||E)&&p.push(a.defaultView||a.parentWindow||C)}i=0;while((o=p[i++])&&!e.isPropagationStopped())f=o,e.type=1<i?s:c.bindType||d,(l=(Y.get(o,"events")||Object.create(null))[e.type]&&Y.get(o,"handle"))&&l.apply(o,t),(l=u&&o[u])&&l.apply&&V(o)&&(e.result=l.apply(o,t),!1===e.result&&e.preventDefault());return e.type=d,r||e.isDefaultPrevented()||c._default&&!1!==c._default.apply(p.pop(),t)||!V(n)||u&&m(n[d])&&!x(n)&&((a=n[u])&&(n[u]=null),S.event.triggered=d,e.isPropagationStopped()&&f.addEventListener(d,xt),n[d](),e.isPropagationStopped()&&f.removeEventListener(d,xt),S.event.triggered=void 0,a&&(n[u]=a)),e.result}},simulate:function(e,t,n){var r=S.extend(new S.Event,n,{type:e,isSimulated:!0});S.event.trigger(r,null,t)}}),S.fn.extend({trigger:function(e,t){return this.each(function(){S.event.trigger(e,t,this)})},triggerHandler:function(e,t){var n=this[0];if(n)return S.event.trigger(e,t,n,!0)}}),y.focusin||S.each({focus:"focusin",blur:"focusout"},function(n,r){var i=function(e){S.event.simulate(r,e.target,S.event.fix(e))};S.event.special[r]={setup:function(){var e=this.ownerDocument||this.document||this,t=Y.access(e,r);t||e.addEventListener(n,i,!0),Y.access(e,r,(t||0)+1)},teardown:function(){var e=this.ownerDocument||this.document||this,t=Y.access(e,r)-1;t?Y.access(e,r,t):(e.removeEventListener(n,i,!0),Y.remove(e,r))}}});var bt=C.location,wt={guid:Date.now()},Tt=/\?/;S.parseXML=function(e){var t,n;if(!e||"string"!=typeof e)return null;try{t=(new C.DOMParser).parseFromString(e,"text/xml")}catch(e){}return n=t&&t.getElementsByTagName("parsererror")[0],t&&!n||S.error("Invalid XML: "+(n?S.map(n.childNodes,function(e){return e.textContent}).join("\n"):e)),t};var Ct=/\[\]$/,Et=/\r?\n/g,St=/^(?:submit|button|image|reset|file)$/i,kt=/^(?:input|select|textarea|keygen)/i;function At(n,e,r,i){var t;if(Array.isArray(e))S.each(e,function(e,t){r||Ct.test(n)?i(n,t):At(n+"["+("object"==typeof t&&null!=t?e:"")+"]",t,r,i)});else if(r||"object"!==w(e))i(n,e);else for(t in e)At(n+"["+t+"]",e[t],r,i)}S.param=function(e,t){var n,r=[],i=function(e,t){var n=m(t)?t():t;r[r.length]=encodeURIComponent(e)+"="+encodeURIComponent(null==n?"":n)};if(null==e)return"";if(Array.isArray(e)||e.jquery&&!S.isPlainObject(e))S.each(e,function(){i(this.name,this.value)});else for(n in e)At(n,e[n],t,i);return r.join("&")},S.fn.extend({serialize:function(){return S.param(this.serializeArray())},serializeArray:function(){return this.map(function(){var e=S.prop(this,"elements");return e?S.makeArray(e):this}).filter(function(){var e=this.type;return this.name&&!S(this).is(":disabled")&&kt.test(this.nodeName)&&!St.test(e)&&(this.checked||!pe.test(e))}).map(function(e,t){var n=S(this).val();return null==n?null:Array.isArray(n)?S.map(n,function(e){return{name:t.name,value:e.replace(Et,"\r\n")}}):{name:t.name,value:n.replace(Et,"\r\n")}}).get()}});var Nt=/%20/g,jt=/#.*$/,Dt=/([?&])_=[^&]*/,qt=/^(.*?):[ \t]*([^\r\n]*)$/gm,Lt=/^(?:GET|HEAD)$/,Ht=/^\/\//,Ot={},Pt={},Rt="*/".concat("*"),Mt=E.createElement("a");function It(o){return function(e,t){"string"!=typeof e&&(t=e,e="*");var n,r=0,i=e.toLowerCase().match(P)||[];if(m(t))while(n=i[r++])"+"===n[0]?(n=n.slice(1)||"*",(o[n]=o[n]||[]).unshift(t)):(o[n]=o[n]||[]).push(t)}}function Wt(t,i,o,a){var s={},u=t===Pt;function l(e){var r;return s[e]=!0,S.each(t[e]||[],function(e,t){var n=t(i,o,a);return"string"!=typeof n||u||s[n]?u?!(r=n):void 0:(i.dataTypes.unshift(n),l(n),!1)}),r}return l(i.dataTypes[0])||!s["*"]&&l("*")}function Ft(e,t){var n,r,i=S.ajaxSettings.flatOptions||{};for(n in t)void 0!==t[n]&&((i[n]?e:r||(r={}))[n]=t[n]);return r&&S.extend(!0,e,r),e}Mt.href=bt.href,S.extend({active:0,lastModified:{},etag:{},ajaxSettings:{url:bt.href,type:"GET",isLocal:/^(?:about|app|app-storage|.+-extension|file|res|widget):$/.test(bt.protocol),global:!0,processData:!0,async:!0,contentType:"application/x-www-form-urlencoded; charset=UTF-8",accepts:{"*":Rt,text:"text/plain",html:"text/html",xml:"application/xml, text/xml",json:"application/json, text/javascript"},contents:{xml:/\bxml\b/,html:/\bhtml/,json:/\bjson\b/},responseFields:{xml:"responseXML",text:"responseText",json:"responseJSON"},converters:{"* text":String,"text html":!0,"text json":JSON.parse,"text xml":S.parseXML},flatOptions:{url:!0,context:!0}},ajaxSetup:function(e,t){return t?Ft(Ft(e,S.ajaxSettings),t):Ft(S.ajaxSettings,e)},ajaxPrefilter:It(Ot),ajaxTransport:It(Pt),ajax:function(e,t){"object"==typeof e&&(t=e,e=void 0),t=t||{};var c,f,p,n,d,r,h,g,i,o,v=S.ajaxSetup({},t),y=v.context||v,m=v.context&&(y.nodeType||y.jquery)?S(y):S.event,x=S.Deferred(),b=S.Callbacks("once memory"),w=v.statusCode||{},a={},s={},u="canceled",T={readyState:0,getResponseHeader:function(e){var t;if(h){if(!n){n={};while(t=qt.exec(p))n[t[1].toLowerCase()+" "]=(n[t[1].toLowerCase()+" "]||[]).concat(t[2])}t=n[e.toLowerCase()+" "]}return null==t?null:t.join(", ")},getAllResponseHeaders:function(){return h?p:null},setRequestHeader:function(e,t){return null==h&&(e=s[e.toLowerCase()]=s[e.toLowerCase()]||e,a[e]=t),this},overrideMimeType:function(e){return null==h&&(v.mimeType=e),this},statusCode:function(e){var t;if(e)if(h)T.always(e[T.status]);else for(t in e)w[t]=[w[t],e[t]];return this},abort:function(e){var t=e||u;return c&&c.abort(t),l(0,t),this}};if(x.promise(T),v.url=((e||v.url||bt.href)+"").replace(Ht,bt.protocol+"//"),v.type=t.method||t.type||v.method||v.type,v.dataTypes=(v.dataType||"*").toLowerCase().match(P)||[""],null==v.crossDomain){r=E.createElement("a");try{r.href=v.url,r.href=r.href,v.crossDomain=Mt.protocol+"//"+Mt.host!=r.protocol+"//"+r.host}catch(e){v.crossDomain=!0}}if(v.data&&v.processData&&"string"!=typeof v.data&&(v.data=S.param(v.data,v.traditional)),Wt(Ot,v,t,T),h)return T;for(i in(g=S.event&&v.global)&&0==S.active++&&S.event.trigger("ajaxStart"),v.type=v.type.toUpperCase(),v.hasContent=!Lt.test(v.type),f=v.url.replace(jt,""),v.hasContent?v.data&&v.processData&&0===(v.contentType||"").indexOf("application/x-www-form-urlencoded")&&(v.data=v.data.replace(Nt,"+")):(o=v.url.slice(f.length),v.data&&(v.processData||"string"==typeof v.data)&&(f+=(Tt.test(f)?"&":"?")+v.data,delete v.data),!1===v.cache&&(f=f.replace(Dt,"$1"),o=(Tt.test(f)?"&":"?")+"_="+wt.guid+++o),v.url=f+o),v.ifModified&&(S.lastModified[f]&&T.setRequestHeader("If-Modified-Since",S.lastModified[f]),S.etag[f]&&T.setRequestHeader("If-None-Match",S.etag[f])),(v.data&&v.hasContent&&!1!==v.contentType||t.contentType)&&T.setRequestHeader("Content-Type",v.contentType),T.setRequestHeader("Accept",v.dataTypes[0]&&v.accepts[v.dataTypes[0]]?v.accepts[v.dataTypes[0]]+("*"!==v.dataTypes[0]?", "+Rt+"; q=0.01":""):v.accepts["*"]),v.headers)T.setRequestHeader(i,v.headers[i]);if(v.beforeSend&&(!1===v.beforeSend.call(y,T,v)||h))return T.abort();if(u="abort",b.add(v.complete),T.done(v.success),T.fail(v.error),c=Wt(Pt,v,t,T)){if(T.readyState=1,g&&m.trigger("ajaxSend",[T,v]),h)return T;v.async&&0<v.timeout&&(d=C.setTimeout(function(){T.abort("timeout")},v.timeout));try{h=!1,c.send(a,l)}catch(e){if(h)throw e;l(-1,e)}}else l(-1,"No Transport");function l(e,t,n,r){var i,o,a,s,u,l=t;h||(h=!0,d&&C.clearTimeout(d),c=void 0,p=r||"",T.readyState=0<e?4:0,i=200<=e&&e<300||304===e,n&&(s=function(e,t,n){var r,i,o,a,s=e.contents,u=e.dataTypes;while("*"===u[0])u.shift(),void 0===r&&(r=e.mimeType||t.getResponseHeader("Content-Type"));if(r)for(i in s)if(s[i]&&s[i].test(r)){u.unshift(i);break}if(u[0]in n)o=u[0];else{for(i in n){if(!u[0]||e.converters[i+" "+u[0]]){o=i;break}a||(a=i)}o=o||a}if(o)return o!==u[0]&&u.unshift(o),n[o]}(v,T,n)),!i&&-1<S.inArray("script",v.dataTypes)&&S.inArray("json",v.dataTypes)<0&&(v.converters["text script"]=function(){}),s=function(e,t,n,r){var i,o,a,s,u,l={},c=e.dataTypes.slice();if(c[1])for(a in e.converters)l[a.toLowerCase()]=e.converters[a];o=c.shift();while(o)if(e.responseFields[o]&&(n[e.responseFields[o]]=t),!u&&r&&e.dataFilter&&(t=e.dataFilter(t,e.dataType)),u=o,o=c.shift())if("*"===o)o=u;else if("*"!==u&&u!==o){if(!(a=l[u+" "+o]||l["* "+o]))for(i in l)if((s=i.split(" "))[1]===o&&(a=l[u+" "+s[0]]||l["* "+s[0]])){!0===a?a=l[i]:!0!==l[i]&&(o=s[0],c.unshift(s[1]));break}if(!0!==a)if(a&&e["throws"])t=a(t);else try{t=a(t)}catch(e){return{state:"parsererror",error:a?e:"No conversion from "+u+" to "+o}}}return{state:"success",data:t}}(v,s,T,i),i?(v.ifModified&&((u=T.getResponseHeader("Last-Modified"))&&(S.lastModified[f]=u),(u=T.getResponseHeader("etag"))&&(S.etag[f]=u)),204===e||"HEAD"===v.type?l="nocontent":304===e?l="notmodified":(l=s.state,o=s.data,i=!(a=s.error))):(a=l,!e&&l||(l="error",e<0&&(e=0))),T.status=e,T.statusText=(t||l)+"",i?x.resolveWith(y,[o,l,T]):x.rejectWith(y,[T,l,a]),T.statusCode(w),w=void 0,g&&m.trigger(i?"ajaxSuccess":"ajaxError",[T,v,i?o:a]),b.fireWith(y,[T,l]),g&&(m.trigger("ajaxComplete",[T,v]),--S.active||S.event.trigger("ajaxStop")))}return T},getJSON:function(e,t,n){return S.get(e,t,n,"json")},getScript:function(e,t){return S.get(e,void 0,t,"script")}}),S.each(["get","post"],function(e,i){S[i]=function(e,t,n,r){return m(t)&&(r=r||n,n=t,t=void 0),S.ajax(S.extend({url:e,type:i,dataType:r,data:t,success:n},S.isPlainObject(e)&&e))}}),S.ajaxPrefilter(function(e){var t;for(t in e.headers)"content-type"===t.toLowerCase()&&(e.contentType=e.headers[t]||"")}),S._evalUrl=function(e,t,n){return S.ajax({url:e,type:"GET",dataType:"script",cache:!0,async:!1,global:!1,converters:{"text script":function(){}},dataFilter:function(e){S.globalEval(e,t,n)}})},S.fn.extend({wrapAll:function(e){var t;return this[0]&&(m(e)&&(e=e.call(this[0])),t=S(e,this[0].ownerDocument).eq(0).clone(!0),this[0].parentNode&&t.insertBefore(this[0]),t.map(function(){var e=this;while(e.firstElementChild)e=e.firstElementChild;return e}).append(this)),this},wrapInner:function(n){return m(n)?this.each(function(e){S(this).wrapInner(n.call(this,e))}):this.each(function(){var e=S(this),t=e.contents();t.length?t.wrapAll(n):e.append(n)})},wrap:function(t){var n=m(t);return this.each(function(e){S(this).wrapAll(n?t.call(this,e):t)})},unwrap:function(e){return this.parent(e).not("body").each(function(){S(this).replaceWith(this.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth||e.offsetHeight||e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var Bt={0:200,1223:204},$t=S.ajaxSettings.xhr();y.cors=!!$t&&"withCredentials"in $t,y.ajax=$t=!!$t,S.ajaxTransport(function(i){var o,a;if(y.cors||$t&&!i.crossDomain)return{send:function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain||e["X-Requested-With"]||(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(o=a=r.onload=r.onerror=r.onabort=r.ontimeout=r.onreadystatechange=null,"abort"===e?r.abort():"error"===e?"number"!=typeof r.status?t(0,"error"):t(r.status,r.statusText):t(Bt[r.status]||r.status,r.statusText,"text"!==(r.responseType||"text")||"string"!=typeof r.responseText?{binary:r.response}:{text:r.responseText},r.getAllResponseHeaders()))}},r.onload=o(),a=r.onerror=r.ontimeout=o("error"),void 0!==r.onabort?r.onabort=a:r.onreadystatechange=function(){4===r.readyState&&C.setTimeout(function(){o&&a()})},o=o("abort");try{r.send(i.hasContent&&i.data||null)}catch(e){if(o)throw e}},abort:function(){o&&o()}}}),S.ajaxPrefilter(function(e){e.crossDomain&&(e.contents.script=!1)}),S.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/\b(?:java|ecma)script\b/},converters:{"text script":function(e){return S.globalEval(e),e}}}),S.ajaxPrefilter("script",function(e){void 0===e.cache&&(e.cache=!1),e.crossDomain&&(e.type="GET")}),S.ajaxTransport("script",function(n){var r,i;if(n.crossDomain||n.scriptAttrs)return{send:function(e,t){r=S("<script>").attr(n.scriptAttrs||{}).prop({charset:n.scriptCharset,src:n.url}).on("load error",i=function(e){r.remove(),i=null,e&&t("error"===e.type?404:200,e.type)}),E.head.appendChild(r[0])},abort:function(){i&&i()}}});var _t,zt=[],Ut=/(=)\?(?=&|$)|\?\?/;S.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var e=zt.pop()||S.expando+"_"+wt.guid++;return this[e]=!0,e}}),S.ajaxPrefilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Ut.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType||"").indexOf("application/x-www-form-urlencoded")&&Ut.test(e.data)&&"data");if(a||"jsonp"===e.dataTypes[0])return r=e.jsonpCallback=m(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Ut,"$1"+r):!1!==e.jsonp&&(e.url+=(Tt.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o||S.error(r+" was not called"),o[0]},e.dataTypes[0]="json",i=C[r],C[r]=function(){o=arguments},n.always(function(){void 0===i?S(C).removeProp(r):C[r]=i,e[r]&&(e.jsonpCallback=t.jsonpCallback,zt.push(r)),o&&m(i)&&i(o[0]),o=i=void 0}),"script"}),y.createHTMLDocument=((_t=E.implementation.createHTMLDocument("").body).innerHTML="<form></form><form></form>",2===_t.childNodes.length),S.parseHTML=function(e,t,n){return"string"!=typeof e?[]:("boolean"==typeof t&&(n=t,t=!1),t||(y.createHTMLDocument?((r=(t=E.implementation.createHTMLDocument("")).createElement("base")).href=E.location.href,t.head.appendChild(r)):t=E),o=!n&&[],(i=N.exec(e))?[t.createElement(i[1])]:(i=xe([e],t,o),o&&o.length&&S(o).remove(),S.merge([],i.childNodes)));var r,i,o},S.fn.load=function(e,t,n){var r,i,o,a=this,s=e.indexOf(" ");return-1<s&&(r=ht(e.slice(s)),e=e.slice(0,s)),m(t)?(n=t,t=void 0):t&&"object"==typeof t&&(i="POST"),0<a.length&&S.ajax({url:e,type:i||"GET",dataType:"html",data:t}).done(function(e){o=arguments,a.html(r?S("<div>").append(S.parseHTML(e)).find(r):e)}).always(n&&function(e,t){a.each(function(){n.apply(this,o||[e.responseText,t,e])})}),this},S.expr.pseudos.animated=function(t){return S.grep(S.timers,function(e){return t===e.elem}).length},S.offset={setOffset:function(e,t,n){var r,i,o,a,s,u,l=S.css(e,"position"),c=S(e),f={};"static"===l&&(e.style.position="relative"),s=c.offset(),o=S.css(e,"top"),u=S.css(e,"left"),("absolute"===l||"fixed"===l)&&-1<(o+u).indexOf("auto")?(a=(r=c.position()).top,i=r.left):(a=parseFloat(o)||0,i=parseFloat(u)||0),m(t)&&(t=t.call(e,n,S.extend({},s))),null!=t.top&&(f.top=t.top-s.top+a),null!=t.left&&(f.left=t.left-s.left+i),"using"in t?t.using.call(e,f):c.css(f)}},S.fn.extend({offset:function(t){if(arguments.length)return void 0===t?this:this.each(function(e){S.offset.setOffset(this,t,e)});var e,n,r=this[0];return r?r.getClientRects().length?(e=r.getBoundingClientRect(),n=r.ownerDocument.defaultView,{top:e.top+n.pageYOffset,left:e.left+n.pageXOffset}):{top:0,left:0}:void 0},position:function(){if(this[0]){var e,t,n,r=this[0],i={top:0,left:0};if("fixed"===S.css(r,"position"))t=r.getBoundingClientRect();else{t=this.offset(),n=r.ownerDocument,e=r.offsetParent||n.documentElement;while(e&&(e===n.body||e===n.documentElement)&&"static"===S.css(e,"position"))e=e.parentNode;e&&e!==r&&1===e.nodeType&&((i=S(e).offset()).top+=S.css(e,"borderTopWidth",!0),i.left+=S.css(e,"borderLeftWidth",!0))}return{top:t.top-i.top-S.css(r,"marginTop",!0),left:t.left-i.left-S.css(r,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var e=this.offsetParent;while(e&&"static"===S.css(e,"position"))e=e.offsetParent;return e||re})}}),S.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(t,i){var o="pageYOffset"===i;S.fn[t]=function(e){return $(this,function(e,t,n){var r;if(x(e)?r=e:9===e.nodeType&&(r=e.defaultView),void 0===n)return r?r[i]:e[t];r?r.scrollTo(o?r.pageXOffset:n,o?n:r.pageYOffset):e[t]=n},t,e,arguments.length)}}),S.each(["top","left"],function(e,n){S.cssHooks[n]=Fe(y.pixelPosition,function(e,t){if(t)return t=We(e,n),Pe.test(t)?S(e).position()[n]+"px":t})}),S.each({Height:"height",Width:"width"},function(a,s){S.each({padding:"inner"+a,content:s,"":"outer"+a},function(r,o){S.fn[o]=function(e,t){var n=arguments.length&&(r||"boolean"!=typeof e),i=r||(!0===e||!0===t?"margin":"border");return $(this,function(e,t,n){var r;return x(e)?0===o.indexOf("outer")?e["inner"+a]:e.document.documentElement["client"+a]:9===e.nodeType?(r=e.documentElement,Math.max(e.body["scroll"+a],r["scroll"+a],e.body["offset"+a],r["offset"+a],r["client"+a])):void 0===n?S.css(e,t,i):S.style(e,t,n,i)},s,n?e:void 0,n)}})}),S.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(e,t){S.fn[t]=function(e){return this.on(t,e)}}),S.fn.extend({bind:function(e,t,n){return this.on(e,null,t,n)},unbind:function(e,t){return this.off(e,null,t)},delegate:function(e,t,n,r){return this.on(t,e,n,r)},undelegate:function(e,t,n){return 1===arguments.length?this.off(e,"**"):this.off(t,e||"**",n)},hover:function(e,t){return this.mouseenter(e).mouseleave(t||e)}}),S.each("blur focus focusin focusout resize scroll click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup contextmenu".split(" "),function(e,n){S.fn[n]=function(e,t){return 0<arguments.length?this.on(n,null,e,t):this.trigger(n)}});var Xt=/^[\s\uFEFF\xA0]+|[\s\uFEFF\xA0]+$/g;S.proxy=function(e,t){var n,r,i;if("string"==typeof t&&(n=e[t],t=e,e=n),m(e))return r=s.call(arguments,2),(i=function(){return e.apply(t||this,r.concat(s.call(arguments)))}).guid=e.guid=e.guid||S.guid++,i},S.holdReady=function(e){e?S.readyWait++:S.ready(!0)},S.isArray=Array.isArray,S.parseJSON=JSON.parse,S.nodeName=A,S.isFunction=m,S.isWindow=x,S.camelCase=X,S.type=w,S.now=Date.now,S.isNumeric=function(e){var t=S.type(e);return("number"===t||"string"===t)&&!isNaN(e-parseFloat(e))},S.trim=function(e){return null==e?"":(e+"").replace(Xt,"")},"function"==typeof define&&define.amd&&define("jquery",[],function(){return S});var Vt=C.jQuery,Gt=C.$;return S.noConflict=function(e){return C.$===S&&(C.$=Gt),e&&C.jQuery===S&&(C.jQuery=Vt),S},"undefined"==typeof e&&(C.jQuery=C.$=S),S});

From 15d6da207678e4b451397894e73232fa779d9ebc Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 10 Apr 2026 22:50:38 +0200
Subject: [PATCH 024/113] Add TODO notes.

---
 src/units/http_server.rs | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index 161ffed0e..d0024aeb5 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -1122,6 +1122,26 @@ impl HttpServer {
         State(state): State<Arc<HttpServer>>,
         Path(name): Path<Name<Bytes>>,
     ) -> Json<Result<TsigRemoveResult, TsigRemoveError>> {
+        // TODO: Don't remove a TSIG key which is currently in use.
+        //
+        // Currently if a zone was added with `--source
+        // ip[:port]^<TSIG_KEY_NAME>` that would cause the TSIG key to be used
+        // by the loader when refreshing the zone.
+        //
+        // In future policies may refer to TSIG keys in a couple of places:
+        //
+        // 1. In server outbound settings for signing NOTIFY, SOA and XFR messages
+        //    to downstream nameservers.
+        // 2. In key manager settings for instructing dnst keyset which nameserver
+        //    to query to sanity check the signed zone contents, with a TSIG key if
+        //    one is needed to authenticate to the specified nameserver in order to
+        //    do XFR.
+        //
+        // So we need to check all of these places to see if a key is in use.
+        //
+        // Alternatively we would need to update the TSIG key store to track
+        // if (and where?) a key is being used and check with the TSIG key
+        // store.
         todo!()
     }
 

From 542d70e5b6e16ecb9bed28b368eb042e1cdb8014 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 13 Apr 2026 16:36:35 +0200
Subject: [PATCH 025/113] Implement `cascade tsig remove`.

---
 doc/manual/build/man/cascade-debug.1        |  2 +-
 doc/manual/build/man/cascade-health.1       |  2 +-
 doc/manual/build/man/cascade-hsm.1          |  2 +-
 doc/manual/build/man/cascade-keyset.1       |  2 +-
 doc/manual/build/man/cascade-policy.1       |  2 +-
 doc/manual/build/man/cascade-status.1       |  2 +-
 doc/manual/build/man/cascade-template.1     |  2 +-
 doc/manual/build/man/cascade-tsig.1         | 22 ++++++++++++++++++++-
 doc/manual/build/man/cascade-zone.1         |  2 +-
 doc/manual/build/man/cascade.1              |  2 +-
 doc/manual/build/man/cascaded-config.toml.5 |  2 +-
 doc/manual/build/man/cascaded-policy.toml.5 |  2 +-
 doc/manual/build/man/cascaded.1             |  2 +-
 doc/manual/source/man/cascade-tsig.rst      | 10 ++++++++++
 src/units/http_server.rs                    | 21 +++++++++++++++++---
 15 files changed, 61 insertions(+), 16 deletions(-)

diff --git a/doc/manual/build/man/cascade-debug.1 b/doc/manual/build/man/cascade-debug.1
index 5848ae130..cd8db02e2 100644
--- a/doc/manual/build/man/cascade-debug.1
+++ b/doc/manual/build/man/cascade-debug.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-DEBUG" "1" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-DEBUG" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-debug \- Debug / troubleshoot Cascade
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-health.1 b/doc/manual/build/man/cascade-health.1
index 133e4cd03..73c81b3dc 100644
--- a/doc/manual/build/man/cascade-health.1
+++ b/doc/manual/build/man/cascade-health.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HEALTH" "1" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HEALTH" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-health \- Check the health of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-hsm.1 b/doc/manual/build/man/cascade-hsm.1
index 0b0deaf70..3ff0f301d 100644
--- a/doc/manual/build/man/cascade-hsm.1
+++ b/doc/manual/build/man/cascade-hsm.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HSM" "1" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HSM" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-hsm \- Manage HSMs
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-keyset.1 b/doc/manual/build/man/cascade-keyset.1
index 207ad3ec3..c638cbe83 100644
--- a/doc/manual/build/man/cascade-keyset.1
+++ b/doc/manual/build/man/cascade-keyset.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-KEYSET" "1" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-KEYSET" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-keyset \- Execute manual key roll or key removal commands
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-policy.1 b/doc/manual/build/man/cascade-policy.1
index 39a2dc766..88eaface5 100644
--- a/doc/manual/build/man/cascade-policy.1
+++ b/doc/manual/build/man/cascade-policy.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-POLICY" "1" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-POLICY" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-policy \- Manage policies
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-status.1 b/doc/manual/build/man/cascade-status.1
index f25e7c890..ffeb461d9 100644
--- a/doc/manual/build/man/cascade-status.1
+++ b/doc/manual/build/man/cascade-status.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-STATUS" "1" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-STATUS" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-status \- Show the status of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-template.1 b/doc/manual/build/man/cascade-template.1
index 4afae1f31..5f649d618 100644
--- a/doc/manual/build/man/cascade-template.1
+++ b/doc/manual/build/man/cascade-template.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-TEMPLATE" "1" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-TEMPLATE" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-template \- Print example config or policy files
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-tsig.1 b/doc/manual/build/man/cascade-tsig.1
index 17001c96d..3c38630d2 100644
--- a/doc/manual/build/man/cascade-tsig.1
+++ b/doc/manual/build/man/cascade-tsig.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-TSIG" "1" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-TSIG" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-tsig \- Manage TSIG keys
 .sp
@@ -40,6 +40,8 @@ Added in version 0.1.0\-beta1.
 \fBcascade\fP \fB[GLOBAL OPTIONS]\fP tsig \fI\%add\fP \fB<TSIG_KEY_NAME>\fP \fB<ALGORITHM>\fP \fB<SECRET>\fP
 .sp
 \fBcascade\fP \fB[GLOBAL OPTIONS]\fP tsig \fI\%list\fP
+.sp
+\fBcascade\fP \fB[GLOBAL OPTIONS]\fP tsig \fI\%remove\fP \fB<TSIG_KEY_NAME>\fP
 .SH DESCRIPTION
 .sp
 Manage RFC 8945 TSIG keys for authenticating zone transfers.
@@ -66,6 +68,24 @@ Register a new TSIG key.
 .B list
 List registered TSIG keys and the zones that use them.
 .UNINDENT
+.INDENT 0.0
+.TP
+.B add
+Remove a registered TSIG key.
+.sp
+\fBNOTE:\fP
+.INDENT 7.0
+.INDENT 3.5
+Returns an error if the key does not exist in the TSIG key store
+or if any zone exists that is configured to authenticate with an
+.INDENT 0.0
+.INDENT 3.5
+upstream source using the specified TSIG key.
+.UNINDENT
+.UNINDENT
+.UNINDENT
+.UNINDENT
+.UNINDENT
 .SH ARGUMENTS FOR TSIG ADD
 .INDENT 0.0
 .TP
diff --git a/doc/manual/build/man/cascade-zone.1 b/doc/manual/build/man/cascade-zone.1
index f21f5aa0c..d1e2caa47 100644
--- a/doc/manual/build/man/cascade-zone.1
+++ b/doc/manual/build/man/cascade-zone.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-ZONE" "1" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-ZONE" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-zone \- Manage zones
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade.1 b/doc/manual/build/man/cascade.1
index 0555a5ffa..ba905959c 100644
--- a/doc/manual/build/man/cascade.1
+++ b/doc/manual/build/man/cascade.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE" "1" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade \- Cascade CLI
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascaded-config.toml.5 b/doc/manual/build/man/cascaded-config.toml.5
index 029c34183..c18e61275 100644
--- a/doc/manual/build/man/cascaded-config.toml.5
+++ b/doc/manual/build/man/cascaded-config.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-CONFIG.TOML" "5" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-CONFIG.TOML" "5" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-config.toml \- Cascade configuration file
 .sp
diff --git a/doc/manual/build/man/cascaded-policy.toml.5 b/doc/manual/build/man/cascaded-policy.toml.5
index b56777c67..989fee49d 100644
--- a/doc/manual/build/man/cascaded-policy.toml.5
+++ b/doc/manual/build/man/cascaded-policy.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-POLICY.TOML" "5" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-POLICY.TOML" "5" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-policy.toml \- Cascade policy file format
 .sp
diff --git a/doc/manual/build/man/cascaded.1 b/doc/manual/build/man/cascaded.1
index ed91e2133..b6fdaa3be 100644
--- a/doc/manual/build/man/cascaded.1
+++ b/doc/manual/build/man/cascaded.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED" "1" "Apr 10, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded \- DNSSEC signer
 .SH SYNOPSIS
diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index 3519556cc..f446d23f8 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -12,6 +12,8 @@ Synopsis
 
 :program:`cascade` ``[GLOBAL OPTIONS]`` tsig :subcmd:`list`
 
+:program:`cascade` ``[GLOBAL OPTIONS]`` tsig :subcmd:`remove` ``<TSIG_KEY_NAME>``
+
 Description
 -----------
 
@@ -39,6 +41,14 @@ Commands
 
    List registered TSIG keys and the zones that use them.
 
+.. subcmd:: remove
+
+   Remove a registered TSIG key.
+
+   .. note:: Returns an error if the key does not exist in the TSIG key store
+             or if any zone exists that is configured to authenticate with an
+			 upstream source using the specified TSIG key.
+
 Arguments for :subcmd:`tsig add`
 --------------------------------
 
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index d0024aeb5..367a520f6 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -1119,8 +1119,8 @@ impl HttpServer {
     }
 
     async fn tsig_key_remove(
-        State(state): State<Arc<HttpServer>>,
-        Path(name): Path<Name<Bytes>>,
+        State(http_server_state): State<Arc<HttpServer>>,
+        Path(tsig_key_name): Path<TsigKeyName>,
     ) -> Json<Result<TsigRemoveResult, TsigRemoveError>> {
         // TODO: Don't remove a TSIG key which is currently in use.
         //
@@ -1142,7 +1142,22 @@ impl HttpServer {
         // Alternatively we would need to update the TSIG key store to track
         // if (and where?) a key is being used and check with the TSIG key
         // store.
-        todo!()
+        let mut state = http_server_state.center.state.lock().unwrap();
+
+        if !state.tsig_store.map.contains_key(&tsig_key_name) {
+            return Json(Err(TsigRemoveError::NotFound));
+        }
+
+        if state.zones.iter().any(|z| {
+            let zone_state = z.0.state.lock().unwrap();
+            matches!(zone_state.loader.source, crate::loader::Source::Server { tsig_key: Some(ref key), .. } if tsig_key_name == key.name())
+        }) {
+            return Json(Err(TsigRemoveError::InUse));
+        }
+
+        let _ = state.tsig_store.map.remove(&tsig_key_name);
+        state.tsig_store.mark_dirty(&http_server_state.center);
+        Json(Ok(TsigRemoveResult))
     }
 
     async fn tsig_key_list(State(http_state): State<Arc<HttpServer>>) -> Json<TsigListResult> {

From 67becab358c7500789063cb1b282ef4d2e3986f1 Mon Sep 17 00:00:00 2001
From: Philip-NLnetLabs <philip@nlnetlabs.nl>
Date: Wed, 15 Apr 2026 08:36:17 +0200
Subject: [PATCH 026/113] Introduce public-nameservers and send it to keyset.
 Handle TSIG related (#580)

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
---
 crates/api/src/lib.rs    |  7 ++--
 src/main.rs              | 11 ++++--
 src/policy/file/v1.rs    | 10 ++++++
 src/policy/mod.rs        | 32 ++++++++++++++++-
 src/state/v1.rs          |  5 +++
 src/tsig/mod.rs          | 55 ++++++++++++++++++++++++++++-
 src/units/http_server.rs | 74 +++++++++++++++-------------------------
 src/units/key_manager.rs | 25 +++++++++++---
 src/zone/state/v1.rs     |  5 +++
 9 files changed, 166 insertions(+), 58 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index f3615de0c..015640817 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -749,12 +749,15 @@ pub struct KeyMsg {
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub enum PolicyReloadError {
     Io(Utf8PathBuf, String),
+    Check(String),
 }
 
 impl Display for PolicyReloadError {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        let PolicyReloadError::Io(p, e) = self;
-        format!("{p}: {e}").fmt(f)
+        match self {
+            PolicyReloadError::Io(p, e) => format!("{p}: {e}").fmt(f),
+            PolicyReloadError::Check(e) => e.to_string().fmt(f),
+        }
     }
 }
 
diff --git a/src/main.rs b/src/main.rs
index ec0823f5e..6fcb13831 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -109,9 +109,14 @@ fn main() -> ExitCode {
 
             // Load all policies.
             let mut updates = Vec::new();
-            let res = policy::reload_all(&mut state.policies, &config, |name, _| {
-                updates.push(name.clone());
-            });
+            let res = policy::reload_all(
+                &mut state.policies,
+                &config,
+                &state.tsig_store,
+                |name, _| {
+                    updates.push(name.clone());
+                },
+            );
 
             if let Err(err) = res {
                 error!("Cascade couldn't load all policies: {err}");
diff --git a/src/policy/file/v1.rs b/src/policy/file/v1.rs
index 0a803c4ce..1e9c03653 100644
--- a/src/policy/file/v1.rs
+++ b/src/policy/file/v1.rs
@@ -144,6 +144,13 @@ pub struct KeyManagerSpec {
 
     /// How keys are generated.
     pub generation: KeyManagerGenerationSpec,
+
+    /// The upstream nameservers to use when checking for RRSIG propagation
+    /// during a key roll. The value is a list of strings. Each string has the following
+    /// syntax: `<IP-address>:<port>[^<tsig-key-name>].`
+    /// The port is mandatory. The TSIG key name is optional and the name
+    /// of the key is preceded by a caret character (`^`).
+    pub publication_nameservers: Vec<String>,
 }
 
 //--- Conversion
@@ -239,6 +246,7 @@ impl KeyManagerSpec {
             default_ttl: self.records.ttl.as_ttl(),
             ds_algorithm: self.ds_algorithm,
             auto_remove: self.auto_remove,
+            publication_nameservers: self.publication_nameservers,
         }
     }
 
@@ -270,6 +278,7 @@ impl KeyManagerSpec {
 
             ds_algorithm: policy.ds_algorithm.clone(),
             auto_remove: policy.auto_remove,
+            publication_nameservers: policy.publication_nameservers.clone(),
 
             records: KeyManagerRecordsSpec {
                 ttl: TimeSpan::from_ttl(policy.default_ttl),
@@ -318,6 +327,7 @@ impl Default for KeyManagerSpec {
             algorithm: Default::default(),
             ds_algorithm: DsAlgorithm::Sha256,
             auto_remove: true,
+            publication_nameservers: Default::default(),
             records: Default::default(),
             generation: Default::default(),
         }
diff --git a/src/policy/mod.rs b/src/policy/mod.rs
index b42560404..0f98ec8b8 100644
--- a/src/policy/mod.rs
+++ b/src/policy/mod.rs
@@ -2,6 +2,7 @@
 
 use std::fmt::{Display, Formatter};
 use std::net::SocketAddr;
+use std::str::FromStr;
 use std::{fs, io, sync::Arc};
 
 use bytes::Bytes;
@@ -11,6 +12,7 @@ use domain::base::Ttl;
 use serde::{Deserialize, Serialize};
 use tracing::{debug, error, info, warn};
 
+use crate::tsig::TsigStore;
 use crate::{api::PolicyReloadError, config::Config};
 
 pub mod file;
@@ -51,9 +53,10 @@ pub enum PolicyChange {
 pub fn reload_all(
     policies: &mut foldhash::HashMap<Box<str>, Policy>,
     config: &Config,
+    tsig_store: &TsigStore,
     mut on_change: impl FnMut(&Box<str>, PolicyChange),
 ) -> Result<(), PolicyReloadError> {
-    let new_versions = load_all(policies, config)?;
+    let new_versions = load_all(policies, config, tsig_store)?;
 
     let mut new_policies = foldhash::HashMap::default();
 
@@ -117,6 +120,7 @@ pub fn reload_all(
 pub fn load_all(
     policies: &foldhash::HashMap<Box<str>, Policy>,
     config: &Config,
+    tsig_store: &TsigStore,
 ) -> Result<foldhash::HashMap<Box<str>, PolicyVersion>, PolicyReloadError> {
     // Write the loaded policies to a new hashmap, so policies that no longer
     // exist can be detected easily.
@@ -177,6 +181,8 @@ pub fn load_all(
             .expect("this path points to a readable file, so it must have a file name");
 
         let policy = spec.parse(name);
+
+        check_policy(&policy, tsig_store)?;
         if policies.contains_key(name) {
             info!("Reloaded policy '{name}'");
         } else {
@@ -191,6 +197,27 @@ pub fn load_all(
     Ok(new_policies)
 }
 
+/// Perform a semantic check on the loaded policy.
+fn check_policy(policy: &PolicyVersion, tsig_store: &TsigStore) -> Result<(), PolicyReloadError> {
+    // Check the publication nameservers for the key manager. Any TSIG key
+    // that is part of those nameservers has to exist in the TSIG key store.
+    for n in &policy.key_manager.publication_nameservers {
+        if let Some((_, tsig_name)) = n.split_once('^') {
+            let tsig_name = Name::from_str(tsig_name).map_err(|e| {
+                PolicyReloadError::Check(format!(
+                    "unable to convert TSIG key name {tsig_name} to DNS name: {e}"
+                ))
+            })?;
+            tsig_store
+                .get(&tsig_name)
+                .ok_or(PolicyReloadError::Check(format!(
+                    "TSIG key {tsig_name} not found in TSIG store"
+                )))?;
+        }
+    }
+    Ok(())
+}
+
 //----------- PolicyVersion ----------------------------------------------------
 
 /// A particular version of a policy.
@@ -278,6 +305,9 @@ pub struct KeyManagerPolicy {
 
     /// Automatically remove keys that are no long in use.
     pub auto_remove: bool,
+
+    /// Nameservers to check for RRSIG propagation during a key roll.
+    pub publication_nameservers: Vec<String>,
 }
 
 //----------- SignerPolicy -----------------------------------------------------
diff --git a/src/state/v1.rs b/src/state/v1.rs
index a0cf2b317..a2781a756 100644
--- a/src/state/v1.rs
+++ b/src/state/v1.rs
@@ -255,6 +255,9 @@ pub struct KeyManagerPolicySpec {
 
     /// Automatically remove keys that are no long in use.
     auto_remove: bool,
+
+    /// Nameservers to check for RRSIG propagation during a key roll.
+    pub publication_nameservers: Vec<String>,
 }
 
 //--- Conversion
@@ -282,6 +285,7 @@ impl KeyManagerPolicySpec {
             ds_algorithm: self.ds_algorithm,
             default_ttl: self.default_ttl,
             auto_remove: self.auto_remove,
+            publication_nameservers: self.publication_nameservers,
         }
     }
 
@@ -307,6 +311,7 @@ impl KeyManagerPolicySpec {
             ds_algorithm: policy.ds_algorithm.clone(),
             default_ttl: policy.default_ttl,
             auto_remove: policy.auto_remove,
+            publication_nameservers: policy.publication_nameservers.clone(),
         }
     }
 }
diff --git a/src/tsig/mod.rs b/src/tsig/mod.rs
index 4260a6200..0c4a2cc03 100644
--- a/src/tsig/mod.rs
+++ b/src/tsig/mod.rs
@@ -1,7 +1,9 @@
 //! Managing TSIG keys.
 
+use std::str::FromStr;
 use std::{collections::hash_map, fmt, io, sync::Arc, time::Duration};
 
+use domain::base::Name;
 use domain::tsig;
 use tracing::{debug, error, trace};
 
@@ -204,7 +206,8 @@ pub fn import_key(
             });
         }
     }
-    state.tsig_store.mark_dirty(center);
+    drop(state);
+    save_now(center);
     Ok(())
 }
 
@@ -254,6 +257,56 @@ pub fn generate_key(
 pub fn remove_key(center: &Arc<Center>, name: &tsig::KeyName) -> Result<(), RemoveError> {
     // Lock the global state and try to remove the key.
     let mut state = center.state.lock().unwrap();
+
+    // Currently if a zone was added with `--source
+    // ip[:port]^<TSIG_KEY_NAME>` that would cause the TSIG key to be used
+    // by the loader when refreshing the zone.
+    //
+    // In future policies may refer to TSIG keys in a couple of places:
+    //
+    // 1. In server outbound settings for signing NOTIFY, SOA and XFR messages
+    //    to downstream nameservers.
+    // 2. In key manager settings for instructing dnst keyset which nameserver
+    //    to query to sanity check the signed zone contents, with a TSIG key if
+    //    one is needed to authenticate to the specified nameserver in order to
+    //    do XFR.
+    //
+    // So we need to check all of these places to see if a key is in use.
+    //
+    // Alternatively we would need to update the TSIG key store to track
+    // if (and where?) a key is being used and check with the TSIG key
+    // store.
+
+    if !state.tsig_store.map.contains_key(name) {
+        return Err(RemoveError::NotFound);
+    }
+
+    if state.zones.iter().any(|z| {
+            let zone_state = z.0.state.lock().unwrap();
+            matches!(zone_state.loader.source, crate::loader::Source::Server { tsig_key: Some(ref key), .. } if name == key.name())
+        }) {
+            return Err(RemoveError::Used);
+        }
+
+    if state
+        .policies
+        .values()
+        .flat_map(|p| &p.latest.key_manager.publication_nameservers)
+        .filter_map(|n| n.split_once("^").map(|v| v.1))
+        .any(|k| {
+            let nk = Name::<Vec<u8>>::from_str(k);
+            if let Ok(n) = nk {
+                n == name
+            } else {
+                // Just ignore tSIG key names that cannot be parsed as a
+                // DNS name.
+                false
+            }
+        })
+    {
+        return Err(RemoveError::Used);
+    }
+
     match state.tsig_store.map.entry(name.clone()) {
         hash_map::Entry::Occupied(entry) => {
             if !entry.get().zones.is_empty() {
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index 367a520f6..800e7a97f 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -45,6 +45,7 @@ use crate::manager::Terminated;
 use crate::metrics::MetricsCollection;
 use crate::policy::SignerDenialPolicy;
 use crate::policy::SignerSerialPolicy;
+use crate::tsig::{self, RemoveError};
 use crate::units::key_manager::KmipClientCredentials;
 use crate::units::key_manager::KmipClientCredentialsFile;
 use crate::units::key_manager::KmipServerCredentialsFileMode;
@@ -806,20 +807,25 @@ impl HttpServer {
             .collect::<foldhash::HashMap<_, _>>();
         let mut changed = false;
         let mut updates = Vec::new();
-        let res = crate::policy::reload_all(&mut state.policies, &center.config, |name, change| {
-            changed = true;
-
-            changes.insert(
-                name.clone(),
-                match change {
-                    crate::policy::PolicyChange::Removed { .. } => PolicyChange::Removed,
-                    crate::policy::PolicyChange::Updated { .. } => PolicyChange::Updated,
-                    crate::policy::PolicyChange::Added { .. } => PolicyChange::Added,
-                },
-            );
+        let res = crate::policy::reload_all(
+            &mut state.policies,
+            &center.config,
+            &state.tsig_store,
+            |name, change| {
+                changed = true;
+
+                changes.insert(
+                    name.clone(),
+                    match change {
+                        crate::policy::PolicyChange::Removed { .. } => PolicyChange::Removed,
+                        crate::policy::PolicyChange::Updated { .. } => PolicyChange::Updated,
+                        crate::policy::PolicyChange::Added { .. } => PolicyChange::Added,
+                    },
+                );
 
-            updates.push((name.clone(), change));
-        });
+                updates.push((name.clone(), change));
+            },
+        );
 
         if let Err(err) = res {
             return Json(Err(err));
@@ -1122,41 +1128,17 @@ impl HttpServer {
         State(http_server_state): State<Arc<HttpServer>>,
         Path(tsig_key_name): Path<TsigKeyName>,
     ) -> Json<Result<TsigRemoveResult, TsigRemoveError>> {
-        // TODO: Don't remove a TSIG key which is currently in use.
-        //
-        // Currently if a zone was added with `--source
-        // ip[:port]^<TSIG_KEY_NAME>` that would cause the TSIG key to be used
-        // by the loader when refreshing the zone.
-        //
-        // In future policies may refer to TSIG keys in a couple of places:
-        //
-        // 1. In server outbound settings for signing NOTIFY, SOA and XFR messages
-        //    to downstream nameservers.
-        // 2. In key manager settings for instructing dnst keyset which nameserver
-        //    to query to sanity check the signed zone contents, with a TSIG key if
-        //    one is needed to authenticate to the specified nameserver in order to
-        //    do XFR.
-        //
-        // So we need to check all of these places to see if a key is in use.
-        //
-        // Alternatively we would need to update the TSIG key store to track
-        // if (and where?) a key is being used and check with the TSIG key
-        // store.
-        let mut state = http_server_state.center.state.lock().unwrap();
-
-        if !state.tsig_store.map.contains_key(&tsig_key_name) {
-            return Json(Err(TsigRemoveError::NotFound));
-        }
-
-        if state.zones.iter().any(|z| {
-            let zone_state = z.0.state.lock().unwrap();
-            matches!(zone_state.loader.source, crate::loader::Source::Server { tsig_key: Some(ref key), .. } if tsig_key_name == key.name())
-        }) {
-            return Json(Err(TsigRemoveError::InUse));
+        let result = tsig::remove_key(&http_server_state.center, &tsig_key_name)
+            .map_err(|e| match e {
+                RemoveError::NotFound => TsigRemoveError::NotFound,
+                RemoveError::Used => TsigRemoveError::InUse,
+            })
+            // Map Ok value that we don't use.
+            .map(|_| TsigRemoveResult);
+        if result.is_err() {
+            return Json(result);
         }
 
-        let _ = state.tsig_store.map.remove(&tsig_key_name);
-        state.tsig_store.mark_dirty(&http_server_state.center);
         Json(Ok(TsigRemoveResult))
     }
 
diff --git a/src/units/key_manager.rs b/src/units/key_manager.rs
index 065ae3062..f7a555b88 100644
--- a/src/units/key_manager.rs
+++ b/src/units/key_manager.rs
@@ -249,7 +249,7 @@ impl KeyManager {
         tokio::spawn(async move {
             // Keep it simple, just send all config items to keyset even
             // if they didn't change.
-            let config_commands = policy_to_commands(&new);
+            let config_commands = policy_to_commands(&center, &new);
             for c in config_commands {
                 let mut cmd = Self::keyset_cmd(&center, name.clone(), RecordingMode::Record);
                 cmd.arg("set");
@@ -381,7 +381,7 @@ impl KeyManager {
 
         // Pass `set` and `import` commands to `dnst keyset`.
         let config_commands = imports_to_commands(key_imports).into_iter().chain(
-            policy_to_commands(&policy.latest)
+            policy_to_commands(center, &policy.latest)
                 .into_iter()
                 .chain({
                     match var("CASCADE_FAKETIME") {
@@ -687,7 +687,7 @@ macro_rules! strs {
     };
 }
 
-fn policy_to_commands(policy: &PolicyVersion) -> Vec<Vec<String>> {
+fn policy_to_commands(center: &Arc<Center>, policy: &PolicyVersion) -> Vec<Vec<String>> {
     let km = &policy.key_manager;
 
     let mut algorithm_cmd = vec!["algorithm".to_string()];
@@ -711,7 +711,20 @@ fn policy_to_commands(policy: &PolicyVersion) -> Vec<Vec<String>> {
 
     let seconds = |x| format!("{x}s");
 
-    vec![
+    let mut cmds = vec![];
+
+    if km.publication_nameservers.iter().any(|n| n.contains("^")) {
+        let tsig_store_cmd = vec![
+            "tsig-store-path".to_string(),
+            center.config.tsig_store_path.as_str().to_string(),
+        ];
+        cmds.push(tsig_store_cmd);
+    }
+
+    let mut publication_nameservers_cmd = vec!["publication-nameservers".to_string()];
+    publication_nameservers_cmd.append(&mut km.publication_nameservers.clone());
+
+    cmds.append(&mut vec![
         strs!["use-csk", km.use_csk],
         algorithm_cmd,
         strs!["ksk-validity", validity(km.ksk_validity)],
@@ -757,7 +770,9 @@ fn policy_to_commands(policy: &PolicyVersion) -> Vec<Vec<String>> {
         strs!["ds-algorithm", km.ds_algorithm],
         strs!["default-ttl".to_string(), km.default_ttl.as_secs(),],
         strs!["autoremove", km.auto_remove],
-    ]
+        publication_nameservers_cmd,
+    ]);
+    cmds
 }
 
 //============ KMIP Credential Management ====================================
diff --git a/src/zone/state/v1.rs b/src/zone/state/v1.rs
index 5af808ce6..fd643e619 100644
--- a/src/zone/state/v1.rs
+++ b/src/zone/state/v1.rs
@@ -197,6 +197,9 @@ pub struct KeyManagerPolicySpec {
 
     /// Automatically remove keys that are no long in use.
     auto_remove: bool,
+
+    /// Nameservers to check for RRSIG propagation during a key roll.
+    publication_nameservers: Vec<String>,
 }
 
 //--- Conversion
@@ -224,6 +227,7 @@ impl KeyManagerPolicySpec {
             ds_algorithm: self.ds_algorithm,
             default_ttl: self.default_ttl,
             auto_remove: self.auto_remove,
+            publication_nameservers: self.publication_nameservers,
         }
     }
 
@@ -249,6 +253,7 @@ impl KeyManagerPolicySpec {
             ds_algorithm: policy.ds_algorithm.clone(),
             default_ttl: policy.default_ttl,
             auto_remove: policy.auto_remove,
+            publication_nameservers: policy.publication_nameservers.clone(),
         }
     }
 }

From e6a51921f4b629110e2f9964b1b02e2ec340abd8 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 15 Apr 2026 09:38:38 +0200
Subject: [PATCH 027/113] Fix failing upstream-tsig system test by bumping the
 dnst version used to include the new TSIG related set subcommands.

---
 integration-tests/cascade-test-image/Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/integration-tests/cascade-test-image/Dockerfile b/integration-tests/cascade-test-image/Dockerfile
index efd188728..e3f975625 100644
--- a/integration-tests/cascade-test-image/Dockerfile
+++ b/integration-tests/cascade-test-image/Dockerfile
@@ -50,8 +50,8 @@ RUN <<EOF
   # Install dnst.
   # TODO: Switch installing release builds via apt-get install once a dnst
   # release with keyset functionality has been released.
-  cargo install --debug --git https://github.com/nlnetlabs/dnst --rev 01e7fab --root /root/cargo-debug --locked --bin=dnst dnst
-  cargo install --git https://github.com/nlnetlabs/dnst --rev 01e7fab --root /root/cargo-release --locked --bin=dnst dnst
+  cargo install --debug --git https://github.com/nlnetlabs/dnst --rev 737a020 --root /root/cargo-debug --locked --bin=dnst dnst
+  cargo install --git https://github.com/nlnetlabs/dnst --rev 737a020 --root /root/cargo-release --locked --bin=dnst dnst
 EOF
 
 # Copy source files into container in case we need to build from source

From 11bf96ac51d12d8f75ab08ca367e9c155705abec Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 15 Apr 2026 12:38:21 +0200
Subject: [PATCH 028/113] Improve the policy template documentation for
 send-notify-to.

---
 etc/policy.template.toml | 21 ++++++++++++++++++++-
 1 file changed, 20 insertions(+), 1 deletion(-)

diff --git a/etc/policy.template.toml b/etc/policy.template.toml
index 3e27515c0..848de906b 100644
--- a/etc/policy.template.toml
+++ b/etc/policy.template.toml
@@ -367,5 +367,24 @@ required = false
 #
 # If empty, no NOTIFY messages will be sent.
 # 
-# A collection of IP:[port], defaulting to port 53 when not specified.
+# Each nameserver must be specifeid as a string in the form `"<IP
+# address>:[<port>][^<TSIG key name>]"`.
+#
+# A TSIG key name can optionally be specified in order to sign the NOTIFY
+# message using the specified TSIG key. The TSIG key must already have been
+# added to the Cascade TSIG key store with the `cascade tsig add` CLI command.
+#
+# Examples:
+#
+#   send-notify-to = [ "127.0.0.1"]
+#   send-notify-to = [ "127.0.0.1:53"]
+#   send-notify-to = [ "127.0.0.1:53^my_tsig_key"]
+#   send-notify-to = [ "127.0.0.1^my_tsig_key"]
+#   send-notify-to = [ { addr = "127.0.0.1:49", tsig-key-name = "my_tsig_key" } ]
+#
+# You can also use the TOML array of tables syntax like so:
+# 
+#   [[server.outbound.send-notify-to]]
+#   addr = "127.0.0.1:53"
+#   tsig-key-name = "my_tsig_key"
 send-notify-to = []

From 3331ff98c5709a4300875ff226cdc8e4c9c12128 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Thu, 16 Apr 2026 17:36:12 +0200
Subject: [PATCH 029/113] Add some more comments to the code.

---
 crates/api/src/lib.rs           | 34 ++++++++++--
 crates/cli/src/commands/tsig.rs | 97 ++++++++++++++++++++++-----------
 2 files changed, 94 insertions(+), 37 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 34e281086..617810ea0 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -194,41 +194,59 @@ pub struct KmipKeyImport {
 /// The name of a TSIG key.
 pub type TsigKeyName = domain::tsig::KeyName;
 
+//----------- TsigAdd ---------------------------------------------------------
+
+/// Add a TSIG key to Cascade.
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct TsigAdd {
+    /// The name of the TSIG key to add.
     pub name: TsigKeyName,
+
+    /// The algorithm of the TSIG key.
     pub alg: TsigAlgorithm,
+
+    /// The base64 encoded key material bytes.
     pub secret: String,
 }
 
+/// The successful result of adding a TSIG key to Cascade.
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct TsigAddResult;
 
+/// An error result indicating why an attempt to add a TSIG key to Cascade
+/// failed.
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub enum TsigAddError {
-    InvalidKeyName,
+    /// A TSIG key by the given name already exists in Cascade.
     AlreadyExists,
-    InvalidAlgorithmName,
+
+    /// The provided TSIG key secret was not correctly base64 encoded.
     InvalidBase64Secret,
 }
 
 impl Display for TsigAddError {
     fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
         match self {
-            TsigAddError::InvalidKeyName => write!(f, "invalid TSIG key name"),
             TsigAddError::AlreadyExists => write!(f, "TSIG key already exists"),
-            TsigAddError::InvalidAlgorithmName => write!(f, "invalid TSIG algorithm name"),
             TsigAddError::InvalidBase64Secret => write!(f, "invalid TSIG base64 encoded secret"),
         }
     }
 }
 
+//------------ TsigRemove ----------------------------------------------------
+
+/// The successful result of removing a TSIG key from Cascade.
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct TsigRemoveResult;
 
+/// An error result indicating why an attempt to remove a TSIG key from
+/// Cascade failed.
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub enum TsigRemoveError {
+    /// The specified TSIG key name was not found in Cascade.
     NotFound,
+
+    /// The specified TSIG key cannot be removed as it is in use.
     InUse,
 }
 
@@ -241,16 +259,24 @@ impl fmt::Display for TsigRemoveError {
     }
 }
 
+//------------ TsigListResult ------------------------------------------------
+
+/// The successful result of listing TSIG Cascade keys known to Cascade.
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct TsigListResult {
+    /// The set of TSIG keys known to Cascade plus information about each key.
     pub tsig_keys: HashMap<TsigKeyName, TsigListResultItem>,
 }
 
+/// Information about a single listed TSIG key.
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct TsigListResultItem {
+    /// The set of zones with which this TSIG key is used.
     pub zones: Vec<ZoneName>,
 }
 
+//----------- ZoneAdd --------------------------------------------------------
+
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct ZoneAdd {
     pub name: ZoneName,
diff --git a/crates/cli/src/commands/tsig.rs b/crates/cli/src/commands/tsig.rs
index 314ffeb25..f1ffad67e 100644
--- a/crates/cli/src/commands/tsig.rs
+++ b/crates/cli/src/commands/tsig.rs
@@ -7,39 +7,6 @@ use cascade_api::{
 use crate::client::CascadeApiClient;
 use crate::println;
 
-#[derive(Clone, Debug, clap::ValueEnum)]
-pub enum TsigAlgorithm {
-    HmacSha1,
-    HmacSha256,
-    HmacSha384,
-    HmacSha512,
-}
-
-impl FromStr for TsigAlgorithm {
-    type Err = String;
-
-    fn from_str(s: &str) -> Result<Self, Self::Err> {
-        match s {
-            "hmac-sha1" => Ok(TsigAlgorithm::HmacSha1),
-            "hmac-sha256" => Ok(TsigAlgorithm::HmacSha256),
-            "hmac-sha384" => Ok(TsigAlgorithm::HmacSha384),
-            "hmac-sha512" => Ok(TsigAlgorithm::HmacSha512),
-            other => Err(format!("'{other}' is not a recognized TSIG algorithm")),
-        }
-    }
-}
-
-impl From<TsigAlgorithm> for crate::api::TsigAlgorithm {
-    fn from(alg: TsigAlgorithm) -> Self {
-        match alg {
-            TsigAlgorithm::HmacSha1 => cascade_api::TsigAlgorithm::Sha1,
-            TsigAlgorithm::HmacSha256 => cascade_api::TsigAlgorithm::Sha256,
-            TsigAlgorithm::HmacSha384 => cascade_api::TsigAlgorithm::Sha384,
-            TsigAlgorithm::HmacSha512 => cascade_api::TsigAlgorithm::Sha512,
-        }
-    }
-}
-
 #[derive(Clone, Debug, clap::Args)]
 pub struct Tsig {
     #[command(subcommand)]
@@ -49,6 +16,7 @@ pub struct Tsig {
 #[derive(Clone, Debug, clap::Subcommand)]
 #[allow(clippy::large_enum_variant)]
 pub enum TsigCommand {
+    /// Add a TSIG key to Cascade.
     #[command(name = "add")]
     Add {
         /// The name of the TSIG key to add.
@@ -71,9 +39,11 @@ pub enum TsigCommand {
         secret: Option<String>,
     },
 
+    /// Remove a TSIG key from Cascade.
     #[command(name = "remove")]
     Remove { name: TsigKeyName },
 
+    /// List the TSIG keys known to Cascade.
     #[command(name = "list")]
     List,
 }
@@ -81,11 +51,17 @@ pub enum TsigCommand {
 impl Tsig {
     pub async fn execute(self, client: CascadeApiClient) -> Result<(), String> {
         match self.command {
+            // Add a TSIG key to Cascade.
             TsigCommand::Add { name, alg, secret } => {
                 let (name, alg, secret) = match (alg, secret) {
+                    // No separate algorithm or secret argument values
+                    // were provided, instead they must be extracted
+                    // from the name string which should be in the form
+                    // [algorithm]:keyname:secret.
                     (None, None) => {
                         let parts: Vec<&str> = name.split(':').collect();
                         match parts.as_slice() {
+                            // The algorithm was provided.
                             [alg_part, name_part, secret_part] => {
                                 let alg = TsigAlgorithm::from_str(alg_part)?;
                                 let name = name_part.to_string();
@@ -93,6 +69,7 @@ impl Tsig {
                                 (name, alg, secret)
                             }
 
+                            // The algorithm was not provided, use the default.
                             [name_part, secret_part] => {
                                 let alg = TsigAlgorithm::HmacSha256;
                                 let name = name_part.to_string();
@@ -100,6 +77,7 @@ impl Tsig {
                                 (name, alg, secret)
                             }
 
+                            // The name value was not in the expected format.
                             _ => {
                                 return Err(
                                     "Invalid TSIG key format, should be: [algorithm]:keyname:secret"
@@ -109,14 +87,21 @@ impl Tsig {
                         }
                     }
 
+                    // Separate name, algorithm and secret argument values
+                    // were provided.
                     (Some(alg), Some(secret)) => (name, alg, secret),
 
+                    // An unsupported combination of arguments was provided
+                    // but this should not be possible due to the Clap
+                    // attributes that we used.
                     _ => unreachable!("Excluded via Clap 'requires' rules"),
                 };
 
+                // Parse the TSIG key name as a domain name.
                 let tsig_key_name = TsigKeyName::from_str(&name)
                     .map_err(|err| format!("Invalid TSIG key name: {err}"))?;
 
+                // Send a TSIG add message to the Cascade HTTP API.
                 let res: Result<TsigAddResult, TsigAddError> = client
                     .post_json_with(
                         "tsig/add",
@@ -128,14 +113,20 @@ impl Tsig {
                     )
                     .await?;
 
+                // Handle the API command result.
                 match res {
+                    // Success, the key was added!
                     Ok(TsigAddResult) => {
                         println!("Added TSIG key '{name}'");
                         Ok(())
                     }
+
+                    // Failure, something went wrong.
                     Err(err) => Err(format!("Failed to add TSIG key '{name}': {err}")),
                 }
             }
+
+            // Remove a TSIG key (if possible).            
             TsigCommand::Remove { name } => {
                 let res: Result<TsigRemoveResult, TsigRemoveError> =
                     client.post_json(&format!("tsig/{name}/remove")).await?;
@@ -148,10 +139,14 @@ impl Tsig {
                     Err(e) => Err(format!("Failed to remove TSIG key: {e}")),
                 }
             }
+
+            // List the set of TSIG keys known to Cascade.
             TsigCommand::List => {
                 let response: TsigListResult = client.get_json("tsig/").await?;
 
                 for (tsig_key_name, key_info) in response.tsig_keys {
+                    // For each TSIG key also list the zones that it is used
+                    // with.
                     let zones = key_info
                         .zones
                         .iter()
@@ -171,3 +166,39 @@ impl Tsig {
         }
     }
 }
+
+//------------ TsigAlgorithm -------------------------------------------------
+
+/// The TSIG key algorithms supported by Cascade.
+#[derive(Clone, Debug, clap::ValueEnum)]
+pub enum TsigAlgorithm {
+    HmacSha1,
+    HmacSha256,
+    HmacSha384,
+    HmacSha512,
+}
+
+impl FromStr for TsigAlgorithm {
+    type Err = String;
+
+    fn from_str(s: &str) -> Result<Self, Self::Err> {
+        match s {
+            "hmac-sha1" => Ok(TsigAlgorithm::HmacSha1),
+            "hmac-sha256" => Ok(TsigAlgorithm::HmacSha256),
+            "hmac-sha384" => Ok(TsigAlgorithm::HmacSha384),
+            "hmac-sha512" => Ok(TsigAlgorithm::HmacSha512),
+            other => Err(format!("'{other}' is not a recognized TSIG algorithm")),
+        }
+    }
+}
+
+impl From<TsigAlgorithm> for crate::api::TsigAlgorithm {
+    fn from(alg: TsigAlgorithm) -> Self {
+        match alg {
+            TsigAlgorithm::HmacSha1 => cascade_api::TsigAlgorithm::Sha1,
+            TsigAlgorithm::HmacSha256 => cascade_api::TsigAlgorithm::Sha256,
+            TsigAlgorithm::HmacSha384 => cascade_api::TsigAlgorithm::Sha384,
+            TsigAlgorithm::HmacSha512 => cascade_api::TsigAlgorithm::Sha512,
+        }
+    }
+}

From 855e6ce34b53150508125b57b01f60bcee5e919d Mon Sep 17 00:00:00 2001
From: ximon18 <3304436+ximon18@users.noreply.github.com>
Date: Fri, 17 Apr 2026 11:42:11 +0200
Subject: [PATCH 030/113] Make tsig subcommand help text more consistent with
 the terminology used by the zone subcommand.

---
 crates/cli/src/commands/tsig.rs | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/crates/cli/src/commands/tsig.rs b/crates/cli/src/commands/tsig.rs
index f1ffad67e..a53487b1b 100644
--- a/crates/cli/src/commands/tsig.rs
+++ b/crates/cli/src/commands/tsig.rs
@@ -16,10 +16,10 @@ pub struct Tsig {
 #[derive(Clone, Debug, clap::Subcommand)]
 #[allow(clippy::large_enum_variant)]
 pub enum TsigCommand {
-    /// Add a TSIG key to Cascade.
+    /// Register a TSIG key
     #[command(name = "add")]
     Add {
-        /// The name of the TSIG key to add.
+        /// The name of the TSIG key to register.
         ///
         /// Can also be in the form `[algorithm]:keyname:secret`.
         name: String,
@@ -31,7 +31,7 @@ pub enum TsigCommand {
         #[arg(requires = "secret")]
         alg: Option<TsigAlgorithm>,
 
-        /// Base64 encoded secret key bytes.
+        /// The secret key material in base64 encoded form.
         ///
         /// Can be omitted if provided as part of the name.
         /// Required if `[ALG]` is provided.
@@ -39,11 +39,11 @@ pub enum TsigCommand {
         secret: Option<String>,
     },
 
-    /// Remove a TSIG key from Cascade.
+    /// Remove a TSIG key
     #[command(name = "remove")]
     Remove { name: TsigKeyName },
 
-    /// List the TSIG keys known to Cascade.
+    /// List registered TSIG keys
     #[command(name = "list")]
     List,
 }
@@ -126,7 +126,7 @@ impl Tsig {
                 }
             }
 
-            // Remove a TSIG key (if possible).            
+            // Remove a TSIG key (if possible).
             TsigCommand::Remove { name } => {
                 let res: Result<TsigRemoveResult, TsigRemoveError> =
                     client.post_json(&format!("tsig/{name}/remove")).await?;

From 3756c89652d8c26a58ddd9d505ed9f2f80c0d544 Mon Sep 17 00:00:00 2001
From: ximon18 <3304436+ximon18@users.noreply.github.com>
Date: Fri, 17 Apr 2026 15:22:16 +0200
Subject: [PATCH 031/113] Report the set of supported TSIG algorithms in the
 CLI detailed help.

---
 crates/cli/src/commands/tsig.rs | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/crates/cli/src/commands/tsig.rs b/crates/cli/src/commands/tsig.rs
index a53487b1b..60b872775 100644
--- a/crates/cli/src/commands/tsig.rs
+++ b/crates/cli/src/commands/tsig.rs
@@ -28,6 +28,12 @@ pub enum TsigCommand {
         ///
         /// Can be omitted if provided as part of the name.
         /// Required if `[SECRET]` is provided.
+        ///
+        /// Must be one of:
+        ///   hmac-sha1
+        ///   hmac-sha256
+        ///   hmac-sha384
+        ///   hmac-sha512
         #[arg(requires = "secret")]
         alg: Option<TsigAlgorithm>,
 

From 78b1db035e2c41b0f1e5671c4a38e3a4cfcb605a Mon Sep 17 00:00:00 2001
From: ximon18 <3304436+ximon18@users.noreply.github.com>
Date: Fri, 17 Apr 2026 15:22:47 +0200
Subject: [PATCH 032/113] Make tsig list output closer in style to the new zone
 status CLI output format.

---
 crates/cli/src/commands/tsig.rs | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/crates/cli/src/commands/tsig.rs b/crates/cli/src/commands/tsig.rs
index 60b872775..5d008a52a 100644
--- a/crates/cli/src/commands/tsig.rs
+++ b/crates/cli/src/commands/tsig.rs
@@ -160,13 +160,15 @@ impl Tsig {
                         .collect::<Vec<String>>()
                         .join(", ");
 
-                    print!("{tsig_key_name}: used by zones: ");
+                    println!("{tsig_key_name}");
+                    print!("  zones: ");
                     if !zones.is_empty() {
                         println!("{zones}");
                     } else {
                         println!("none");
                     }
                 }
+
                 Ok(())
             }
         }

From f683960dbf519d4b5cb2c22e286e8c8b0db6f5a6 Mon Sep 17 00:00:00 2001
From: ximon18 <3304436+ximon18@users.noreply.github.com>
Date: Fri, 17 Apr 2026 15:23:05 +0200
Subject: [PATCH 033/113] Make error message less confusing.

---
 crates/cli/src/commands/tsig.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/crates/cli/src/commands/tsig.rs b/crates/cli/src/commands/tsig.rs
index 5d008a52a..d85b8ee00 100644
--- a/crates/cli/src/commands/tsig.rs
+++ b/crates/cli/src/commands/tsig.rs
@@ -195,7 +195,7 @@ impl FromStr for TsigAlgorithm {
             "hmac-sha256" => Ok(TsigAlgorithm::HmacSha256),
             "hmac-sha384" => Ok(TsigAlgorithm::HmacSha384),
             "hmac-sha512" => Ok(TsigAlgorithm::HmacSha512),
-            other => Err(format!("'{other}' is not a recognized TSIG algorithm")),
+            other => Err(format!("'{other}' is not a supported TSIG algorithm")),
         }
     }
 }

From 04cd2474dadd79e3f980f5f7051492862886d472 Mon Sep 17 00:00:00 2001
From: ximon18 <3304436+ximon18@users.noreply.github.com>
Date: Fri, 17 Apr 2026 15:43:03 +0200
Subject: [PATCH 034/113] Man page typo correction and remove pondered
 addition.

---
 doc/manual/source/man/cascade-zone.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/manual/source/man/cascade-zone.rst b/doc/manual/source/man/cascade-zone.rst
index 19bf284a6..1a476af21 100644
--- a/doc/manual/source/man/cascade-zone.rst
+++ b/doc/manual/source/man/cascade-zone.rst
@@ -42,13 +42,13 @@ Commands
 
 .. subcmd:: add
 
-   Register a new zone. The zone will be loaded, signed and published.
+   Register a new zone.
 
 .. subcmd:: remove
 
    Remove a zone.
 
-   .. note:: Once removed downstream servers will no longer be able to fetech
+   .. note:: Once removed downstream servers will no longer be able to fetch
              the zone!
 
 .. subcmd:: list

From 16d2619ebde05838e97ab45930e73dd0fb09b3e7 Mon Sep 17 00:00:00 2001
From: ximon18 <3304436+ximon18@users.noreply.github.com>
Date: Fri, 17 Apr 2026 15:50:22 +0200
Subject: [PATCH 035/113] cascade zone add man page text improvements.

---
 doc/manual/source/man/cascade-zone.rst | 24 ++++++++++++++----------
 1 file changed, 14 insertions(+), 10 deletions(-)

diff --git a/doc/manual/source/man/cascade-zone.rst b/doc/manual/source/man/cascade-zone.rst
index 1a476af21..034d51926 100644
--- a/doc/manual/source/man/cascade-zone.rst
+++ b/doc/manual/source/man/cascade-zone.rst
@@ -92,19 +92,21 @@ Options for :subcmd:`zone add`
    or without port, defaults to port 53) or the path to a zone file locally
    available to the ``cascaded`` daemon.`
 
-   When specifying an upstream nameserver you may also optionally suffix it
-   with ``^<TSIG_KEY_NAME>`` to indicate that the specified RFC 8945 TSIG key
-   should be used to sign any SOA, AXFR and IXFR queries that will be sent to
-   the upstream source.
+   When specifying an upstream nameserver you may also optionally suffix it with
+   ``^<TSIG_KEY_NAME>`` to indicate that the specified RFC 8945 TSIG key should
+   be used to sign any SOA, AXFR and IXFR queries that will be sent to the
+   upstream source.
 
    Zones sourced from an upstream nameserver will be automatically updated if
    a new version is detected. This can happen if the upstream nameserver sends
-   an RFC 1996 NOTIFY message to Cascade, or if an IXFR or SOA query (if the
-   upstream responds with NOTIMP to an IXFR request) sent by Cascade (due to a
-   SOA timer expiring) discovers that a newer SOA SERIAL is available, or due
-   to an operator issuing a `zone reload` command. For zones that have already
-   been retrieved at least once via AXFR, subsequent refreshes will attempt to
-   use IXFR and fallback to AXFR if IXFR is not available.
+   an RFC 1996 NOTIFY message to Cascade, or if a via an IXFR or SOA query it
+   is discovered that the SOA SERIAL at the upstream nameserver is "higher" [1]
+   than the last version that Cascade loaded, or due to an operator issuing a
+   `zone reload` command.
+
+   For zones that have already been retrieved at least once via AXFR, subsequent
+   refreshes will attempt to use IXFR and fallback to AXFR if IXFR is not
+   available.
 
    .. note:: When providing the path to a zone file to load, if :subcmd:`zone
              add` is executed on a different host than where the ``cascaded``
@@ -113,6 +115,8 @@ Options for :subcmd:`zone add`
    .. note:: Note: In order to use a TSIG key you MUST also supply the key to
              Cascade via :subcmd:`tsig add`.
 
+   [1]: https://www.rfc-editor.org/rfc/rfc1982#section-3.2
+
 .. option:: --policy <POLICY>
 
    Policy to use for this zone.

From deb0a2151493174994c68c685f8bfc6b22e167a6 Mon Sep 17 00:00:00 2001
From: ximon18 <3304436+ximon18@users.noreply.github.com>
Date: Fri, 17 Apr 2026 15:52:43 +0200
Subject: [PATCH 036/113] Minor cascade-tsig man page improvement.

---
 doc/manual/source/man/cascade-tsig.rst | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index f446d23f8..43509add9 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -17,7 +17,8 @@ Synopsis
 Description
 -----------
 
-Manage RFC 8945 TSIG keys for authenticating zone transfers.
+Manage RFC 8945 TSIG keys for authenticating zone transfer (AXFR, IXFR) and
+related messages (SOA and NOTIFY).
 
 .. tip:: Cascade isn't currently able to generate TSIG keys itself.
          One way to generate a TSIG key is to use the `tsig-keygen

From e790b75c62a0f3d7b9b113ce6de8e9b47ea1efdc Mon Sep 17 00:00:00 2001
From: ximon18 <3304436+ximon18@users.noreply.github.com>
Date: Fri, 17 Apr 2026 15:59:56 +0200
Subject: [PATCH 037/113] Rebuild man pages.

---
 .../_sphinx_javascript_frameworks_compat.js   | 123 ++++++++++++++++++
 doc/manual/build/man/_static/jquery.js        |   2 +
 doc/manual/build/man/cascade-debug.1          |   2 +-
 doc/manual/build/man/cascade-health.1         |   2 +-
 doc/manual/build/man/cascade-hsm.1            |   2 +-
 doc/manual/build/man/cascade-keyset.1         |   2 +-
 doc/manual/build/man/cascade-policy.1         |   2 +-
 doc/manual/build/man/cascade-status.1         |   2 +-
 doc/manual/build/man/cascade-template.1       |   2 +-
 doc/manual/build/man/cascade-tsig.1           |   7 +-
 doc/manual/build/man/cascade-zone.1           |  30 +++--
 doc/manual/build/man/cascade.1                |   2 +-
 doc/manual/build/man/cascaded-config.toml.5   |   2 +-
 doc/manual/build/man/cascaded-policy.toml.5   |   2 +-
 doc/manual/build/man/cascaded.1               |   2 +-
 15 files changed, 157 insertions(+), 27 deletions(-)
 create mode 100644 doc/manual/build/man/_static/_sphinx_javascript_frameworks_compat.js
 create mode 100644 doc/manual/build/man/_static/jquery.js

diff --git a/doc/manual/build/man/_static/_sphinx_javascript_frameworks_compat.js b/doc/manual/build/man/_static/_sphinx_javascript_frameworks_compat.js
new file mode 100644
index 000000000..81415803e
--- /dev/null
+++ b/doc/manual/build/man/_static/_sphinx_javascript_frameworks_compat.js
@@ -0,0 +1,123 @@
+/* Compatability shim for jQuery and underscores.js.
+ *
+ * Copyright Sphinx contributors
+ * Released under the two clause BSD licence
+ */
+
+/**
+ * small helper function to urldecode strings
+ *
+ * See https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/decodeURIComponent#Decoding_query_parameters_from_a_URL
+ */
+jQuery.urldecode = function(x) {
+    if (!x) {
+        return x
+    }
+    return decodeURIComponent(x.replace(/\+/g, ' '));
+};
+
+/**
+ * small helper function to urlencode strings
+ */
+jQuery.urlencode = encodeURIComponent;
+
+/**
+ * This function returns the parsed url parameters of the
+ * current request. Multiple values per key are supported,
+ * it will always return arrays of strings for the value parts.
+ */
+jQuery.getQueryParameters = function(s) {
+    if (typeof s === 'undefined')
+        s = document.location.search;
+    var parts = s.substr(s.indexOf('?') + 1).split('&');
+    var result = {};
+    for (var i = 0; i < parts.length; i++) {
+        var tmp = parts[i].split('=', 2);
+        var key = jQuery.urldecode(tmp[0]);
+        var value = jQuery.urldecode(tmp[1]);
+        if (key in result)
+            result[key].push(value);
+        else
+            result[key] = [value];
+    }
+    return result;
+};
+
+/**
+ * highlight a given string on a jquery object by wrapping it in
+ * span elements with the given class name.
+ */
+jQuery.fn.highlightText = function(text, className) {
+    function highlight(node, addItems) {
+        if (node.nodeType === 3) {
+            var val = node.nodeValue;
+            var pos = val.toLowerCase().indexOf(text);
+            if (pos >= 0 &&
+                !jQuery(node.parentNode).hasClass(className) &&
+                !jQuery(node.parentNode).hasClass("nohighlight")) {
+                var span;
+                var isInSVG = jQuery(node).closest("body, svg, foreignObject").is("svg");
+                if (isInSVG) {
+                    span = document.createElementNS("http://www.w3.org/2000/svg", "tspan");
+                } else {
+                    span = document.createElement("span");
+                    span.className = className;
+                }
+                span.appendChild(document.createTextNode(val.substr(pos, text.length)));
+                node.parentNode.insertBefore(span, node.parentNode.insertBefore(
+                    document.createTextNode(val.substr(pos + text.length)),
+                    node.nextSibling));
+                node.nodeValue = val.substr(0, pos);
+                if (isInSVG) {
+                    var rect = document.createElementNS("http://www.w3.org/2000/svg", "rect");
+                    var bbox = node.parentElement.getBBox();
+                    rect.x.baseVal.value = bbox.x;
+                    rect.y.baseVal.value = bbox.y;
+                    rect.width.baseVal.value = bbox.width;
+                    rect.height.baseVal.value = bbox.height;
+                    rect.setAttribute('class', className);
+                    addItems.push({
+                        "parent": node.parentNode,
+                        "target": rect});
+                }
+            }
+        }
+        else if (!jQuery(node).is("button, select, textarea")) {
+            jQuery.each(node.childNodes, function() {
+                highlight(this, addItems);
+            });
+        }
+    }
+    var addItems = [];
+    var result = this.each(function() {
+        highlight(this, addItems);
+    });
+    for (var i = 0; i < addItems.length; ++i) {
+        jQuery(addItems[i].parent).before(addItems[i].target);
+    }
+    return result;
+};
+
+/*
+ * backward compatibility for jQuery.browser
+ * This will be supported until firefox bug is fixed.
+ */
+if (!jQuery.browser) {
+    jQuery.uaMatch = function(ua) {
+        ua = ua.toLowerCase();
+
+        var match = /(chrome)[ \/]([\w.]+)/.exec(ua) ||
+            /(webkit)[ \/]([\w.]+)/.exec(ua) ||
+            /(opera)(?:.*version|)[ \/]([\w.]+)/.exec(ua) ||
+            /(msie) ([\w.]+)/.exec(ua) ||
+            ua.indexOf("compatible") < 0 && /(mozilla)(?:.*? rv:([\w.]+)|)/.exec(ua) ||
+            [];
+
+        return {
+            browser: match[ 1 ] || "",
+            version: match[ 2 ] || "0"
+        };
+    };
+    jQuery.browser = {};
+    jQuery.browser[jQuery.uaMatch(navigator.userAgent).browser] = true;
+}
diff --git a/doc/manual/build/man/_static/jquery.js b/doc/manual/build/man/_static/jquery.js
new file mode 100644
index 000000000..c4c6022f2
--- /dev/null
+++ b/doc/manual/build/man/_static/jquery.js
@@ -0,0 +1,2 @@
+/*! jQuery v3.6.0 | (c) OpenJS Foundation and other contributors | jquery.org/license */
+!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e||"function"==typeof e?n[o.call(e)]||"object":typeof e}var f="3.6.0",S=function(e,t){return new S.fn.init(e,t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n||0===t||"number"==typeof t&&0<t&&t-1 in e)}S.fn=S.prototype={jquery:f,constructor:S,length:0,toArray:function(){return s.call(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(s.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject||this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]||{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]||{},s++),"object"==typeof a||m(a)||(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(S.isPlainObject(r)||(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i||S.isPlainObject(n)?n:{},i=!1,a[t]=S.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},S.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e||"[object Object]"!==o.call(e))&&(!(t=r(e))||"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.nonce},n)},each:function(e,t){var n,r=0;if(p(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t||[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:y}),"function"==typeof Symbol&&(S.fn[Symbol.iterator]=t[Symbol.iterator]),S.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var d=function(n){var e,d,b,o,i,h,f,g,w,u,l,T,C,a,E,v,s,c,y,S="sizzle"+1*new Date,p=n.document,k=0,r=0,m=ue(),x=ue(),A=ue(),N=ue(),j=function(e,t){return e===t&&(l=!0),0},D={}.hasOwnProperty,t=[],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked|selected|async|autofocus|autoplay|controls|defer|disabled|hidden|ismap|loop|multiple|open|readonly|required|scoped",M="[\\x20\\t\\r\\n\\f]",I="(?:\\\\[\\da-fA-F]{1,6}"+M+"?|\\\\[^\\r\\n\\f]|[\\w-]|[^\0-\\x7f])+",W="\\["+M+"*("+I+")(?:"+M+"*([*^$|!~]?=)"+M+"*(?:'((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\"|("+I+"))|)"+M+"*\\]",F=":("+I+")(?:\\((('((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\")|((?:\\\\.|[^\\\\()[\\]]|"+W+")*)|.*)\\)|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+|((?:^|[^\\\\])(?:\\\\.)*)"+M+"+$","g"),_=new RegExp("^"+M+"*,"+M+"*"),z=new RegExp("^"+M+"*([>+~]|"+M+")"+M+"*"),U=new RegExp(M+"|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\("+M+"*(even|odd|(([+-]|)(\\d*)n|)"+M+"*(?:([+-]|)"+M+"*(\\d+)|))"+M+"*\\)|)","i"),bool:new RegExp("^(?:"+R+")$","i"),needsContext:new RegExp("^"+M+"*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\("+M+"*((?:-\\d)?\\d*)"+M+"*\\)|)(?=[^-]|$)","i")},Y=/HTML$/i,Q=/^(?:input|select|textarea|button)$/i,J=/^h\d$/i,K=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)|(\w+)|\.([\w-]+))$/,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t||(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10|55296,1023&n|56320))},re=/([\0-\x1f\x7f]|^-?\d)|^-$|[^\0-\x1f\x7f-\uFFFF\w-]/g,ie=function(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n||[],"string"!=typeof t||!t||1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e||C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)return n.push(a),n}else if(f&&(a=f.getElementById(i))&&y(e,a)&&a.id===i)return n.push(a),n}else{if(u[2])return H.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])&&d.getElementsByClassName&&e.getElementsByClassName)return H.apply(n,e.getElementsByClassName(i)),n}if(d.qsa&&!N[t+" "]&&(!v||!v.test(t))&&(1!==p||"object"!==e.nodeName.toLowerCase())){if(c=t,f=e,1===p&&(U.test(t)||z.test(t))){(f=ee.test(t)&&ye(e.parentNode)||e)===e&&d.scope||((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(e){N(t,!0)}finally{s===S&&e.removeAttribute("id")}}}return g(t.replace($,"$1"),e,n,r)}function ue(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===t}}function he(n){return function(e){var t=e.nodeName.toLowerCase();return("input"===t||"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t||e.isDisabled!==!t&&ae(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument||e).documentElement;return!Y.test(t||n&&n.nodeName||"HTML")},T=se.setDocument=function(e){var t,n,r=e?e.ownerDocument||e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e).appendChild(C.createElement("div")),"undefined"!=typeof e.querySelectorAll&&!e.querySelectorAll(":scope fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(function(e){return a.appendChild(e).id=S,!C.getElementsByName||!C.getElementsByName(S).length}),d.getById?(b.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n=t.getElementById(e);return n?[n]:[]}}):(b.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++])1===n.nodeType&&r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){var t;a.appendChild(e).innerHTML="<a id='"+S+"'></a><select id='"+S+"-\r\\' msallowcapture=''><option selected=''></option></select>",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[*^$]="+M+"*(?:''|\"\")"),e.querySelectorAll("[selected]").length||v.push("\\["+M+"*(?:value|"+R+")"),e.querySelectorAll("[id~="+S+"-]").length||v.push("~="),(t=C.createElement("input")).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length||v.push("\\["+M+"*name"+M+"*="+M+"*(?:''|\"\")"),e.querySelectorAll(":checked").length||v.push(":checked"),e.querySelectorAll("a#"+S+"+*").length||v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='disabled'></a><select disabled='disabled'><option/></select>";var t=C.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"*[*^$|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&v.push(":enabled",":disabled"),e.querySelectorAll("*,:x"),v.push(",.*:")})),(d.matchesSelector=K.test(c=a.matches||a.webkitMatchesSelector||a.mozMatchesSelector||a.oMatchesSelector||a.msMatchesSelector))&&ce(function(e){d.disconnectedMatch=c.call(e,"*"),c.call(e,"[s!='']:x"),s.push("!=",F)}),v=v.length&&new RegExp(v.join("|")),s=s.length&&new RegExp(s.join("|")),t=K.test(a.compareDocumentPosition),y=t||K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r||!(!r||1!==r.nodeType||!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},j=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPosition-!t.compareDocumentPosition;return n||(1&(n=(e.ownerDocument||e)==(t.ownerDocument||t)?e.compareDocumentPosition(t):1)||!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C||e.ownerDocument==p&&y(p,e)?-1:t==C||t.ownerDocument==p&&y(p,t)?1:u?P(u,e)-P(u,t):0:4&n?-1:1)}:function(e,t){if(e===t)return l=!0,0;var n,r=0,i=e.parentNode,o=t.parentNode,a=[e],s=[t];if(!i||!o)return e==C?-1:t==C?1:i?-1:o?1:u?P(u,e)-P(u,t):0;if(i===o)return pe(e,t);n=e;while(n=n.parentNode)a.unshift(n);n=t;while(n=n.parentNode)s.unshift(n);while(a[r]===s[r])r++;return r?pe(a[r],s[r]):a[r]==p?-1:s[r]==p?1:0}),C},se.matches=function(e,t){return se(e,null,null,t)},se.matchesSelector=function(e,t){if(T(e),d.matchesSelector&&E&&!N[t+" "]&&(!s||!s.test(t))&&(!v||!v.test(t)))try{var n=c.call(e,t);if(n||d.disconnectedMatch||e.document&&11!==e.document.nodeType)return n}catch(e){N(t,!0)}return 0<se(t,C,null,[e]).length},se.contains=function(e,t){return(e.ownerDocument||e)!=C&&T(e),y(e,t)},se.attr=function(e,t){(e.ownerDocument||e)!=C&&T(e);var n=b.attrHandle[t.toLowerCase()],r=n&&D.call(b.attrHandle,t.toLowerCase())?n(e,t,!E):void 0;return void 0!==r?r:d.attributes||!E?e.getAttribute(t):(r=e.getAttributeNode(t))&&r.specified?r.value:null},se.escape=function(e){return(e+"").replace(re,ie)},se.error=function(e){throw new Error("Syntax error, unrecognized expression: "+e)},se.uniqueSort=function(e){var t,n=[],r=0,i=0;if(l=!d.detectDuplicates,u=!d.sortStable&&e.slice(0),e.sort(j),l){while(t=e[i++])t===e[i]&&(r=n.push(i));while(r--)e.splice(n[r],1)}return u=null,e},o=se.getText=function(e){var t,n="",r=0,i=e.nodeType;if(i){if(1===i||9===i||11===i){if("string"==typeof e.textContent)return e.textContent;for(e=e.firstChild;e;e=e.nextSibling)n+=o(e)}else if(3===i||4===i)return e.nodeValue}else while(t=e[r++])n+=o(t);return n},(b=se.selectors={cacheLength:50,createPseudo:le,match:G,attrHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){return e[1]=e[1].replace(te,ne),e[3]=(e[3]||e[4]||e[5]||"").replace(te,ne),"~="===e[2]&&(e[3]=" "+e[3]+" "),e.slice(0,4)},CHILD:function(e){return e[1]=e[1].toLowerCase(),"nth"===e[1].slice(0,3)?(e[3]||se.error(e[0]),e[4]=+(e[4]?e[5]+(e[6]||1):2*("even"===e[3]||"odd"===e[3])),e[5]=+(e[7]+e[8]||"odd"===e[3])):e[3]&&se.error(e[0]),e},PSEUDO:function(e){var t,n=!e[6]&&e[2];return G.CHILD.test(e[0])?null:(e[3]?e[2]=e[4]||e[5]||"":n&&X.test(n)&&(t=h(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e.replace(te,ne).toLowerCase();return"*"===e?function(){return!0}:function(e){return e.nodeName&&e.nodeName.toLowerCase()===t}},CLASS:function(e){var t=m[e+" "];return t||(t=new RegExp("(^|"+M+")"+e+"("+M+"|$)"))&&m(e,function(e){return t.test("string"==typeof e.className&&e.className||"undefined"!=typeof e.getAttribute&&e.getAttribute("class")||"")})},ATTR:function(n,r,i){return function(e){var t=se.attr(e,n);return null==t?"!="===r:!r||(t+="","="===r?t===i:"!="===r?t!==i:"^="===r?i&&0===t.indexOf(i):"*="===r?i&&-1<t.indexOf(i):"$="===r?i&&t.slice(-i.length)===i:"~="===r?-1<(" "+t.replace(B," ")+" ").indexOf(i):"|="===r&&(t===i||t.slice(0,i.length+1)===i+"-"))}},CHILD:function(h,e,t,g,v){var y="nth"!==h.slice(0,3),m="last"!==h.slice(-4),x="of-type"===e;return 1===g&&0===v?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]||(a[S]={}))[a.uniqueID]||(o[a.uniqueID]={}))[h]||[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]||(d=s=0)||u.pop())if(1===a.nodeType&&++d&&a===e){i[h]=[k,s,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]||(a[S]={}))[a.uniqueID]||(o[a.uniqueID]={}))[h]||[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]||(d=s=0)||u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]||(a[S]={}))[a.uniqueID]||(o[a.uniqueID]={}))[h]=[k,d]),a===e))break;return(d-=v)===g||d%g==0&&0<=d/g}}},PSEUDO:function(e,o){var t,a=b.pseudos[e]||b.setFilters[e.toLowerCase()]||se.error("unsupported pseudo: "+e);return a[S]?a(o):1<a.length?(t=[e,e,"",o],b.setFilters.hasOwnProperty(e.toLowerCase())?le(function(e,t){var n,r=a(e,o),i=r.length;while(i--)e[n=P(e,r[i])]=!(t[n]=r[i])}):function(e){return a(e,0,t)}):a}},pseudos:{not:le(function(e){var r=[],i=[],s=f(e.replace($,"$1"));return s[S]?le(function(e,t,n,r){var i,o=s(e,null,r,[]),a=e.length;while(a--)(i=o[a])&&(e[a]=!(t[a]=i))}):function(e,t,n){return r[0]=e,s(r,null,n,i),r[0]=null,!i.pop()}}),has:le(function(t){return function(e){return 0<se(t,e).length}}),contains:le(function(t){return t=t.replace(te,ne),function(e){return-1<(e.textContent||o(e)).indexOf(t)}}),lang:le(function(n){return V.test(n||"")||se.error("unsupported lang: "+n),n=n.replace(te,ne).toLowerCase(),function(e){var t;do{if(t=E?e.lang:e.getAttribute("xml:lang")||e.getAttribute("lang"))return(t=t.toLowerCase())===n||0===t.indexOf(n+"-")}while((e=e.parentNode)&&1===e.nodeType);return!1}}),target:function(e){var t=n.location&&n.location.hash;return t&&t.slice(1)===e.id},root:function(e){return e===a},focus:function(e){return e===C.activeElement&&(!C.hasFocus||C.hasFocus())&&!!(e.type||e.href||~e.tabIndex)},enabled:ge(!1),disabled:ge(!0),checked:function(e){var t=e.nodeName.toLowerCase();return"input"===t&&!!e.checked||"option"===t&&!!e.selected},selected:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return J.test(e.nodeName)},input:function(e){return Q.test(e.nodeName)},button:function(e){var t=e.nodeName.toLowerCase();return"input"===t&&"button"===e.type||"button"===t},text:function(e){var t;return"input"===e.nodeName.toLowerCase()&&"text"===e.type&&(null==(t=e.getAttribute("type"))||"text"===t.toLowerCase())},first:ve(function(){return[0]}),last:ve(function(e,t){return[t-1]}),eq:ve(function(e,t,n){return[n<0?n+t:n]}),even:ve(function(e,t){for(var n=0;n<t;n+=2)e.push(n);return e}),odd:ve(function(e,t){for(var n=1;n<t;n+=2)e.push(n);return e}),lt:ve(function(e,t,n){for(var r=n<0?n+t:t<n?t:n;0<=--r;)e.push(r);return e}),gt:ve(function(e,t,n){for(var r=n<0?n+t:n;++r<t;)e.push(r);return e})}}).pseudos.nth=b.pseudos.eq,{radio:!0,checkbox:!0,file:!0,password:!0,image:!0})b.pseudos[e]=de(e);for(e in{submit:!0,reset:!0})b.pseudos[e]=he(e);function me(){}function xe(e){for(var t=0,n=e.length,r="";t<n;t++)r+=e[t].value;return r}function be(s,e,t){var u=e.dir,l=e.next,c=l||u,f=t&&"parentNode"===c,p=r++;return e.first?function(e,t,n){while(e=e[u])if(1===e.nodeType||f)return s(e,t,n);return!1}:function(e,t,n){var r,i,o,a=[k,p];if(n){while(e=e[u])if((1===e.nodeType||f)&&s(e,t,n))return!0}else while(e=e[u])if(1===e.nodeType||f)if(i=(o=e[S]||(e[S]={}))[e.uniqueID]||(o[e.uniqueID]={}),l&&l===e.nodeName.toLowerCase())e=e[u]||e;else{if((r=i[c])&&r[0]===k&&r[1]===p)return a[2]=r[2];if((i[c]=a)[2]=s(e,t,n))return!0}return!1}}function we(i){return 1<i.length?function(e,t,n){var r=i.length;while(r--)if(!i[r](e,t,n))return!1;return!0}:i[0]}function Te(e,t,n,r,i){for(var o,a=[],s=0,u=e.length,l=null!=t;s<u;s++)(o=e[s])&&(n&&!n(o,r,i)||(a.push(o),l&&t.push(s)));return a}function Ce(d,h,g,v,y,e){return v&&!v[S]&&(v=Ce(v)),y&&!y[S]&&(y=Ce(y,e)),le(function(e,t,n,r){var i,o,a,s=[],u=[],l=t.length,c=e||function(e,t,n){for(var r=0,i=t.length;r<i;r++)se(e,t[r],n);return n}(h||"*",n.nodeType?[n]:n,[]),f=!d||!e&&h?c:Te(c,s,d,n,r),p=g?y||(e?d:l||v)?[]:t:f;if(g&&g(f,p,n,r),v){i=Te(p,u),v(i,[],n,r),o=i.length;while(o--)(a=i[o])&&(p[u[o]]=!(f[u[o]]=a))}if(e){if(y||d){if(y){i=[],o=p.length;while(o--)(a=p[o])&&i.push(f[o]=a);y(null,p=[],i,r)}o=p.length;while(o--)(a=p[o])&&-1<(i=y?P(e,a):s[o])&&(e[i]=!(t[i]=a))}}else p=Te(p===t?p.splice(l,p.length):p),y?y(null,t,p,r):H.apply(t,p)})}function Ee(e){for(var i,t,n,r=e.length,o=b.relative[e[0].type],a=o||b.relative[" "],s=o?1:0,u=be(function(e){return e===i},a,!0),l=be(function(e){return-1<P(i,e)},a,!0),c=[function(e,t,n){var r=!o&&(n||t!==w)||((i=t).nodeType?u(e,t,n):l(e,t,n));return i=null,r}];s<r;s++)if(t=b.relative[e[s].type])c=[be(we(c),t)];else{if((t=b.filter[e[s].type].apply(null,e[s].matches))[S]){for(n=++s;n<r;n++)if(b.relative[e[n].type])break;return Ce(1<s&&we(c),1<s&&xe(e.slice(0,s-1).concat({value:" "===e[s-2].type?"*":""})).replace($,"$1"),t,s<n&&Ee(e.slice(s,n)),n<r&&Ee(e=e.slice(n)),n<r&&xe(e))}c.push(t)}return we(c)}return me.prototype=b.filters=b.pseudos,b.setFilters=new me,h=se.tokenize=function(e,t){var n,r,i,o,a,s,u,l=x[e+" "];if(l)return t?0:l.slice(0);a=e,s=[],u=b.preFilter;while(a){for(o in n&&!(r=_.exec(a))||(r&&(a=a.slice(r[0].length)||a),s.push(i=[])),n=!1,(r=z.exec(a))&&(n=r.shift(),i.push({value:n,type:r[0].replace($," ")}),a=a.slice(n.length)),b.filter)!(r=G[o].exec(a))||u[o]&&!(r=u[o](r))||(n=r.shift(),i.push({value:n,type:o,matches:r}),a=a.slice(n.length));if(!n)break}return t?a.length:a?se.error(e):x(e,s).slice(0)},f=se.compile=function(e,t){var n,v,y,m,x,r,i=[],o=[],a=A[e+" "];if(!a){t||(t=h(e)),n=t.length;while(n--)(a=Ee(t[n]))[S]?i.push(a):o.push(a);(a=A(e,(v=o,m=0<(y=i).length,x=0<v.length,r=function(e,t,n,r,i){var o,a,s,u=0,l="0",c=e&&[],f=[],p=w,d=e||x&&b.find.TAG("*",i),h=k+=null==p?1:Math.random()||.1,g=d.length;for(i&&(w=t==C||t||i);l!==g&&null!=(o=d[l]);l++){if(x&&o){a=0,t||o.ownerDocument==C||(T(o),n=!E);while(s=v[a++])if(s(o,t||C,n)){r.push(o);break}i&&(k=h)}m&&((o=!s&&o)&&u--,e&&c.push(o))}if(u+=l,m&&l!==u){a=0;while(s=y[a++])s(c,f,t,n);if(e){if(0<u)while(l--)c[l]||f[l]||(f[l]=q.call(r));f=Te(f)}H.apply(r,f),i&&!e&&0<f.length&&1<u+y.length&&se.uniqueSort(r)}return i&&(k=h,w=p),c},m?le(r):r))).selector=e}return a},g=se.select=function(e,t,n,r){var i,o,a,s,u,l="function"==typeof e&&e,c=!r&&h(e=l.selector||e);if(n=n||[],1===c.length){if(2<(o=c[0]=c[0].slice(0)).length&&"ID"===(a=o[0]).type&&9===t.nodeType&&E&&b.relative[o[1].type]){if(!(t=(b.find.ID(a.matches[0].replace(te,ne),t)||[])[0]))return n;l&&(t=t.parentNode),e=e.slice(o.shift().value.length)}i=G.needsContext.test(e)?0:o.length;while(i--){if(a=o[i],b.relative[s=a.type])break;if((u=b.find[s])&&(r=u(a.matches[0].replace(te,ne),ee.test(o[0].type)&&ye(t.parentNode)||t))){if(o.splice(i,1),!(e=r.length&&xe(o)))return H.apply(n,r),n;break}}}return(l||f(e,c))(r,t,!E,n,!t||ee.test(e)&&ye(t.parentNode)||t),n},d.sortStable=S.split("").sort(j).join("")===S,d.detectDuplicates=!!l,T(),d.sortDetached=ce(function(e){return 1&e.compareDocumentPosition(C.createElement("fieldset"))}),ce(function(e){return e.innerHTML="<a href='#'></a>","#"===e.firstChild.getAttribute("href")})||fe("type|href|height|width",function(e,t,n){if(!n)return e.getAttribute(t,"type"===t.toLowerCase()?1:2)}),d.attributes&&ce(function(e){return e.innerHTML="<input/>",e.firstChild.setAttribute("value",""),""===e.firstChild.getAttribute("value")})||fe("value",function(e,t,n){if(!n&&"input"===e.nodeName.toLowerCase())return e.defaultValue}),ce(function(e){return null==e.getAttribute("disabled")})||fe(R,function(e,t,n){var r;if(!n)return!0===e[t]?t.toLowerCase():(r=e.getAttributeNode(t))&&r.specified?r.value:null}),se}(C);S.find=d,S.expr=d.selectors,S.expr[":"]=S.expr.pseudos,S.uniqueSort=S.unique=d.uniqueSort,S.text=d.getText,S.isXMLDoc=d.isXML,S.contains=d.contains,S.escapeSelector=d.escape;var h=function(e,t,n){var r=[],i=void 0!==n;while((e=e[t])&&9!==e.nodeType)if(1===e.nodeType){if(i&&S(e).is(n))break;r.push(e)}return r},T=function(e,t){for(var n=[];e;e=e.nextSibling)1===e.nodeType&&e!==t&&n.push(e);return n},k=S.expr.match.needsContext;function A(e,t){return e.nodeName&&e.nodeName.toLowerCase()===t.toLowerCase()}var N=/^<([a-z][^\/\0>:\x20\t\r\n\f]*)[\x20\t\r\n\f]*\/?>(?:<\/\1>|)$/i;function j(e,n,r){return m(n)?S.grep(e,function(e,t){return!!n.call(e,t,e)!==r}):n.nodeType?S.grep(e,function(e){return e===n!==r}):"string"!=typeof n?S.grep(e,function(e){return-1<i.call(n,e)!==r}):S.filter(n,e,r)}S.filter=function(e,t,n){var r=t[0];return n&&(e=":not("+e+")"),1===t.length&&1===r.nodeType?S.find.matchesSelector(r,e)?[r]:[]:S.find.matches(e,S.grep(t,function(e){return 1===e.nodeType}))},S.fn.extend({find:function(e){var t,n,r=this.length,i=this;if("string"!=typeof e)return this.pushStack(S(e).filter(function(){for(t=0;t<r;t++)if(S.contains(i[t],this))return!0}));for(n=this.pushStack([]),t=0;t<r;t++)S.find(e,i[t],n);return 1<r?S.uniqueSort(n):n},filter:function(e){return this.pushStack(j(this,e||[],!1))},not:function(e){return this.pushStack(j(this,e||[],!0))},is:function(e){return!!j(this,"string"==typeof e&&k.test(e)?S(e):e||[],!1).length}});var D,q=/^(?:\s*(<[\w\W]+>)[^>]*|#([\w-]+))$/;(S.fn.init=function(e,t,n){var r,i;if(!e)return this;if(n=n||D,"string"==typeof e){if(!(r="<"===e[0]&&">"===e[e.length-1]&&3<=e.length?[null,e,null]:q.exec(e))||!r[1]&&t)return!t||t.jquery?(t||n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof S?t[0]:t,S.merge(this,S.parseHTML(r[1],t&&t.nodeType?t.ownerDocument||t:E,!0)),N.test(r[1])&&S.isPlainObject(t))for(r in t)m(this[r])?this[r](t[r]):this.attr(r,t[r]);return this}return(i=E.getElementById(r[2]))&&(this[0]=i,this.length=1),this}return e.nodeType?(this[0]=e,this.length=1,this):m(e)?void 0!==n.ready?n.ready(e):e(S):S.makeArray(e,this)}).prototype=S.fn,D=S(E);var L=/^(?:parents|prev(?:Until|All))/,H={children:!0,contents:!0,next:!0,prev:!0};function O(e,t){while((e=e[t])&&1!==e.nodeType);return e}S.fn.extend({has:function(e){var t=S(e,this),n=t.length;return this.filter(function(){for(var e=0;e<n;e++)if(S.contains(this,t[e]))return!0})},closest:function(e,t){var n,r=0,i=this.length,o=[],a="string"!=typeof e&&S(e);if(!k.test(e))for(;r<i;r++)for(n=this[r];n&&n!==t;n=n.parentNode)if(n.nodeType<11&&(a?-1<a.index(n):1===n.nodeType&&S.find.matchesSelector(n,e))){o.push(n);break}return this.pushStack(1<o.length?S.uniqueSort(o):o)},index:function(e){return e?"string"==typeof e?i.call(S(e),this[0]):i.call(this,e.jquery?e[0]:e):this[0]&&this[0].parentNode?this.first().prevAll().length:-1},add:function(e,t){return this.pushStack(S.uniqueSort(S.merge(this.get(),S(e,t))))},addBack:function(e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}}),S.each({parent:function(e){var t=e.parentNode;return t&&11!==t.nodeType?t:null},parents:function(e){return h(e,"parentNode")},parentsUntil:function(e,t,n){return h(e,"parentNode",n)},next:function(e){return O(e,"nextSibling")},prev:function(e){return O(e,"previousSibling")},nextAll:function(e){return h(e,"nextSibling")},prevAll:function(e){return h(e,"previousSibling")},nextUntil:function(e,t,n){return h(e,"nextSibling",n)},prevUntil:function(e,t,n){return h(e,"previousSibling",n)},siblings:function(e){return T((e.parentNode||{}).firstChild,e)},children:function(e){return T(e.firstChild)},contents:function(e){return null!=e.contentDocument&&r(e.contentDocument)?e.contentDocument:(A(e,"template")&&(e=e.content||e),S.merge([],e.childNodes))}},function(r,i){S.fn[r]=function(e,t){var n=S.map(this,i,e);return"Until"!==r.slice(-5)&&(t=e),t&&"string"==typeof t&&(n=S.filter(t,n)),1<this.length&&(H[r]||S.uniqueSort(n),L.test(r)&&n.reverse()),this.pushStack(n)}});var P=/[^\x20\t\r\n\f]+/g;function R(e){return e}function M(e){throw e}function I(e,t,n,r){var i;try{e&&m(i=e.promise)?i.call(e).done(t).fail(n):e&&m(i=e.then)?i.call(e,t,n):t.apply(void 0,[e].slice(r))}catch(e){n.apply(void 0,[e])}}S.Callbacks=function(r){var e,n;r="string"==typeof r?(e=r,n={},S.each(e.match(P)||[],function(e,t){n[t]=!0}),n):S.extend({},r);var i,t,o,a,s=[],u=[],l=-1,c=function(){for(a=a||r.once,o=i=!0;u.length;l=-1){t=u.shift();while(++l<s.length)!1===s[l].apply(t[0],t[1])&&r.stopOnFalse&&(l=s.length,t=!1)}r.memory||(t=!1),i=!1,a&&(s=t?[]:"")},f={add:function(){return s&&(t&&!i&&(l=s.length-1,u.push(t)),function n(e){S.each(e,function(e,t){m(t)?r.unique&&f.has(t)||s.push(t):t&&t.length&&"string"!==w(t)&&n(t)})}(arguments),t&&!i&&c()),this},remove:function(){return S.each(arguments,function(e,t){var n;while(-1<(n=S.inArray(t,s,n)))s.splice(n,1),n<=l&&l--}),this},has:function(e){return e?-1<S.inArray(e,s):0<s.length},empty:function(){return s&&(s=[]),this},disable:function(){return a=u=[],s=t="",this},disabled:function(){return!s},lock:function(){return a=u=[],t||i||(s=t=""),this},locked:function(){return!!a},fireWith:function(e,t){return a||(t=[e,(t=t||[]).slice?t.slice():t],u.push(t),i||c()),this},fire:function(){return f.fireWith(this,arguments),this},fired:function(){return!!o}};return f},S.extend({Deferred:function(e){var o=[["notify","progress",S.Callbacks("memory"),S.Callbacks("memory"),2],["resolve","done",S.Callbacks("once memory"),S.Callbacks("once memory"),0,"resolved"],["reject","fail",S.Callbacks("once memory"),S.Callbacks("once memory"),1,"rejected"]],i="pending",a={state:function(){return i},always:function(){return s.done(arguments).fail(arguments),this},"catch":function(e){return a.then(null,e)},pipe:function(){var i=arguments;return S.Deferred(function(r){S.each(o,function(e,t){var n=m(i[t[4]])&&i[t[4]];s[t[1]](function(){var e=n&&n.apply(this,arguments);e&&m(e.promise)?e.promise().progress(r.notify).done(r.resolve).fail(r.reject):r[t[0]+"With"](this,n?[e]:arguments)})}),i=null}).promise()},then:function(t,n,r){var u=0;function l(i,o,a,s){return function(){var n=this,r=arguments,e=function(){var e,t;if(!(i<u)){if((e=a.apply(n,r))===o.promise())throw new TypeError("Thenable self-resolution");t=e&&("object"==typeof e||"function"==typeof e)&&e.then,m(t)?s?t.call(e,l(u,o,R,s),l(u,o,M,s)):(u++,t.call(e,l(u,o,R,s),l(u,o,M,s),l(u,o,R,o.notifyWith))):(a!==R&&(n=void 0,r=[e]),(s||o.resolveWith)(n,r))}},t=s?e:function(){try{e()}catch(e){S.Deferred.exceptionHook&&S.Deferred.exceptionHook(e,t.stackTrace),u<=i+1&&(a!==M&&(n=void 0,r=[e]),o.rejectWith(n,r))}};i?t():(S.Deferred.getStackHook&&(t.stackTrace=S.Deferred.getStackHook()),C.setTimeout(t))}}return S.Deferred(function(e){o[0][3].add(l(0,e,m(r)?r:R,e.notifyWith)),o[1][3].add(l(0,e,m(t)?t:R)),o[2][3].add(l(0,e,m(n)?n:M))}).promise()},promise:function(e){return null!=e?S.extend(e,a):a}},s={};return S.each(o,function(e,t){var n=t[2],r=t[5];a[t[1]]=n.add,r&&n.add(function(){i=r},o[3-e][2].disable,o[3-e][3].disable,o[0][2].lock,o[0][3].lock),n.add(t[3].fire),s[t[0]]=function(){return s[t[0]+"With"](this===s?void 0:this,arguments),this},s[t[0]+"With"]=n.fireWith}),a.promise(s),e&&e.call(s,s),s},when:function(e){var n=arguments.length,t=n,r=Array(t),i=s.call(arguments),o=S.Deferred(),a=function(t){return function(e){r[t]=this,i[t]=1<arguments.length?s.call(arguments):e,--n||o.resolveWith(r,i)}};if(n<=1&&(I(e,o.done(a(t)).resolve,o.reject,!n),"pending"===o.state()||m(i[t]&&i[t].then)))return o.then();while(t--)I(i[t],a(t),o.reject);return o.promise()}});var W=/^(Eval|Internal|Range|Reference|Syntax|Type|URI)Error$/;S.Deferred.exceptionHook=function(e,t){C.console&&C.console.warn&&e&&W.test(e.name)&&C.console.warn("jQuery.Deferred exception: "+e.message,e.stack,t)},S.readyException=function(e){C.setTimeout(function(){throw e})};var F=S.Deferred();function B(){E.removeEventListener("DOMContentLoaded",B),C.removeEventListener("load",B),S.ready()}S.fn.ready=function(e){return F.then(e)["catch"](function(e){S.readyException(e)}),this},S.extend({isReady:!1,readyWait:1,ready:function(e){(!0===e?--S.readyWait:S.isReady)||(S.isReady=!0)!==e&&0<--S.readyWait||F.resolveWith(E,[S])}}),S.ready.then=F.then,"complete"===E.readyState||"loading"!==E.readyState&&!E.documentElement.doScroll?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)||(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){return t.toUpperCase()}function X(e){return e.replace(_,"ms-").replace(z,U)}var V=function(e){return 1===e.nodeType||9===e.nodeType||!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t||(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value:t,configurable:!0}))),t},set:function(e,t,n){var r,i=this.cache(e);if("string"==typeof t)i[X(t)]=n;else for(r in t)i[X(r)]=t[r];return i},get:function(e,t){return void 0===t?this.cache(e):e[this.expando]&&e[this.expando][X(t)]},access:function(e,t,n){return void 0===t||t&&"string"==typeof t&&void 0===n?this.get(e,t):(this.set(e,t,n),void 0!==n?n:t)},remove:function(e,t){var n,r=e[this.expando];if(void 0!==r){if(void 0!==t){n=(t=Array.isArray(t)?t.map(X):(t=X(t))in r?[t]:t.match(P)||[]).length;while(n--)delete r[t[n]]}(void 0===t||S.isEmptyObject(r))&&(e.nodeType?e[this.expando]=void 0:delete e[this.expando])}},hasData:function(e){var t=e[this.expando];return void 0!==t&&!S.isEmptyObject(t)}};var Y=new G,Q=new G,J=/^(?:\{[\w\W]*\}|\[[\w\W]*\])$/,K=/[A-Z]/g;function Z(e,t,n){var r,i;if(void 0===n&&1===e.nodeType)if(r="data-"+t.replace(K,"-$&").toLowerCase(),"string"==typeof(n=e.getAttribute(r))){try{n="true"===(i=n)||"false"!==i&&("null"===i?null:i===+i+""?+i:J.test(i)?JSON.parse(i):i)}catch(e){}Q.set(e,t,n)}else n=void 0;return n}S.extend({hasData:function(e){return Q.hasData(e)||Y.hasData(e)},data:function(e,t,n){return Q.access(e,t,n)},removeData:function(e,t){Q.remove(e,t)},_data:function(e,t,n){return Y.access(e,t,n)},_removeData:function(e,t){Y.remove(e,t)}}),S.fn.extend({data:function(n,e){var t,r,i,o=this[0],a=o&&o.attributes;if(void 0===n){if(this.length&&(i=Q.get(o),1===o.nodeType&&!Y.get(o,"hasDataAttrs"))){t=a.length;while(t--)a[t]&&0===(r=a[t].name).indexOf("data-")&&(r=X(r.slice(5)),Z(o,r,i[r]));Y.set(o,"hasDataAttrs",!0)}return i}return"object"==typeof n?this.each(function(){Q.set(this,n)}):$(this,function(e){var t;if(o&&void 0===e)return void 0!==(t=Q.get(o,n))?t:void 0!==(t=Z(o,n))?t:void 0;this.each(function(){Q.set(this,n,e)})},null,e,1<arguments.length,null,!0)},removeData:function(e){return this.each(function(){Q.remove(this,e)})}}),S.extend({queue:function(e,t,n){var r;if(e)return t=(t||"fx")+"queue",r=Y.get(e,t),n&&(!r||Array.isArray(n)?r=Y.access(e,t,S.makeArray(n)):r.push(n)),r||[]},dequeue:function(e,t){t=t||"fx";var n=S.queue(e,t),r=n.length,i=n.shift(),o=S._queueHooks(e,t);"inprogress"===i&&(i=n.shift(),r--),i&&("fx"===t&&n.unshift("inprogress"),delete o.stop,i.call(e,function(){S.dequeue(e,t)},o)),!r&&o&&o.empty.fire()},_queueHooks:function(e,t){var n=t+"queueHooks";return Y.get(e,n)||Y.access(e,n,{empty:S.Callbacks("once memory").add(function(){Y.remove(e,[t+"queue",n])})})}}),S.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<e?S.queue(this[0],t):void 0===n?this:this.each(function(){var e=S.queue(this,t,n);S._queueHooks(this,t),"fx"===t&&"inprogress"!==e[0]&&S.dequeue(this,t)})},dequeue:function(e){return this.each(function(){S.dequeue(this,e)})},clearQueue:function(e){return this.queue(e||"fx",[])},promise:function(e,t){var n,r=1,i=S.Deferred(),o=this,a=this.length,s=function(){--r||i.resolveWith(o,[o])};"string"!=typeof e&&(t=e,e=void 0),e=e||"fx";while(a--)(n=Y.get(o[a],e+"queueHooks"))&&n.empty&&(r++,n.empty.add(s));return s(),i.promise(t)}});var ee=/[+-]?(?:\d*\.|)\d+(?:[eE][+-]?\d+|)/.source,te=new RegExp("^(?:([+-])=|)("+ee+")([a-z%]*)$","i"),ne=["Top","Right","Bottom","Left"],re=E.documentElement,ie=function(e){return S.contains(e.ownerDocument,e)},oe={composed:!0};re.getRootNode&&(ie=function(e){return S.contains(e.ownerDocument,e)||e.getRootNode(oe)===e.ownerDocument});var ae=function(e,t){return"none"===(e=t||e).style.display||""===e.style.display&&ie(e)&&"none"===S.css(e,"display")};function se(e,t,n,r){var i,o,a=20,s=r?function(){return r.cur()}:function(){return S.css(e,t,"")},u=s(),l=n&&n[3]||(S.cssNumber[t]?"":"px"),c=e.nodeType&&(S.cssNumber[t]||"px"!==l&&+u)&&te.exec(S.css(e,t));if(c&&c[3]!==l){u/=2,l=l||c[3],c=+u||1;while(a--)S.style(e,t,c+l),(1-o)*(1-(o=s()/u||.5))<=0&&(a=0),c/=o;c*=2,S.style(e,t,c+l),n=n||[]}return n&&(c=+c||+u||0,i=n[1]?c+(n[1]+1)*n[2]:+n[2],r&&(r.unit=l,r.start=c,r.end=i)),i}var ue={};function le(e,t){for(var n,r,i,o,a,s,u,l=[],c=0,f=e.length;c<f;c++)(r=e[c]).style&&(n=r.style.display,t?("none"===n&&(l[c]=Y.get(r,"display")||null,l[c]||(r.style.display="")),""===r.style.display&&ae(r)&&(l[c]=(u=a=o=void 0,a=(i=r).ownerDocument,s=i.nodeName,(u=ue[s])||(o=a.body.appendChild(a.createElement(s)),u=S.css(o,"display"),o.parentNode.removeChild(o),"none"===u&&(u="block"),ue[s]=u)))):"none"!==n&&(l[c]="none",Y.set(r,"display",n)));for(c=0;c<f;c++)null!=l[c]&&(e[c].style.display=l[c]);return e}S.fn.extend({show:function(){return le(this,!0)},hide:function(){return le(this)},toggle:function(e){return"boolean"==typeof e?e?this.show():this.hide():this.each(function(){ae(this)?S(this).show():S(this).hide()})}});var ce,fe,pe=/^(?:checkbox|radio)$/i,de=/<([a-z][^\/\0>\x20\t\r\n\f]*)/i,he=/^$|^module$|\/(?:java|ecma)script/i;ce=E.createDocumentFragment().appendChild(E.createElement("div")),(fe=E.createElement("input")).setAttribute("type","radio"),fe.setAttribute("checked","checked"),fe.setAttribute("name","t"),ce.appendChild(fe),y.checkClone=ce.cloneNode(!0).cloneNode(!0).lastChild.checked,ce.innerHTML="<textarea>x</textarea>",y.noCloneChecked=!!ce.cloneNode(!0).lastChild.defaultValue,ce.innerHTML="<option></option>",y.option=!!ce.lastChild;var ge={thead:[1,"<table>","</table>"],col:[2,"<table><colgroup>","</colgroup></table>"],tr:[2,"<table><tbody>","</tbody></table>"],td:[3,"<table><tbody><tr>","</tr></tbody></table>"],_default:[0,"",""]};function ve(e,t){var n;return n="undefined"!=typeof e.getElementsByTagName?e.getElementsByTagName(t||"*"):"undefined"!=typeof e.querySelectorAll?e.querySelectorAll(t||"*"):[],void 0===t||t&&A(e,t)?S.merge([e],n):n}function ye(e,t){for(var n=0,r=e.length;n<r;n++)Y.set(e[n],"globalEval",!t||Y.get(t[n],"globalEval"))}ge.tbody=ge.tfoot=ge.colgroup=ge.caption=ge.thead,ge.th=ge.td,y.option||(ge.optgroup=ge.option=[1,"<select multiple='multiple'>","</select>"]);var me=/<|&#?\w+;/;function xe(e,t,n,r,i){for(var o,a,s,u,l,c,f=t.createDocumentFragment(),p=[],d=0,h=e.length;d<h;d++)if((o=e[d])||0===o)if("object"===w(o))S.merge(p,o.nodeType?[o]:o);else if(me.test(o)){a=a||f.appendChild(t.createElement("div")),s=(de.exec(o)||["",""])[1].toLowerCase(),u=ge[s]||ge._default,a.innerHTML=u[1]+S.htmlPrefilter(o)+u[2],c=u[0];while(c--)a=a.lastChild;S.merge(p,a.childNodes),(a=f.firstChild).textContent=""}else p.push(t.createTextNode(o));f.textContent="",d=0;while(o=p[d++])if(r&&-1<S.inArray(o,r))i&&i.push(o);else if(l=ie(o),a=ve(f.appendChild(o),"script"),l&&ye(a),n){c=0;while(o=a[c++])he.test(o.type||"")&&n.push(o)}return f}var be=/^([^.]*)(?:\.(.+)|)/;function we(){return!0}function Te(){return!1}function Ce(e,t){return e===function(){try{return E.activeElement}catch(e){}}()==("focus"===t)}function Ee(e,t,n,r,i,o){var a,s;if("object"==typeof t){for(s in"string"!=typeof n&&(r=r||n,n=void 0),t)Ee(e,s,n,r,t[s],o);return e}if(null==r&&null==i?(i=n,r=n=void 0):null==i&&("string"==typeof n?(i=r,r=void 0):(i=r,r=n,n=void 0)),!1===i)i=Te;else if(!i)return e;return 1===o&&(a=i,(i=function(e){return S().off(e),a.apply(this,arguments)}).guid=a.guid||(a.guid=S.guid++)),e.each(function(){S.event.add(this,t,i,r,n)})}function Se(e,i,o){o?(Y.set(e,i,!1),S.event.add(e,i,{namespace:!1,handler:function(e){var t,n,r=Y.get(this,i);if(1&e.isTrigger&&this[i]){if(r.length)(S.event.special[i]||{}).delegateType&&e.stopPropagation();else if(r=s.call(arguments),Y.set(this,i,r),t=o(this,i),this[i](),r!==(n=Y.get(this,i))||t?Y.set(this,i,!1):n={},r!==n)return e.stopImmediatePropagation(),e.preventDefault(),n&&n.value}else r.length&&(Y.set(this,i,{value:S.event.trigger(S.extend(r[0],S.Event.prototype),r.slice(1),this)}),e.stopImmediatePropagation())}})):void 0===Y.get(e,i)&&S.event.add(e,i,we)}S.event={global:{},add:function(t,e,n,r,i){var o,a,s,u,l,c,f,p,d,h,g,v=Y.get(t);if(V(t)){n.handler&&(n=(o=n).handler,i=o.selector),i&&S.find.matchesSelector(re,i),n.guid||(n.guid=S.guid++),(u=v.events)||(u=v.events=Object.create(null)),(a=v.handle)||(a=v.handle=function(e){return"undefined"!=typeof S&&S.event.triggered!==e.type?S.event.dispatch.apply(t,arguments):void 0}),l=(e=(e||"").match(P)||[""]).length;while(l--)d=g=(s=be.exec(e[l])||[])[1],h=(s[2]||"").split(".").sort(),d&&(f=S.event.special[d]||{},d=(i?f.delegateType:f.bindType)||d,f=S.event.special[d]||{},c=S.extend({type:d,origType:g,data:r,handler:n,guid:n.guid,selector:i,needsContext:i&&S.expr.match.needsContext.test(i),namespace:h.join(".")},o),(p=u[d])||((p=u[d]=[]).delegateCount=0,f.setup&&!1!==f.setup.call(t,r,h,a)||t.addEventListener&&t.addEventListener(d,a)),f.add&&(f.add.call(t,c),c.handler.guid||(c.handler.guid=n.guid)),i?p.splice(p.delegateCount++,0,c):p.push(c),S.event.global[d]=!0)}},remove:function(e,t,n,r,i){var o,a,s,u,l,c,f,p,d,h,g,v=Y.hasData(e)&&Y.get(e);if(v&&(u=v.events)){l=(t=(t||"").match(P)||[""]).length;while(l--)if(d=g=(s=be.exec(t[l])||[])[1],h=(s[2]||"").split(".").sort(),d){f=S.event.special[d]||{},p=u[d=(r?f.delegateType:f.bindType)||d]||[],s=s[2]&&new RegExp("(^|\\.)"+h.join("\\.(?:.*\\.|)")+"(\\.|$)"),a=o=p.length;while(o--)c=p[o],!i&&g!==c.origType||n&&n.guid!==c.guid||s&&!s.test(c.namespace)||r&&r!==c.selector&&("**"!==r||!c.selector)||(p.splice(o,1),c.selector&&p.delegateCount--,f.remove&&f.remove.call(e,c));a&&!p.length&&(f.teardown&&!1!==f.teardown.call(e,h,v.handle)||S.removeEvent(e,d,v.handle),delete u[d])}else for(d in u)S.event.remove(e,d+t[l],n,r,!0);S.isEmptyObject(u)&&Y.remove(e,"handle events")}},dispatch:function(e){var t,n,r,i,o,a,s=new Array(arguments.length),u=S.event.fix(e),l=(Y.get(this,"events")||Object.create(null))[u.type]||[],c=S.event.special[u.type]||{};for(s[0]=u,t=1;t<arguments.length;t++)s[t]=arguments[t];if(u.delegateTarget=this,!c.preDispatch||!1!==c.preDispatch.call(this,u)){a=S.event.handlers.call(this,u,l),t=0;while((i=a[t++])&&!u.isPropagationStopped()){u.currentTarget=i.elem,n=0;while((o=i.handlers[n++])&&!u.isImmediatePropagationStopped())u.rnamespace&&!1!==o.namespace&&!u.rnamespace.test(o.namespace)||(u.handleObj=o,u.data=o.data,void 0!==(r=((S.event.special[o.origType]||{}).handle||o.handler).apply(i.elem,s))&&!1===(u.result=r)&&(u.preventDefault(),u.stopPropagation()))}return c.postDispatch&&c.postDispatch.call(this,u),u.result}},handlers:function(e,t){var n,r,i,o,a,s=[],u=t.delegateCount,l=e.target;if(u&&l.nodeType&&!("click"===e.type&&1<=e.button))for(;l!==this;l=l.parentNode||this)if(1===l.nodeType&&("click"!==e.type||!0!==l.disabled)){for(o=[],a={},n=0;n<u;n++)void 0===a[i=(r=t[n]).selector+" "]&&(a[i]=r.needsContext?-1<S(i,this).index(l):S.find(i,this,null,[l]).length),a[i]&&o.push(r);o.length&&s.push({elem:l,handlers:o})}return l=this,u<t.length&&s.push({elem:l,handlers:t.slice(u)}),s},addProp:function(t,e){Object.defineProperty(S.Event.prototype,t,{enumerable:!0,configurable:!0,get:m(e)?function(){if(this.originalEvent)return e(this.originalEvent)}:function(){if(this.originalEvent)return this.originalEvent[t]},set:function(e){Object.defineProperty(this,t,{enumerable:!0,configurable:!0,writable:!0,value:e})}})},fix:function(e){return e[S.expando]?e:new S.Event(e)},special:{load:{noBubble:!0},click:{setup:function(e){var t=this||e;return pe.test(t.type)&&t.click&&A(t,"input")&&Se(t,"click",we),!1},trigger:function(e){var t=this||e;return pe.test(t.type)&&t.click&&A(t,"input")&&Se(t,"click"),!0},_default:function(e){var t=e.target;return pe.test(t.type)&&t.click&&A(t,"input")&&Y.get(t,"click")||A(t,"a")}},beforeunload:{postDispatch:function(e){void 0!==e.result&&e.originalEvent&&(e.originalEvent.returnValue=e.result)}}}},S.removeEvent=function(e,t,n){e.removeEventListener&&e.removeEventListener(t,n)},S.Event=function(e,t){if(!(this instanceof S.Event))return new S.Event(e,t);e&&e.type?(this.originalEvent=e,this.type=e.type,this.isDefaultPrevented=e.defaultPrevented||void 0===e.defaultPrevented&&!1===e.returnValue?we:Te,this.target=e.target&&3===e.target.nodeType?e.target.parentNode:e.target,this.currentTarget=e.currentTarget,this.relatedTarget=e.relatedTarget):this.type=e,t&&S.extend(this,t),this.timeStamp=e&&e.timeStamp||Date.now(),this[S.expando]=!0},S.Event.prototype={constructor:S.Event,isDefaultPrevented:Te,isPropagationStopped:Te,isImmediatePropagationStopped:Te,isSimulated:!1,preventDefault:function(){var e=this.originalEvent;this.isDefaultPrevented=we,e&&!this.isSimulated&&e.preventDefault()},stopPropagation:function(){var e=this.originalEvent;this.isPropagationStopped=we,e&&!this.isSimulated&&e.stopPropagation()},stopImmediatePropagation:function(){var e=this.originalEvent;this.isImmediatePropagationStopped=we,e&&!this.isSimulated&&e.stopImmediatePropagation(),this.stopPropagation()}},S.each({altKey:!0,bubbles:!0,cancelable:!0,changedTouches:!0,ctrlKey:!0,detail:!0,eventPhase:!0,metaKey:!0,pageX:!0,pageY:!0,shiftKey:!0,view:!0,"char":!0,code:!0,charCode:!0,key:!0,keyCode:!0,button:!0,buttons:!0,clientX:!0,clientY:!0,offsetX:!0,offsetY:!0,pointerId:!0,pointerType:!0,screenX:!0,screenY:!0,targetTouches:!0,toElement:!0,touches:!0,which:!0},S.event.addProp),S.each({focus:"focusin",blur:"focusout"},function(e,t){S.event.special[e]={setup:function(){return Se(this,e,Ce),!1},trigger:function(){return Se(this,e),!0},_default:function(){return!0},delegateType:t}}),S.each({mouseenter:"mouseover",mouseleave:"mouseout",pointerenter:"pointerover",pointerleave:"pointerout"},function(e,i){S.event.special[e]={delegateType:i,bindType:i,handle:function(e){var t,n=e.relatedTarget,r=e.handleObj;return n&&(n===this||S.contains(this,n))||(e.type=r.origType,t=r.handler.apply(this,arguments),e.type=i),t}}}),S.fn.extend({on:function(e,t,n,r){return Ee(this,e,t,n,r)},one:function(e,t,n,r){return Ee(this,e,t,n,r,1)},off:function(e,t,n){var r,i;if(e&&e.preventDefault&&e.handleObj)return r=e.handleObj,S(e.delegateTarget).off(r.namespace?r.origType+"."+r.namespace:r.origType,r.selector,r.handler),this;if("object"==typeof e){for(i in e)this.off(i,t,e[i]);return this}return!1!==t&&"function"!=typeof t||(n=t,t=void 0),!1===n&&(n=Te),this.each(function(){S.event.remove(this,e,n,t)})}});var ke=/<script|<style|<link/i,Ae=/checked\s*(?:[^=]|=\s*.checked.)/i,Ne=/^\s*<!(?:\[CDATA\[|--)|(?:\]\]|--)>\s*$/g;function je(e,t){return A(e,"table")&&A(11!==t.nodeType?t:t.firstChild,"tr")&&S(e).children("tbody")[0]||e}function De(e){return e.type=(null!==e.getAttribute("type"))+"/"+e.type,e}function qe(e){return"true/"===(e.type||"").slice(0,5)?e.type=e.type.slice(5):e.removeAttribute("type"),e}function Le(e,t){var n,r,i,o,a,s;if(1===t.nodeType){if(Y.hasData(e)&&(s=Y.get(e).events))for(i in Y.remove(t,"handle events"),s)for(n=0,r=s[i].length;n<r;n++)S.event.add(t,i,s[i][n]);Q.hasData(e)&&(o=Q.access(e),a=S.extend({},o),Q.set(t,a))}}function He(n,r,i,o){r=g(r);var e,t,a,s,u,l,c=0,f=n.length,p=f-1,d=r[0],h=m(d);if(h||1<f&&"string"==typeof d&&!y.checkClone&&Ae.test(d))return n.each(function(e){var t=n.eq(e);h&&(r[0]=d.call(this,e,t.html())),He(t,r,i,o)});if(f&&(t=(e=xe(r,n[0].ownerDocument,!1,n,o)).firstChild,1===e.childNodes.length&&(e=t),t||o)){for(s=(a=S.map(ve(e,"script"),De)).length;c<f;c++)u=e,c!==p&&(u=S.clone(u,!0,!0),s&&S.merge(a,ve(u,"script"))),i.call(n[c],u,c);if(s)for(l=a[a.length-1].ownerDocument,S.map(a,qe),c=0;c<s;c++)u=a[c],he.test(u.type||"")&&!Y.access(u,"globalEval")&&S.contains(l,u)&&(u.src&&"module"!==(u.type||"").toLowerCase()?S._evalUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce||u.getAttribute("nonce")},l):b(u.textContent.replace(Ne,""),u,l))}return n}function Oe(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n||1!==r.nodeType||S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return e}S.extend({htmlPrefilter:function(e){return e},clone:function(e,t,n){var r,i,o,a,s,u,l,c=e.cloneNode(!0),f=ie(e);if(!(y.noCloneChecked||1!==e.nodeType&&11!==e.nodeType||S.isXMLDoc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l||(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o||ve(e),a=a||ve(c),r=0,i=o.length;r<i;r++)Le(o[r],a[r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEvent(n,r,t.handle);n[Y.expando]=void 0}n[Q.expando]&&(n[Q.expando]=void 0)}}}),S.fn.extend({detach:function(e){return Oe(this,e,!0)},remove:function(e){return Oe(this,e)},text:function(e){return $(this,function(e){return void 0===e?S.text(this):this.empty().each(function(){1!==this.nodeType&&11!==this.nodeType&&9!==this.nodeType||(this.textContent=e)})},null,e,arguments.length)},append:function(){return He(this,arguments,function(e){1!==this.nodeType&&11!==this.nodeType&&9!==this.nodeType||je(this,e).appendChild(e)})},prepend:function(){return He(this,arguments,function(e){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var t=je(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return He(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)})},after:function(){return He(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this.nextSibling)})},empty:function(){for(var e,t=0;null!=(e=this[t]);t++)1===e.nodeType&&(S.cleanData(ve(e,!1)),e.textContent="");return this},clone:function(e,t){return e=null!=e&&e,t=null==t?e:t,this.map(function(){return S.clone(this,e,t)})},html:function(e){return $(this,function(e){var t=this[0]||{},n=0,r=this.length;if(void 0===e&&1===t.nodeType)return t.innerHTML;if("string"==typeof e&&!ke.test(e)&&!ge[(de.exec(e)||["",""])[1].toLowerCase()]){e=S.htmlPrefilter(e);try{for(;n<r;n++)1===(t=this[n]||{}).nodeType&&(S.cleanData(ve(t,!1)),t.innerHTML=e);t=0}catch(e){}}t&&this.empty().append(e)},null,e,arguments.length)},replaceWith:function(){var n=[];return He(this,arguments,function(e){var t=this.parentNode;S.inArray(this,n)<0&&(S.cleanData(ve(this)),t&&t.replaceChild(e,this))},n)}}),S.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,a){S.fn[e]=function(e){for(var t,n=[],r=S(e),i=r.length-1,o=0;o<=i;o++)t=o===i?this:this.clone(!0),S(r[o])[a](t),u.apply(n,t.get());return this.pushStack(n)}});var Pe=new RegExp("^("+ee+")(?!px)[a-z%]+$","i"),Re=function(e){var t=e.ownerDocument.defaultView;return t&&t.opener||(t=C),t.getComputedStyle(e)},Me=function(e,t,n){var r,i,o={};for(i in t)o[i]=e.style[i],e.style[i]=t[i];for(i in r=n.call(e),t)e.style[i]=o[i];return r},Ie=new RegExp(ne.join("|"),"i");function We(e,t,n){var r,i,o,a,s=e.style;return(n=n||Re(e))&&(""!==(a=n.getPropertyValue(t)||n[t])||ie(e)||(a=S.style(e,t)),!y.pixelBoxStyles()&&Pe.test(a)&&Ie.test(t)&&(r=s.width,i=s.minWidth,o=s.maxWidth,s.minWidth=s.maxWidth=s.width=a,a=n.width,s.width=r,s.minWidth=i,s.maxWidth=o)),void 0!==a?a+"":a}function Fe(e,t){return{get:function(){if(!e())return(this.get=t).apply(this,arguments);delete this.get}}}!function(){function e(){if(l){u.style.cssText="position:absolute;left:-11111px;width:60px;margin-top:1px;padding:0;border:0",l.style.cssText="position:relative;display:block;box-sizing:border-box;overflow:scroll;margin:auto;border:1px;padding:1px;width:60%;top:1%",re.appendChild(u).appendChild(l);var e=C.getComputedStyle(l);n="1%"!==e.top,s=12===t(e.marginLeft),l.style.right="60%",o=36===t(e.right),r=36===t(e.width),l.style.position="absolute",i=12===t(l.offsetWidth/3),re.removeChild(u),l=null}}function t(e){return Math.round(parseFloat(e))}var n,r,i,o,a,s,u=E.createElement("div"),l=E.createElement("div");l.style&&(l.style.backgroundClip="content-box",l.cloneNode(!0).style.backgroundClip="",y.clearCloneStyle="content-box"===l.style.backgroundClip,S.extend(y,{boxSizingReliable:function(){return e(),r},pixelBoxStyles:function(){return e(),o},pixelPosition:function(){return e(),n},reliableMarginLeft:function(){return e(),s},scrollboxSize:function(){return e(),i},reliableTrDimensions:function(){var e,t,n,r;return null==a&&(e=E.createElement("table"),t=E.createElement("tr"),n=E.createElement("div"),e.style.cssText="position:absolute;left:-11111px;border-collapse:separate",t.style.cssText="border:1px solid",t.style.height="1px",n.style.height="9px",n.style.display="block",re.appendChild(e).appendChild(t).appendChild(n),r=C.getComputedStyle(t),a=parseInt(r.height,10)+parseInt(r.borderTopWidth,10)+parseInt(r.borderBottomWidth,10)===t.offsetHeight,re.removeChild(e)),a}}))}();var Be=["Webkit","Moz","ms"],$e=E.createElement("div").style,_e={};function ze(e){var t=S.cssProps[e]||_e[e];return t||(e in $e?e:_e[e]=function(e){var t=e[0].toUpperCase()+e.slice(1),n=Be.length;while(n--)if((e=Be[n]+t)in $e)return e}(e)||e)}var Ue=/^(none|table(?!-c[ea]).+)/,Xe=/^--/,Ve={position:"absolute",visibility:"hidden",display:"block"},Ge={letterSpacing:"0",fontWeight:"400"};function Ye(e,t,n){var r=te.exec(t);return r?Math.max(0,r[2]-(n||0))+(r[3]||"px"):t}function Qe(e,t,n,r,i,o){var a="width"===t?1:0,s=0,u=0;if(n===(r?"border":"content"))return 0;for(;a<4;a+=2)"margin"===n&&(u+=S.css(e,n+ne[a],!0,i)),r?("content"===n&&(u-=S.css(e,"padding"+ne[a],!0,i)),"margin"!==n&&(u-=S.css(e,"border"+ne[a]+"Width",!0,i))):(u+=S.css(e,"padding"+ne[a],!0,i),"padding"!==n?u+=S.css(e,"border"+ne[a]+"Width",!0,i):s+=S.css(e,"border"+ne[a]+"Width",!0,i));return!r&&0<=o&&(u+=Math.max(0,Math.ceil(e["offset"+t[0].toUpperCase()+t.slice(1)]-o-u-s-.5))||0),u}function Je(e,t,n){var r=Re(e),i=(!y.boxSizingReliable()||n)&&"border-box"===S.css(e,"boxSizing",!1,r),o=i,a=We(e,t,r),s="offset"+t[0].toUpperCase()+t.slice(1);if(Pe.test(a)){if(!n)return a;a="auto"}return(!y.boxSizingReliable()&&i||!y.reliableTrDimensions()&&A(e,"tr")||"auto"===a||!parseFloat(a)&&"inline"===S.css(e,"display",!1,r))&&e.getClientRects().length&&(i="border-box"===S.css(e,"boxSizing",!1,r),(o=s in e)&&(a=e[s])),(a=parseFloat(a)||0)+Qe(e,t,n||(i?"border":"content"),o,r,a)+"px"}function Ke(e,t,n,r,i){return new Ke.prototype.init(e,t,n,r,i)}S.extend({cssHooks:{opacity:{get:function(e,t){if(t){var n=We(e,"opacity");return""===n?"1":n}}}},cssNumber:{animationIterationCount:!0,columnCount:!0,fillOpacity:!0,flexGrow:!0,flexShrink:!0,fontWeight:!0,gridArea:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnStart:!0,gridRow:!0,gridRowEnd:!0,gridRowStart:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,widows:!0,zIndex:!0,zoom:!0},cssProps:{},style:function(e,t,n,r){if(e&&3!==e.nodeType&&8!==e.nodeType&&e.style){var i,o,a,s=X(t),u=Xe.test(t),l=e.style;if(u||(t=ze(s)),a=S.cssHooks[t]||S.cssHooks[s],void 0===n)return a&&"get"in a&&void 0!==(i=a.get(e,!1,r))?i:l[t];"string"===(o=typeof n)&&(i=te.exec(n))&&i[1]&&(n=se(e,t,i),o="number"),null!=n&&n==n&&("number"!==o||u||(n+=i&&i[3]||(S.cssNumber[s]?"":"px")),y.clearCloneStyle||""!==n||0!==t.indexOf("background")||(l[t]="inherit"),a&&"set"in a&&void 0===(n=a.set(e,n,r))||(u?l.setProperty(t,n):l[t]=n))}},css:function(e,t,n,r){var i,o,a,s=X(t);return Xe.test(t)||(t=ze(s)),(a=S.cssHooks[t]||S.cssHooks[s])&&"get"in a&&(i=a.get(e,!0,n)),void 0===i&&(i=We(e,t,r)),"normal"===i&&t in Ge&&(i=Ge[t]),""===n||n?(o=parseFloat(i),!0===n||isFinite(o)?o||0:i):i}}),S.each(["height","width"],function(e,u){S.cssHooks[u]={get:function(e,t,n){if(t)return!Ue.test(S.css(e,"display"))||e.getClientRects().length&&e.getBoundingClientRect().width?Je(e,u,n):Me(e,Ve,function(){return Je(e,u,n)})},set:function(e,t,n){var r,i=Re(e),o=!y.scrollboxSize()&&"absolute"===i.position,a=(o||n)&&"border-box"===S.css(e,"boxSizing",!1,i),s=n?Qe(e,u,n,a,i):0;return a&&o&&(s-=Math.ceil(e["offset"+u[0].toUpperCase()+u.slice(1)]-parseFloat(i[u])-Qe(e,u,"border",!1,i)-.5)),s&&(r=te.exec(t))&&"px"!==(r[3]||"px")&&(e.style[u]=t,t=S.css(e,u)),Ye(0,t,s)}}}),S.cssHooks.marginLeft=Fe(y.reliableMarginLeft,function(e,t){if(t)return(parseFloat(We(e,"marginLeft"))||e.getBoundingClientRect().left-Me(e,{marginLeft:0},function(){return e.getBoundingClientRect().left}))+"px"}),S.each({margin:"",padding:"",border:"Width"},function(i,o){S.cssHooks[i+o]={expand:function(e){for(var t=0,n={},r="string"==typeof e?e.split(" "):[e];t<4;t++)n[i+ne[t]+o]=r[t]||r[t-2]||r[0];return n}},"margin"!==i&&(S.cssHooks[i+o].set=Ye)}),S.fn.extend({css:function(e,t){return $(this,function(e,t,n){var r,i,o={},a=0;if(Array.isArray(t)){for(r=Re(e),i=t.length;a<i;a++)o[t[a]]=S.css(e,t[a],!1,r);return o}return void 0!==n?S.style(e,t,n):S.css(e,t)},e,t,1<arguments.length)}}),((S.Tween=Ke).prototype={constructor:Ke,init:function(e,t,n,r,i,o){this.elem=e,this.prop=n,this.easing=i||S.easing._default,this.options=t,this.start=this.now=this.cur(),this.end=r,this.unit=o||(S.cssNumber[n]?"":"px")},cur:function(){var e=Ke.propHooks[this.prop];return e&&e.get?e.get(this):Ke.propHooks._default.get(this)},run:function(e){var t,n=Ke.propHooks[this.prop];return this.options.duration?this.pos=t=S.easing[this.easing](e,this.options.duration*e,0,1,this.options.duration):this.pos=t=e,this.now=(this.end-this.start)*t+this.start,this.options.step&&this.options.step.call(this.elem,this.now,this),n&&n.set?n.set(this):Ke.propHooks._default.set(this),this}}).init.prototype=Ke.prototype,(Ke.propHooks={_default:{get:function(e){var t;return 1!==e.elem.nodeType||null!=e.elem[e.prop]&&null==e.elem.style[e.prop]?e.elem[e.prop]:(t=S.css(e.elem,e.prop,""))&&"auto"!==t?t:0},set:function(e){S.fx.step[e.prop]?S.fx.step[e.prop](e):1!==e.elem.nodeType||!S.cssHooks[e.prop]&&null==e.elem.style[ze(e.prop)]?e.elem[e.prop]=e.now:S.style(e.elem,e.prop,e.now+e.unit)}}}).scrollTop=Ke.propHooks.scrollLeft={set:function(e){e.elem.nodeType&&e.elem.parentNode&&(e.elem[e.prop]=e.now)}},S.easing={linear:function(e){return e},swing:function(e){return.5-Math.cos(e*Math.PI)/2},_default:"swing"},S.fx=Ke.prototype.init,S.fx.step={};var Ze,et,tt,nt,rt=/^(?:toggle|show|hide)$/,it=/queueHooks$/;function ot(){et&&(!1===E.hidden&&C.requestAnimationFrame?C.requestAnimationFrame(ot):C.setTimeout(ot,S.fx.interval),S.fx.tick())}function at(){return C.setTimeout(function(){Ze=void 0}),Ze=Date.now()}function st(e,t){var n,r=0,i={height:e};for(t=t?1:0;r<4;r+=2-t)i["margin"+(n=ne[r])]=i["padding"+n]=e;return t&&(i.opacity=i.width=e),i}function ut(e,t,n){for(var r,i=(lt.tweeners[t]||[]).concat(lt.tweeners["*"]),o=0,a=i.length;o<a;o++)if(r=i[o].call(n,t,e))return r}function lt(o,e,t){var n,a,r=0,i=lt.prefilters.length,s=S.Deferred().always(function(){delete u.elem}),u=function(){if(a)return!1;for(var e=Ze||at(),t=Math.max(0,l.startTime+l.duration-e),n=1-(t/l.duration||0),r=0,i=l.tweens.length;r<i;r++)l.tweens[r].run(n);return s.notifyWith(o,[l,n,t]),n<1&&i?t:(i||s.notifyWith(o,[l,1,0]),s.resolveWith(o,[l]),!1)},l=s.promise({elem:o,props:S.extend({},e),opts:S.extend(!0,{specialEasing:{},easing:S.easing._default},t),originalProperties:e,originalOptions:t,startTime:Ze||at(),duration:t.duration,tweens:[],createTween:function(e,t){var n=S.Tween(o,l.opts,e,t,l.opts.specialEasing[e]||l.opts.easing);return l.tweens.push(n),n},stop:function(e){var t=0,n=e?l.tweens.length:0;if(a)return this;for(a=!0;t<n;t++)l.tweens[t].run(1);return e?(s.notifyWith(o,[l,1,0]),s.resolveWith(o,[l,e])):s.rejectWith(o,[l,e]),this}}),c=l.props;for(!function(e,t){var n,r,i,o,a;for(n in e)if(i=t[r=X(n)],o=e[n],Array.isArray(o)&&(i=o[1],o=e[n]=o[0]),n!==r&&(e[r]=o,delete e[n]),(a=S.cssHooks[r])&&"expand"in a)for(n in o=a.expand(o),delete e[r],o)n in e||(e[n]=o[n],t[n]=i);else t[r]=i}(c,l.opts.specialEasing);r<i;r++)if(n=lt.prefilters[r].call(l,o,c,l.opts))return m(n.stop)&&(S._queueHooks(l.elem,l.opts.queue).stop=n.stop.bind(n)),n;return S.map(c,ut,l),m(l.opts.start)&&l.opts.start.call(o,l),l.progress(l.opts.progress).done(l.opts.done,l.opts.complete).fail(l.opts.fail).always(l.opts.always),S.fx.timer(S.extend(u,{elem:o,anim:l,queue:l.opts.queue})),l}S.Animation=S.extend(lt,{tweeners:{"*":[function(e,t){var n=this.createTween(e,t);return se(n.elem,e,te.exec(t),n),n}]},tweener:function(e,t){m(e)?(t=e,e=["*"]):e=e.match(P);for(var n,r=0,i=e.length;r<i;r++)n=e[r],lt.tweeners[n]=lt.tweeners[n]||[],lt.tweeners[n].unshift(t)},prefilters:[function(e,t,n){var r,i,o,a,s,u,l,c,f="width"in t||"height"in t,p=this,d={},h=e.style,g=e.nodeType&&ae(e),v=Y.get(e,"fxshow");for(r in n.queue||(null==(a=S._queueHooks(e,"fx")).unqueued&&(a.unqueued=0,s=a.empty.fire,a.empty.fire=function(){a.unqueued||s()}),a.unqueued++,p.always(function(){p.always(function(){a.unqueued--,S.queue(e,"fx").length||a.empty.fire()})})),t)if(i=t[r],rt.test(i)){if(delete t[r],o=o||"toggle"===i,i===(g?"hide":"show")){if("show"!==i||!v||void 0===v[r])continue;g=!0}d[r]=v&&v[r]||S.style(e,r)}if((u=!S.isEmptyObject(t))||!S.isEmptyObject(d))for(r in f&&1===e.nodeType&&(n.overflow=[h.overflow,h.overflowX,h.overflowY],null==(l=v&&v.display)&&(l=Y.get(e,"display")),"none"===(c=S.css(e,"display"))&&(l?c=l:(le([e],!0),l=e.style.display||l,c=S.css(e,"display"),le([e]))),("inline"===c||"inline-block"===c&&null!=l)&&"none"===S.css(e,"float")&&(u||(p.done(function(){h.display=l}),null==l&&(c=h.display,l="none"===c?"":c)),h.display="inline-block")),n.overflow&&(h.overflow="hidden",p.always(function(){h.overflow=n.overflow[0],h.overflowX=n.overflow[1],h.overflowY=n.overflow[2]})),u=!1,d)u||(v?"hidden"in v&&(g=v.hidden):v=Y.access(e,"fxshow",{display:l}),o&&(v.hidden=!g),g&&le([e],!0),p.done(function(){for(r in g||le([e]),Y.remove(e,"fxshow"),d)S.style(e,r,d[r])})),u=ut(g?v[r]:0,r,p),r in v||(v[r]=u.start,g&&(u.end=u.start,u.start=0))}],prefilter:function(e,t){t?lt.prefilters.unshift(e):lt.prefilters.push(e)}}),S.speed=function(e,t,n){var r=e&&"object"==typeof e?S.extend({},e):{complete:n||!n&&t||m(e)&&e,duration:e,easing:n&&t||t&&!m(t)&&t};return S.fx.off?r.duration=0:"number"!=typeof r.duration&&(r.duration in S.fx.speeds?r.duration=S.fx.speeds[r.duration]:r.duration=S.fx.speeds._default),null!=r.queue&&!0!==r.queue||(r.queue="fx"),r.old=r.complete,r.complete=function(){m(r.old)&&r.old.call(this),r.queue&&S.dequeue(this,r.queue)},r},S.fn.extend({fadeTo:function(e,t,n,r){return this.filter(ae).css("opacity",0).show().end().animate({opacity:t},e,n,r)},animate:function(t,e,n,r){var i=S.isEmptyObject(t),o=S.speed(e,n,r),a=function(){var e=lt(this,S.extend({},t),o);(i||Y.get(this,"finish"))&&e.stop(!0)};return a.finish=a,i||!1===o.queue?this.each(a):this.queue(o.queue,a)},stop:function(i,e,o){var a=function(e){var t=e.stop;delete e.stop,t(o)};return"string"!=typeof i&&(o=e,e=i,i=void 0),e&&this.queue(i||"fx",[]),this.each(function(){var e=!0,t=null!=i&&i+"queueHooks",n=S.timers,r=Y.get(this);if(t)r[t]&&r[t].stop&&a(r[t]);else for(t in r)r[t]&&r[t].stop&&it.test(t)&&a(r[t]);for(t=n.length;t--;)n[t].elem!==this||null!=i&&n[t].queue!==i||(n[t].anim.stop(o),e=!1,n.splice(t,1));!e&&o||S.dequeue(this,i)})},finish:function(a){return!1!==a&&(a=a||"fx"),this.each(function(){var e,t=Y.get(this),n=t[a+"queue"],r=t[a+"queueHooks"],i=S.timers,o=n?n.length:0;for(t.finish=!0,S.queue(this,a,[]),r&&r.stop&&r.stop.call(this,!0),e=i.length;e--;)i[e].elem===this&&i[e].queue===a&&(i[e].anim.stop(!0),i.splice(e,1));for(e=0;e<o;e++)n[e]&&n[e].finish&&n[e].finish.call(this);delete t.finish})}}),S.each(["toggle","show","hide"],function(e,r){var i=S.fn[r];S.fn[r]=function(e,t,n){return null==e||"boolean"==typeof e?i.apply(this,arguments):this.animate(st(r,!0),e,t,n)}}),S.each({slideDown:st("show"),slideUp:st("hide"),slideToggle:st("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},function(e,r){S.fn[e]=function(e,t,n){return this.animate(r,e,t,n)}}),S.timers=[],S.fx.tick=function(){var e,t=0,n=S.timers;for(Ze=Date.now();t<n.length;t++)(e=n[t])()||n[t]!==e||n.splice(t--,1);n.length||S.fx.stop(),Ze=void 0},S.fx.timer=function(e){S.timers.push(e),S.fx.start()},S.fx.interval=13,S.fx.start=function(){et||(et=!0,ot())},S.fx.stop=function(){et=null},S.fx.speeds={slow:600,fast:200,_default:400},S.fn.delay=function(r,e){return r=S.fx&&S.fx.speeds[r]||r,e=e||"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},tt=E.createElement("input"),nt=E.createElement("select").appendChild(E.createElement("option")),tt.type="checkbox",y.checkOn=""!==tt.value,y.optSelected=nt.selected,(tt=E.createElement("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.length)},removeAttr:function(e){return this.each(function(){S.removeAttr(this,e)})}}),S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)||(i=S.attrHooks[t.toLowerCase()]||(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setAttribute(t,n+""),n):i&&"get"in i&&null!==(r=i.get(e,t))?r:null==(r=S.find.attr(e,t))?void 0:r)},attrHooks:{type:{set:function(e,t){if(!y.radioValue&&"radio"===t&&A(e,"input")){var n=e.value;return e.setAttribute("type",t),n&&(e.value=n),t}}}},removeAttr:function(e,t){var n,r=0,i=t&&t.match(P);if(i&&1===e.nodeType)while(n=i[r++])e.removeAttribute(n)}}),ct={set:function(e,t,n){return!1===t?S.removeAttr(e,n):e.setAttribute(n,n),n}},S.each(S.expr.match.bool.source.match(/\w+/g),function(e,t){var a=ft[t]||S.find.attr;ft[t]=function(e,t,n){var r,i,o=t.toLowerCase();return n||(i=ft[o],ft[o]=r,r=null!=a(e,t,n)?o:null,ft[o]=i),r}});var pt=/^(?:input|select|textarea|button)$/i,dt=/^(?:a|area)$/i;function ht(e){return(e.match(P)||[]).join(" ")}function gt(e){return e.getAttribute&&e.getAttribute("class")||""}function vt(e){return Array.isArray(e)?e:"string"==typeof e&&e.match(P)||[]}S.fn.extend({prop:function(e,t){return $(this,S.prop,e,t,1<arguments.length)},removeProp:function(e){return this.each(function(){delete this[S.propFix[e]||e]})}}),S.extend({prop:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return 1===o&&S.isXMLDoc(e)||(t=S.propFix[t]||t,i=S.propHooks[t]),void 0!==n?i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=S.find.attr(e,"tabindex");return t?parseInt(t,10):pt.test(e.nodeName)||dt.test(e.nodeName)&&e.href?0:-1}}},propFix:{"for":"htmlFor","class":"className"}}),y.optSelected||(S.propHooks.selected={get:function(e){var t=e.parentNode;return t&&t.parentNode&&t.parentNode.selectedIndex,null},set:function(e){var t=e.parentNode;t&&(t.selectedIndex,t.parentNode&&t.parentNode.selectedIndex)}}),S.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan","useMap","frameBorder","contentEditable"],function(){S.propFix[this.toLowerCase()]=this}),S.fn.extend({addClass:function(t){var e,n,r,i,o,a,s,u=0;if(m(t))return this.each(function(e){S(this).addClass(t.call(this,e,gt(this)))});if((e=vt(t)).length)while(n=this[u++])if(i=gt(n),r=1===n.nodeType&&" "+ht(i)+" "){a=0;while(o=e[a++])r.indexOf(" "+o+" ")<0&&(r+=o+" ");i!==(s=ht(r))&&n.setAttribute("class",s)}return this},removeClass:function(t){var e,n,r,i,o,a,s,u=0;if(m(t))return this.each(function(e){S(this).removeClass(t.call(this,e,gt(this)))});if(!arguments.length)return this.attr("class","");if((e=vt(t)).length)while(n=this[u++])if(i=gt(n),r=1===n.nodeType&&" "+ht(i)+" "){a=0;while(o=e[a++])while(-1<r.indexOf(" "+o+" "))r=r.replace(" "+o+" "," ");i!==(s=ht(r))&&n.setAttribute("class",s)}return this},toggleClass:function(i,t){var o=typeof i,a="string"===o||Array.isArray(i);return"boolean"==typeof t&&a?t?this.addClass(i):this.removeClass(i):m(i)?this.each(function(e){S(this).toggleClass(i.call(this,e,gt(this),t),t)}):this.each(function(){var e,t,n,r;if(a){t=0,n=S(this),r=vt(i);while(e=r[t++])n.hasClass(e)?n.removeClass(e):n.addClass(e)}else void 0!==i&&"boolean"!==o||((e=gt(this))&&Y.set(this,"__className__",e),this.setAttribute&&this.setAttribute("class",e||!1===i?"":Y.get(this,"__className__")||""))})},hasClass:function(e){var t,n,r=0;t=" "+e+" ";while(n=this[r++])if(1===n.nodeType&&-1<(" "+ht(gt(n))+" ").indexOf(t))return!0;return!1}});var yt=/\r/g;S.fn.extend({val:function(n){var r,e,i,t=this[0];return arguments.length?(i=m(n),this.each(function(e){var t;1===this.nodeType&&(null==(t=i?n.call(this,e,S(this).val()):n)?t="":"number"==typeof t?t+="":Array.isArray(t)&&(t=S.map(t,function(e){return null==e?"":e+""})),(r=S.valHooks[this.type]||S.valHooks[this.nodeName.toLowerCase()])&&"set"in r&&void 0!==r.set(this,t,"value")||(this.value=t))})):t?(r=S.valHooks[t.type]||S.valHooks[t.nodeName.toLowerCase()])&&"get"in r&&void 0!==(e=r.get(t,"value"))?e:"string"==typeof(e=t.value)?e.replace(yt,""):null==e?"":e:void 0}}),S.extend({valHooks:{option:{get:function(e){var t=S.find.attr(e,"value");return null!=t?t:ht(S.text(e))}},select:{get:function(e){var t,n,r,i=e.options,o=e.selectedIndex,a="select-one"===e.type,s=a?null:[],u=a?o+1:i.length;for(r=o<0?u:a?o:0;r<u;r++)if(((n=i[r]).selected||r===o)&&!n.disabled&&(!n.parentNode.disabled||!A(n.parentNode,"optgroup"))){if(t=S(n).val(),a)return t;s.push(t)}return s},set:function(e,t){var n,r,i=e.options,o=S.makeArray(t),a=i.length;while(a--)((r=i[a]).selected=-1<S.inArray(S.valHooks.option.get(r),o))&&(n=!0);return n||(e.selectedIndex=-1),o}}}}),S.each(["radio","checkbox"],function(){S.valHooks[this]={set:function(e,t){if(Array.isArray(t))return e.checked=-1<S.inArray(S(e).val(),t)}},y.checkOn||(S.valHooks[this].get=function(e){return null===e.getAttribute("value")?"on":e.value})}),y.focusin="onfocusin"in C;var mt=/^(?:focusinfocus|focusoutblur)$/,xt=function(e){e.stopPropagation()};S.extend(S.event,{trigger:function(e,t,n,r){var i,o,a,s,u,l,c,f,p=[n||E],d=v.call(e,"type")?e.type:e,h=v.call(e,"namespace")?e.namespace.split("."):[];if(o=f=a=n=n||E,3!==n.nodeType&&8!==n.nodeType&&!mt.test(d+S.event.triggered)&&(-1<d.indexOf(".")&&(d=(h=d.split(".")).shift(),h.sort()),u=d.indexOf(":")<0&&"on"+d,(e=e[S.expando]?e:new S.Event(d,"object"==typeof e&&e)).isTrigger=r?2:3,e.namespace=h.join("."),e.rnamespace=e.namespace?new RegExp("(^|\\.)"+h.join("\\.(?:.*\\.|)")+"(\\.|$)"):null,e.result=void 0,e.target||(e.target=n),t=null==t?[e]:S.makeArray(t,[e]),c=S.event.special[d]||{},r||!c.trigger||!1!==c.trigger.apply(n,t))){if(!r&&!c.noBubble&&!x(n)){for(s=c.delegateType||d,mt.test(s+d)||(o=o.parentNode);o;o=o.parentNode)p.push(o),a=o;a===(n.ownerDocument||E)&&p.push(a.defaultView||a.parentWindow||C)}i=0;while((o=p[i++])&&!e.isPropagationStopped())f=o,e.type=1<i?s:c.bindType||d,(l=(Y.get(o,"events")||Object.create(null))[e.type]&&Y.get(o,"handle"))&&l.apply(o,t),(l=u&&o[u])&&l.apply&&V(o)&&(e.result=l.apply(o,t),!1===e.result&&e.preventDefault());return e.type=d,r||e.isDefaultPrevented()||c._default&&!1!==c._default.apply(p.pop(),t)||!V(n)||u&&m(n[d])&&!x(n)&&((a=n[u])&&(n[u]=null),S.event.triggered=d,e.isPropagationStopped()&&f.addEventListener(d,xt),n[d](),e.isPropagationStopped()&&f.removeEventListener(d,xt),S.event.triggered=void 0,a&&(n[u]=a)),e.result}},simulate:function(e,t,n){var r=S.extend(new S.Event,n,{type:e,isSimulated:!0});S.event.trigger(r,null,t)}}),S.fn.extend({trigger:function(e,t){return this.each(function(){S.event.trigger(e,t,this)})},triggerHandler:function(e,t){var n=this[0];if(n)return S.event.trigger(e,t,n,!0)}}),y.focusin||S.each({focus:"focusin",blur:"focusout"},function(n,r){var i=function(e){S.event.simulate(r,e.target,S.event.fix(e))};S.event.special[r]={setup:function(){var e=this.ownerDocument||this.document||this,t=Y.access(e,r);t||e.addEventListener(n,i,!0),Y.access(e,r,(t||0)+1)},teardown:function(){var e=this.ownerDocument||this.document||this,t=Y.access(e,r)-1;t?Y.access(e,r,t):(e.removeEventListener(n,i,!0),Y.remove(e,r))}}});var bt=C.location,wt={guid:Date.now()},Tt=/\?/;S.parseXML=function(e){var t,n;if(!e||"string"!=typeof e)return null;try{t=(new C.DOMParser).parseFromString(e,"text/xml")}catch(e){}return n=t&&t.getElementsByTagName("parsererror")[0],t&&!n||S.error("Invalid XML: "+(n?S.map(n.childNodes,function(e){return e.textContent}).join("\n"):e)),t};var Ct=/\[\]$/,Et=/\r?\n/g,St=/^(?:submit|button|image|reset|file)$/i,kt=/^(?:input|select|textarea|keygen)/i;function At(n,e,r,i){var t;if(Array.isArray(e))S.each(e,function(e,t){r||Ct.test(n)?i(n,t):At(n+"["+("object"==typeof t&&null!=t?e:"")+"]",t,r,i)});else if(r||"object"!==w(e))i(n,e);else for(t in e)At(n+"["+t+"]",e[t],r,i)}S.param=function(e,t){var n,r=[],i=function(e,t){var n=m(t)?t():t;r[r.length]=encodeURIComponent(e)+"="+encodeURIComponent(null==n?"":n)};if(null==e)return"";if(Array.isArray(e)||e.jquery&&!S.isPlainObject(e))S.each(e,function(){i(this.name,this.value)});else for(n in e)At(n,e[n],t,i);return r.join("&")},S.fn.extend({serialize:function(){return S.param(this.serializeArray())},serializeArray:function(){return this.map(function(){var e=S.prop(this,"elements");return e?S.makeArray(e):this}).filter(function(){var e=this.type;return this.name&&!S(this).is(":disabled")&&kt.test(this.nodeName)&&!St.test(e)&&(this.checked||!pe.test(e))}).map(function(e,t){var n=S(this).val();return null==n?null:Array.isArray(n)?S.map(n,function(e){return{name:t.name,value:e.replace(Et,"\r\n")}}):{name:t.name,value:n.replace(Et,"\r\n")}}).get()}});var Nt=/%20/g,jt=/#.*$/,Dt=/([?&])_=[^&]*/,qt=/^(.*?):[ \t]*([^\r\n]*)$/gm,Lt=/^(?:GET|HEAD)$/,Ht=/^\/\//,Ot={},Pt={},Rt="*/".concat("*"),Mt=E.createElement("a");function It(o){return function(e,t){"string"!=typeof e&&(t=e,e="*");var n,r=0,i=e.toLowerCase().match(P)||[];if(m(t))while(n=i[r++])"+"===n[0]?(n=n.slice(1)||"*",(o[n]=o[n]||[]).unshift(t)):(o[n]=o[n]||[]).push(t)}}function Wt(t,i,o,a){var s={},u=t===Pt;function l(e){var r;return s[e]=!0,S.each(t[e]||[],function(e,t){var n=t(i,o,a);return"string"!=typeof n||u||s[n]?u?!(r=n):void 0:(i.dataTypes.unshift(n),l(n),!1)}),r}return l(i.dataTypes[0])||!s["*"]&&l("*")}function Ft(e,t){var n,r,i=S.ajaxSettings.flatOptions||{};for(n in t)void 0!==t[n]&&((i[n]?e:r||(r={}))[n]=t[n]);return r&&S.extend(!0,e,r),e}Mt.href=bt.href,S.extend({active:0,lastModified:{},etag:{},ajaxSettings:{url:bt.href,type:"GET",isLocal:/^(?:about|app|app-storage|.+-extension|file|res|widget):$/.test(bt.protocol),global:!0,processData:!0,async:!0,contentType:"application/x-www-form-urlencoded; charset=UTF-8",accepts:{"*":Rt,text:"text/plain",html:"text/html",xml:"application/xml, text/xml",json:"application/json, text/javascript"},contents:{xml:/\bxml\b/,html:/\bhtml/,json:/\bjson\b/},responseFields:{xml:"responseXML",text:"responseText",json:"responseJSON"},converters:{"* text":String,"text html":!0,"text json":JSON.parse,"text xml":S.parseXML},flatOptions:{url:!0,context:!0}},ajaxSetup:function(e,t){return t?Ft(Ft(e,S.ajaxSettings),t):Ft(S.ajaxSettings,e)},ajaxPrefilter:It(Ot),ajaxTransport:It(Pt),ajax:function(e,t){"object"==typeof e&&(t=e,e=void 0),t=t||{};var c,f,p,n,d,r,h,g,i,o,v=S.ajaxSetup({},t),y=v.context||v,m=v.context&&(y.nodeType||y.jquery)?S(y):S.event,x=S.Deferred(),b=S.Callbacks("once memory"),w=v.statusCode||{},a={},s={},u="canceled",T={readyState:0,getResponseHeader:function(e){var t;if(h){if(!n){n={};while(t=qt.exec(p))n[t[1].toLowerCase()+" "]=(n[t[1].toLowerCase()+" "]||[]).concat(t[2])}t=n[e.toLowerCase()+" "]}return null==t?null:t.join(", ")},getAllResponseHeaders:function(){return h?p:null},setRequestHeader:function(e,t){return null==h&&(e=s[e.toLowerCase()]=s[e.toLowerCase()]||e,a[e]=t),this},overrideMimeType:function(e){return null==h&&(v.mimeType=e),this},statusCode:function(e){var t;if(e)if(h)T.always(e[T.status]);else for(t in e)w[t]=[w[t],e[t]];return this},abort:function(e){var t=e||u;return c&&c.abort(t),l(0,t),this}};if(x.promise(T),v.url=((e||v.url||bt.href)+"").replace(Ht,bt.protocol+"//"),v.type=t.method||t.type||v.method||v.type,v.dataTypes=(v.dataType||"*").toLowerCase().match(P)||[""],null==v.crossDomain){r=E.createElement("a");try{r.href=v.url,r.href=r.href,v.crossDomain=Mt.protocol+"//"+Mt.host!=r.protocol+"//"+r.host}catch(e){v.crossDomain=!0}}if(v.data&&v.processData&&"string"!=typeof v.data&&(v.data=S.param(v.data,v.traditional)),Wt(Ot,v,t,T),h)return T;for(i in(g=S.event&&v.global)&&0==S.active++&&S.event.trigger("ajaxStart"),v.type=v.type.toUpperCase(),v.hasContent=!Lt.test(v.type),f=v.url.replace(jt,""),v.hasContent?v.data&&v.processData&&0===(v.contentType||"").indexOf("application/x-www-form-urlencoded")&&(v.data=v.data.replace(Nt,"+")):(o=v.url.slice(f.length),v.data&&(v.processData||"string"==typeof v.data)&&(f+=(Tt.test(f)?"&":"?")+v.data,delete v.data),!1===v.cache&&(f=f.replace(Dt,"$1"),o=(Tt.test(f)?"&":"?")+"_="+wt.guid+++o),v.url=f+o),v.ifModified&&(S.lastModified[f]&&T.setRequestHeader("If-Modified-Since",S.lastModified[f]),S.etag[f]&&T.setRequestHeader("If-None-Match",S.etag[f])),(v.data&&v.hasContent&&!1!==v.contentType||t.contentType)&&T.setRequestHeader("Content-Type",v.contentType),T.setRequestHeader("Accept",v.dataTypes[0]&&v.accepts[v.dataTypes[0]]?v.accepts[v.dataTypes[0]]+("*"!==v.dataTypes[0]?", "+Rt+"; q=0.01":""):v.accepts["*"]),v.headers)T.setRequestHeader(i,v.headers[i]);if(v.beforeSend&&(!1===v.beforeSend.call(y,T,v)||h))return T.abort();if(u="abort",b.add(v.complete),T.done(v.success),T.fail(v.error),c=Wt(Pt,v,t,T)){if(T.readyState=1,g&&m.trigger("ajaxSend",[T,v]),h)return T;v.async&&0<v.timeout&&(d=C.setTimeout(function(){T.abort("timeout")},v.timeout));try{h=!1,c.send(a,l)}catch(e){if(h)throw e;l(-1,e)}}else l(-1,"No Transport");function l(e,t,n,r){var i,o,a,s,u,l=t;h||(h=!0,d&&C.clearTimeout(d),c=void 0,p=r||"",T.readyState=0<e?4:0,i=200<=e&&e<300||304===e,n&&(s=function(e,t,n){var r,i,o,a,s=e.contents,u=e.dataTypes;while("*"===u[0])u.shift(),void 0===r&&(r=e.mimeType||t.getResponseHeader("Content-Type"));if(r)for(i in s)if(s[i]&&s[i].test(r)){u.unshift(i);break}if(u[0]in n)o=u[0];else{for(i in n){if(!u[0]||e.converters[i+" "+u[0]]){o=i;break}a||(a=i)}o=o||a}if(o)return o!==u[0]&&u.unshift(o),n[o]}(v,T,n)),!i&&-1<S.inArray("script",v.dataTypes)&&S.inArray("json",v.dataTypes)<0&&(v.converters["text script"]=function(){}),s=function(e,t,n,r){var i,o,a,s,u,l={},c=e.dataTypes.slice();if(c[1])for(a in e.converters)l[a.toLowerCase()]=e.converters[a];o=c.shift();while(o)if(e.responseFields[o]&&(n[e.responseFields[o]]=t),!u&&r&&e.dataFilter&&(t=e.dataFilter(t,e.dataType)),u=o,o=c.shift())if("*"===o)o=u;else if("*"!==u&&u!==o){if(!(a=l[u+" "+o]||l["* "+o]))for(i in l)if((s=i.split(" "))[1]===o&&(a=l[u+" "+s[0]]||l["* "+s[0]])){!0===a?a=l[i]:!0!==l[i]&&(o=s[0],c.unshift(s[1]));break}if(!0!==a)if(a&&e["throws"])t=a(t);else try{t=a(t)}catch(e){return{state:"parsererror",error:a?e:"No conversion from "+u+" to "+o}}}return{state:"success",data:t}}(v,s,T,i),i?(v.ifModified&&((u=T.getResponseHeader("Last-Modified"))&&(S.lastModified[f]=u),(u=T.getResponseHeader("etag"))&&(S.etag[f]=u)),204===e||"HEAD"===v.type?l="nocontent":304===e?l="notmodified":(l=s.state,o=s.data,i=!(a=s.error))):(a=l,!e&&l||(l="error",e<0&&(e=0))),T.status=e,T.statusText=(t||l)+"",i?x.resolveWith(y,[o,l,T]):x.rejectWith(y,[T,l,a]),T.statusCode(w),w=void 0,g&&m.trigger(i?"ajaxSuccess":"ajaxError",[T,v,i?o:a]),b.fireWith(y,[T,l]),g&&(m.trigger("ajaxComplete",[T,v]),--S.active||S.event.trigger("ajaxStop")))}return T},getJSON:function(e,t,n){return S.get(e,t,n,"json")},getScript:function(e,t){return S.get(e,void 0,t,"script")}}),S.each(["get","post"],function(e,i){S[i]=function(e,t,n,r){return m(t)&&(r=r||n,n=t,t=void 0),S.ajax(S.extend({url:e,type:i,dataType:r,data:t,success:n},S.isPlainObject(e)&&e))}}),S.ajaxPrefilter(function(e){var t;for(t in e.headers)"content-type"===t.toLowerCase()&&(e.contentType=e.headers[t]||"")}),S._evalUrl=function(e,t,n){return S.ajax({url:e,type:"GET",dataType:"script",cache:!0,async:!1,global:!1,converters:{"text script":function(){}},dataFilter:function(e){S.globalEval(e,t,n)}})},S.fn.extend({wrapAll:function(e){var t;return this[0]&&(m(e)&&(e=e.call(this[0])),t=S(e,this[0].ownerDocument).eq(0).clone(!0),this[0].parentNode&&t.insertBefore(this[0]),t.map(function(){var e=this;while(e.firstElementChild)e=e.firstElementChild;return e}).append(this)),this},wrapInner:function(n){return m(n)?this.each(function(e){S(this).wrapInner(n.call(this,e))}):this.each(function(){var e=S(this),t=e.contents();t.length?t.wrapAll(n):e.append(n)})},wrap:function(t){var n=m(t);return this.each(function(e){S(this).wrapAll(n?t.call(this,e):t)})},unwrap:function(e){return this.parent(e).not("body").each(function(){S(this).replaceWith(this.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth||e.offsetHeight||e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var Bt={0:200,1223:204},$t=S.ajaxSettings.xhr();y.cors=!!$t&&"withCredentials"in $t,y.ajax=$t=!!$t,S.ajaxTransport(function(i){var o,a;if(y.cors||$t&&!i.crossDomain)return{send:function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain||e["X-Requested-With"]||(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(o=a=r.onload=r.onerror=r.onabort=r.ontimeout=r.onreadystatechange=null,"abort"===e?r.abort():"error"===e?"number"!=typeof r.status?t(0,"error"):t(r.status,r.statusText):t(Bt[r.status]||r.status,r.statusText,"text"!==(r.responseType||"text")||"string"!=typeof r.responseText?{binary:r.response}:{text:r.responseText},r.getAllResponseHeaders()))}},r.onload=o(),a=r.onerror=r.ontimeout=o("error"),void 0!==r.onabort?r.onabort=a:r.onreadystatechange=function(){4===r.readyState&&C.setTimeout(function(){o&&a()})},o=o("abort");try{r.send(i.hasContent&&i.data||null)}catch(e){if(o)throw e}},abort:function(){o&&o()}}}),S.ajaxPrefilter(function(e){e.crossDomain&&(e.contents.script=!1)}),S.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/\b(?:java|ecma)script\b/},converters:{"text script":function(e){return S.globalEval(e),e}}}),S.ajaxPrefilter("script",function(e){void 0===e.cache&&(e.cache=!1),e.crossDomain&&(e.type="GET")}),S.ajaxTransport("script",function(n){var r,i;if(n.crossDomain||n.scriptAttrs)return{send:function(e,t){r=S("<script>").attr(n.scriptAttrs||{}).prop({charset:n.scriptCharset,src:n.url}).on("load error",i=function(e){r.remove(),i=null,e&&t("error"===e.type?404:200,e.type)}),E.head.appendChild(r[0])},abort:function(){i&&i()}}});var _t,zt=[],Ut=/(=)\?(?=&|$)|\?\?/;S.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var e=zt.pop()||S.expando+"_"+wt.guid++;return this[e]=!0,e}}),S.ajaxPrefilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Ut.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType||"").indexOf("application/x-www-form-urlencoded")&&Ut.test(e.data)&&"data");if(a||"jsonp"===e.dataTypes[0])return r=e.jsonpCallback=m(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Ut,"$1"+r):!1!==e.jsonp&&(e.url+=(Tt.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o||S.error(r+" was not called"),o[0]},e.dataTypes[0]="json",i=C[r],C[r]=function(){o=arguments},n.always(function(){void 0===i?S(C).removeProp(r):C[r]=i,e[r]&&(e.jsonpCallback=t.jsonpCallback,zt.push(r)),o&&m(i)&&i(o[0]),o=i=void 0}),"script"}),y.createHTMLDocument=((_t=E.implementation.createHTMLDocument("").body).innerHTML="<form></form><form></form>",2===_t.childNodes.length),S.parseHTML=function(e,t,n){return"string"!=typeof e?[]:("boolean"==typeof t&&(n=t,t=!1),t||(y.createHTMLDocument?((r=(t=E.implementation.createHTMLDocument("")).createElement("base")).href=E.location.href,t.head.appendChild(r)):t=E),o=!n&&[],(i=N.exec(e))?[t.createElement(i[1])]:(i=xe([e],t,o),o&&o.length&&S(o).remove(),S.merge([],i.childNodes)));var r,i,o},S.fn.load=function(e,t,n){var r,i,o,a=this,s=e.indexOf(" ");return-1<s&&(r=ht(e.slice(s)),e=e.slice(0,s)),m(t)?(n=t,t=void 0):t&&"object"==typeof t&&(i="POST"),0<a.length&&S.ajax({url:e,type:i||"GET",dataType:"html",data:t}).done(function(e){o=arguments,a.html(r?S("<div>").append(S.parseHTML(e)).find(r):e)}).always(n&&function(e,t){a.each(function(){n.apply(this,o||[e.responseText,t,e])})}),this},S.expr.pseudos.animated=function(t){return S.grep(S.timers,function(e){return t===e.elem}).length},S.offset={setOffset:function(e,t,n){var r,i,o,a,s,u,l=S.css(e,"position"),c=S(e),f={};"static"===l&&(e.style.position="relative"),s=c.offset(),o=S.css(e,"top"),u=S.css(e,"left"),("absolute"===l||"fixed"===l)&&-1<(o+u).indexOf("auto")?(a=(r=c.position()).top,i=r.left):(a=parseFloat(o)||0,i=parseFloat(u)||0),m(t)&&(t=t.call(e,n,S.extend({},s))),null!=t.top&&(f.top=t.top-s.top+a),null!=t.left&&(f.left=t.left-s.left+i),"using"in t?t.using.call(e,f):c.css(f)}},S.fn.extend({offset:function(t){if(arguments.length)return void 0===t?this:this.each(function(e){S.offset.setOffset(this,t,e)});var e,n,r=this[0];return r?r.getClientRects().length?(e=r.getBoundingClientRect(),n=r.ownerDocument.defaultView,{top:e.top+n.pageYOffset,left:e.left+n.pageXOffset}):{top:0,left:0}:void 0},position:function(){if(this[0]){var e,t,n,r=this[0],i={top:0,left:0};if("fixed"===S.css(r,"position"))t=r.getBoundingClientRect();else{t=this.offset(),n=r.ownerDocument,e=r.offsetParent||n.documentElement;while(e&&(e===n.body||e===n.documentElement)&&"static"===S.css(e,"position"))e=e.parentNode;e&&e!==r&&1===e.nodeType&&((i=S(e).offset()).top+=S.css(e,"borderTopWidth",!0),i.left+=S.css(e,"borderLeftWidth",!0))}return{top:t.top-i.top-S.css(r,"marginTop",!0),left:t.left-i.left-S.css(r,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var e=this.offsetParent;while(e&&"static"===S.css(e,"position"))e=e.offsetParent;return e||re})}}),S.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(t,i){var o="pageYOffset"===i;S.fn[t]=function(e){return $(this,function(e,t,n){var r;if(x(e)?r=e:9===e.nodeType&&(r=e.defaultView),void 0===n)return r?r[i]:e[t];r?r.scrollTo(o?r.pageXOffset:n,o?n:r.pageYOffset):e[t]=n},t,e,arguments.length)}}),S.each(["top","left"],function(e,n){S.cssHooks[n]=Fe(y.pixelPosition,function(e,t){if(t)return t=We(e,n),Pe.test(t)?S(e).position()[n]+"px":t})}),S.each({Height:"height",Width:"width"},function(a,s){S.each({padding:"inner"+a,content:s,"":"outer"+a},function(r,o){S.fn[o]=function(e,t){var n=arguments.length&&(r||"boolean"!=typeof e),i=r||(!0===e||!0===t?"margin":"border");return $(this,function(e,t,n){var r;return x(e)?0===o.indexOf("outer")?e["inner"+a]:e.document.documentElement["client"+a]:9===e.nodeType?(r=e.documentElement,Math.max(e.body["scroll"+a],r["scroll"+a],e.body["offset"+a],r["offset"+a],r["client"+a])):void 0===n?S.css(e,t,i):S.style(e,t,n,i)},s,n?e:void 0,n)}})}),S.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(e,t){S.fn[t]=function(e){return this.on(t,e)}}),S.fn.extend({bind:function(e,t,n){return this.on(e,null,t,n)},unbind:function(e,t){return this.off(e,null,t)},delegate:function(e,t,n,r){return this.on(t,e,n,r)},undelegate:function(e,t,n){return 1===arguments.length?this.off(e,"**"):this.off(t,e||"**",n)},hover:function(e,t){return this.mouseenter(e).mouseleave(t||e)}}),S.each("blur focus focusin focusout resize scroll click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup contextmenu".split(" "),function(e,n){S.fn[n]=function(e,t){return 0<arguments.length?this.on(n,null,e,t):this.trigger(n)}});var Xt=/^[\s\uFEFF\xA0]+|[\s\uFEFF\xA0]+$/g;S.proxy=function(e,t){var n,r,i;if("string"==typeof t&&(n=e[t],t=e,e=n),m(e))return r=s.call(arguments,2),(i=function(){return e.apply(t||this,r.concat(s.call(arguments)))}).guid=e.guid=e.guid||S.guid++,i},S.holdReady=function(e){e?S.readyWait++:S.ready(!0)},S.isArray=Array.isArray,S.parseJSON=JSON.parse,S.nodeName=A,S.isFunction=m,S.isWindow=x,S.camelCase=X,S.type=w,S.now=Date.now,S.isNumeric=function(e){var t=S.type(e);return("number"===t||"string"===t)&&!isNaN(e-parseFloat(e))},S.trim=function(e){return null==e?"":(e+"").replace(Xt,"")},"function"==typeof define&&define.amd&&define("jquery",[],function(){return S});var Vt=C.jQuery,Gt=C.$;return S.noConflict=function(e){return C.$===S&&(C.$=Gt),e&&C.jQuery===S&&(C.jQuery=Vt),S},"undefined"==typeof e&&(C.jQuery=C.$=S),S});
diff --git a/doc/manual/build/man/cascade-debug.1 b/doc/manual/build/man/cascade-debug.1
index cd8db02e2..f0bde6cda 100644
--- a/doc/manual/build/man/cascade-debug.1
+++ b/doc/manual/build/man/cascade-debug.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-DEBUG" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-DEBUG" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-debug \- Debug / troubleshoot Cascade
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-health.1 b/doc/manual/build/man/cascade-health.1
index 73c81b3dc..7f988c582 100644
--- a/doc/manual/build/man/cascade-health.1
+++ b/doc/manual/build/man/cascade-health.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HEALTH" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HEALTH" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-health \- Check the health of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-hsm.1 b/doc/manual/build/man/cascade-hsm.1
index 3ff0f301d..00bfd2801 100644
--- a/doc/manual/build/man/cascade-hsm.1
+++ b/doc/manual/build/man/cascade-hsm.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HSM" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HSM" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-hsm \- Manage HSMs
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-keyset.1 b/doc/manual/build/man/cascade-keyset.1
index c638cbe83..c91927b83 100644
--- a/doc/manual/build/man/cascade-keyset.1
+++ b/doc/manual/build/man/cascade-keyset.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-KEYSET" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-KEYSET" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-keyset \- Execute manual key roll or key removal commands
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-policy.1 b/doc/manual/build/man/cascade-policy.1
index 88eaface5..fb2500d39 100644
--- a/doc/manual/build/man/cascade-policy.1
+++ b/doc/manual/build/man/cascade-policy.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-POLICY" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-POLICY" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-policy \- Manage policies
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-status.1 b/doc/manual/build/man/cascade-status.1
index ffeb461d9..2848fbc84 100644
--- a/doc/manual/build/man/cascade-status.1
+++ b/doc/manual/build/man/cascade-status.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-STATUS" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-STATUS" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-status \- Show the status of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-template.1 b/doc/manual/build/man/cascade-template.1
index 5f649d618..f2fe0e0b5 100644
--- a/doc/manual/build/man/cascade-template.1
+++ b/doc/manual/build/man/cascade-template.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-TEMPLATE" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-TEMPLATE" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-template \- Print example config or policy files
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-tsig.1 b/doc/manual/build/man/cascade-tsig.1
index 3c38630d2..b26f4429a 100644
--- a/doc/manual/build/man/cascade-tsig.1
+++ b/doc/manual/build/man/cascade-tsig.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-TSIG" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-TSIG" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-tsig \- Manage TSIG keys
 .sp
@@ -44,7 +44,8 @@ Added in version 0.1.0\-beta1.
 \fBcascade\fP \fB[GLOBAL OPTIONS]\fP tsig \fI\%remove\fP \fB<TSIG_KEY_NAME>\fP
 .SH DESCRIPTION
 .sp
-Manage RFC 8945 TSIG keys for authenticating zone transfers.
+Manage RFC 8945 TSIG keys for authenticating zone transfer (AXFR, IXFR) and
+related messages (SOA and NOTIFY).
 .sp
 \fBTIP:\fP
 .INDENT 0.0
@@ -70,7 +71,7 @@ List registered TSIG keys and the zones that use them.
 .UNINDENT
 .INDENT 0.0
 .TP
-.B add
+.B remove
 Remove a registered TSIG key.
 .sp
 \fBNOTE:\fP
diff --git a/doc/manual/build/man/cascade-zone.1 b/doc/manual/build/man/cascade-zone.1
index d1e2caa47..ee5e12175 100644
--- a/doc/manual/build/man/cascade-zone.1
+++ b/doc/manual/build/man/cascade-zone.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-ZONE" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-ZONE" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-zone \- Manage zones
 .SH SYNOPSIS
@@ -64,7 +64,7 @@ command.
 .INDENT 0.0
 .TP
 .B add
-Register a new zone. The zone will be loaded, signed and published.
+Register a new zone.
 .UNINDENT
 .INDENT 0.0
 .TP
@@ -74,7 +74,7 @@ Remove a zone.
 \fBNOTE:\fP
 .INDENT 7.0
 .INDENT 3.5
-Once removed downstream servers will no longer be able to fetech
+Once removed downstream servers will no longer be able to fetch
 the zone!
 .UNINDENT
 .UNINDENT
@@ -127,19 +127,21 @@ The zone source can be the IP address of an upstream nameserver (with
 or without port, defaults to port 53) or the path to a zone file locally
 available to the \fBcascaded\fP daemon.\(ga
 .sp
-When specifying an upstream nameserver you may also optionally suffix it
-with \fB^<TSIG_KEY_NAME>\fP to indicate that the specified RFC 8945 TSIG key
-should be used to sign any SOA, AXFR and IXFR queries that will be sent to
-the upstream source.
+When specifying an upstream nameserver you may also optionally suffix it with
+\fB^<TSIG_KEY_NAME>\fP to indicate that the specified RFC 8945 TSIG key should
+be used to sign any SOA, AXFR and IXFR queries that will be sent to the
+upstream source.
 .sp
 Zones sourced from an upstream nameserver will be automatically updated if
 a new version is detected. This can happen if the upstream nameserver sends
-an RFC 1996 NOTIFY message to Cascade, or if an IXFR or SOA query (if the
-upstream responds with NOTIMP to an IXFR request) sent by Cascade (due to a
-SOA timer expiring) discovers that a newer SOA SERIAL is available, or due
-to an operator issuing a \fIzone reload\fP command. For zones that have already
-been retrieved at least once via AXFR, subsequent refreshes will attempt to
-use IXFR and fallback to AXFR if IXFR is not available.
+an RFC 1996 NOTIFY message to Cascade, or if a via an IXFR or SOA query it
+is discovered that the SOA SERIAL at the upstream nameserver is \(dqhigher\(dq [1]
+than the last version that Cascade loaded, or due to an operator issuing a
+\fIzone reload\fP command.
+.sp
+For zones that have already been retrieved at least once via AXFR, subsequent
+refreshes will attempt to use IXFR and fallback to AXFR if IXFR is not
+available.
 .sp
 \fBNOTE:\fP
 .INDENT 7.0
@@ -157,6 +159,8 @@ Note: In order to use a TSIG key you MUST also supply the key to
 Cascade via \fBtsig add\fP\&.
 .UNINDENT
 .UNINDENT
+.sp
+[1]: \X'tty: link https://www.rfc-editor.org/rfc/rfc1982#section-3.2'\fI\%https://www.rfc\-editor.org/rfc/rfc1982#section\-3.2\fP\X'tty: link'
 .UNINDENT
 .INDENT 0.0
 .TP
diff --git a/doc/manual/build/man/cascade.1 b/doc/manual/build/man/cascade.1
index ba905959c..f6e4db446 100644
--- a/doc/manual/build/man/cascade.1
+++ b/doc/manual/build/man/cascade.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade \- Cascade CLI
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascaded-config.toml.5 b/doc/manual/build/man/cascaded-config.toml.5
index c18e61275..0aa89e11c 100644
--- a/doc/manual/build/man/cascaded-config.toml.5
+++ b/doc/manual/build/man/cascaded-config.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-CONFIG.TOML" "5" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-CONFIG.TOML" "5" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-config.toml \- Cascade configuration file
 .sp
diff --git a/doc/manual/build/man/cascaded-policy.toml.5 b/doc/manual/build/man/cascaded-policy.toml.5
index 989fee49d..3aa149021 100644
--- a/doc/manual/build/man/cascaded-policy.toml.5
+++ b/doc/manual/build/man/cascaded-policy.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-POLICY.TOML" "5" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-POLICY.TOML" "5" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-policy.toml \- Cascade policy file format
 .sp
diff --git a/doc/manual/build/man/cascaded.1 b/doc/manual/build/man/cascaded.1
index b6fdaa3be..a46dcba00 100644
--- a/doc/manual/build/man/cascaded.1
+++ b/doc/manual/build/man/cascaded.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED" "1" "Apr 13, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded \- DNSSEC signer
 .SH SYNOPSIS

From b1c599ccaa85949c658012208d3346fa228fc09d Mon Sep 17 00:00:00 2001
From: ximon18 <3304436+ximon18@users.noreply.github.com>
Date: Fri, 17 Apr 2026 16:00:29 +0200
Subject: [PATCH 038/113] Remove sphinx static files.

---
 .../_sphinx_javascript_frameworks_compat.js   | 123 ------------------
 doc/manual/build/man/_static/jquery.js        |   2 -
 2 files changed, 125 deletions(-)
 delete mode 100644 doc/manual/build/man/_static/_sphinx_javascript_frameworks_compat.js
 delete mode 100644 doc/manual/build/man/_static/jquery.js

diff --git a/doc/manual/build/man/_static/_sphinx_javascript_frameworks_compat.js b/doc/manual/build/man/_static/_sphinx_javascript_frameworks_compat.js
deleted file mode 100644
index 81415803e..000000000
--- a/doc/manual/build/man/_static/_sphinx_javascript_frameworks_compat.js
+++ /dev/null
@@ -1,123 +0,0 @@
-/* Compatability shim for jQuery and underscores.js.
- *
- * Copyright Sphinx contributors
- * Released under the two clause BSD licence
- */
-
-/**
- * small helper function to urldecode strings
- *
- * See https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/decodeURIComponent#Decoding_query_parameters_from_a_URL
- */
-jQuery.urldecode = function(x) {
-    if (!x) {
-        return x
-    }
-    return decodeURIComponent(x.replace(/\+/g, ' '));
-};
-
-/**
- * small helper function to urlencode strings
- */
-jQuery.urlencode = encodeURIComponent;
-
-/**
- * This function returns the parsed url parameters of the
- * current request. Multiple values per key are supported,
- * it will always return arrays of strings for the value parts.
- */
-jQuery.getQueryParameters = function(s) {
-    if (typeof s === 'undefined')
-        s = document.location.search;
-    var parts = s.substr(s.indexOf('?') + 1).split('&');
-    var result = {};
-    for (var i = 0; i < parts.length; i++) {
-        var tmp = parts[i].split('=', 2);
-        var key = jQuery.urldecode(tmp[0]);
-        var value = jQuery.urldecode(tmp[1]);
-        if (key in result)
-            result[key].push(value);
-        else
-            result[key] = [value];
-    }
-    return result;
-};
-
-/**
- * highlight a given string on a jquery object by wrapping it in
- * span elements with the given class name.
- */
-jQuery.fn.highlightText = function(text, className) {
-    function highlight(node, addItems) {
-        if (node.nodeType === 3) {
-            var val = node.nodeValue;
-            var pos = val.toLowerCase().indexOf(text);
-            if (pos >= 0 &&
-                !jQuery(node.parentNode).hasClass(className) &&
-                !jQuery(node.parentNode).hasClass("nohighlight")) {
-                var span;
-                var isInSVG = jQuery(node).closest("body, svg, foreignObject").is("svg");
-                if (isInSVG) {
-                    span = document.createElementNS("http://www.w3.org/2000/svg", "tspan");
-                } else {
-                    span = document.createElement("span");
-                    span.className = className;
-                }
-                span.appendChild(document.createTextNode(val.substr(pos, text.length)));
-                node.parentNode.insertBefore(span, node.parentNode.insertBefore(
-                    document.createTextNode(val.substr(pos + text.length)),
-                    node.nextSibling));
-                node.nodeValue = val.substr(0, pos);
-                if (isInSVG) {
-                    var rect = document.createElementNS("http://www.w3.org/2000/svg", "rect");
-                    var bbox = node.parentElement.getBBox();
-                    rect.x.baseVal.value = bbox.x;
-                    rect.y.baseVal.value = bbox.y;
-                    rect.width.baseVal.value = bbox.width;
-                    rect.height.baseVal.value = bbox.height;
-                    rect.setAttribute('class', className);
-                    addItems.push({
-                        "parent": node.parentNode,
-                        "target": rect});
-                }
-            }
-        }
-        else if (!jQuery(node).is("button, select, textarea")) {
-            jQuery.each(node.childNodes, function() {
-                highlight(this, addItems);
-            });
-        }
-    }
-    var addItems = [];
-    var result = this.each(function() {
-        highlight(this, addItems);
-    });
-    for (var i = 0; i < addItems.length; ++i) {
-        jQuery(addItems[i].parent).before(addItems[i].target);
-    }
-    return result;
-};
-
-/*
- * backward compatibility for jQuery.browser
- * This will be supported until firefox bug is fixed.
- */
-if (!jQuery.browser) {
-    jQuery.uaMatch = function(ua) {
-        ua = ua.toLowerCase();
-
-        var match = /(chrome)[ \/]([\w.]+)/.exec(ua) ||
-            /(webkit)[ \/]([\w.]+)/.exec(ua) ||
-            /(opera)(?:.*version|)[ \/]([\w.]+)/.exec(ua) ||
-            /(msie) ([\w.]+)/.exec(ua) ||
-            ua.indexOf("compatible") < 0 && /(mozilla)(?:.*? rv:([\w.]+)|)/.exec(ua) ||
-            [];
-
-        return {
-            browser: match[ 1 ] || "",
-            version: match[ 2 ] || "0"
-        };
-    };
-    jQuery.browser = {};
-    jQuery.browser[jQuery.uaMatch(navigator.userAgent).browser] = true;
-}
diff --git a/doc/manual/build/man/_static/jquery.js b/doc/manual/build/man/_static/jquery.js
deleted file mode 100644
index c4c6022f2..000000000
--- a/doc/manual/build/man/_static/jquery.js
+++ /dev/null
@@ -1,2 +0,0 @@
-/*! jQuery v3.6.0 | (c) OpenJS Foundation and other contributors | jquery.org/license */
-!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e||"function"==typeof e?n[o.call(e)]||"object":typeof e}var f="3.6.0",S=function(e,t){return new S.fn.init(e,t)};function p(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n||0===t||"number"==typeof t&&0<t&&t-1 in e)}S.fn=S.prototype={jquery:f,constructor:S,length:0,toArray:function(){return s.call(this)},get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(s.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject||this.constructor()},push:u,sort:t.sort,splice:t.splice},S.extend=S.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]||{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]||{},s++),"object"==typeof a||m(a)||(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(S.isPlainObject(r)||(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i||S.isPlainObject(n)?n:{},i=!1,a[t]=S.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},S.extend({expando:"jQuery"+(f+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e||"[object Object]"!==o.call(e))&&(!(t=r(e))||"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.nonce},n)},each:function(e,t){var n,r=0;if(p(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t||[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(p(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.push(i);else for(o in e)null!=(i=t(e[o],o,n))&&a.push(i);return g(a)},guid:1,support:y}),"function"==typeof Symbol&&(S.fn[Symbol.iterator]=t[Symbol.iterator]),S.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var d=function(n){var e,d,b,o,i,h,f,g,w,u,l,T,C,a,E,v,s,c,y,S="sizzle"+1*new Date,p=n.document,k=0,r=0,m=ue(),x=ue(),A=ue(),N=ue(),j=function(e,t){return e===t&&(l=!0),0},D={}.hasOwnProperty,t=[],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked|selected|async|autofocus|autoplay|controls|defer|disabled|hidden|ismap|loop|multiple|open|readonly|required|scoped",M="[\\x20\\t\\r\\n\\f]",I="(?:\\\\[\\da-fA-F]{1,6}"+M+"?|\\\\[^\\r\\n\\f]|[\\w-]|[^\0-\\x7f])+",W="\\["+M+"*("+I+")(?:"+M+"*([*^$|!~]?=)"+M+"*(?:'((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\"|("+I+"))|)"+M+"*\\]",F=":("+I+")(?:\\((('((?:\\\\.|[^\\\\'])*)'|\"((?:\\\\.|[^\\\\\"])*)\")|((?:\\\\.|[^\\\\()[\\]]|"+W+")*)|.*)\\)|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+|((?:^|[^\\\\])(?:\\\\.)*)"+M+"+$","g"),_=new RegExp("^"+M+"*,"+M+"*"),z=new RegExp("^"+M+"*([>+~]|"+M+")"+M+"*"),U=new RegExp(M+"|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+F),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\("+M+"*(even|odd|(([+-]|)(\\d*)n|)"+M+"*(?:([+-]|)"+M+"*(\\d+)|))"+M+"*\\)|)","i"),bool:new RegExp("^(?:"+R+")$","i"),needsContext:new RegExp("^"+M+"*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\("+M+"*((?:-\\d)?\\d*)"+M+"*\\)|)(?=[^-]|$)","i")},Y=/HTML$/i,Q=/^(?:input|select|textarea|button)$/i,J=/^h\d$/i,K=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)|(\w+)|\.([\w-]+))$/,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t||(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10|55296,1023&n|56320))},re=/([\0-\x1f\x7f]|^-?\d)|^-$|[^\0-\x1f\x7f-\uFFFF\w-]/g,ie=function(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n||[],"string"!=typeof t||!t||1!==p&&9!==p&&11!==p)return n;if(!r&&(T(e),e=e||C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)return n.push(a),n}else if(f&&(a=f.getElementById(i))&&y(e,a)&&a.id===i)return n.push(a),n}else{if(u[2])return H.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])&&d.getElementsByClassName&&e.getElementsByClassName)return H.apply(n,e.getElementsByClassName(i)),n}if(d.qsa&&!N[t+" "]&&(!v||!v.test(t))&&(1!==p||"object"!==e.nodeName.toLowerCase())){if(c=t,f=e,1===p&&(U.test(t)||z.test(t))){(f=ee.test(t)&&ye(e.parentNode)||e)===e&&d.scope||((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(e){N(t,!0)}finally{s===S&&e.removeAttribute("id")}}}return g(t.replace($,"$1"),e,n,r)}function ue(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===t}}function he(n){return function(e){var t=e.nodeName.toLowerCase();return("input"===t||"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t||e.isDisabled!==!t&&ae(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument||e).documentElement;return!Y.test(t||n&&n.nodeName||"HTML")},T=se.setDocument=function(e){var t,n,r=e?e.ownerDocument||e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e).appendChild(C.createElement("div")),"undefined"!=typeof e.querySelectorAll&&!e.querySelectorAll(":scope fieldset div").length}),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(function(e){return a.appendChild(e).id=S,!C.getElementsByName||!C.getElementsByName(S).length}),d.getById?(b.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n=t.getElementById(e);return n?[n]:[]}}):(b.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++])1===n.nodeType&&r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){var t;a.appendChild(e).innerHTML="<a id='"+S+"'></a><select id='"+S+"-\r\\' msallowcapture=''><option selected=''></option></select>",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[*^$]="+M+"*(?:''|\"\")"),e.querySelectorAll("[selected]").length||v.push("\\["+M+"*(?:value|"+R+")"),e.querySelectorAll("[id~="+S+"-]").length||v.push("~="),(t=C.createElement("input")).setAttribute("name",""),e.appendChild(t),e.querySelectorAll("[name='']").length||v.push("\\["+M+"*name"+M+"*="+M+"*(?:''|\"\")"),e.querySelectorAll(":checked").length||v.push(":checked"),e.querySelectorAll("a#"+S+"+*").length||v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='disabled'></a><select disabled='disabled'><option/></select>";var t=C.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"*[*^$|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&v.push(":enabled",":disabled"),e.querySelectorAll("*,:x"),v.push(",.*:")})),(d.matchesSelector=K.test(c=a.matches||a.webkitMatchesSelector||a.mozMatchesSelector||a.oMatchesSelector||a.msMatchesSelector))&&ce(function(e){d.disconnectedMatch=c.call(e,"*"),c.call(e,"[s!='']:x"),s.push("!=",F)}),v=v.length&&new RegExp(v.join("|")),s=s.length&&new RegExp(s.join("|")),t=K.test(a.compareDocumentPosition),y=t||K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r||!(!r||1!==r.nodeType||!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},j=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPosition-!t.compareDocumentPosition;return n||(1&(n=(e.ownerDocument||e)==(t.ownerDocument||t)?e.compareDocumentPosition(t):1)||!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C||e.ownerDocument==p&&y(p,e)?-1:t==C||t.ownerDocument==p&&y(p,t)?1:u?P(u,e)-P(u,t):0:4&n?-1:1)}:function(e,t){if(e===t)return l=!0,0;var n,r=0,i=e.parentNode,o=t.parentNode,a=[e],s=[t];if(!i||!o)return e==C?-1:t==C?1:i?-1:o?1:u?P(u,e)-P(u,t):0;if(i===o)return pe(e,t);n=e;while(n=n.parentNode)a.unshift(n);n=t;while(n=n.parentNode)s.unshift(n);while(a[r]===s[r])r++;return r?pe(a[r],s[r]):a[r]==p?-1:s[r]==p?1:0}),C},se.matches=function(e,t){return se(e,null,null,t)},se.matchesSelector=function(e,t){if(T(e),d.matchesSelector&&E&&!N[t+" "]&&(!s||!s.test(t))&&(!v||!v.test(t)))try{var n=c.call(e,t);if(n||d.disconnectedMatch||e.document&&11!==e.document.nodeType)return n}catch(e){N(t,!0)}return 0<se(t,C,null,[e]).length},se.contains=function(e,t){return(e.ownerDocument||e)!=C&&T(e),y(e,t)},se.attr=function(e,t){(e.ownerDocument||e)!=C&&T(e);var n=b.attrHandle[t.toLowerCase()],r=n&&D.call(b.attrHandle,t.toLowerCase())?n(e,t,!E):void 0;return void 0!==r?r:d.attributes||!E?e.getAttribute(t):(r=e.getAttributeNode(t))&&r.specified?r.value:null},se.escape=function(e){return(e+"").replace(re,ie)},se.error=function(e){throw new Error("Syntax error, unrecognized expression: "+e)},se.uniqueSort=function(e){var t,n=[],r=0,i=0;if(l=!d.detectDuplicates,u=!d.sortStable&&e.slice(0),e.sort(j),l){while(t=e[i++])t===e[i]&&(r=n.push(i));while(r--)e.splice(n[r],1)}return u=null,e},o=se.getText=function(e){var t,n="",r=0,i=e.nodeType;if(i){if(1===i||9===i||11===i){if("string"==typeof e.textContent)return e.textContent;for(e=e.firstChild;e;e=e.nextSibling)n+=o(e)}else if(3===i||4===i)return e.nodeValue}else while(t=e[r++])n+=o(t);return n},(b=se.selectors={cacheLength:50,createPseudo:le,match:G,attrHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){return e[1]=e[1].replace(te,ne),e[3]=(e[3]||e[4]||e[5]||"").replace(te,ne),"~="===e[2]&&(e[3]=" "+e[3]+" "),e.slice(0,4)},CHILD:function(e){return e[1]=e[1].toLowerCase(),"nth"===e[1].slice(0,3)?(e[3]||se.error(e[0]),e[4]=+(e[4]?e[5]+(e[6]||1):2*("even"===e[3]||"odd"===e[3])),e[5]=+(e[7]+e[8]||"odd"===e[3])):e[3]&&se.error(e[0]),e},PSEUDO:function(e){var t,n=!e[6]&&e[2];return G.CHILD.test(e[0])?null:(e[3]?e[2]=e[4]||e[5]||"":n&&X.test(n)&&(t=h(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e.replace(te,ne).toLowerCase();return"*"===e?function(){return!0}:function(e){return e.nodeName&&e.nodeName.toLowerCase()===t}},CLASS:function(e){var t=m[e+" "];return t||(t=new RegExp("(^|"+M+")"+e+"("+M+"|$)"))&&m(e,function(e){return t.test("string"==typeof e.className&&e.className||"undefined"!=typeof e.getAttribute&&e.getAttribute("class")||"")})},ATTR:function(n,r,i){return function(e){var t=se.attr(e,n);return null==t?"!="===r:!r||(t+="","="===r?t===i:"!="===r?t!==i:"^="===r?i&&0===t.indexOf(i):"*="===r?i&&-1<t.indexOf(i):"$="===r?i&&t.slice(-i.length)===i:"~="===r?-1<(" "+t.replace(B," ")+" ").indexOf(i):"|="===r&&(t===i||t.slice(0,i.length+1)===i+"-"))}},CHILD:function(h,e,t,g,v){var y="nth"!==h.slice(0,3),m="last"!==h.slice(-4),x="of-type"===e;return 1===g&&0===v?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]||(a[S]={}))[a.uniqueID]||(o[a.uniqueID]={}))[h]||[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]||(d=s=0)||u.pop())if(1===a.nodeType&&++d&&a===e){i[h]=[k,s,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]||(a[S]={}))[a.uniqueID]||(o[a.uniqueID]={}))[h]||[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]||(d=s=0)||u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]||(a[S]={}))[a.uniqueID]||(o[a.uniqueID]={}))[h]=[k,d]),a===e))break;return(d-=v)===g||d%g==0&&0<=d/g}}},PSEUDO:function(e,o){var t,a=b.pseudos[e]||b.setFilters[e.toLowerCase()]||se.error("unsupported pseudo: "+e);return a[S]?a(o):1<a.length?(t=[e,e,"",o],b.setFilters.hasOwnProperty(e.toLowerCase())?le(function(e,t){var n,r=a(e,o),i=r.length;while(i--)e[n=P(e,r[i])]=!(t[n]=r[i])}):function(e){return a(e,0,t)}):a}},pseudos:{not:le(function(e){var r=[],i=[],s=f(e.replace($,"$1"));return s[S]?le(function(e,t,n,r){var i,o=s(e,null,r,[]),a=e.length;while(a--)(i=o[a])&&(e[a]=!(t[a]=i))}):function(e,t,n){return r[0]=e,s(r,null,n,i),r[0]=null,!i.pop()}}),has:le(function(t){return function(e){return 0<se(t,e).length}}),contains:le(function(t){return t=t.replace(te,ne),function(e){return-1<(e.textContent||o(e)).indexOf(t)}}),lang:le(function(n){return V.test(n||"")||se.error("unsupported lang: "+n),n=n.replace(te,ne).toLowerCase(),function(e){var t;do{if(t=E?e.lang:e.getAttribute("xml:lang")||e.getAttribute("lang"))return(t=t.toLowerCase())===n||0===t.indexOf(n+"-")}while((e=e.parentNode)&&1===e.nodeType);return!1}}),target:function(e){var t=n.location&&n.location.hash;return t&&t.slice(1)===e.id},root:function(e){return e===a},focus:function(e){return e===C.activeElement&&(!C.hasFocus||C.hasFocus())&&!!(e.type||e.href||~e.tabIndex)},enabled:ge(!1),disabled:ge(!0),checked:function(e){var t=e.nodeName.toLowerCase();return"input"===t&&!!e.checked||"option"===t&&!!e.selected},selected:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return J.test(e.nodeName)},input:function(e){return Q.test(e.nodeName)},button:function(e){var t=e.nodeName.toLowerCase();return"input"===t&&"button"===e.type||"button"===t},text:function(e){var t;return"input"===e.nodeName.toLowerCase()&&"text"===e.type&&(null==(t=e.getAttribute("type"))||"text"===t.toLowerCase())},first:ve(function(){return[0]}),last:ve(function(e,t){return[t-1]}),eq:ve(function(e,t,n){return[n<0?n+t:n]}),even:ve(function(e,t){for(var n=0;n<t;n+=2)e.push(n);return e}),odd:ve(function(e,t){for(var n=1;n<t;n+=2)e.push(n);return e}),lt:ve(function(e,t,n){for(var r=n<0?n+t:t<n?t:n;0<=--r;)e.push(r);return e}),gt:ve(function(e,t,n){for(var r=n<0?n+t:n;++r<t;)e.push(r);return e})}}).pseudos.nth=b.pseudos.eq,{radio:!0,checkbox:!0,file:!0,password:!0,image:!0})b.pseudos[e]=de(e);for(e in{submit:!0,reset:!0})b.pseudos[e]=he(e);function me(){}function xe(e){for(var t=0,n=e.length,r="";t<n;t++)r+=e[t].value;return r}function be(s,e,t){var u=e.dir,l=e.next,c=l||u,f=t&&"parentNode"===c,p=r++;return e.first?function(e,t,n){while(e=e[u])if(1===e.nodeType||f)return s(e,t,n);return!1}:function(e,t,n){var r,i,o,a=[k,p];if(n){while(e=e[u])if((1===e.nodeType||f)&&s(e,t,n))return!0}else while(e=e[u])if(1===e.nodeType||f)if(i=(o=e[S]||(e[S]={}))[e.uniqueID]||(o[e.uniqueID]={}),l&&l===e.nodeName.toLowerCase())e=e[u]||e;else{if((r=i[c])&&r[0]===k&&r[1]===p)return a[2]=r[2];if((i[c]=a)[2]=s(e,t,n))return!0}return!1}}function we(i){return 1<i.length?function(e,t,n){var r=i.length;while(r--)if(!i[r](e,t,n))return!1;return!0}:i[0]}function Te(e,t,n,r,i){for(var o,a=[],s=0,u=e.length,l=null!=t;s<u;s++)(o=e[s])&&(n&&!n(o,r,i)||(a.push(o),l&&t.push(s)));return a}function Ce(d,h,g,v,y,e){return v&&!v[S]&&(v=Ce(v)),y&&!y[S]&&(y=Ce(y,e)),le(function(e,t,n,r){var i,o,a,s=[],u=[],l=t.length,c=e||function(e,t,n){for(var r=0,i=t.length;r<i;r++)se(e,t[r],n);return n}(h||"*",n.nodeType?[n]:n,[]),f=!d||!e&&h?c:Te(c,s,d,n,r),p=g?y||(e?d:l||v)?[]:t:f;if(g&&g(f,p,n,r),v){i=Te(p,u),v(i,[],n,r),o=i.length;while(o--)(a=i[o])&&(p[u[o]]=!(f[u[o]]=a))}if(e){if(y||d){if(y){i=[],o=p.length;while(o--)(a=p[o])&&i.push(f[o]=a);y(null,p=[],i,r)}o=p.length;while(o--)(a=p[o])&&-1<(i=y?P(e,a):s[o])&&(e[i]=!(t[i]=a))}}else p=Te(p===t?p.splice(l,p.length):p),y?y(null,t,p,r):H.apply(t,p)})}function Ee(e){for(var i,t,n,r=e.length,o=b.relative[e[0].type],a=o||b.relative[" "],s=o?1:0,u=be(function(e){return e===i},a,!0),l=be(function(e){return-1<P(i,e)},a,!0),c=[function(e,t,n){var r=!o&&(n||t!==w)||((i=t).nodeType?u(e,t,n):l(e,t,n));return i=null,r}];s<r;s++)if(t=b.relative[e[s].type])c=[be(we(c),t)];else{if((t=b.filter[e[s].type].apply(null,e[s].matches))[S]){for(n=++s;n<r;n++)if(b.relative[e[n].type])break;return Ce(1<s&&we(c),1<s&&xe(e.slice(0,s-1).concat({value:" "===e[s-2].type?"*":""})).replace($,"$1"),t,s<n&&Ee(e.slice(s,n)),n<r&&Ee(e=e.slice(n)),n<r&&xe(e))}c.push(t)}return we(c)}return me.prototype=b.filters=b.pseudos,b.setFilters=new me,h=se.tokenize=function(e,t){var n,r,i,o,a,s,u,l=x[e+" "];if(l)return t?0:l.slice(0);a=e,s=[],u=b.preFilter;while(a){for(o in n&&!(r=_.exec(a))||(r&&(a=a.slice(r[0].length)||a),s.push(i=[])),n=!1,(r=z.exec(a))&&(n=r.shift(),i.push({value:n,type:r[0].replace($," ")}),a=a.slice(n.length)),b.filter)!(r=G[o].exec(a))||u[o]&&!(r=u[o](r))||(n=r.shift(),i.push({value:n,type:o,matches:r}),a=a.slice(n.length));if(!n)break}return t?a.length:a?se.error(e):x(e,s).slice(0)},f=se.compile=function(e,t){var n,v,y,m,x,r,i=[],o=[],a=A[e+" "];if(!a){t||(t=h(e)),n=t.length;while(n--)(a=Ee(t[n]))[S]?i.push(a):o.push(a);(a=A(e,(v=o,m=0<(y=i).length,x=0<v.length,r=function(e,t,n,r,i){var o,a,s,u=0,l="0",c=e&&[],f=[],p=w,d=e||x&&b.find.TAG("*",i),h=k+=null==p?1:Math.random()||.1,g=d.length;for(i&&(w=t==C||t||i);l!==g&&null!=(o=d[l]);l++){if(x&&o){a=0,t||o.ownerDocument==C||(T(o),n=!E);while(s=v[a++])if(s(o,t||C,n)){r.push(o);break}i&&(k=h)}m&&((o=!s&&o)&&u--,e&&c.push(o))}if(u+=l,m&&l!==u){a=0;while(s=y[a++])s(c,f,t,n);if(e){if(0<u)while(l--)c[l]||f[l]||(f[l]=q.call(r));f=Te(f)}H.apply(r,f),i&&!e&&0<f.length&&1<u+y.length&&se.uniqueSort(r)}return i&&(k=h,w=p),c},m?le(r):r))).selector=e}return a},g=se.select=function(e,t,n,r){var i,o,a,s,u,l="function"==typeof e&&e,c=!r&&h(e=l.selector||e);if(n=n||[],1===c.length){if(2<(o=c[0]=c[0].slice(0)).length&&"ID"===(a=o[0]).type&&9===t.nodeType&&E&&b.relative[o[1].type]){if(!(t=(b.find.ID(a.matches[0].replace(te,ne),t)||[])[0]))return n;l&&(t=t.parentNode),e=e.slice(o.shift().value.length)}i=G.needsContext.test(e)?0:o.length;while(i--){if(a=o[i],b.relative[s=a.type])break;if((u=b.find[s])&&(r=u(a.matches[0].replace(te,ne),ee.test(o[0].type)&&ye(t.parentNode)||t))){if(o.splice(i,1),!(e=r.length&&xe(o)))return H.apply(n,r),n;break}}}return(l||f(e,c))(r,t,!E,n,!t||ee.test(e)&&ye(t.parentNode)||t),n},d.sortStable=S.split("").sort(j).join("")===S,d.detectDuplicates=!!l,T(),d.sortDetached=ce(function(e){return 1&e.compareDocumentPosition(C.createElement("fieldset"))}),ce(function(e){return e.innerHTML="<a href='#'></a>","#"===e.firstChild.getAttribute("href")})||fe("type|href|height|width",function(e,t,n){if(!n)return e.getAttribute(t,"type"===t.toLowerCase()?1:2)}),d.attributes&&ce(function(e){return e.innerHTML="<input/>",e.firstChild.setAttribute("value",""),""===e.firstChild.getAttribute("value")})||fe("value",function(e,t,n){if(!n&&"input"===e.nodeName.toLowerCase())return e.defaultValue}),ce(function(e){return null==e.getAttribute("disabled")})||fe(R,function(e,t,n){var r;if(!n)return!0===e[t]?t.toLowerCase():(r=e.getAttributeNode(t))&&r.specified?r.value:null}),se}(C);S.find=d,S.expr=d.selectors,S.expr[":"]=S.expr.pseudos,S.uniqueSort=S.unique=d.uniqueSort,S.text=d.getText,S.isXMLDoc=d.isXML,S.contains=d.contains,S.escapeSelector=d.escape;var h=function(e,t,n){var r=[],i=void 0!==n;while((e=e[t])&&9!==e.nodeType)if(1===e.nodeType){if(i&&S(e).is(n))break;r.push(e)}return r},T=function(e,t){for(var n=[];e;e=e.nextSibling)1===e.nodeType&&e!==t&&n.push(e);return n},k=S.expr.match.needsContext;function A(e,t){return e.nodeName&&e.nodeName.toLowerCase()===t.toLowerCase()}var N=/^<([a-z][^\/\0>:\x20\t\r\n\f]*)[\x20\t\r\n\f]*\/?>(?:<\/\1>|)$/i;function j(e,n,r){return m(n)?S.grep(e,function(e,t){return!!n.call(e,t,e)!==r}):n.nodeType?S.grep(e,function(e){return e===n!==r}):"string"!=typeof n?S.grep(e,function(e){return-1<i.call(n,e)!==r}):S.filter(n,e,r)}S.filter=function(e,t,n){var r=t[0];return n&&(e=":not("+e+")"),1===t.length&&1===r.nodeType?S.find.matchesSelector(r,e)?[r]:[]:S.find.matches(e,S.grep(t,function(e){return 1===e.nodeType}))},S.fn.extend({find:function(e){var t,n,r=this.length,i=this;if("string"!=typeof e)return this.pushStack(S(e).filter(function(){for(t=0;t<r;t++)if(S.contains(i[t],this))return!0}));for(n=this.pushStack([]),t=0;t<r;t++)S.find(e,i[t],n);return 1<r?S.uniqueSort(n):n},filter:function(e){return this.pushStack(j(this,e||[],!1))},not:function(e){return this.pushStack(j(this,e||[],!0))},is:function(e){return!!j(this,"string"==typeof e&&k.test(e)?S(e):e||[],!1).length}});var D,q=/^(?:\s*(<[\w\W]+>)[^>]*|#([\w-]+))$/;(S.fn.init=function(e,t,n){var r,i;if(!e)return this;if(n=n||D,"string"==typeof e){if(!(r="<"===e[0]&&">"===e[e.length-1]&&3<=e.length?[null,e,null]:q.exec(e))||!r[1]&&t)return!t||t.jquery?(t||n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof S?t[0]:t,S.merge(this,S.parseHTML(r[1],t&&t.nodeType?t.ownerDocument||t:E,!0)),N.test(r[1])&&S.isPlainObject(t))for(r in t)m(this[r])?this[r](t[r]):this.attr(r,t[r]);return this}return(i=E.getElementById(r[2]))&&(this[0]=i,this.length=1),this}return e.nodeType?(this[0]=e,this.length=1,this):m(e)?void 0!==n.ready?n.ready(e):e(S):S.makeArray(e,this)}).prototype=S.fn,D=S(E);var L=/^(?:parents|prev(?:Until|All))/,H={children:!0,contents:!0,next:!0,prev:!0};function O(e,t){while((e=e[t])&&1!==e.nodeType);return e}S.fn.extend({has:function(e){var t=S(e,this),n=t.length;return this.filter(function(){for(var e=0;e<n;e++)if(S.contains(this,t[e]))return!0})},closest:function(e,t){var n,r=0,i=this.length,o=[],a="string"!=typeof e&&S(e);if(!k.test(e))for(;r<i;r++)for(n=this[r];n&&n!==t;n=n.parentNode)if(n.nodeType<11&&(a?-1<a.index(n):1===n.nodeType&&S.find.matchesSelector(n,e))){o.push(n);break}return this.pushStack(1<o.length?S.uniqueSort(o):o)},index:function(e){return e?"string"==typeof e?i.call(S(e),this[0]):i.call(this,e.jquery?e[0]:e):this[0]&&this[0].parentNode?this.first().prevAll().length:-1},add:function(e,t){return this.pushStack(S.uniqueSort(S.merge(this.get(),S(e,t))))},addBack:function(e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}}),S.each({parent:function(e){var t=e.parentNode;return t&&11!==t.nodeType?t:null},parents:function(e){return h(e,"parentNode")},parentsUntil:function(e,t,n){return h(e,"parentNode",n)},next:function(e){return O(e,"nextSibling")},prev:function(e){return O(e,"previousSibling")},nextAll:function(e){return h(e,"nextSibling")},prevAll:function(e){return h(e,"previousSibling")},nextUntil:function(e,t,n){return h(e,"nextSibling",n)},prevUntil:function(e,t,n){return h(e,"previousSibling",n)},siblings:function(e){return T((e.parentNode||{}).firstChild,e)},children:function(e){return T(e.firstChild)},contents:function(e){return null!=e.contentDocument&&r(e.contentDocument)?e.contentDocument:(A(e,"template")&&(e=e.content||e),S.merge([],e.childNodes))}},function(r,i){S.fn[r]=function(e,t){var n=S.map(this,i,e);return"Until"!==r.slice(-5)&&(t=e),t&&"string"==typeof t&&(n=S.filter(t,n)),1<this.length&&(H[r]||S.uniqueSort(n),L.test(r)&&n.reverse()),this.pushStack(n)}});var P=/[^\x20\t\r\n\f]+/g;function R(e){return e}function M(e){throw e}function I(e,t,n,r){var i;try{e&&m(i=e.promise)?i.call(e).done(t).fail(n):e&&m(i=e.then)?i.call(e,t,n):t.apply(void 0,[e].slice(r))}catch(e){n.apply(void 0,[e])}}S.Callbacks=function(r){var e,n;r="string"==typeof r?(e=r,n={},S.each(e.match(P)||[],function(e,t){n[t]=!0}),n):S.extend({},r);var i,t,o,a,s=[],u=[],l=-1,c=function(){for(a=a||r.once,o=i=!0;u.length;l=-1){t=u.shift();while(++l<s.length)!1===s[l].apply(t[0],t[1])&&r.stopOnFalse&&(l=s.length,t=!1)}r.memory||(t=!1),i=!1,a&&(s=t?[]:"")},f={add:function(){return s&&(t&&!i&&(l=s.length-1,u.push(t)),function n(e){S.each(e,function(e,t){m(t)?r.unique&&f.has(t)||s.push(t):t&&t.length&&"string"!==w(t)&&n(t)})}(arguments),t&&!i&&c()),this},remove:function(){return S.each(arguments,function(e,t){var n;while(-1<(n=S.inArray(t,s,n)))s.splice(n,1),n<=l&&l--}),this},has:function(e){return e?-1<S.inArray(e,s):0<s.length},empty:function(){return s&&(s=[]),this},disable:function(){return a=u=[],s=t="",this},disabled:function(){return!s},lock:function(){return a=u=[],t||i||(s=t=""),this},locked:function(){return!!a},fireWith:function(e,t){return a||(t=[e,(t=t||[]).slice?t.slice():t],u.push(t),i||c()),this},fire:function(){return f.fireWith(this,arguments),this},fired:function(){return!!o}};return f},S.extend({Deferred:function(e){var o=[["notify","progress",S.Callbacks("memory"),S.Callbacks("memory"),2],["resolve","done",S.Callbacks("once memory"),S.Callbacks("once memory"),0,"resolved"],["reject","fail",S.Callbacks("once memory"),S.Callbacks("once memory"),1,"rejected"]],i="pending",a={state:function(){return i},always:function(){return s.done(arguments).fail(arguments),this},"catch":function(e){return a.then(null,e)},pipe:function(){var i=arguments;return S.Deferred(function(r){S.each(o,function(e,t){var n=m(i[t[4]])&&i[t[4]];s[t[1]](function(){var e=n&&n.apply(this,arguments);e&&m(e.promise)?e.promise().progress(r.notify).done(r.resolve).fail(r.reject):r[t[0]+"With"](this,n?[e]:arguments)})}),i=null}).promise()},then:function(t,n,r){var u=0;function l(i,o,a,s){return function(){var n=this,r=arguments,e=function(){var e,t;if(!(i<u)){if((e=a.apply(n,r))===o.promise())throw new TypeError("Thenable self-resolution");t=e&&("object"==typeof e||"function"==typeof e)&&e.then,m(t)?s?t.call(e,l(u,o,R,s),l(u,o,M,s)):(u++,t.call(e,l(u,o,R,s),l(u,o,M,s),l(u,o,R,o.notifyWith))):(a!==R&&(n=void 0,r=[e]),(s||o.resolveWith)(n,r))}},t=s?e:function(){try{e()}catch(e){S.Deferred.exceptionHook&&S.Deferred.exceptionHook(e,t.stackTrace),u<=i+1&&(a!==M&&(n=void 0,r=[e]),o.rejectWith(n,r))}};i?t():(S.Deferred.getStackHook&&(t.stackTrace=S.Deferred.getStackHook()),C.setTimeout(t))}}return S.Deferred(function(e){o[0][3].add(l(0,e,m(r)?r:R,e.notifyWith)),o[1][3].add(l(0,e,m(t)?t:R)),o[2][3].add(l(0,e,m(n)?n:M))}).promise()},promise:function(e){return null!=e?S.extend(e,a):a}},s={};return S.each(o,function(e,t){var n=t[2],r=t[5];a[t[1]]=n.add,r&&n.add(function(){i=r},o[3-e][2].disable,o[3-e][3].disable,o[0][2].lock,o[0][3].lock),n.add(t[3].fire),s[t[0]]=function(){return s[t[0]+"With"](this===s?void 0:this,arguments),this},s[t[0]+"With"]=n.fireWith}),a.promise(s),e&&e.call(s,s),s},when:function(e){var n=arguments.length,t=n,r=Array(t),i=s.call(arguments),o=S.Deferred(),a=function(t){return function(e){r[t]=this,i[t]=1<arguments.length?s.call(arguments):e,--n||o.resolveWith(r,i)}};if(n<=1&&(I(e,o.done(a(t)).resolve,o.reject,!n),"pending"===o.state()||m(i[t]&&i[t].then)))return o.then();while(t--)I(i[t],a(t),o.reject);return o.promise()}});var W=/^(Eval|Internal|Range|Reference|Syntax|Type|URI)Error$/;S.Deferred.exceptionHook=function(e,t){C.console&&C.console.warn&&e&&W.test(e.name)&&C.console.warn("jQuery.Deferred exception: "+e.message,e.stack,t)},S.readyException=function(e){C.setTimeout(function(){throw e})};var F=S.Deferred();function B(){E.removeEventListener("DOMContentLoaded",B),C.removeEventListener("load",B),S.ready()}S.fn.ready=function(e){return F.then(e)["catch"](function(e){S.readyException(e)}),this},S.extend({isReady:!1,readyWait:1,ready:function(e){(!0===e?--S.readyWait:S.isReady)||(S.isReady=!0)!==e&&0<--S.readyWait||F.resolveWith(E,[S])}}),S.ready.then=F.then,"complete"===E.readyState||"loading"!==E.readyState&&!E.documentElement.doScroll?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)||(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){return t.toUpperCase()}function X(e){return e.replace(_,"ms-").replace(z,U)}var V=function(e){return 1===e.nodeType||9===e.nodeType||!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t||(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value:t,configurable:!0}))),t},set:function(e,t,n){var r,i=this.cache(e);if("string"==typeof t)i[X(t)]=n;else for(r in t)i[X(r)]=t[r];return i},get:function(e,t){return void 0===t?this.cache(e):e[this.expando]&&e[this.expando][X(t)]},access:function(e,t,n){return void 0===t||t&&"string"==typeof t&&void 0===n?this.get(e,t):(this.set(e,t,n),void 0!==n?n:t)},remove:function(e,t){var n,r=e[this.expando];if(void 0!==r){if(void 0!==t){n=(t=Array.isArray(t)?t.map(X):(t=X(t))in r?[t]:t.match(P)||[]).length;while(n--)delete r[t[n]]}(void 0===t||S.isEmptyObject(r))&&(e.nodeType?e[this.expando]=void 0:delete e[this.expando])}},hasData:function(e){var t=e[this.expando];return void 0!==t&&!S.isEmptyObject(t)}};var Y=new G,Q=new G,J=/^(?:\{[\w\W]*\}|\[[\w\W]*\])$/,K=/[A-Z]/g;function Z(e,t,n){var r,i;if(void 0===n&&1===e.nodeType)if(r="data-"+t.replace(K,"-$&").toLowerCase(),"string"==typeof(n=e.getAttribute(r))){try{n="true"===(i=n)||"false"!==i&&("null"===i?null:i===+i+""?+i:J.test(i)?JSON.parse(i):i)}catch(e){}Q.set(e,t,n)}else n=void 0;return n}S.extend({hasData:function(e){return Q.hasData(e)||Y.hasData(e)},data:function(e,t,n){return Q.access(e,t,n)},removeData:function(e,t){Q.remove(e,t)},_data:function(e,t,n){return Y.access(e,t,n)},_removeData:function(e,t){Y.remove(e,t)}}),S.fn.extend({data:function(n,e){var t,r,i,o=this[0],a=o&&o.attributes;if(void 0===n){if(this.length&&(i=Q.get(o),1===o.nodeType&&!Y.get(o,"hasDataAttrs"))){t=a.length;while(t--)a[t]&&0===(r=a[t].name).indexOf("data-")&&(r=X(r.slice(5)),Z(o,r,i[r]));Y.set(o,"hasDataAttrs",!0)}return i}return"object"==typeof n?this.each(function(){Q.set(this,n)}):$(this,function(e){var t;if(o&&void 0===e)return void 0!==(t=Q.get(o,n))?t:void 0!==(t=Z(o,n))?t:void 0;this.each(function(){Q.set(this,n,e)})},null,e,1<arguments.length,null,!0)},removeData:function(e){return this.each(function(){Q.remove(this,e)})}}),S.extend({queue:function(e,t,n){var r;if(e)return t=(t||"fx")+"queue",r=Y.get(e,t),n&&(!r||Array.isArray(n)?r=Y.access(e,t,S.makeArray(n)):r.push(n)),r||[]},dequeue:function(e,t){t=t||"fx";var n=S.queue(e,t),r=n.length,i=n.shift(),o=S._queueHooks(e,t);"inprogress"===i&&(i=n.shift(),r--),i&&("fx"===t&&n.unshift("inprogress"),delete o.stop,i.call(e,function(){S.dequeue(e,t)},o)),!r&&o&&o.empty.fire()},_queueHooks:function(e,t){var n=t+"queueHooks";return Y.get(e,n)||Y.access(e,n,{empty:S.Callbacks("once memory").add(function(){Y.remove(e,[t+"queue",n])})})}}),S.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<e?S.queue(this[0],t):void 0===n?this:this.each(function(){var e=S.queue(this,t,n);S._queueHooks(this,t),"fx"===t&&"inprogress"!==e[0]&&S.dequeue(this,t)})},dequeue:function(e){return this.each(function(){S.dequeue(this,e)})},clearQueue:function(e){return this.queue(e||"fx",[])},promise:function(e,t){var n,r=1,i=S.Deferred(),o=this,a=this.length,s=function(){--r||i.resolveWith(o,[o])};"string"!=typeof e&&(t=e,e=void 0),e=e||"fx";while(a--)(n=Y.get(o[a],e+"queueHooks"))&&n.empty&&(r++,n.empty.add(s));return s(),i.promise(t)}});var ee=/[+-]?(?:\d*\.|)\d+(?:[eE][+-]?\d+|)/.source,te=new RegExp("^(?:([+-])=|)("+ee+")([a-z%]*)$","i"),ne=["Top","Right","Bottom","Left"],re=E.documentElement,ie=function(e){return S.contains(e.ownerDocument,e)},oe={composed:!0};re.getRootNode&&(ie=function(e){return S.contains(e.ownerDocument,e)||e.getRootNode(oe)===e.ownerDocument});var ae=function(e,t){return"none"===(e=t||e).style.display||""===e.style.display&&ie(e)&&"none"===S.css(e,"display")};function se(e,t,n,r){var i,o,a=20,s=r?function(){return r.cur()}:function(){return S.css(e,t,"")},u=s(),l=n&&n[3]||(S.cssNumber[t]?"":"px"),c=e.nodeType&&(S.cssNumber[t]||"px"!==l&&+u)&&te.exec(S.css(e,t));if(c&&c[3]!==l){u/=2,l=l||c[3],c=+u||1;while(a--)S.style(e,t,c+l),(1-o)*(1-(o=s()/u||.5))<=0&&(a=0),c/=o;c*=2,S.style(e,t,c+l),n=n||[]}return n&&(c=+c||+u||0,i=n[1]?c+(n[1]+1)*n[2]:+n[2],r&&(r.unit=l,r.start=c,r.end=i)),i}var ue={};function le(e,t){for(var n,r,i,o,a,s,u,l=[],c=0,f=e.length;c<f;c++)(r=e[c]).style&&(n=r.style.display,t?("none"===n&&(l[c]=Y.get(r,"display")||null,l[c]||(r.style.display="")),""===r.style.display&&ae(r)&&(l[c]=(u=a=o=void 0,a=(i=r).ownerDocument,s=i.nodeName,(u=ue[s])||(o=a.body.appendChild(a.createElement(s)),u=S.css(o,"display"),o.parentNode.removeChild(o),"none"===u&&(u="block"),ue[s]=u)))):"none"!==n&&(l[c]="none",Y.set(r,"display",n)));for(c=0;c<f;c++)null!=l[c]&&(e[c].style.display=l[c]);return e}S.fn.extend({show:function(){return le(this,!0)},hide:function(){return le(this)},toggle:function(e){return"boolean"==typeof e?e?this.show():this.hide():this.each(function(){ae(this)?S(this).show():S(this).hide()})}});var ce,fe,pe=/^(?:checkbox|radio)$/i,de=/<([a-z][^\/\0>\x20\t\r\n\f]*)/i,he=/^$|^module$|\/(?:java|ecma)script/i;ce=E.createDocumentFragment().appendChild(E.createElement("div")),(fe=E.createElement("input")).setAttribute("type","radio"),fe.setAttribute("checked","checked"),fe.setAttribute("name","t"),ce.appendChild(fe),y.checkClone=ce.cloneNode(!0).cloneNode(!0).lastChild.checked,ce.innerHTML="<textarea>x</textarea>",y.noCloneChecked=!!ce.cloneNode(!0).lastChild.defaultValue,ce.innerHTML="<option></option>",y.option=!!ce.lastChild;var ge={thead:[1,"<table>","</table>"],col:[2,"<table><colgroup>","</colgroup></table>"],tr:[2,"<table><tbody>","</tbody></table>"],td:[3,"<table><tbody><tr>","</tr></tbody></table>"],_default:[0,"",""]};function ve(e,t){var n;return n="undefined"!=typeof e.getElementsByTagName?e.getElementsByTagName(t||"*"):"undefined"!=typeof e.querySelectorAll?e.querySelectorAll(t||"*"):[],void 0===t||t&&A(e,t)?S.merge([e],n):n}function ye(e,t){for(var n=0,r=e.length;n<r;n++)Y.set(e[n],"globalEval",!t||Y.get(t[n],"globalEval"))}ge.tbody=ge.tfoot=ge.colgroup=ge.caption=ge.thead,ge.th=ge.td,y.option||(ge.optgroup=ge.option=[1,"<select multiple='multiple'>","</select>"]);var me=/<|&#?\w+;/;function xe(e,t,n,r,i){for(var o,a,s,u,l,c,f=t.createDocumentFragment(),p=[],d=0,h=e.length;d<h;d++)if((o=e[d])||0===o)if("object"===w(o))S.merge(p,o.nodeType?[o]:o);else if(me.test(o)){a=a||f.appendChild(t.createElement("div")),s=(de.exec(o)||["",""])[1].toLowerCase(),u=ge[s]||ge._default,a.innerHTML=u[1]+S.htmlPrefilter(o)+u[2],c=u[0];while(c--)a=a.lastChild;S.merge(p,a.childNodes),(a=f.firstChild).textContent=""}else p.push(t.createTextNode(o));f.textContent="",d=0;while(o=p[d++])if(r&&-1<S.inArray(o,r))i&&i.push(o);else if(l=ie(o),a=ve(f.appendChild(o),"script"),l&&ye(a),n){c=0;while(o=a[c++])he.test(o.type||"")&&n.push(o)}return f}var be=/^([^.]*)(?:\.(.+)|)/;function we(){return!0}function Te(){return!1}function Ce(e,t){return e===function(){try{return E.activeElement}catch(e){}}()==("focus"===t)}function Ee(e,t,n,r,i,o){var a,s;if("object"==typeof t){for(s in"string"!=typeof n&&(r=r||n,n=void 0),t)Ee(e,s,n,r,t[s],o);return e}if(null==r&&null==i?(i=n,r=n=void 0):null==i&&("string"==typeof n?(i=r,r=void 0):(i=r,r=n,n=void 0)),!1===i)i=Te;else if(!i)return e;return 1===o&&(a=i,(i=function(e){return S().off(e),a.apply(this,arguments)}).guid=a.guid||(a.guid=S.guid++)),e.each(function(){S.event.add(this,t,i,r,n)})}function Se(e,i,o){o?(Y.set(e,i,!1),S.event.add(e,i,{namespace:!1,handler:function(e){var t,n,r=Y.get(this,i);if(1&e.isTrigger&&this[i]){if(r.length)(S.event.special[i]||{}).delegateType&&e.stopPropagation();else if(r=s.call(arguments),Y.set(this,i,r),t=o(this,i),this[i](),r!==(n=Y.get(this,i))||t?Y.set(this,i,!1):n={},r!==n)return e.stopImmediatePropagation(),e.preventDefault(),n&&n.value}else r.length&&(Y.set(this,i,{value:S.event.trigger(S.extend(r[0],S.Event.prototype),r.slice(1),this)}),e.stopImmediatePropagation())}})):void 0===Y.get(e,i)&&S.event.add(e,i,we)}S.event={global:{},add:function(t,e,n,r,i){var o,a,s,u,l,c,f,p,d,h,g,v=Y.get(t);if(V(t)){n.handler&&(n=(o=n).handler,i=o.selector),i&&S.find.matchesSelector(re,i),n.guid||(n.guid=S.guid++),(u=v.events)||(u=v.events=Object.create(null)),(a=v.handle)||(a=v.handle=function(e){return"undefined"!=typeof S&&S.event.triggered!==e.type?S.event.dispatch.apply(t,arguments):void 0}),l=(e=(e||"").match(P)||[""]).length;while(l--)d=g=(s=be.exec(e[l])||[])[1],h=(s[2]||"").split(".").sort(),d&&(f=S.event.special[d]||{},d=(i?f.delegateType:f.bindType)||d,f=S.event.special[d]||{},c=S.extend({type:d,origType:g,data:r,handler:n,guid:n.guid,selector:i,needsContext:i&&S.expr.match.needsContext.test(i),namespace:h.join(".")},o),(p=u[d])||((p=u[d]=[]).delegateCount=0,f.setup&&!1!==f.setup.call(t,r,h,a)||t.addEventListener&&t.addEventListener(d,a)),f.add&&(f.add.call(t,c),c.handler.guid||(c.handler.guid=n.guid)),i?p.splice(p.delegateCount++,0,c):p.push(c),S.event.global[d]=!0)}},remove:function(e,t,n,r,i){var o,a,s,u,l,c,f,p,d,h,g,v=Y.hasData(e)&&Y.get(e);if(v&&(u=v.events)){l=(t=(t||"").match(P)||[""]).length;while(l--)if(d=g=(s=be.exec(t[l])||[])[1],h=(s[2]||"").split(".").sort(),d){f=S.event.special[d]||{},p=u[d=(r?f.delegateType:f.bindType)||d]||[],s=s[2]&&new RegExp("(^|\\.)"+h.join("\\.(?:.*\\.|)")+"(\\.|$)"),a=o=p.length;while(o--)c=p[o],!i&&g!==c.origType||n&&n.guid!==c.guid||s&&!s.test(c.namespace)||r&&r!==c.selector&&("**"!==r||!c.selector)||(p.splice(o,1),c.selector&&p.delegateCount--,f.remove&&f.remove.call(e,c));a&&!p.length&&(f.teardown&&!1!==f.teardown.call(e,h,v.handle)||S.removeEvent(e,d,v.handle),delete u[d])}else for(d in u)S.event.remove(e,d+t[l],n,r,!0);S.isEmptyObject(u)&&Y.remove(e,"handle events")}},dispatch:function(e){var t,n,r,i,o,a,s=new Array(arguments.length),u=S.event.fix(e),l=(Y.get(this,"events")||Object.create(null))[u.type]||[],c=S.event.special[u.type]||{};for(s[0]=u,t=1;t<arguments.length;t++)s[t]=arguments[t];if(u.delegateTarget=this,!c.preDispatch||!1!==c.preDispatch.call(this,u)){a=S.event.handlers.call(this,u,l),t=0;while((i=a[t++])&&!u.isPropagationStopped()){u.currentTarget=i.elem,n=0;while((o=i.handlers[n++])&&!u.isImmediatePropagationStopped())u.rnamespace&&!1!==o.namespace&&!u.rnamespace.test(o.namespace)||(u.handleObj=o,u.data=o.data,void 0!==(r=((S.event.special[o.origType]||{}).handle||o.handler).apply(i.elem,s))&&!1===(u.result=r)&&(u.preventDefault(),u.stopPropagation()))}return c.postDispatch&&c.postDispatch.call(this,u),u.result}},handlers:function(e,t){var n,r,i,o,a,s=[],u=t.delegateCount,l=e.target;if(u&&l.nodeType&&!("click"===e.type&&1<=e.button))for(;l!==this;l=l.parentNode||this)if(1===l.nodeType&&("click"!==e.type||!0!==l.disabled)){for(o=[],a={},n=0;n<u;n++)void 0===a[i=(r=t[n]).selector+" "]&&(a[i]=r.needsContext?-1<S(i,this).index(l):S.find(i,this,null,[l]).length),a[i]&&o.push(r);o.length&&s.push({elem:l,handlers:o})}return l=this,u<t.length&&s.push({elem:l,handlers:t.slice(u)}),s},addProp:function(t,e){Object.defineProperty(S.Event.prototype,t,{enumerable:!0,configurable:!0,get:m(e)?function(){if(this.originalEvent)return e(this.originalEvent)}:function(){if(this.originalEvent)return this.originalEvent[t]},set:function(e){Object.defineProperty(this,t,{enumerable:!0,configurable:!0,writable:!0,value:e})}})},fix:function(e){return e[S.expando]?e:new S.Event(e)},special:{load:{noBubble:!0},click:{setup:function(e){var t=this||e;return pe.test(t.type)&&t.click&&A(t,"input")&&Se(t,"click",we),!1},trigger:function(e){var t=this||e;return pe.test(t.type)&&t.click&&A(t,"input")&&Se(t,"click"),!0},_default:function(e){var t=e.target;return pe.test(t.type)&&t.click&&A(t,"input")&&Y.get(t,"click")||A(t,"a")}},beforeunload:{postDispatch:function(e){void 0!==e.result&&e.originalEvent&&(e.originalEvent.returnValue=e.result)}}}},S.removeEvent=function(e,t,n){e.removeEventListener&&e.removeEventListener(t,n)},S.Event=function(e,t){if(!(this instanceof S.Event))return new S.Event(e,t);e&&e.type?(this.originalEvent=e,this.type=e.type,this.isDefaultPrevented=e.defaultPrevented||void 0===e.defaultPrevented&&!1===e.returnValue?we:Te,this.target=e.target&&3===e.target.nodeType?e.target.parentNode:e.target,this.currentTarget=e.currentTarget,this.relatedTarget=e.relatedTarget):this.type=e,t&&S.extend(this,t),this.timeStamp=e&&e.timeStamp||Date.now(),this[S.expando]=!0},S.Event.prototype={constructor:S.Event,isDefaultPrevented:Te,isPropagationStopped:Te,isImmediatePropagationStopped:Te,isSimulated:!1,preventDefault:function(){var e=this.originalEvent;this.isDefaultPrevented=we,e&&!this.isSimulated&&e.preventDefault()},stopPropagation:function(){var e=this.originalEvent;this.isPropagationStopped=we,e&&!this.isSimulated&&e.stopPropagation()},stopImmediatePropagation:function(){var e=this.originalEvent;this.isImmediatePropagationStopped=we,e&&!this.isSimulated&&e.stopImmediatePropagation(),this.stopPropagation()}},S.each({altKey:!0,bubbles:!0,cancelable:!0,changedTouches:!0,ctrlKey:!0,detail:!0,eventPhase:!0,metaKey:!0,pageX:!0,pageY:!0,shiftKey:!0,view:!0,"char":!0,code:!0,charCode:!0,key:!0,keyCode:!0,button:!0,buttons:!0,clientX:!0,clientY:!0,offsetX:!0,offsetY:!0,pointerId:!0,pointerType:!0,screenX:!0,screenY:!0,targetTouches:!0,toElement:!0,touches:!0,which:!0},S.event.addProp),S.each({focus:"focusin",blur:"focusout"},function(e,t){S.event.special[e]={setup:function(){return Se(this,e,Ce),!1},trigger:function(){return Se(this,e),!0},_default:function(){return!0},delegateType:t}}),S.each({mouseenter:"mouseover",mouseleave:"mouseout",pointerenter:"pointerover",pointerleave:"pointerout"},function(e,i){S.event.special[e]={delegateType:i,bindType:i,handle:function(e){var t,n=e.relatedTarget,r=e.handleObj;return n&&(n===this||S.contains(this,n))||(e.type=r.origType,t=r.handler.apply(this,arguments),e.type=i),t}}}),S.fn.extend({on:function(e,t,n,r){return Ee(this,e,t,n,r)},one:function(e,t,n,r){return Ee(this,e,t,n,r,1)},off:function(e,t,n){var r,i;if(e&&e.preventDefault&&e.handleObj)return r=e.handleObj,S(e.delegateTarget).off(r.namespace?r.origType+"."+r.namespace:r.origType,r.selector,r.handler),this;if("object"==typeof e){for(i in e)this.off(i,t,e[i]);return this}return!1!==t&&"function"!=typeof t||(n=t,t=void 0),!1===n&&(n=Te),this.each(function(){S.event.remove(this,e,n,t)})}});var ke=/<script|<style|<link/i,Ae=/checked\s*(?:[^=]|=\s*.checked.)/i,Ne=/^\s*<!(?:\[CDATA\[|--)|(?:\]\]|--)>\s*$/g;function je(e,t){return A(e,"table")&&A(11!==t.nodeType?t:t.firstChild,"tr")&&S(e).children("tbody")[0]||e}function De(e){return e.type=(null!==e.getAttribute("type"))+"/"+e.type,e}function qe(e){return"true/"===(e.type||"").slice(0,5)?e.type=e.type.slice(5):e.removeAttribute("type"),e}function Le(e,t){var n,r,i,o,a,s;if(1===t.nodeType){if(Y.hasData(e)&&(s=Y.get(e).events))for(i in Y.remove(t,"handle events"),s)for(n=0,r=s[i].length;n<r;n++)S.event.add(t,i,s[i][n]);Q.hasData(e)&&(o=Q.access(e),a=S.extend({},o),Q.set(t,a))}}function He(n,r,i,o){r=g(r);var e,t,a,s,u,l,c=0,f=n.length,p=f-1,d=r[0],h=m(d);if(h||1<f&&"string"==typeof d&&!y.checkClone&&Ae.test(d))return n.each(function(e){var t=n.eq(e);h&&(r[0]=d.call(this,e,t.html())),He(t,r,i,o)});if(f&&(t=(e=xe(r,n[0].ownerDocument,!1,n,o)).firstChild,1===e.childNodes.length&&(e=t),t||o)){for(s=(a=S.map(ve(e,"script"),De)).length;c<f;c++)u=e,c!==p&&(u=S.clone(u,!0,!0),s&&S.merge(a,ve(u,"script"))),i.call(n[c],u,c);if(s)for(l=a[a.length-1].ownerDocument,S.map(a,qe),c=0;c<s;c++)u=a[c],he.test(u.type||"")&&!Y.access(u,"globalEval")&&S.contains(l,u)&&(u.src&&"module"!==(u.type||"").toLowerCase()?S._evalUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce||u.getAttribute("nonce")},l):b(u.textContent.replace(Ne,""),u,l))}return n}function Oe(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n||1!==r.nodeType||S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return e}S.extend({htmlPrefilter:function(e){return e},clone:function(e,t,n){var r,i,o,a,s,u,l,c=e.cloneNode(!0),f=ie(e);if(!(y.noCloneChecked||1!==e.nodeType&&11!==e.nodeType||S.isXMLDoc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l||(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o||ve(e),a=a||ve(c),r=0,i=o.length;r<i;r++)Le(o[r],a[r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEvent(n,r,t.handle);n[Y.expando]=void 0}n[Q.expando]&&(n[Q.expando]=void 0)}}}),S.fn.extend({detach:function(e){return Oe(this,e,!0)},remove:function(e){return Oe(this,e)},text:function(e){return $(this,function(e){return void 0===e?S.text(this):this.empty().each(function(){1!==this.nodeType&&11!==this.nodeType&&9!==this.nodeType||(this.textContent=e)})},null,e,arguments.length)},append:function(){return He(this,arguments,function(e){1!==this.nodeType&&11!==this.nodeType&&9!==this.nodeType||je(this,e).appendChild(e)})},prepend:function(){return He(this,arguments,function(e){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var t=je(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return He(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)})},after:function(){return He(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this.nextSibling)})},empty:function(){for(var e,t=0;null!=(e=this[t]);t++)1===e.nodeType&&(S.cleanData(ve(e,!1)),e.textContent="");return this},clone:function(e,t){return e=null!=e&&e,t=null==t?e:t,this.map(function(){return S.clone(this,e,t)})},html:function(e){return $(this,function(e){var t=this[0]||{},n=0,r=this.length;if(void 0===e&&1===t.nodeType)return t.innerHTML;if("string"==typeof e&&!ke.test(e)&&!ge[(de.exec(e)||["",""])[1].toLowerCase()]){e=S.htmlPrefilter(e);try{for(;n<r;n++)1===(t=this[n]||{}).nodeType&&(S.cleanData(ve(t,!1)),t.innerHTML=e);t=0}catch(e){}}t&&this.empty().append(e)},null,e,arguments.length)},replaceWith:function(){var n=[];return He(this,arguments,function(e){var t=this.parentNode;S.inArray(this,n)<0&&(S.cleanData(ve(this)),t&&t.replaceChild(e,this))},n)}}),S.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(e,a){S.fn[e]=function(e){for(var t,n=[],r=S(e),i=r.length-1,o=0;o<=i;o++)t=o===i?this:this.clone(!0),S(r[o])[a](t),u.apply(n,t.get());return this.pushStack(n)}});var Pe=new RegExp("^("+ee+")(?!px)[a-z%]+$","i"),Re=function(e){var t=e.ownerDocument.defaultView;return t&&t.opener||(t=C),t.getComputedStyle(e)},Me=function(e,t,n){var r,i,o={};for(i in t)o[i]=e.style[i],e.style[i]=t[i];for(i in r=n.call(e),t)e.style[i]=o[i];return r},Ie=new RegExp(ne.join("|"),"i");function We(e,t,n){var r,i,o,a,s=e.style;return(n=n||Re(e))&&(""!==(a=n.getPropertyValue(t)||n[t])||ie(e)||(a=S.style(e,t)),!y.pixelBoxStyles()&&Pe.test(a)&&Ie.test(t)&&(r=s.width,i=s.minWidth,o=s.maxWidth,s.minWidth=s.maxWidth=s.width=a,a=n.width,s.width=r,s.minWidth=i,s.maxWidth=o)),void 0!==a?a+"":a}function Fe(e,t){return{get:function(){if(!e())return(this.get=t).apply(this,arguments);delete this.get}}}!function(){function e(){if(l){u.style.cssText="position:absolute;left:-11111px;width:60px;margin-top:1px;padding:0;border:0",l.style.cssText="position:relative;display:block;box-sizing:border-box;overflow:scroll;margin:auto;border:1px;padding:1px;width:60%;top:1%",re.appendChild(u).appendChild(l);var e=C.getComputedStyle(l);n="1%"!==e.top,s=12===t(e.marginLeft),l.style.right="60%",o=36===t(e.right),r=36===t(e.width),l.style.position="absolute",i=12===t(l.offsetWidth/3),re.removeChild(u),l=null}}function t(e){return Math.round(parseFloat(e))}var n,r,i,o,a,s,u=E.createElement("div"),l=E.createElement("div");l.style&&(l.style.backgroundClip="content-box",l.cloneNode(!0).style.backgroundClip="",y.clearCloneStyle="content-box"===l.style.backgroundClip,S.extend(y,{boxSizingReliable:function(){return e(),r},pixelBoxStyles:function(){return e(),o},pixelPosition:function(){return e(),n},reliableMarginLeft:function(){return e(),s},scrollboxSize:function(){return e(),i},reliableTrDimensions:function(){var e,t,n,r;return null==a&&(e=E.createElement("table"),t=E.createElement("tr"),n=E.createElement("div"),e.style.cssText="position:absolute;left:-11111px;border-collapse:separate",t.style.cssText="border:1px solid",t.style.height="1px",n.style.height="9px",n.style.display="block",re.appendChild(e).appendChild(t).appendChild(n),r=C.getComputedStyle(t),a=parseInt(r.height,10)+parseInt(r.borderTopWidth,10)+parseInt(r.borderBottomWidth,10)===t.offsetHeight,re.removeChild(e)),a}}))}();var Be=["Webkit","Moz","ms"],$e=E.createElement("div").style,_e={};function ze(e){var t=S.cssProps[e]||_e[e];return t||(e in $e?e:_e[e]=function(e){var t=e[0].toUpperCase()+e.slice(1),n=Be.length;while(n--)if((e=Be[n]+t)in $e)return e}(e)||e)}var Ue=/^(none|table(?!-c[ea]).+)/,Xe=/^--/,Ve={position:"absolute",visibility:"hidden",display:"block"},Ge={letterSpacing:"0",fontWeight:"400"};function Ye(e,t,n){var r=te.exec(t);return r?Math.max(0,r[2]-(n||0))+(r[3]||"px"):t}function Qe(e,t,n,r,i,o){var a="width"===t?1:0,s=0,u=0;if(n===(r?"border":"content"))return 0;for(;a<4;a+=2)"margin"===n&&(u+=S.css(e,n+ne[a],!0,i)),r?("content"===n&&(u-=S.css(e,"padding"+ne[a],!0,i)),"margin"!==n&&(u-=S.css(e,"border"+ne[a]+"Width",!0,i))):(u+=S.css(e,"padding"+ne[a],!0,i),"padding"!==n?u+=S.css(e,"border"+ne[a]+"Width",!0,i):s+=S.css(e,"border"+ne[a]+"Width",!0,i));return!r&&0<=o&&(u+=Math.max(0,Math.ceil(e["offset"+t[0].toUpperCase()+t.slice(1)]-o-u-s-.5))||0),u}function Je(e,t,n){var r=Re(e),i=(!y.boxSizingReliable()||n)&&"border-box"===S.css(e,"boxSizing",!1,r),o=i,a=We(e,t,r),s="offset"+t[0].toUpperCase()+t.slice(1);if(Pe.test(a)){if(!n)return a;a="auto"}return(!y.boxSizingReliable()&&i||!y.reliableTrDimensions()&&A(e,"tr")||"auto"===a||!parseFloat(a)&&"inline"===S.css(e,"display",!1,r))&&e.getClientRects().length&&(i="border-box"===S.css(e,"boxSizing",!1,r),(o=s in e)&&(a=e[s])),(a=parseFloat(a)||0)+Qe(e,t,n||(i?"border":"content"),o,r,a)+"px"}function Ke(e,t,n,r,i){return new Ke.prototype.init(e,t,n,r,i)}S.extend({cssHooks:{opacity:{get:function(e,t){if(t){var n=We(e,"opacity");return""===n?"1":n}}}},cssNumber:{animationIterationCount:!0,columnCount:!0,fillOpacity:!0,flexGrow:!0,flexShrink:!0,fontWeight:!0,gridArea:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnStart:!0,gridRow:!0,gridRowEnd:!0,gridRowStart:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,widows:!0,zIndex:!0,zoom:!0},cssProps:{},style:function(e,t,n,r){if(e&&3!==e.nodeType&&8!==e.nodeType&&e.style){var i,o,a,s=X(t),u=Xe.test(t),l=e.style;if(u||(t=ze(s)),a=S.cssHooks[t]||S.cssHooks[s],void 0===n)return a&&"get"in a&&void 0!==(i=a.get(e,!1,r))?i:l[t];"string"===(o=typeof n)&&(i=te.exec(n))&&i[1]&&(n=se(e,t,i),o="number"),null!=n&&n==n&&("number"!==o||u||(n+=i&&i[3]||(S.cssNumber[s]?"":"px")),y.clearCloneStyle||""!==n||0!==t.indexOf("background")||(l[t]="inherit"),a&&"set"in a&&void 0===(n=a.set(e,n,r))||(u?l.setProperty(t,n):l[t]=n))}},css:function(e,t,n,r){var i,o,a,s=X(t);return Xe.test(t)||(t=ze(s)),(a=S.cssHooks[t]||S.cssHooks[s])&&"get"in a&&(i=a.get(e,!0,n)),void 0===i&&(i=We(e,t,r)),"normal"===i&&t in Ge&&(i=Ge[t]),""===n||n?(o=parseFloat(i),!0===n||isFinite(o)?o||0:i):i}}),S.each(["height","width"],function(e,u){S.cssHooks[u]={get:function(e,t,n){if(t)return!Ue.test(S.css(e,"display"))||e.getClientRects().length&&e.getBoundingClientRect().width?Je(e,u,n):Me(e,Ve,function(){return Je(e,u,n)})},set:function(e,t,n){var r,i=Re(e),o=!y.scrollboxSize()&&"absolute"===i.position,a=(o||n)&&"border-box"===S.css(e,"boxSizing",!1,i),s=n?Qe(e,u,n,a,i):0;return a&&o&&(s-=Math.ceil(e["offset"+u[0].toUpperCase()+u.slice(1)]-parseFloat(i[u])-Qe(e,u,"border",!1,i)-.5)),s&&(r=te.exec(t))&&"px"!==(r[3]||"px")&&(e.style[u]=t,t=S.css(e,u)),Ye(0,t,s)}}}),S.cssHooks.marginLeft=Fe(y.reliableMarginLeft,function(e,t){if(t)return(parseFloat(We(e,"marginLeft"))||e.getBoundingClientRect().left-Me(e,{marginLeft:0},function(){return e.getBoundingClientRect().left}))+"px"}),S.each({margin:"",padding:"",border:"Width"},function(i,o){S.cssHooks[i+o]={expand:function(e){for(var t=0,n={},r="string"==typeof e?e.split(" "):[e];t<4;t++)n[i+ne[t]+o]=r[t]||r[t-2]||r[0];return n}},"margin"!==i&&(S.cssHooks[i+o].set=Ye)}),S.fn.extend({css:function(e,t){return $(this,function(e,t,n){var r,i,o={},a=0;if(Array.isArray(t)){for(r=Re(e),i=t.length;a<i;a++)o[t[a]]=S.css(e,t[a],!1,r);return o}return void 0!==n?S.style(e,t,n):S.css(e,t)},e,t,1<arguments.length)}}),((S.Tween=Ke).prototype={constructor:Ke,init:function(e,t,n,r,i,o){this.elem=e,this.prop=n,this.easing=i||S.easing._default,this.options=t,this.start=this.now=this.cur(),this.end=r,this.unit=o||(S.cssNumber[n]?"":"px")},cur:function(){var e=Ke.propHooks[this.prop];return e&&e.get?e.get(this):Ke.propHooks._default.get(this)},run:function(e){var t,n=Ke.propHooks[this.prop];return this.options.duration?this.pos=t=S.easing[this.easing](e,this.options.duration*e,0,1,this.options.duration):this.pos=t=e,this.now=(this.end-this.start)*t+this.start,this.options.step&&this.options.step.call(this.elem,this.now,this),n&&n.set?n.set(this):Ke.propHooks._default.set(this),this}}).init.prototype=Ke.prototype,(Ke.propHooks={_default:{get:function(e){var t;return 1!==e.elem.nodeType||null!=e.elem[e.prop]&&null==e.elem.style[e.prop]?e.elem[e.prop]:(t=S.css(e.elem,e.prop,""))&&"auto"!==t?t:0},set:function(e){S.fx.step[e.prop]?S.fx.step[e.prop](e):1!==e.elem.nodeType||!S.cssHooks[e.prop]&&null==e.elem.style[ze(e.prop)]?e.elem[e.prop]=e.now:S.style(e.elem,e.prop,e.now+e.unit)}}}).scrollTop=Ke.propHooks.scrollLeft={set:function(e){e.elem.nodeType&&e.elem.parentNode&&(e.elem[e.prop]=e.now)}},S.easing={linear:function(e){return e},swing:function(e){return.5-Math.cos(e*Math.PI)/2},_default:"swing"},S.fx=Ke.prototype.init,S.fx.step={};var Ze,et,tt,nt,rt=/^(?:toggle|show|hide)$/,it=/queueHooks$/;function ot(){et&&(!1===E.hidden&&C.requestAnimationFrame?C.requestAnimationFrame(ot):C.setTimeout(ot,S.fx.interval),S.fx.tick())}function at(){return C.setTimeout(function(){Ze=void 0}),Ze=Date.now()}function st(e,t){var n,r=0,i={height:e};for(t=t?1:0;r<4;r+=2-t)i["margin"+(n=ne[r])]=i["padding"+n]=e;return t&&(i.opacity=i.width=e),i}function ut(e,t,n){for(var r,i=(lt.tweeners[t]||[]).concat(lt.tweeners["*"]),o=0,a=i.length;o<a;o++)if(r=i[o].call(n,t,e))return r}function lt(o,e,t){var n,a,r=0,i=lt.prefilters.length,s=S.Deferred().always(function(){delete u.elem}),u=function(){if(a)return!1;for(var e=Ze||at(),t=Math.max(0,l.startTime+l.duration-e),n=1-(t/l.duration||0),r=0,i=l.tweens.length;r<i;r++)l.tweens[r].run(n);return s.notifyWith(o,[l,n,t]),n<1&&i?t:(i||s.notifyWith(o,[l,1,0]),s.resolveWith(o,[l]),!1)},l=s.promise({elem:o,props:S.extend({},e),opts:S.extend(!0,{specialEasing:{},easing:S.easing._default},t),originalProperties:e,originalOptions:t,startTime:Ze||at(),duration:t.duration,tweens:[],createTween:function(e,t){var n=S.Tween(o,l.opts,e,t,l.opts.specialEasing[e]||l.opts.easing);return l.tweens.push(n),n},stop:function(e){var t=0,n=e?l.tweens.length:0;if(a)return this;for(a=!0;t<n;t++)l.tweens[t].run(1);return e?(s.notifyWith(o,[l,1,0]),s.resolveWith(o,[l,e])):s.rejectWith(o,[l,e]),this}}),c=l.props;for(!function(e,t){var n,r,i,o,a;for(n in e)if(i=t[r=X(n)],o=e[n],Array.isArray(o)&&(i=o[1],o=e[n]=o[0]),n!==r&&(e[r]=o,delete e[n]),(a=S.cssHooks[r])&&"expand"in a)for(n in o=a.expand(o),delete e[r],o)n in e||(e[n]=o[n],t[n]=i);else t[r]=i}(c,l.opts.specialEasing);r<i;r++)if(n=lt.prefilters[r].call(l,o,c,l.opts))return m(n.stop)&&(S._queueHooks(l.elem,l.opts.queue).stop=n.stop.bind(n)),n;return S.map(c,ut,l),m(l.opts.start)&&l.opts.start.call(o,l),l.progress(l.opts.progress).done(l.opts.done,l.opts.complete).fail(l.opts.fail).always(l.opts.always),S.fx.timer(S.extend(u,{elem:o,anim:l,queue:l.opts.queue})),l}S.Animation=S.extend(lt,{tweeners:{"*":[function(e,t){var n=this.createTween(e,t);return se(n.elem,e,te.exec(t),n),n}]},tweener:function(e,t){m(e)?(t=e,e=["*"]):e=e.match(P);for(var n,r=0,i=e.length;r<i;r++)n=e[r],lt.tweeners[n]=lt.tweeners[n]||[],lt.tweeners[n].unshift(t)},prefilters:[function(e,t,n){var r,i,o,a,s,u,l,c,f="width"in t||"height"in t,p=this,d={},h=e.style,g=e.nodeType&&ae(e),v=Y.get(e,"fxshow");for(r in n.queue||(null==(a=S._queueHooks(e,"fx")).unqueued&&(a.unqueued=0,s=a.empty.fire,a.empty.fire=function(){a.unqueued||s()}),a.unqueued++,p.always(function(){p.always(function(){a.unqueued--,S.queue(e,"fx").length||a.empty.fire()})})),t)if(i=t[r],rt.test(i)){if(delete t[r],o=o||"toggle"===i,i===(g?"hide":"show")){if("show"!==i||!v||void 0===v[r])continue;g=!0}d[r]=v&&v[r]||S.style(e,r)}if((u=!S.isEmptyObject(t))||!S.isEmptyObject(d))for(r in f&&1===e.nodeType&&(n.overflow=[h.overflow,h.overflowX,h.overflowY],null==(l=v&&v.display)&&(l=Y.get(e,"display")),"none"===(c=S.css(e,"display"))&&(l?c=l:(le([e],!0),l=e.style.display||l,c=S.css(e,"display"),le([e]))),("inline"===c||"inline-block"===c&&null!=l)&&"none"===S.css(e,"float")&&(u||(p.done(function(){h.display=l}),null==l&&(c=h.display,l="none"===c?"":c)),h.display="inline-block")),n.overflow&&(h.overflow="hidden",p.always(function(){h.overflow=n.overflow[0],h.overflowX=n.overflow[1],h.overflowY=n.overflow[2]})),u=!1,d)u||(v?"hidden"in v&&(g=v.hidden):v=Y.access(e,"fxshow",{display:l}),o&&(v.hidden=!g),g&&le([e],!0),p.done(function(){for(r in g||le([e]),Y.remove(e,"fxshow"),d)S.style(e,r,d[r])})),u=ut(g?v[r]:0,r,p),r in v||(v[r]=u.start,g&&(u.end=u.start,u.start=0))}],prefilter:function(e,t){t?lt.prefilters.unshift(e):lt.prefilters.push(e)}}),S.speed=function(e,t,n){var r=e&&"object"==typeof e?S.extend({},e):{complete:n||!n&&t||m(e)&&e,duration:e,easing:n&&t||t&&!m(t)&&t};return S.fx.off?r.duration=0:"number"!=typeof r.duration&&(r.duration in S.fx.speeds?r.duration=S.fx.speeds[r.duration]:r.duration=S.fx.speeds._default),null!=r.queue&&!0!==r.queue||(r.queue="fx"),r.old=r.complete,r.complete=function(){m(r.old)&&r.old.call(this),r.queue&&S.dequeue(this,r.queue)},r},S.fn.extend({fadeTo:function(e,t,n,r){return this.filter(ae).css("opacity",0).show().end().animate({opacity:t},e,n,r)},animate:function(t,e,n,r){var i=S.isEmptyObject(t),o=S.speed(e,n,r),a=function(){var e=lt(this,S.extend({},t),o);(i||Y.get(this,"finish"))&&e.stop(!0)};return a.finish=a,i||!1===o.queue?this.each(a):this.queue(o.queue,a)},stop:function(i,e,o){var a=function(e){var t=e.stop;delete e.stop,t(o)};return"string"!=typeof i&&(o=e,e=i,i=void 0),e&&this.queue(i||"fx",[]),this.each(function(){var e=!0,t=null!=i&&i+"queueHooks",n=S.timers,r=Y.get(this);if(t)r[t]&&r[t].stop&&a(r[t]);else for(t in r)r[t]&&r[t].stop&&it.test(t)&&a(r[t]);for(t=n.length;t--;)n[t].elem!==this||null!=i&&n[t].queue!==i||(n[t].anim.stop(o),e=!1,n.splice(t,1));!e&&o||S.dequeue(this,i)})},finish:function(a){return!1!==a&&(a=a||"fx"),this.each(function(){var e,t=Y.get(this),n=t[a+"queue"],r=t[a+"queueHooks"],i=S.timers,o=n?n.length:0;for(t.finish=!0,S.queue(this,a,[]),r&&r.stop&&r.stop.call(this,!0),e=i.length;e--;)i[e].elem===this&&i[e].queue===a&&(i[e].anim.stop(!0),i.splice(e,1));for(e=0;e<o;e++)n[e]&&n[e].finish&&n[e].finish.call(this);delete t.finish})}}),S.each(["toggle","show","hide"],function(e,r){var i=S.fn[r];S.fn[r]=function(e,t,n){return null==e||"boolean"==typeof e?i.apply(this,arguments):this.animate(st(r,!0),e,t,n)}}),S.each({slideDown:st("show"),slideUp:st("hide"),slideToggle:st("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},function(e,r){S.fn[e]=function(e,t,n){return this.animate(r,e,t,n)}}),S.timers=[],S.fx.tick=function(){var e,t=0,n=S.timers;for(Ze=Date.now();t<n.length;t++)(e=n[t])()||n[t]!==e||n.splice(t--,1);n.length||S.fx.stop(),Ze=void 0},S.fx.timer=function(e){S.timers.push(e),S.fx.start()},S.fx.interval=13,S.fx.start=function(){et||(et=!0,ot())},S.fx.stop=function(){et=null},S.fx.speeds={slow:600,fast:200,_default:400},S.fn.delay=function(r,e){return r=S.fx&&S.fx.speeds[r]||r,e=e||"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},tt=E.createElement("input"),nt=E.createElement("select").appendChild(E.createElement("option")),tt.type="checkbox",y.checkOn=""!==tt.value,y.optSelected=nt.selected,(tt=E.createElement("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.length)},removeAttr:function(e){return this.each(function(){S.removeAttr(this,e)})}}),S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)||(i=S.attrHooks[t.toLowerCase()]||(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setAttribute(t,n+""),n):i&&"get"in i&&null!==(r=i.get(e,t))?r:null==(r=S.find.attr(e,t))?void 0:r)},attrHooks:{type:{set:function(e,t){if(!y.radioValue&&"radio"===t&&A(e,"input")){var n=e.value;return e.setAttribute("type",t),n&&(e.value=n),t}}}},removeAttr:function(e,t){var n,r=0,i=t&&t.match(P);if(i&&1===e.nodeType)while(n=i[r++])e.removeAttribute(n)}}),ct={set:function(e,t,n){return!1===t?S.removeAttr(e,n):e.setAttribute(n,n),n}},S.each(S.expr.match.bool.source.match(/\w+/g),function(e,t){var a=ft[t]||S.find.attr;ft[t]=function(e,t,n){var r,i,o=t.toLowerCase();return n||(i=ft[o],ft[o]=r,r=null!=a(e,t,n)?o:null,ft[o]=i),r}});var pt=/^(?:input|select|textarea|button)$/i,dt=/^(?:a|area)$/i;function ht(e){return(e.match(P)||[]).join(" ")}function gt(e){return e.getAttribute&&e.getAttribute("class")||""}function vt(e){return Array.isArray(e)?e:"string"==typeof e&&e.match(P)||[]}S.fn.extend({prop:function(e,t){return $(this,S.prop,e,t,1<arguments.length)},removeProp:function(e){return this.each(function(){delete this[S.propFix[e]||e]})}}),S.extend({prop:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return 1===o&&S.isXMLDoc(e)||(t=S.propFix[t]||t,i=S.propHooks[t]),void 0!==n?i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=S.find.attr(e,"tabindex");return t?parseInt(t,10):pt.test(e.nodeName)||dt.test(e.nodeName)&&e.href?0:-1}}},propFix:{"for":"htmlFor","class":"className"}}),y.optSelected||(S.propHooks.selected={get:function(e){var t=e.parentNode;return t&&t.parentNode&&t.parentNode.selectedIndex,null},set:function(e){var t=e.parentNode;t&&(t.selectedIndex,t.parentNode&&t.parentNode.selectedIndex)}}),S.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan","useMap","frameBorder","contentEditable"],function(){S.propFix[this.toLowerCase()]=this}),S.fn.extend({addClass:function(t){var e,n,r,i,o,a,s,u=0;if(m(t))return this.each(function(e){S(this).addClass(t.call(this,e,gt(this)))});if((e=vt(t)).length)while(n=this[u++])if(i=gt(n),r=1===n.nodeType&&" "+ht(i)+" "){a=0;while(o=e[a++])r.indexOf(" "+o+" ")<0&&(r+=o+" ");i!==(s=ht(r))&&n.setAttribute("class",s)}return this},removeClass:function(t){var e,n,r,i,o,a,s,u=0;if(m(t))return this.each(function(e){S(this).removeClass(t.call(this,e,gt(this)))});if(!arguments.length)return this.attr("class","");if((e=vt(t)).length)while(n=this[u++])if(i=gt(n),r=1===n.nodeType&&" "+ht(i)+" "){a=0;while(o=e[a++])while(-1<r.indexOf(" "+o+" "))r=r.replace(" "+o+" "," ");i!==(s=ht(r))&&n.setAttribute("class",s)}return this},toggleClass:function(i,t){var o=typeof i,a="string"===o||Array.isArray(i);return"boolean"==typeof t&&a?t?this.addClass(i):this.removeClass(i):m(i)?this.each(function(e){S(this).toggleClass(i.call(this,e,gt(this),t),t)}):this.each(function(){var e,t,n,r;if(a){t=0,n=S(this),r=vt(i);while(e=r[t++])n.hasClass(e)?n.removeClass(e):n.addClass(e)}else void 0!==i&&"boolean"!==o||((e=gt(this))&&Y.set(this,"__className__",e),this.setAttribute&&this.setAttribute("class",e||!1===i?"":Y.get(this,"__className__")||""))})},hasClass:function(e){var t,n,r=0;t=" "+e+" ";while(n=this[r++])if(1===n.nodeType&&-1<(" "+ht(gt(n))+" ").indexOf(t))return!0;return!1}});var yt=/\r/g;S.fn.extend({val:function(n){var r,e,i,t=this[0];return arguments.length?(i=m(n),this.each(function(e){var t;1===this.nodeType&&(null==(t=i?n.call(this,e,S(this).val()):n)?t="":"number"==typeof t?t+="":Array.isArray(t)&&(t=S.map(t,function(e){return null==e?"":e+""})),(r=S.valHooks[this.type]||S.valHooks[this.nodeName.toLowerCase()])&&"set"in r&&void 0!==r.set(this,t,"value")||(this.value=t))})):t?(r=S.valHooks[t.type]||S.valHooks[t.nodeName.toLowerCase()])&&"get"in r&&void 0!==(e=r.get(t,"value"))?e:"string"==typeof(e=t.value)?e.replace(yt,""):null==e?"":e:void 0}}),S.extend({valHooks:{option:{get:function(e){var t=S.find.attr(e,"value");return null!=t?t:ht(S.text(e))}},select:{get:function(e){var t,n,r,i=e.options,o=e.selectedIndex,a="select-one"===e.type,s=a?null:[],u=a?o+1:i.length;for(r=o<0?u:a?o:0;r<u;r++)if(((n=i[r]).selected||r===o)&&!n.disabled&&(!n.parentNode.disabled||!A(n.parentNode,"optgroup"))){if(t=S(n).val(),a)return t;s.push(t)}return s},set:function(e,t){var n,r,i=e.options,o=S.makeArray(t),a=i.length;while(a--)((r=i[a]).selected=-1<S.inArray(S.valHooks.option.get(r),o))&&(n=!0);return n||(e.selectedIndex=-1),o}}}}),S.each(["radio","checkbox"],function(){S.valHooks[this]={set:function(e,t){if(Array.isArray(t))return e.checked=-1<S.inArray(S(e).val(),t)}},y.checkOn||(S.valHooks[this].get=function(e){return null===e.getAttribute("value")?"on":e.value})}),y.focusin="onfocusin"in C;var mt=/^(?:focusinfocus|focusoutblur)$/,xt=function(e){e.stopPropagation()};S.extend(S.event,{trigger:function(e,t,n,r){var i,o,a,s,u,l,c,f,p=[n||E],d=v.call(e,"type")?e.type:e,h=v.call(e,"namespace")?e.namespace.split("."):[];if(o=f=a=n=n||E,3!==n.nodeType&&8!==n.nodeType&&!mt.test(d+S.event.triggered)&&(-1<d.indexOf(".")&&(d=(h=d.split(".")).shift(),h.sort()),u=d.indexOf(":")<0&&"on"+d,(e=e[S.expando]?e:new S.Event(d,"object"==typeof e&&e)).isTrigger=r?2:3,e.namespace=h.join("."),e.rnamespace=e.namespace?new RegExp("(^|\\.)"+h.join("\\.(?:.*\\.|)")+"(\\.|$)"):null,e.result=void 0,e.target||(e.target=n),t=null==t?[e]:S.makeArray(t,[e]),c=S.event.special[d]||{},r||!c.trigger||!1!==c.trigger.apply(n,t))){if(!r&&!c.noBubble&&!x(n)){for(s=c.delegateType||d,mt.test(s+d)||(o=o.parentNode);o;o=o.parentNode)p.push(o),a=o;a===(n.ownerDocument||E)&&p.push(a.defaultView||a.parentWindow||C)}i=0;while((o=p[i++])&&!e.isPropagationStopped())f=o,e.type=1<i?s:c.bindType||d,(l=(Y.get(o,"events")||Object.create(null))[e.type]&&Y.get(o,"handle"))&&l.apply(o,t),(l=u&&o[u])&&l.apply&&V(o)&&(e.result=l.apply(o,t),!1===e.result&&e.preventDefault());return e.type=d,r||e.isDefaultPrevented()||c._default&&!1!==c._default.apply(p.pop(),t)||!V(n)||u&&m(n[d])&&!x(n)&&((a=n[u])&&(n[u]=null),S.event.triggered=d,e.isPropagationStopped()&&f.addEventListener(d,xt),n[d](),e.isPropagationStopped()&&f.removeEventListener(d,xt),S.event.triggered=void 0,a&&(n[u]=a)),e.result}},simulate:function(e,t,n){var r=S.extend(new S.Event,n,{type:e,isSimulated:!0});S.event.trigger(r,null,t)}}),S.fn.extend({trigger:function(e,t){return this.each(function(){S.event.trigger(e,t,this)})},triggerHandler:function(e,t){var n=this[0];if(n)return S.event.trigger(e,t,n,!0)}}),y.focusin||S.each({focus:"focusin",blur:"focusout"},function(n,r){var i=function(e){S.event.simulate(r,e.target,S.event.fix(e))};S.event.special[r]={setup:function(){var e=this.ownerDocument||this.document||this,t=Y.access(e,r);t||e.addEventListener(n,i,!0),Y.access(e,r,(t||0)+1)},teardown:function(){var e=this.ownerDocument||this.document||this,t=Y.access(e,r)-1;t?Y.access(e,r,t):(e.removeEventListener(n,i,!0),Y.remove(e,r))}}});var bt=C.location,wt={guid:Date.now()},Tt=/\?/;S.parseXML=function(e){var t,n;if(!e||"string"!=typeof e)return null;try{t=(new C.DOMParser).parseFromString(e,"text/xml")}catch(e){}return n=t&&t.getElementsByTagName("parsererror")[0],t&&!n||S.error("Invalid XML: "+(n?S.map(n.childNodes,function(e){return e.textContent}).join("\n"):e)),t};var Ct=/\[\]$/,Et=/\r?\n/g,St=/^(?:submit|button|image|reset|file)$/i,kt=/^(?:input|select|textarea|keygen)/i;function At(n,e,r,i){var t;if(Array.isArray(e))S.each(e,function(e,t){r||Ct.test(n)?i(n,t):At(n+"["+("object"==typeof t&&null!=t?e:"")+"]",t,r,i)});else if(r||"object"!==w(e))i(n,e);else for(t in e)At(n+"["+t+"]",e[t],r,i)}S.param=function(e,t){var n,r=[],i=function(e,t){var n=m(t)?t():t;r[r.length]=encodeURIComponent(e)+"="+encodeURIComponent(null==n?"":n)};if(null==e)return"";if(Array.isArray(e)||e.jquery&&!S.isPlainObject(e))S.each(e,function(){i(this.name,this.value)});else for(n in e)At(n,e[n],t,i);return r.join("&")},S.fn.extend({serialize:function(){return S.param(this.serializeArray())},serializeArray:function(){return this.map(function(){var e=S.prop(this,"elements");return e?S.makeArray(e):this}).filter(function(){var e=this.type;return this.name&&!S(this).is(":disabled")&&kt.test(this.nodeName)&&!St.test(e)&&(this.checked||!pe.test(e))}).map(function(e,t){var n=S(this).val();return null==n?null:Array.isArray(n)?S.map(n,function(e){return{name:t.name,value:e.replace(Et,"\r\n")}}):{name:t.name,value:n.replace(Et,"\r\n")}}).get()}});var Nt=/%20/g,jt=/#.*$/,Dt=/([?&])_=[^&]*/,qt=/^(.*?):[ \t]*([^\r\n]*)$/gm,Lt=/^(?:GET|HEAD)$/,Ht=/^\/\//,Ot={},Pt={},Rt="*/".concat("*"),Mt=E.createElement("a");function It(o){return function(e,t){"string"!=typeof e&&(t=e,e="*");var n,r=0,i=e.toLowerCase().match(P)||[];if(m(t))while(n=i[r++])"+"===n[0]?(n=n.slice(1)||"*",(o[n]=o[n]||[]).unshift(t)):(o[n]=o[n]||[]).push(t)}}function Wt(t,i,o,a){var s={},u=t===Pt;function l(e){var r;return s[e]=!0,S.each(t[e]||[],function(e,t){var n=t(i,o,a);return"string"!=typeof n||u||s[n]?u?!(r=n):void 0:(i.dataTypes.unshift(n),l(n),!1)}),r}return l(i.dataTypes[0])||!s["*"]&&l("*")}function Ft(e,t){var n,r,i=S.ajaxSettings.flatOptions||{};for(n in t)void 0!==t[n]&&((i[n]?e:r||(r={}))[n]=t[n]);return r&&S.extend(!0,e,r),e}Mt.href=bt.href,S.extend({active:0,lastModified:{},etag:{},ajaxSettings:{url:bt.href,type:"GET",isLocal:/^(?:about|app|app-storage|.+-extension|file|res|widget):$/.test(bt.protocol),global:!0,processData:!0,async:!0,contentType:"application/x-www-form-urlencoded; charset=UTF-8",accepts:{"*":Rt,text:"text/plain",html:"text/html",xml:"application/xml, text/xml",json:"application/json, text/javascript"},contents:{xml:/\bxml\b/,html:/\bhtml/,json:/\bjson\b/},responseFields:{xml:"responseXML",text:"responseText",json:"responseJSON"},converters:{"* text":String,"text html":!0,"text json":JSON.parse,"text xml":S.parseXML},flatOptions:{url:!0,context:!0}},ajaxSetup:function(e,t){return t?Ft(Ft(e,S.ajaxSettings),t):Ft(S.ajaxSettings,e)},ajaxPrefilter:It(Ot),ajaxTransport:It(Pt),ajax:function(e,t){"object"==typeof e&&(t=e,e=void 0),t=t||{};var c,f,p,n,d,r,h,g,i,o,v=S.ajaxSetup({},t),y=v.context||v,m=v.context&&(y.nodeType||y.jquery)?S(y):S.event,x=S.Deferred(),b=S.Callbacks("once memory"),w=v.statusCode||{},a={},s={},u="canceled",T={readyState:0,getResponseHeader:function(e){var t;if(h){if(!n){n={};while(t=qt.exec(p))n[t[1].toLowerCase()+" "]=(n[t[1].toLowerCase()+" "]||[]).concat(t[2])}t=n[e.toLowerCase()+" "]}return null==t?null:t.join(", ")},getAllResponseHeaders:function(){return h?p:null},setRequestHeader:function(e,t){return null==h&&(e=s[e.toLowerCase()]=s[e.toLowerCase()]||e,a[e]=t),this},overrideMimeType:function(e){return null==h&&(v.mimeType=e),this},statusCode:function(e){var t;if(e)if(h)T.always(e[T.status]);else for(t in e)w[t]=[w[t],e[t]];return this},abort:function(e){var t=e||u;return c&&c.abort(t),l(0,t),this}};if(x.promise(T),v.url=((e||v.url||bt.href)+"").replace(Ht,bt.protocol+"//"),v.type=t.method||t.type||v.method||v.type,v.dataTypes=(v.dataType||"*").toLowerCase().match(P)||[""],null==v.crossDomain){r=E.createElement("a");try{r.href=v.url,r.href=r.href,v.crossDomain=Mt.protocol+"//"+Mt.host!=r.protocol+"//"+r.host}catch(e){v.crossDomain=!0}}if(v.data&&v.processData&&"string"!=typeof v.data&&(v.data=S.param(v.data,v.traditional)),Wt(Ot,v,t,T),h)return T;for(i in(g=S.event&&v.global)&&0==S.active++&&S.event.trigger("ajaxStart"),v.type=v.type.toUpperCase(),v.hasContent=!Lt.test(v.type),f=v.url.replace(jt,""),v.hasContent?v.data&&v.processData&&0===(v.contentType||"").indexOf("application/x-www-form-urlencoded")&&(v.data=v.data.replace(Nt,"+")):(o=v.url.slice(f.length),v.data&&(v.processData||"string"==typeof v.data)&&(f+=(Tt.test(f)?"&":"?")+v.data,delete v.data),!1===v.cache&&(f=f.replace(Dt,"$1"),o=(Tt.test(f)?"&":"?")+"_="+wt.guid+++o),v.url=f+o),v.ifModified&&(S.lastModified[f]&&T.setRequestHeader("If-Modified-Since",S.lastModified[f]),S.etag[f]&&T.setRequestHeader("If-None-Match",S.etag[f])),(v.data&&v.hasContent&&!1!==v.contentType||t.contentType)&&T.setRequestHeader("Content-Type",v.contentType),T.setRequestHeader("Accept",v.dataTypes[0]&&v.accepts[v.dataTypes[0]]?v.accepts[v.dataTypes[0]]+("*"!==v.dataTypes[0]?", "+Rt+"; q=0.01":""):v.accepts["*"]),v.headers)T.setRequestHeader(i,v.headers[i]);if(v.beforeSend&&(!1===v.beforeSend.call(y,T,v)||h))return T.abort();if(u="abort",b.add(v.complete),T.done(v.success),T.fail(v.error),c=Wt(Pt,v,t,T)){if(T.readyState=1,g&&m.trigger("ajaxSend",[T,v]),h)return T;v.async&&0<v.timeout&&(d=C.setTimeout(function(){T.abort("timeout")},v.timeout));try{h=!1,c.send(a,l)}catch(e){if(h)throw e;l(-1,e)}}else l(-1,"No Transport");function l(e,t,n,r){var i,o,a,s,u,l=t;h||(h=!0,d&&C.clearTimeout(d),c=void 0,p=r||"",T.readyState=0<e?4:0,i=200<=e&&e<300||304===e,n&&(s=function(e,t,n){var r,i,o,a,s=e.contents,u=e.dataTypes;while("*"===u[0])u.shift(),void 0===r&&(r=e.mimeType||t.getResponseHeader("Content-Type"));if(r)for(i in s)if(s[i]&&s[i].test(r)){u.unshift(i);break}if(u[0]in n)o=u[0];else{for(i in n){if(!u[0]||e.converters[i+" "+u[0]]){o=i;break}a||(a=i)}o=o||a}if(o)return o!==u[0]&&u.unshift(o),n[o]}(v,T,n)),!i&&-1<S.inArray("script",v.dataTypes)&&S.inArray("json",v.dataTypes)<0&&(v.converters["text script"]=function(){}),s=function(e,t,n,r){var i,o,a,s,u,l={},c=e.dataTypes.slice();if(c[1])for(a in e.converters)l[a.toLowerCase()]=e.converters[a];o=c.shift();while(o)if(e.responseFields[o]&&(n[e.responseFields[o]]=t),!u&&r&&e.dataFilter&&(t=e.dataFilter(t,e.dataType)),u=o,o=c.shift())if("*"===o)o=u;else if("*"!==u&&u!==o){if(!(a=l[u+" "+o]||l["* "+o]))for(i in l)if((s=i.split(" "))[1]===o&&(a=l[u+" "+s[0]]||l["* "+s[0]])){!0===a?a=l[i]:!0!==l[i]&&(o=s[0],c.unshift(s[1]));break}if(!0!==a)if(a&&e["throws"])t=a(t);else try{t=a(t)}catch(e){return{state:"parsererror",error:a?e:"No conversion from "+u+" to "+o}}}return{state:"success",data:t}}(v,s,T,i),i?(v.ifModified&&((u=T.getResponseHeader("Last-Modified"))&&(S.lastModified[f]=u),(u=T.getResponseHeader("etag"))&&(S.etag[f]=u)),204===e||"HEAD"===v.type?l="nocontent":304===e?l="notmodified":(l=s.state,o=s.data,i=!(a=s.error))):(a=l,!e&&l||(l="error",e<0&&(e=0))),T.status=e,T.statusText=(t||l)+"",i?x.resolveWith(y,[o,l,T]):x.rejectWith(y,[T,l,a]),T.statusCode(w),w=void 0,g&&m.trigger(i?"ajaxSuccess":"ajaxError",[T,v,i?o:a]),b.fireWith(y,[T,l]),g&&(m.trigger("ajaxComplete",[T,v]),--S.active||S.event.trigger("ajaxStop")))}return T},getJSON:function(e,t,n){return S.get(e,t,n,"json")},getScript:function(e,t){return S.get(e,void 0,t,"script")}}),S.each(["get","post"],function(e,i){S[i]=function(e,t,n,r){return m(t)&&(r=r||n,n=t,t=void 0),S.ajax(S.extend({url:e,type:i,dataType:r,data:t,success:n},S.isPlainObject(e)&&e))}}),S.ajaxPrefilter(function(e){var t;for(t in e.headers)"content-type"===t.toLowerCase()&&(e.contentType=e.headers[t]||"")}),S._evalUrl=function(e,t,n){return S.ajax({url:e,type:"GET",dataType:"script",cache:!0,async:!1,global:!1,converters:{"text script":function(){}},dataFilter:function(e){S.globalEval(e,t,n)}})},S.fn.extend({wrapAll:function(e){var t;return this[0]&&(m(e)&&(e=e.call(this[0])),t=S(e,this[0].ownerDocument).eq(0).clone(!0),this[0].parentNode&&t.insertBefore(this[0]),t.map(function(){var e=this;while(e.firstElementChild)e=e.firstElementChild;return e}).append(this)),this},wrapInner:function(n){return m(n)?this.each(function(e){S(this).wrapInner(n.call(this,e))}):this.each(function(){var e=S(this),t=e.contents();t.length?t.wrapAll(n):e.append(n)})},wrap:function(t){var n=m(t);return this.each(function(e){S(this).wrapAll(n?t.call(this,e):t)})},unwrap:function(e){return this.parent(e).not("body").each(function(){S(this).replaceWith(this.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth||e.offsetHeight||e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var Bt={0:200,1223:204},$t=S.ajaxSettings.xhr();y.cors=!!$t&&"withCredentials"in $t,y.ajax=$t=!!$t,S.ajaxTransport(function(i){var o,a;if(y.cors||$t&&!i.crossDomain)return{send:function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain||e["X-Requested-With"]||(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(o=a=r.onload=r.onerror=r.onabort=r.ontimeout=r.onreadystatechange=null,"abort"===e?r.abort():"error"===e?"number"!=typeof r.status?t(0,"error"):t(r.status,r.statusText):t(Bt[r.status]||r.status,r.statusText,"text"!==(r.responseType||"text")||"string"!=typeof r.responseText?{binary:r.response}:{text:r.responseText},r.getAllResponseHeaders()))}},r.onload=o(),a=r.onerror=r.ontimeout=o("error"),void 0!==r.onabort?r.onabort=a:r.onreadystatechange=function(){4===r.readyState&&C.setTimeout(function(){o&&a()})},o=o("abort");try{r.send(i.hasContent&&i.data||null)}catch(e){if(o)throw e}},abort:function(){o&&o()}}}),S.ajaxPrefilter(function(e){e.crossDomain&&(e.contents.script=!1)}),S.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/\b(?:java|ecma)script\b/},converters:{"text script":function(e){return S.globalEval(e),e}}}),S.ajaxPrefilter("script",function(e){void 0===e.cache&&(e.cache=!1),e.crossDomain&&(e.type="GET")}),S.ajaxTransport("script",function(n){var r,i;if(n.crossDomain||n.scriptAttrs)return{send:function(e,t){r=S("<script>").attr(n.scriptAttrs||{}).prop({charset:n.scriptCharset,src:n.url}).on("load error",i=function(e){r.remove(),i=null,e&&t("error"===e.type?404:200,e.type)}),E.head.appendChild(r[0])},abort:function(){i&&i()}}});var _t,zt=[],Ut=/(=)\?(?=&|$)|\?\?/;S.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var e=zt.pop()||S.expando+"_"+wt.guid++;return this[e]=!0,e}}),S.ajaxPrefilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Ut.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType||"").indexOf("application/x-www-form-urlencoded")&&Ut.test(e.data)&&"data");if(a||"jsonp"===e.dataTypes[0])return r=e.jsonpCallback=m(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Ut,"$1"+r):!1!==e.jsonp&&(e.url+=(Tt.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o||S.error(r+" was not called"),o[0]},e.dataTypes[0]="json",i=C[r],C[r]=function(){o=arguments},n.always(function(){void 0===i?S(C).removeProp(r):C[r]=i,e[r]&&(e.jsonpCallback=t.jsonpCallback,zt.push(r)),o&&m(i)&&i(o[0]),o=i=void 0}),"script"}),y.createHTMLDocument=((_t=E.implementation.createHTMLDocument("").body).innerHTML="<form></form><form></form>",2===_t.childNodes.length),S.parseHTML=function(e,t,n){return"string"!=typeof e?[]:("boolean"==typeof t&&(n=t,t=!1),t||(y.createHTMLDocument?((r=(t=E.implementation.createHTMLDocument("")).createElement("base")).href=E.location.href,t.head.appendChild(r)):t=E),o=!n&&[],(i=N.exec(e))?[t.createElement(i[1])]:(i=xe([e],t,o),o&&o.length&&S(o).remove(),S.merge([],i.childNodes)));var r,i,o},S.fn.load=function(e,t,n){var r,i,o,a=this,s=e.indexOf(" ");return-1<s&&(r=ht(e.slice(s)),e=e.slice(0,s)),m(t)?(n=t,t=void 0):t&&"object"==typeof t&&(i="POST"),0<a.length&&S.ajax({url:e,type:i||"GET",dataType:"html",data:t}).done(function(e){o=arguments,a.html(r?S("<div>").append(S.parseHTML(e)).find(r):e)}).always(n&&function(e,t){a.each(function(){n.apply(this,o||[e.responseText,t,e])})}),this},S.expr.pseudos.animated=function(t){return S.grep(S.timers,function(e){return t===e.elem}).length},S.offset={setOffset:function(e,t,n){var r,i,o,a,s,u,l=S.css(e,"position"),c=S(e),f={};"static"===l&&(e.style.position="relative"),s=c.offset(),o=S.css(e,"top"),u=S.css(e,"left"),("absolute"===l||"fixed"===l)&&-1<(o+u).indexOf("auto")?(a=(r=c.position()).top,i=r.left):(a=parseFloat(o)||0,i=parseFloat(u)||0),m(t)&&(t=t.call(e,n,S.extend({},s))),null!=t.top&&(f.top=t.top-s.top+a),null!=t.left&&(f.left=t.left-s.left+i),"using"in t?t.using.call(e,f):c.css(f)}},S.fn.extend({offset:function(t){if(arguments.length)return void 0===t?this:this.each(function(e){S.offset.setOffset(this,t,e)});var e,n,r=this[0];return r?r.getClientRects().length?(e=r.getBoundingClientRect(),n=r.ownerDocument.defaultView,{top:e.top+n.pageYOffset,left:e.left+n.pageXOffset}):{top:0,left:0}:void 0},position:function(){if(this[0]){var e,t,n,r=this[0],i={top:0,left:0};if("fixed"===S.css(r,"position"))t=r.getBoundingClientRect();else{t=this.offset(),n=r.ownerDocument,e=r.offsetParent||n.documentElement;while(e&&(e===n.body||e===n.documentElement)&&"static"===S.css(e,"position"))e=e.parentNode;e&&e!==r&&1===e.nodeType&&((i=S(e).offset()).top+=S.css(e,"borderTopWidth",!0),i.left+=S.css(e,"borderLeftWidth",!0))}return{top:t.top-i.top-S.css(r,"marginTop",!0),left:t.left-i.left-S.css(r,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var e=this.offsetParent;while(e&&"static"===S.css(e,"position"))e=e.offsetParent;return e||re})}}),S.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(t,i){var o="pageYOffset"===i;S.fn[t]=function(e){return $(this,function(e,t,n){var r;if(x(e)?r=e:9===e.nodeType&&(r=e.defaultView),void 0===n)return r?r[i]:e[t];r?r.scrollTo(o?r.pageXOffset:n,o?n:r.pageYOffset):e[t]=n},t,e,arguments.length)}}),S.each(["top","left"],function(e,n){S.cssHooks[n]=Fe(y.pixelPosition,function(e,t){if(t)return t=We(e,n),Pe.test(t)?S(e).position()[n]+"px":t})}),S.each({Height:"height",Width:"width"},function(a,s){S.each({padding:"inner"+a,content:s,"":"outer"+a},function(r,o){S.fn[o]=function(e,t){var n=arguments.length&&(r||"boolean"!=typeof e),i=r||(!0===e||!0===t?"margin":"border");return $(this,function(e,t,n){var r;return x(e)?0===o.indexOf("outer")?e["inner"+a]:e.document.documentElement["client"+a]:9===e.nodeType?(r=e.documentElement,Math.max(e.body["scroll"+a],r["scroll"+a],e.body["offset"+a],r["offset"+a],r["client"+a])):void 0===n?S.css(e,t,i):S.style(e,t,n,i)},s,n?e:void 0,n)}})}),S.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(e,t){S.fn[t]=function(e){return this.on(t,e)}}),S.fn.extend({bind:function(e,t,n){return this.on(e,null,t,n)},unbind:function(e,t){return this.off(e,null,t)},delegate:function(e,t,n,r){return this.on(t,e,n,r)},undelegate:function(e,t,n){return 1===arguments.length?this.off(e,"**"):this.off(t,e||"**",n)},hover:function(e,t){return this.mouseenter(e).mouseleave(t||e)}}),S.each("blur focus focusin focusout resize scroll click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup contextmenu".split(" "),function(e,n){S.fn[n]=function(e,t){return 0<arguments.length?this.on(n,null,e,t):this.trigger(n)}});var Xt=/^[\s\uFEFF\xA0]+|[\s\uFEFF\xA0]+$/g;S.proxy=function(e,t){var n,r,i;if("string"==typeof t&&(n=e[t],t=e,e=n),m(e))return r=s.call(arguments,2),(i=function(){return e.apply(t||this,r.concat(s.call(arguments)))}).guid=e.guid=e.guid||S.guid++,i},S.holdReady=function(e){e?S.readyWait++:S.ready(!0)},S.isArray=Array.isArray,S.parseJSON=JSON.parse,S.nodeName=A,S.isFunction=m,S.isWindow=x,S.camelCase=X,S.type=w,S.now=Date.now,S.isNumeric=function(e){var t=S.type(e);return("number"===t||"string"===t)&&!isNaN(e-parseFloat(e))},S.trim=function(e){return null==e?"":(e+"").replace(Xt,"")},"function"==typeof define&&define.amd&&define("jquery",[],function(){return S});var Vt=C.jQuery,Gt=C.$;return S.noConflict=function(e){return C.$===S&&(C.$=Gt),e&&C.jQuery===S&&(C.jQuery=Vt),S},"undefined"==typeof e&&(C.jQuery=C.$=S),S});

From ee50dd748c736773c63740045535314ae9713359 Mon Sep 17 00:00:00 2001
From: ximon18 <3304436+ximon18@users.noreply.github.com>
Date: Fri, 17 Apr 2026 16:12:06 +0200
Subject: [PATCH 039/113] Split large block of text into smaller more readable
 chunks.

---
 doc/manual/source/nsd.rst | 20 +++++++++++++++-----
 1 file changed, 15 insertions(+), 5 deletions(-)

diff --git a/doc/manual/source/nsd.rst b/doc/manual/source/nsd.rst
index b8dd1a2a5..214aff75a 100644
--- a/doc/manual/source/nsd.rst
+++ b/doc/manual/source/nsd.rst
@@ -11,11 +11,21 @@ Using NSD as a primary to Cascade
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 To use NSD as an upstream name server of Cascade you must add a zone to
-NSD that refers to Cascade as a secondary name server so that NSD will send
-a NOTIFY message to Cascade when the zone changes and will allow Cascade to
-make an XFR request to receive the update zone. Optionally NSD and Cascade
-can be configured with the same TSIG key to authenticate the NOTIFY and XFR
-messages.
+NSD that refers to Cascade as a secondary name server. If enabled in NSD it will send
+Cascade a RFC 1996 DNS NOTIFY message to Cascade notifying when changes to the zone occur.
+
+The NOTIFY message will trigger Cascade to perform an AXFR transfer to fetch the full
+zone content from NSD, or, ifalready fetched and IXFR is enabled in NSD, an IXFR transfer
+will be performed to fetch just the incremental changes since the last fetch.
+make an XFR request to receive the update zone.
+
+If NOTIFY is not enabled in NSD, Cascade will periodically check if a newer
+version of the zone is available by sending a SOA query periodically according
+to the number of seconds defined by the REFRESH field of the zone apex SOA
+record.
+
+Optionally NSD and Cascade can be configured with the same TSIG key to
+authenticate the NOTIFY and XFR messages.
 
 For example the following NSD configuration file fragment adds an example.com
 zone to NSD that is to be served as input to a Cascade daemon running on host

From 41f50cd6c3a4902fd830a26d47ae2d5ef65d866c Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 14:50:00 +0200
Subject: [PATCH 040/113] More zone transfer documentation.

---
 doc/manual/source/index.rst          |  1 +
 doc/manual/source/nsd.rst            | 40 ++++++-----
 doc/manual/source/zone-transfers.rst | 99 ++++++++++++++++++++++++++++
 3 files changed, 125 insertions(+), 15 deletions(-)
 create mode 100644 doc/manual/source/zone-transfers.rst

diff --git a/doc/manual/source/index.rst b/doc/manual/source/index.rst
index be59ef875..5224a697e 100644
--- a/doc/manual/source/index.rst
+++ b/doc/manual/source/index.rst
@@ -100,6 +100,7 @@ Examples of things we're interested in:
    key-management
    hsms
    review-hooks
+   zone-transfers
 
 .. toctree::
    :maxdepth: 2
diff --git a/doc/manual/source/nsd.rst b/doc/manual/source/nsd.rst
index 214aff75a..35f1e8f6f 100644
--- a/doc/manual/source/nsd.rst
+++ b/doc/manual/source/nsd.rst
@@ -7,29 +7,39 @@ Integrating with NSD
 
    -- https://nsd.docs.nlnetlabs.nl/
 
+Suggested reading
+~~~~~~~~~~~~~~~~~
+
+The :ref:`Zone Transfers <zone-transfers.rst>` page explains the general
+functionality in Cascade that is referred to below.
+
 Using NSD as a primary to Cascade
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-To use NSD as an upstream name server of Cascade you must add a zone to
-NSD that refers to Cascade as a secondary name server. If enabled in NSD it will send
-Cascade a RFC 1996 DNS NOTIFY message to Cascade notifying when changes to the zone occur.
+To use NSD as an upstream name server of Cascade you must add a zone to NSD
+that refers to Cascade as a secondary name server. If enabled in NSD, NSD will
+send an RFC 1996 DNS NOTIFY message to Cascade notifying it when changes to
+the zone occur.
 
-The NOTIFY message will trigger Cascade to perform an AXFR transfer to fetch the full
-zone content from NSD, or, ifalready fetched and IXFR is enabled in NSD, an IXFR transfer
-will be performed to fetch just the incremental changes since the last fetch.
-make an XFR request to receive the update zone.
+The NOTIFY message will trigger Cascade to perform an AXFR transfer to fetch
+the full zone content from NSD, or, if already fetched and IXFR is enabled in
+NSD, an IXFR transfer will be performed to fetch just the incremental changes
+since the last fetch.
 
-If NOTIFY is not enabled in NSD, Cascade will periodically check if a newer
-version of the zone is available by sending a SOA query periodically according
-to the number of seconds defined by the REFRESH field of the zone apex SOA
-record.
+If NOTIFY is NOT enabled in NSD, Cascade will monitor NSD for a newer version
+of the zone by periodically sending SOA queries according to the number of
+seconds defined by the REFRESH field of the zone apex SOA record.
 
 Optionally NSD and Cascade can be configured with the same TSIG key to
 authenticate the NOTIFY and XFR messages.
 
-For example the following NSD configuration file fragment adds an example.com
-zone to NSD that is to be served as input to a Cascade daemon running on host
-192.168.0.2 listening on the default port 4542:
+The NSD settings relevant here are:
+  - `notify <https://nsd.docs.nlnetlabs.nl/en/latest/manpages/nsd.conf.html#notify>`_
+  - `provide-xfr <https://nsd.docs.nlnetlabs.nl/en/latest/manpages/nsd.conf.html#provide>`_
+
+For example the following NSD configuration file fragment adds an
+``example.com`` zone to NSD that is to be served as input to a Cascade daemon
+running on host 192.168.0.2 listening on the default port 4542:
 
 .. code-block::
 
@@ -72,7 +82,7 @@ command, e.g. like so:
 
    $ cascade tsig add --name sec1_key --alg hmac-sha256 --secret "...=="
 
-To use the new TAIG key it must be specified when adding a zone to
+To use the new TSIG key it must be specified when adding a zone to
 Cascade. Assuming that NSD is running on host 192.168.0.1 on port 53
 the following command instructs Cascade to add the ``example.com``
 zone sourced from the NSD server using the ``sec1_key`` TSIG key to
diff --git a/doc/manual/source/zone-transfers.rst b/doc/manual/source/zone-transfers.rst
new file mode 100644
index 000000000..9017f27f5
--- /dev/null
+++ b/doc/manual/source/zone-transfers.rst
@@ -0,0 +1,99 @@
+Zone Transfers
+==============
+
+Cascade is designed to be deployed between a hidden upstream nameserver and
+public downstream nameservers. The hidden upstream serves the unsigned zone,
+Cascade signs it and passes it to the downstream nameservers for publication
+to consumers.
+
+Communication of changed zone records from upstream to downstream should be
+done via the network using the RFC 5936 DNS Zone Transfer Protocol (AXFR) and
+RFC 1995 Incremental Zone Transfer (IXFR) protocols.
+
+Securing the transferred data can be done using RFC 8945 Secret Key
+Authentication for DNS (TSIG) keys, using a shared secret communicated out of
+band to the nameservers sending and receiving the zone records.
+
+Cascade supports timely discovery of zone changes via RFC 1996 A Mechanism
+for Prompt Notification of Zone Changes (DNS NOTIFY). If no NOTIFY message
+is received by Cascade, Cascade will instead discover new versions of the
+zone by sending SOA queries periodically to the upstream, the frequency of
+which is determined by the timers on the SOA apex record in the zone.
+
+.. note:: Cascade also supports loading zone records from a file. However,
+          if only a small fraction of the records in the zone change from
+          one version to the next, loading the entire zone zone every time
+          the zone changes will require more time, CPU and memory compared
+          to processing only the differences when using IXFR. Additionally,
+          Cascade has no built-in support for writing signed zone files to
+          disk, if needed this could be done by a signed review hook.
+
+Using zone transfers with an upstream nameserver
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+To instruct Cascade to transfer a zone via the network instead of loading
+it from a file you must supply an upstream nameserver name or address when
+adding the zone.
+
+.. code-block:: bash
+
+   $ cascade zone add --source <IP_OR_NAME>[:<PORT>] ...
+
+Cascade will then attempt to fetch the zone from the specified name or IP
+address using AXFR. Subsequent fetches will attempt to use IXFR to transfer
+only the differences, falling back to AXFR when needed. Subsequent fetches
+will be triggered by NOTIFY messages received from the upstream nameserver or
+expiry of the SOA REFRESH or RETRY timers.
+
+Securing zone transfers with an upstream nameserver
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Cascade can be instructed to authenticate the upstream nameserver by use of
+a TSIG key. The TSIG key to use must be provided to Cascade _before_ adding
+the zone:
+
+.. code-block:: bash
+
+   $ cascade tsig add <TSIG KEY NAME, ALGORITHM AND SECRET BYTES>
+
+When adding a zone the TSIG key name can then be referred to like so:
+
+.. code-block:: bash
+
+   $ cascade zone add --source <IP_OR_NAME>[:<PORT>]^<TSIG KEY NAME>
+
+Using zone transfers with a downstream server
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Cascade permits zone transfers by default, no configuration is required.
+
+To ensure timely update by secondaries Cascade can be configured to send
+RFC 1996 DNS NOTIFY messages to specified secondaries. This is done via
+the policy setting ``server.outbound.send-notify-to``.
+
+.. note:: The policy file will need to be reloaded via ``cascade policy
+          reload`` before adding the zone. Also, when adding the zone you
+          will need to pass the `--policy` argument specifying the relevant
+          policy to apply to the zone.
+
+.. tip:: If a TSIG key has been added to Cascade via ``cascade tsig add``,
+         you can instruct Cascade to authentiate itself to downstreams
+         using a specified TSIG key by adding `^<TSIG_KEY_NAME>` to the
+         ``server.outbound.send-notify-to`` value.
+
+Controlling automatic key rollover zone transfer settings
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+When using automatic key rollover (the default) Cascade will attempt to verify
+that certain key properties of the signed zone being served to consumers are
+correct.
+
+This verification is done by transferring the zone and inspecting it. By
+default transfer is attempted from the nameserver identified by the MNAME
+field of the apex SOA record in the zone.
+
+If an alternate nameserver should be queried instead of the MNAME
+nameserver, or if a specific port number or TSIG key should be used
+to request the transfer, you will also need to configure the Cascade
+key manager to fetch the zone correctly. This can be done via the
+``key-manager.publication-nameservers`` policy setting.

From db29fd446214afb1afccb22ac063969feede1ac1 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 14:54:41 +0200
Subject: [PATCH 041/113] Add the new publication_nameservers field to the
 policy template.

---
 etc/policy.template.toml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/etc/policy.template.toml b/etc/policy.template.toml
index 848de906b..70e67ae35 100644
--- a/etc/policy.template.toml
+++ b/etc/policy.template.toml
@@ -156,6 +156,17 @@ ds-algorithm = "SHA-256"
 # TODO: Perhaps support removing keys after a certain delay?
 auto-remove = true
 
+# The upstream nameservers to use when checking for RRSIG propagation during
+# a key roll.
+# 
+# Each nameserver must be specifeid as a string in the form `"<IP
+# address>:[<port>][^<TSIG key name>]"`.
+#
+# If not specified, the nameserver specified by the SOA MNAME field will be
+# checked.
+# 
+# publication_nameservers = []
+
 # The management of DNS records by the key manager.
 # 
 # The key manager generates and signs several records (DNSKEY and CDS).  This

From 49474f7989b0ab1c3c01dc1ce6b0f77d3c090ae3 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 15:19:32 +0200
Subject: [PATCH 042/113] Check the mid deletion flag when looking for policies
 using a TSIG key.

---
 src/tsig/mod.rs | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/tsig/mod.rs b/src/tsig/mod.rs
index 0c4a2cc03..d7d625b1c 100644
--- a/src/tsig/mod.rs
+++ b/src/tsig/mod.rs
@@ -288,9 +288,11 @@ pub fn remove_key(center: &Arc<Center>, name: &tsig::KeyName) -> Result<(), Remo
             return Err(RemoveError::Used);
         }
 
+    // Is the TSIG key referenced by any active (not being deleted) policy?
     if state
         .policies
         .values()
+        .filter(|p| !p.mid_deletion)
         .flat_map(|p| &p.latest.key_manager.publication_nameservers)
         .filter_map(|n| n.split_once("^").map(|v| v.1))
         .any(|k| {

From 6426c9ab9ca5aa7e512e7b862201a0f4aee49b55 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 15:19:41 +0200
Subject: [PATCH 043/113] Remove outdated comment.

---
 src/tsig/mod.rs | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/src/tsig/mod.rs b/src/tsig/mod.rs
index d7d625b1c..89475f11a 100644
--- a/src/tsig/mod.rs
+++ b/src/tsig/mod.rs
@@ -272,10 +272,6 @@ pub fn remove_key(center: &Arc<Center>, name: &tsig::KeyName) -> Result<(), Remo
     //    do XFR.
     //
     // So we need to check all of these places to see if a key is in use.
-    //
-    // Alternatively we would need to update the TSIG key store to track
-    // if (and where?) a key is being used and check with the TSIG key
-    // store.
 
     if !state.tsig_store.map.contains_key(name) {
         return Err(RemoveError::NotFound);

From 6fbf719e024de4d1c2bd4969bdd2079ed127f25f Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 15:19:46 +0200
Subject: [PATCH 044/113] Fix formatting.

---
 src/tsig/mod.rs | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/tsig/mod.rs b/src/tsig/mod.rs
index 89475f11a..7c40b41e3 100644
--- a/src/tsig/mod.rs
+++ b/src/tsig/mod.rs
@@ -278,11 +278,11 @@ pub fn remove_key(center: &Arc<Center>, name: &tsig::KeyName) -> Result<(), Remo
     }
 
     if state.zones.iter().any(|z| {
-            let zone_state = z.0.state.lock().unwrap();
-            matches!(zone_state.loader.source, crate::loader::Source::Server { tsig_key: Some(ref key), .. } if name == key.name())
-        }) {
-            return Err(RemoveError::Used);
-        }
+        let zone_state = z.0.state.lock().unwrap();
+        matches!(zone_state.loader.source, crate::loader::Source::Server { tsig_key: Some(ref key), .. } if name == key.name())
+    }) {
+        return Err(RemoveError::Used);
+    }
 
     // Is the TSIG key referenced by any active (not being deleted) policy?
     if state

From e69c452fa4b3c18c45f5281b0792a08bf5c0795a Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 15:20:06 +0200
Subject: [PATCH 045/113] Additional comments and whitespace.

---
 src/tsig/mod.rs | 22 ++++++++++++++++++++--
 1 file changed, 20 insertions(+), 2 deletions(-)

diff --git a/src/tsig/mod.rs b/src/tsig/mod.rs
index 7c40b41e3..d582f43bd 100644
--- a/src/tsig/mod.rs
+++ b/src/tsig/mod.rs
@@ -296,8 +296,17 @@ pub fn remove_key(center: &Arc<Center>, name: &tsig::KeyName) -> Result<(), Remo
             if let Ok(n) = nk {
                 n == name
             } else {
-                // Just ignore tSIG key names that cannot be parsed as a
-                // DNS name.
+                // Just ignore TSIG key names that cannot be parsed as a
+                // DNS name. It should not have been possible to add them
+                // into the policy in the first place so this should never
+                // happen.
+                //
+                // TODO: "update" from using a String type for
+                // publication_nameservers to a type that actually uses
+                // TsigKeyName, like NameserverCommsPolicy does, so that at
+                // this point we don't need to care about valid or invalid
+                // TSIG key names? That would also have the benefit of not
+                // having to parse the nameserver string format here again.
                 false
             }
         })
@@ -305,6 +314,13 @@ pub fn remove_key(center: &Arc<Center>, name: &tsig::KeyName) -> Result<(), Remo
         return Err(RemoveError::Used);
     }
 
+    // Delete the TSIG key. The TSIG key store has a set of zones that
+    // refer to the key to avoid having to lock and inspect zone state,
+    // so we can also find that the TSIG key is still referenced there
+    // if an operation to remove a zone hasn't cleaned up the reference
+    // to the zone in the TSIG store yet (even though its source no
+    // longer refers to it in the check we did above - can this ever
+    // happen?).
     match state.tsig_store.map.entry(name.clone()) {
         hash_map::Entry::Occupied(entry) => {
             if !entry.get().zones.is_empty() {
@@ -314,7 +330,9 @@ pub fn remove_key(center: &Arc<Center>, name: &tsig::KeyName) -> Result<(), Remo
         }
         hash_map::Entry::Vacant(_) => return Err(RemoveError::NotFound),
     }
+
     state.tsig_store.mark_dirty(center);
+
     Ok(())
 }
 

From bb462b34768e62ff24979e607ded4cf395f28aed Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 15:20:16 +0200
Subject: [PATCH 046/113] Additional comment.

---
 src/tsig/mod.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/tsig/mod.rs b/src/tsig/mod.rs
index d582f43bd..0592827eb 100644
--- a/src/tsig/mod.rs
+++ b/src/tsig/mod.rs
@@ -277,6 +277,7 @@ pub fn remove_key(center: &Arc<Center>, name: &tsig::KeyName) -> Result<(), Remo
         return Err(RemoveError::NotFound);
     }
 
+    // Is the TSIG key in use with a zone source?
     if state.zones.iter().any(|z| {
         let zone_state = z.0.state.lock().unwrap();
         matches!(zone_state.loader.source, crate::loader::Source::Server { tsig_key: Some(ref key), .. } if name == key.name())

From 3bf9f91979a02d5405f8b123c1c0655e4c1e2efc Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 15:30:56 +0200
Subject: [PATCH 047/113] Use domain::dep::octseq to avoid dependency mismatch.

---
 src/center.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/center.rs b/src/center.rs
index 32f430dff..6c5d3d9c3 100644
--- a/src/center.rs
+++ b/src/center.rs
@@ -253,7 +253,7 @@ pub fn get_zone(center: &Arc<Center>, name: &Name<Bytes>) -> Option<Arc<Zone>> {
 
 pub async fn add_tsig_key(
     center: &Arc<Center>,
-    name: Name<octseq::Array<255>>,
+    name: Name<domain::dep::octseq::Array<255>>,
     alg: domain::tsig::Algorithm,
     secret: &[u8],
 ) -> Result<TsigAddResult, TsigAddError> {

From c3381210351d330009c0978bc147c1a63bdf46e2 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 21:31:22 +0200
Subject: [PATCH 048/113] Remove addition of downstream specific logic from
 upstream PR.

---
 crates/api/src/lib.rs    | 12 +----
 src/policy/file/v1.rs    | 65 ++++++--------------------
 src/policy/mod.rs        |  6 +--
 src/server/service.rs    | 99 ----------------------------------------
 src/units/http_server.rs | 10 +---
 src/units/zone_server.rs |  8 +++-
 6 files changed, 25 insertions(+), 175 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index aae312614..e6ed33de2 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -4,7 +4,6 @@ use std::net::{IpAddr, SocketAddr};
 use std::time::{Duration, SystemTime};
 
 use camino::{Utf8Path, Utf8PathBuf};
-use domain::tsig::KeyName;
 use serde::{Deserialize, Serialize};
 
 pub use domain::base::Serial;
@@ -878,19 +877,12 @@ pub struct OutboundPolicyInfo {
 
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct NameserverCommsPolicyInfo {
-    pub addr: Option<SocketAddr>,
-    pub tsig_key_name: Option<KeyName>,
+    pub addr: SocketAddr,
 }
 
 impl std::fmt::Display for NameserverCommsPolicyInfo {
     fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        if let Some(addr) = self.addr {
-            write!(f, "{addr}")?;
-        }
-        if let Some(tsig_key_name) = &self.tsig_key_name {
-            write!(f, "^{tsig_key_name}")?;
-        }
-        Ok(())
+        write!(f, "{}", self.addr)
     }
 }
 
diff --git a/src/policy/file/v1.rs b/src/policy/file/v1.rs
index c89520c81..64c37f357 100644
--- a/src/policy/file/v1.rs
+++ b/src/policy/file/v1.rs
@@ -2,11 +2,10 @@
 
 use std::{
     fmt::{self, Display},
-    net::{IpAddr, SocketAddr},
+    net::{AddrParseError, IpAddr, SocketAddr},
     str::FromStr,
 };
 
-use domain::tsig::KeyName;
 use serde::{
     Deserialize, Serialize,
     de::{self, Visitor},
@@ -913,11 +912,8 @@ pub enum NameserverCommsSpec {
 #[derive(Clone, Debug, Deserialize, Serialize)]
 #[serde(rename_all = "kebab-case", deny_unknown_fields)]
 pub struct ComplexNameserverCommsSpec {
-    /// The address to send NOTIFYs to and allow XFRs from.
-    pub addr: Option<SocketAddr>,
-
-    /// An optional TSIG key to authenticate messages with.
-    pub tsig_key_name: Option<KeyName>,
+    /// The address to send NOTIFYs to.
+    pub addr: SocketAddr,
 }
 
 /// Policy for communicating with another namesever.
@@ -925,10 +921,7 @@ pub struct ComplexNameserverCommsSpec {
 #[serde(rename_all = "kebab-case", deny_unknown_fields)]
 pub struct SimpleNameserverCommsSpec {
     /// The address to send NOTIFYs to.
-    pub addr: Option<SocketAddr>,
-
-    /// An optional TSIG key to authenticate messages with.
-    pub tsig_key_name: Option<KeyName>,
+    pub addr: SocketAddr,
 }
 
 //--- Conversion
@@ -944,65 +937,33 @@ impl NameserverCommsSpec {
 
     /// Build into this specification.
     pub fn build(policy: &NameserverCommsPolicy) -> Self {
-        Self::Complex(ComplexNameserverCommsSpec {
-            addr: policy.addr,
-            tsig_key_name: policy.tsig_key_name.clone(),
-        })
+        Self::Complex(ComplexNameserverCommsSpec { addr: policy.addr })
     }
 }
 
 impl SimpleNameserverCommsSpec {
     /// Parse from this specification.
     pub fn parse(self) -> NameserverCommsPolicy {
-        NameserverCommsPolicy {
-            addr: self.addr,
-            tsig_key_name: self.tsig_key_name,
-        }
+        NameserverCommsPolicy { addr: self.addr }
     }
 }
 
 impl ComplexNameserverCommsSpec {
     /// Parse from this specification.
     pub fn parse(self) -> NameserverCommsPolicy {
-        NameserverCommsPolicy {
-            addr: self.addr,
-            tsig_key_name: self.tsig_key_name,
-        }
+        NameserverCommsPolicy { addr: self.addr }
     }
 }
 
-/// Parse`[<IP_ADDRESS>[:<PORT>]][^<TSIG_KEY_NAME>]`
+/// Parse`<IP_ADDRESS>[:<PORT>]`
 impl FromStr for SimpleNameserverCommsSpec {
-    type Err = String;
+    type Err = AddrParseError;
 
     fn from_str(s: &str) -> Result<Self, Self::Err> {
-        let (s, tsig_key_name) = s
-            .split_once('^')
-            .map(|(s, tsig_key_name)| (s, Some(tsig_key_name)))
-            .unwrap_or((s, None));
-
-        let addr = if s.is_empty() {
-            None
-        } else {
-            Some(
-                IpAddr::from_str(s)
-                    .map(|ip| SocketAddr::new(ip, 53))
-                    .or_else(|_| SocketAddr::from_str(s))
-                    .map_err(|err| format!("Invalid IP address '{s}': {err}"))?,
-            )
-        };
-
-        let tsig_key_name = tsig_key_name
-            .map(|name| {
-                KeyName::from_str(name)
-                    .map_err(|err| format!("Invalid TSIG key name '{name}: {err}"))
-            })
-            .transpose()?;
-
-        Ok(SimpleNameserverCommsSpec {
-            addr,
-            tsig_key_name,
-        })
+        let addr = IpAddr::from_str(s)
+            .map(|ip| SocketAddr::new(ip, 53))
+            .or_else(|_| SocketAddr::from_str(s))?;
+        Ok(SimpleNameserverCommsSpec { addr })
     }
 }
 
diff --git a/src/policy/mod.rs b/src/policy/mod.rs
index bef69ee27..e02b29877 100644
--- a/src/policy/mod.rs
+++ b/src/policy/mod.rs
@@ -9,7 +9,6 @@ use bytes::Bytes;
 use camino::Utf8PathBuf;
 use domain::base::Name;
 use domain::base::Ttl;
-use domain::tsig::KeyName;
 use serde::{Deserialize, Serialize};
 use tracing::{debug, error, info, warn};
 
@@ -476,10 +475,7 @@ pub struct NameserverCommsPolicy {
     /// For sending the port MUST NOT be zero.
     ///
     /// TODO: Support IP prefixes?
-    pub addr: Option<SocketAddr>,
-
-    /// An optional TSIG key to authenticate messages with.
-    pub tsig_key_name: Option<KeyName>,
+    pub addr: SocketAddr,
 }
 
 //----------- KeyParameters ---------------------------------------------------
diff --git a/src/server/service.rs b/src/server/service.rs
index 78ef7efc3..8e82a6a1d 100644
--- a/src/server/service.rs
+++ b/src/server/service.rs
@@ -84,7 +84,6 @@ mod compat {
     };
 
     use futures::Stream;
-    use tracing::{debug, trace};
 
     use crate::server::request::{RequestKind, ZoneRequestKind};
 
@@ -130,13 +129,6 @@ mod compat {
                         return Box::pin(std::future::ready(error(old_request.message(), rcode)));
                     };
 
-                    if !is_permitted(&old_request, zone) {
-                        return Box::pin(std::future::ready(error(
-                            old_request.message(),
-                            Rcode::REFUSED,
-                        )));
-                    }
-
                     match zone_request.kind {
                         ZoneRequestKind::Soa => Box::pin({
                             let viewer = zone.viewer.clone();
@@ -161,97 +153,6 @@ mod compat {
         }
     }
 
-    /// Enforce any defined access controls for the zone being requested.
-    fn is_permitted<V>(
-        request: &Request<Vec<u8>, Option<Arc<tsig::Key>>>,
-        zone: &ServedZone<V>,
-    ) -> bool
-    where
-        V: Viewer + Send + Sync + 'static,
-    {
-        // IP address/CIDR based access control:
-        // TODO
-
-        // TSIG access control:
-        // If the request was TSIG authenticated it would only be passed to
-        // our service if the TsigMiddlewareSvc verified that the key used
-        // exists in our key store, so that it can sign the response that we
-        // generate.
-        //
-        // However, having used a known TSIG key is not enough, the key used
-        // must also have been permitted by the operator for the zone being
-        // queried.
-        //
-        // The TSIG key(s) permitted to sign a zone are defined in policy
-        // so we have to look that up.
-        let zone_state = zone.handle.state.lock().unwrap();
-
-        let policy = zone_state
-            .policy
-            .as_ref()
-            .expect("A zone must always have an associated policy");
-
-        let outbound_policy = &policy.server.outbound;
-
-        debug!(
-            "Checking access to zone {} from {} with TSIG key {:?} due to policy '{}'",
-            zone.handle.name,
-            request.client_addr(),
-            request.metadata(),
-            policy.name
-        );
-        trace!("Policy: {policy:?}");
-
-        // If no rules are defined, allow the request.
-        if outbound_policy.accept_xfr_requests_from.is_empty() {
-            return true;
-        }
-
-        // At least one access control rule must match in order for the
-        // request to be accepted.
-
-        for rule in &outbound_policy.accept_xfr_requests_from {
-            match (rule.addr, &rule.tsig_key_name, request.metadata()) {
-                // Allow all
-                (None, None, None) => return true,
-
-                // TSIG key match required
-                (None, Some(wanted_key), Some(actual_key)) if wanted_key == actual_key.name() => {
-                    // Allow the request.
-                    return true;
-                }
-
-                // IP address match required
-                (Some(wanted_addr), None, None) if wanted_addr == request.client_addr() => {
-                    // Allow the request.
-                    return true;
-                }
-
-                // IP address *and* TSIG key match required
-                (Some(wanted_addr), Some(wanted_key), Some(actual_key))
-                    if wanted_addr == request.client_addr() && wanted_key == actual_key.name() =>
-                {
-                    // Allow the request.
-                    return true;
-                }
-
-                _ => {
-                    // Rule not matched, see if another rule matches
-                }
-            }
-        }
-
-        // Deny the request.
-        debug!(
-            "Denying request to zone {} from {} with TSIG key {:?} due to policy '{}'",
-            zone.handle.name,
-            request.client_addr(),
-            request.metadata(),
-            policy.name
-        );
-        false
-    }
-
     fn soa<V: Viewer>(request: &Message<Vec<u8>>, viewer: &V) -> ResponseStream {
         if viewer.is_empty() {
             // The zone is known to exist, but we don't have any data for it.
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index ffd2f5cae..56d5263cf 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -918,18 +918,12 @@ impl HttpServer {
                 accept_xfr_requests_from: p_outbound
                     .accept_xfr_requests_from
                     .iter()
-                    .map(|v| NameserverCommsPolicyInfo {
-                        addr: v.addr,
-                        tsig_key_name: v.tsig_key_name.clone(),
-                    })
+                    .map(|v| NameserverCommsPolicyInfo { addr: v.addr })
                     .collect(),
                 send_notify_to: p_outbound
                     .send_notify_to
                     .iter()
-                    .map(|v| NameserverCommsPolicyInfo {
-                        addr: v.addr,
-                        tsig_key_name: v.tsig_key_name.clone(),
-                    })
+                    .map(|v| NameserverCommsPolicyInfo { addr: v.addr })
                     .collect(),
             },
         };
diff --git a/src/units/zone_server.rs b/src/units/zone_server.rs
index 1bf7cee76..779aed87d 100644
--- a/src/units/zone_server.rs
+++ b/src/units/zone_server.rs
@@ -243,7 +243,13 @@ impl ZoneServer {
                     .outbound
                     .send_notify_to
                     .iter()
-                    .filter_map(|s| s.addr.filter(|addr| addr.port() != 0));
+                    .filter_map(|s| {
+                        if s.addr.port() != 0 {
+                            Some(s.addr)
+                        } else {
+                            None
+                        }
+                    });
 
                 send_notify_to_addrs(zone_name.clone(), addrs, center);
             }

From f6a7a5c47fcf35ede71f950908f388c76baac4ed Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 21:44:59 +0200
Subject: [PATCH 049/113] Remove errant linebreak.

---
 src/server/service.rs | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/server/service.rs b/src/server/service.rs
index 8e82a6a1d..b6faecf37 100644
--- a/src/server/service.rs
+++ b/src/server/service.rs
@@ -82,7 +82,6 @@ mod compat {
         new::base::wire::ParseBytesZC,
         tsig,
     };
-
     use futures::Stream;
 
     use crate::server::request::{RequestKind, ZoneRequestKind};

From 021545e5177b1acd48718c38a9c56bd002885b4a Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 21:46:38 +0200
Subject: [PATCH 050/113] Remove commented out line.

---
 src/units/http_server.rs | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index 56d5263cf..209397476 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -106,7 +106,6 @@ impl HttpServer {
             .route("/tsig/", get(Self::tsig_key_list))
             .route("/tsig/add", post(Self::tsig_key_add))
             .route("/tsig/{name}/remove", post(Self::tsig_key_remove))
-            // .route("/tsig/{name}/status", get(Self::tsig_key_status))
             .route("/zone/", get(Self::zones_list))
             .route("/zone/add", post(Self::zone_add))
             // TODO: .route("/zone/{name}/", get(Self::zone_get))

From ad2b4926ead0cbd81168a1ee3b7c0d53e8c53333 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 21:54:06 +0200
Subject: [PATCH 051/113] Impl From<TsigAlgorithm> for Algorithm.

---
 crates/api/src/lib.rs    | 12 ++++++++++++
 src/units/http_server.rs | 10 ++--------
 2 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index e6ed33de2..27fb202f0 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -4,6 +4,7 @@ use std::net::{IpAddr, SocketAddr};
 use std::time::{Duration, SystemTime};
 
 use camino::{Utf8Path, Utf8PathBuf};
+use domain::tsig::Algorithm;
 use serde::{Deserialize, Serialize};
 
 pub use domain::base::Serial;
@@ -626,6 +627,17 @@ impl Display for TsigAlgorithm {
     }
 }
 
+impl From<TsigAlgorithm> for Algorithm {
+    fn from(alg: TsigAlgorithm) -> Self {
+        match alg {
+            TsigAlgorithm::Sha1 => Algorithm::Sha1,
+            TsigAlgorithm::Sha256 => Algorithm::Sha256,
+            TsigAlgorithm::Sha384 => Algorithm::Sha384,
+            TsigAlgorithm::Sha512 => Algorithm::Sha512,
+        }
+    }
+}
+
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct ZoneHistory {
     pub history: Vec<HistoryItem>,
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index 209397476..6dd6cbfc7 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -1110,14 +1110,8 @@ impl HttpServer {
             return Json(Err(TsigAddError::InvalidBase64Secret));
         };
 
-        let alg = match tsig_add.alg {
-            TsigAlgorithm::Sha1 => Algorithm::Sha1,
-            TsigAlgorithm::Sha256 => Algorithm::Sha256,
-            TsigAlgorithm::Sha384 => Algorithm::Sha384,
-            TsigAlgorithm::Sha512 => Algorithm::Sha512,
-        };
-
-        match center::add_tsig_key(&state.center, tsig_add.name, alg, &secret).await {
+        match center::add_tsig_key(&state.center, tsig_add.name, tsig_add.alg.into(), &secret).await
+        {
             Ok(TsigAddResult) => Json(Ok(TsigAddResult)),
             Err(err) => Json(Err(err)),
         }

From eba31523a97610290c5437e9208c1ef82f864561 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 22:09:54 +0200
Subject: [PATCH 052/113] Remove unused import.

---
 src/units/http_server.rs | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index 6dd6cbfc7..bf6e34eae 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -18,7 +18,6 @@ use bytes::Bytes;
 use domain::base::Name;
 use domain::base::Serial;
 use domain::dnssec::sign::keys::keyset::KeyType;
-use domain::tsig::Algorithm;
 use domain::utils::base64;
 use domain_kmip::ConnectionSettings;
 use domain_kmip::dep::kmip::client::pool::ConnectionManager;

From abf9d924a0c02e72677ba624e46307d3cc5d0b1e Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 22:10:16 +0200
Subject: [PATCH 053/113] Make log output more human readable.

---
 src/loader/mod.rs  | 16 ++++++++++++++++
 src/loader/zone.rs |  2 +-
 2 files changed, 17 insertions(+), 1 deletion(-)

diff --git a/src/loader/mod.rs b/src/loader/mod.rs
index a80c42d87..5c0bc1dbc 100644
--- a/src/loader/mod.rs
+++ b/src/loader/mod.rs
@@ -303,6 +303,22 @@ pub enum Source {
     },
 }
 
+impl std::fmt::Display for Source {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            Source::None => f.write_str("none"),
+            Source::Zonefile { path } => write!(f, "zone file '{}'", path.as_std_path().display()),
+            Source::Server { addr, tsig_key } => {
+                write!(f, "{addr}")?;
+                if let Some(tsig_key) = &tsig_key {
+                    write!(f, "^{}", tsig_key.name())?;
+                }
+                Ok(())
+            }
+        }
+    }
+}
+
 //============ Metrics =========================================================
 
 //----------- LoadMetrics ------------------------------------------------------
diff --git a/src/loader/zone.rs b/src/loader/zone.rs
index 5988ed8be..df1c67c52 100644
--- a/src/loader/zone.rs
+++ b/src/loader/zone.rs
@@ -46,7 +46,7 @@ impl LoaderZoneHandle<'_> {
     /// A (soft) refresh will be initiated via [`Self::enqueue_refresh()`].
     pub fn set_source(&mut self, source: Source) {
         info!(
-            "Setting source of zone '{}' from '{:?}' to '{source:?}'",
+            "Setting source of zone '{}' from '{}' to '{source}'",
             self.zone.name, self.state.loader.source
         );
 

From 787ad2a72082ce3db1b5fa7d1375f4c271fc9572 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 23:02:44 +0200
Subject: [PATCH 054/113] Revert "Remove addition of downstream specific logic
 from upstream PR."

This reverts commit c3381210351d330009c0978bc147c1a63bdf46e2.
---
 crates/api/src/lib.rs    | 12 ++++-
 src/policy/file/v1.rs    | 65 ++++++++++++++++++++------
 src/policy/mod.rs        |  6 ++-
 src/server/service.rs    | 99 ++++++++++++++++++++++++++++++++++++++++
 src/units/http_server.rs | 10 +++-
 src/units/zone_server.rs |  8 +---
 6 files changed, 175 insertions(+), 25 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 27fb202f0..d4c9b9871 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -5,6 +5,7 @@ use std::time::{Duration, SystemTime};
 
 use camino::{Utf8Path, Utf8PathBuf};
 use domain::tsig::Algorithm;
+use domain::tsig::KeyName;
 use serde::{Deserialize, Serialize};
 
 pub use domain::base::Serial;
@@ -889,12 +890,19 @@ pub struct OutboundPolicyInfo {
 
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct NameserverCommsPolicyInfo {
-    pub addr: SocketAddr,
+    pub addr: Option<SocketAddr>,
+    pub tsig_key_name: Option<KeyName>,
 }
 
 impl std::fmt::Display for NameserverCommsPolicyInfo {
     fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}", self.addr)
+        if let Some(addr) = self.addr {
+            write!(f, "{addr}")?;
+        }
+        if let Some(tsig_key_name) = &self.tsig_key_name {
+            write!(f, "^{tsig_key_name}")?;
+        }
+        Ok(())
     }
 }
 
diff --git a/src/policy/file/v1.rs b/src/policy/file/v1.rs
index 64c37f357..c89520c81 100644
--- a/src/policy/file/v1.rs
+++ b/src/policy/file/v1.rs
@@ -2,10 +2,11 @@
 
 use std::{
     fmt::{self, Display},
-    net::{AddrParseError, IpAddr, SocketAddr},
+    net::{IpAddr, SocketAddr},
     str::FromStr,
 };
 
+use domain::tsig::KeyName;
 use serde::{
     Deserialize, Serialize,
     de::{self, Visitor},
@@ -912,8 +913,11 @@ pub enum NameserverCommsSpec {
 #[derive(Clone, Debug, Deserialize, Serialize)]
 #[serde(rename_all = "kebab-case", deny_unknown_fields)]
 pub struct ComplexNameserverCommsSpec {
-    /// The address to send NOTIFYs to.
-    pub addr: SocketAddr,
+    /// The address to send NOTIFYs to and allow XFRs from.
+    pub addr: Option<SocketAddr>,
+
+    /// An optional TSIG key to authenticate messages with.
+    pub tsig_key_name: Option<KeyName>,
 }
 
 /// Policy for communicating with another namesever.
@@ -921,7 +925,10 @@ pub struct ComplexNameserverCommsSpec {
 #[serde(rename_all = "kebab-case", deny_unknown_fields)]
 pub struct SimpleNameserverCommsSpec {
     /// The address to send NOTIFYs to.
-    pub addr: SocketAddr,
+    pub addr: Option<SocketAddr>,
+
+    /// An optional TSIG key to authenticate messages with.
+    pub tsig_key_name: Option<KeyName>,
 }
 
 //--- Conversion
@@ -937,33 +944,65 @@ impl NameserverCommsSpec {
 
     /// Build into this specification.
     pub fn build(policy: &NameserverCommsPolicy) -> Self {
-        Self::Complex(ComplexNameserverCommsSpec { addr: policy.addr })
+        Self::Complex(ComplexNameserverCommsSpec {
+            addr: policy.addr,
+            tsig_key_name: policy.tsig_key_name.clone(),
+        })
     }
 }
 
 impl SimpleNameserverCommsSpec {
     /// Parse from this specification.
     pub fn parse(self) -> NameserverCommsPolicy {
-        NameserverCommsPolicy { addr: self.addr }
+        NameserverCommsPolicy {
+            addr: self.addr,
+            tsig_key_name: self.tsig_key_name,
+        }
     }
 }
 
 impl ComplexNameserverCommsSpec {
     /// Parse from this specification.
     pub fn parse(self) -> NameserverCommsPolicy {
-        NameserverCommsPolicy { addr: self.addr }
+        NameserverCommsPolicy {
+            addr: self.addr,
+            tsig_key_name: self.tsig_key_name,
+        }
     }
 }
 
-/// Parse`<IP_ADDRESS>[:<PORT>]`
+/// Parse`[<IP_ADDRESS>[:<PORT>]][^<TSIG_KEY_NAME>]`
 impl FromStr for SimpleNameserverCommsSpec {
-    type Err = AddrParseError;
+    type Err = String;
 
     fn from_str(s: &str) -> Result<Self, Self::Err> {
-        let addr = IpAddr::from_str(s)
-            .map(|ip| SocketAddr::new(ip, 53))
-            .or_else(|_| SocketAddr::from_str(s))?;
-        Ok(SimpleNameserverCommsSpec { addr })
+        let (s, tsig_key_name) = s
+            .split_once('^')
+            .map(|(s, tsig_key_name)| (s, Some(tsig_key_name)))
+            .unwrap_or((s, None));
+
+        let addr = if s.is_empty() {
+            None
+        } else {
+            Some(
+                IpAddr::from_str(s)
+                    .map(|ip| SocketAddr::new(ip, 53))
+                    .or_else(|_| SocketAddr::from_str(s))
+                    .map_err(|err| format!("Invalid IP address '{s}': {err}"))?,
+            )
+        };
+
+        let tsig_key_name = tsig_key_name
+            .map(|name| {
+                KeyName::from_str(name)
+                    .map_err(|err| format!("Invalid TSIG key name '{name}: {err}"))
+            })
+            .transpose()?;
+
+        Ok(SimpleNameserverCommsSpec {
+            addr,
+            tsig_key_name,
+        })
     }
 }
 
diff --git a/src/policy/mod.rs b/src/policy/mod.rs
index e02b29877..bef69ee27 100644
--- a/src/policy/mod.rs
+++ b/src/policy/mod.rs
@@ -9,6 +9,7 @@ use bytes::Bytes;
 use camino::Utf8PathBuf;
 use domain::base::Name;
 use domain::base::Ttl;
+use domain::tsig::KeyName;
 use serde::{Deserialize, Serialize};
 use tracing::{debug, error, info, warn};
 
@@ -475,7 +476,10 @@ pub struct NameserverCommsPolicy {
     /// For sending the port MUST NOT be zero.
     ///
     /// TODO: Support IP prefixes?
-    pub addr: SocketAddr,
+    pub addr: Option<SocketAddr>,
+
+    /// An optional TSIG key to authenticate messages with.
+    pub tsig_key_name: Option<KeyName>,
 }
 
 //----------- KeyParameters ---------------------------------------------------
diff --git a/src/server/service.rs b/src/server/service.rs
index b6faecf37..b331d7cc8 100644
--- a/src/server/service.rs
+++ b/src/server/service.rs
@@ -83,6 +83,7 @@ mod compat {
         tsig,
     };
     use futures::Stream;
+    use tracing::{debug, trace};
 
     use crate::server::request::{RequestKind, ZoneRequestKind};
 
@@ -128,6 +129,13 @@ mod compat {
                         return Box::pin(std::future::ready(error(old_request.message(), rcode)));
                     };
 
+                    if !is_permitted(&old_request, zone) {
+                        return Box::pin(std::future::ready(error(
+                            old_request.message(),
+                            Rcode::REFUSED,
+                        )));
+                    }
+
                     match zone_request.kind {
                         ZoneRequestKind::Soa => Box::pin({
                             let viewer = zone.viewer.clone();
@@ -152,6 +160,97 @@ mod compat {
         }
     }
 
+    /// Enforce any defined access controls for the zone being requested.
+    fn is_permitted<V>(
+        request: &Request<Vec<u8>, Option<Arc<tsig::Key>>>,
+        zone: &ServedZone<V>,
+    ) -> bool
+    where
+        V: Viewer + Send + Sync + 'static,
+    {
+        // IP address/CIDR based access control:
+        // TODO
+
+        // TSIG access control:
+        // If the request was TSIG authenticated it would only be passed to
+        // our service if the TsigMiddlewareSvc verified that the key used
+        // exists in our key store, so that it can sign the response that we
+        // generate.
+        //
+        // However, having used a known TSIG key is not enough, the key used
+        // must also have been permitted by the operator for the zone being
+        // queried.
+        //
+        // The TSIG key(s) permitted to sign a zone are defined in policy
+        // so we have to look that up.
+        let zone_state = zone.handle.state.lock().unwrap();
+
+        let policy = zone_state
+            .policy
+            .as_ref()
+            .expect("A zone must always have an associated policy");
+
+        let outbound_policy = &policy.server.outbound;
+
+        debug!(
+            "Checking access to zone {} from {} with TSIG key {:?} due to policy '{}'",
+            zone.handle.name,
+            request.client_addr(),
+            request.metadata(),
+            policy.name
+        );
+        trace!("Policy: {policy:?}");
+
+        // If no rules are defined, allow the request.
+        if outbound_policy.accept_xfr_requests_from.is_empty() {
+            return true;
+        }
+
+        // At least one access control rule must match in order for the
+        // request to be accepted.
+
+        for rule in &outbound_policy.accept_xfr_requests_from {
+            match (rule.addr, &rule.tsig_key_name, request.metadata()) {
+                // Allow all
+                (None, None, None) => return true,
+
+                // TSIG key match required
+                (None, Some(wanted_key), Some(actual_key)) if wanted_key == actual_key.name() => {
+                    // Allow the request.
+                    return true;
+                }
+
+                // IP address match required
+                (Some(wanted_addr), None, None) if wanted_addr == request.client_addr() => {
+                    // Allow the request.
+                    return true;
+                }
+
+                // IP address *and* TSIG key match required
+                (Some(wanted_addr), Some(wanted_key), Some(actual_key))
+                    if wanted_addr == request.client_addr() && wanted_key == actual_key.name() =>
+                {
+                    // Allow the request.
+                    return true;
+                }
+
+                _ => {
+                    // Rule not matched, see if another rule matches
+                }
+            }
+        }
+
+        // Deny the request.
+        debug!(
+            "Denying request to zone {} from {} with TSIG key {:?} due to policy '{}'",
+            zone.handle.name,
+            request.client_addr(),
+            request.metadata(),
+            policy.name
+        );
+        false
+    }
+
     fn soa<V: Viewer>(request: &Message<Vec<u8>>, viewer: &V) -> ResponseStream {
         if viewer.is_empty() {
             // The zone is known to exist, but we don't have any data for it.
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index bf6e34eae..1ac980e3f 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -916,12 +916,18 @@ impl HttpServer {
                 accept_xfr_requests_from: p_outbound
                     .accept_xfr_requests_from
                     .iter()
-                    .map(|v| NameserverCommsPolicyInfo { addr: v.addr })
+                    .map(|v| NameserverCommsPolicyInfo {
+                        addr: v.addr,
+                        tsig_key_name: v.tsig_key_name.clone(),
+                    })
                     .collect(),
                 send_notify_to: p_outbound
                     .send_notify_to
                     .iter()
-                    .map(|v| NameserverCommsPolicyInfo { addr: v.addr })
+                    .map(|v| NameserverCommsPolicyInfo {
+                        addr: v.addr,
+                        tsig_key_name: v.tsig_key_name.clone(),
+                    })
                     .collect(),
             },
         };
diff --git a/src/units/zone_server.rs b/src/units/zone_server.rs
index 779aed87d..1bf7cee76 100644
--- a/src/units/zone_server.rs
+++ b/src/units/zone_server.rs
@@ -243,13 +243,7 @@ impl ZoneServer {
                     .outbound
                     .send_notify_to
                     .iter()
-                    .filter_map(|s| {
-                        if s.addr.port() != 0 {
-                            Some(s.addr)
-                        } else {
-                            None
-                        }
-                    });
+                    .filter_map(|s| s.addr.filter(|addr| addr.port() != 0));
 
                 send_notify_to_addrs(zone_name.clone(), addrs, center);
             }

From e6d8a5fba277d9aa05ed0a6074d95e322b53a211 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 23:04:55 +0200
Subject: [PATCH 055/113] Remove outdated comment.

---
 src/server/service.rs | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/src/server/service.rs b/src/server/service.rs
index b331d7cc8..af07f5ddf 100644
--- a/src/server/service.rs
+++ b/src/server/service.rs
@@ -168,9 +168,6 @@ mod compat {
     where
         V: Viewer + Send + Sync + 'static,
     {
-        // IP address/CIDR based access control:
-        // TODO
-
         // TSIG access control:
         // If the request was TSIG authenticated it would only be passed to
         // our service if the TsigMiddlewareSvc verified that the key used

From 80ac2e7c6c623fdc349ae13522de6bf934ac5189 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 23:10:49 +0200
Subject: [PATCH 056/113] Revert "Remove outdated comment."

This reverts commit e6d8a5fba277d9aa05ed0a6074d95e322b53a211.
---
 src/server/service.rs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/server/service.rs b/src/server/service.rs
index af07f5ddf..b331d7cc8 100644
--- a/src/server/service.rs
+++ b/src/server/service.rs
@@ -168,6 +168,9 @@ mod compat {
     where
         V: Viewer + Send + Sync + 'static,
     {
+        // IP address/CIDR based access control:
+        // TODO
+
         // TSIG access control:
         // If the request was TSIG authenticated it would only be passed to
         // our service if the TsigMiddlewareSvc verified that the key used

From d77e034327e313d7c395fe36206eab21081fd252 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 23:10:51 +0200
Subject: [PATCH 057/113] Reapply "Remove addition of downstream specific logic
 from upstream PR."

This reverts commit 787ad2a72082ce3db1b5fa7d1375f4c271fc9572.
---
 crates/api/src/lib.rs    | 12 +----
 src/policy/file/v1.rs    | 65 ++++++--------------------
 src/policy/mod.rs        |  6 +--
 src/server/service.rs    | 99 ----------------------------------------
 src/units/http_server.rs | 10 +---
 src/units/zone_server.rs |  8 +++-
 6 files changed, 25 insertions(+), 175 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index d4c9b9871..27fb202f0 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -5,7 +5,6 @@ use std::time::{Duration, SystemTime};
 
 use camino::{Utf8Path, Utf8PathBuf};
 use domain::tsig::Algorithm;
-use domain::tsig::KeyName;
 use serde::{Deserialize, Serialize};
 
 pub use domain::base::Serial;
@@ -890,19 +889,12 @@ pub struct OutboundPolicyInfo {
 
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct NameserverCommsPolicyInfo {
-    pub addr: Option<SocketAddr>,
-    pub tsig_key_name: Option<KeyName>,
+    pub addr: SocketAddr,
 }
 
 impl std::fmt::Display for NameserverCommsPolicyInfo {
     fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        if let Some(addr) = self.addr {
-            write!(f, "{addr}")?;
-        }
-        if let Some(tsig_key_name) = &self.tsig_key_name {
-            write!(f, "^{tsig_key_name}")?;
-        }
-        Ok(())
+        write!(f, "{}", self.addr)
     }
 }
 
diff --git a/src/policy/file/v1.rs b/src/policy/file/v1.rs
index c89520c81..64c37f357 100644
--- a/src/policy/file/v1.rs
+++ b/src/policy/file/v1.rs
@@ -2,11 +2,10 @@
 
 use std::{
     fmt::{self, Display},
-    net::{IpAddr, SocketAddr},
+    net::{AddrParseError, IpAddr, SocketAddr},
     str::FromStr,
 };
 
-use domain::tsig::KeyName;
 use serde::{
     Deserialize, Serialize,
     de::{self, Visitor},
@@ -913,11 +912,8 @@ pub enum NameserverCommsSpec {
 #[derive(Clone, Debug, Deserialize, Serialize)]
 #[serde(rename_all = "kebab-case", deny_unknown_fields)]
 pub struct ComplexNameserverCommsSpec {
-    /// The address to send NOTIFYs to and allow XFRs from.
-    pub addr: Option<SocketAddr>,
-
-    /// An optional TSIG key to authenticate messages with.
-    pub tsig_key_name: Option<KeyName>,
+    /// The address to send NOTIFYs to.
+    pub addr: SocketAddr,
 }
 
 /// Policy for communicating with another namesever.
@@ -925,10 +921,7 @@ pub struct ComplexNameserverCommsSpec {
 #[serde(rename_all = "kebab-case", deny_unknown_fields)]
 pub struct SimpleNameserverCommsSpec {
     /// The address to send NOTIFYs to.
-    pub addr: Option<SocketAddr>,
-
-    /// An optional TSIG key to authenticate messages with.
-    pub tsig_key_name: Option<KeyName>,
+    pub addr: SocketAddr,
 }
 
 //--- Conversion
@@ -944,65 +937,33 @@ impl NameserverCommsSpec {
 
     /// Build into this specification.
     pub fn build(policy: &NameserverCommsPolicy) -> Self {
-        Self::Complex(ComplexNameserverCommsSpec {
-            addr: policy.addr,
-            tsig_key_name: policy.tsig_key_name.clone(),
-        })
+        Self::Complex(ComplexNameserverCommsSpec { addr: policy.addr })
     }
 }
 
 impl SimpleNameserverCommsSpec {
     /// Parse from this specification.
     pub fn parse(self) -> NameserverCommsPolicy {
-        NameserverCommsPolicy {
-            addr: self.addr,
-            tsig_key_name: self.tsig_key_name,
-        }
+        NameserverCommsPolicy { addr: self.addr }
     }
 }
 
 impl ComplexNameserverCommsSpec {
     /// Parse from this specification.
     pub fn parse(self) -> NameserverCommsPolicy {
-        NameserverCommsPolicy {
-            addr: self.addr,
-            tsig_key_name: self.tsig_key_name,
-        }
+        NameserverCommsPolicy { addr: self.addr }
     }
 }
 
-/// Parse`[<IP_ADDRESS>[:<PORT>]][^<TSIG_KEY_NAME>]`
+/// Parse`<IP_ADDRESS>[:<PORT>]`
 impl FromStr for SimpleNameserverCommsSpec {
-    type Err = String;
+    type Err = AddrParseError;
 
     fn from_str(s: &str) -> Result<Self, Self::Err> {
-        let (s, tsig_key_name) = s
-            .split_once('^')
-            .map(|(s, tsig_key_name)| (s, Some(tsig_key_name)))
-            .unwrap_or((s, None));
-
-        let addr = if s.is_empty() {
-            None
-        } else {
-            Some(
-                IpAddr::from_str(s)
-                    .map(|ip| SocketAddr::new(ip, 53))
-                    .or_else(|_| SocketAddr::from_str(s))
-                    .map_err(|err| format!("Invalid IP address '{s}': {err}"))?,
-            )
-        };
-
-        let tsig_key_name = tsig_key_name
-            .map(|name| {
-                KeyName::from_str(name)
-                    .map_err(|err| format!("Invalid TSIG key name '{name}: {err}"))
-            })
-            .transpose()?;
-
-        Ok(SimpleNameserverCommsSpec {
-            addr,
-            tsig_key_name,
-        })
+        let addr = IpAddr::from_str(s)
+            .map(|ip| SocketAddr::new(ip, 53))
+            .or_else(|_| SocketAddr::from_str(s))?;
+        Ok(SimpleNameserverCommsSpec { addr })
     }
 }
 
diff --git a/src/policy/mod.rs b/src/policy/mod.rs
index bef69ee27..e02b29877 100644
--- a/src/policy/mod.rs
+++ b/src/policy/mod.rs
@@ -9,7 +9,6 @@ use bytes::Bytes;
 use camino::Utf8PathBuf;
 use domain::base::Name;
 use domain::base::Ttl;
-use domain::tsig::KeyName;
 use serde::{Deserialize, Serialize};
 use tracing::{debug, error, info, warn};
 
@@ -476,10 +475,7 @@ pub struct NameserverCommsPolicy {
     /// For sending the port MUST NOT be zero.
     ///
     /// TODO: Support IP prefixes?
-    pub addr: Option<SocketAddr>,
-
-    /// An optional TSIG key to authenticate messages with.
-    pub tsig_key_name: Option<KeyName>,
+    pub addr: SocketAddr,
 }
 
 //----------- KeyParameters ---------------------------------------------------
diff --git a/src/server/service.rs b/src/server/service.rs
index b331d7cc8..b6faecf37 100644
--- a/src/server/service.rs
+++ b/src/server/service.rs
@@ -83,7 +83,6 @@ mod compat {
         tsig,
     };
     use futures::Stream;
-    use tracing::{debug, trace};
 
     use crate::server::request::{RequestKind, ZoneRequestKind};
 
@@ -129,13 +128,6 @@ mod compat {
                         return Box::pin(std::future::ready(error(old_request.message(), rcode)));
                     };
 
-                    if !is_permitted(&old_request, zone) {
-                        return Box::pin(std::future::ready(error(
-                            old_request.message(),
-                            Rcode::REFUSED,
-                        )));
-                    }
-
                     match zone_request.kind {
                         ZoneRequestKind::Soa => Box::pin({
                             let viewer = zone.viewer.clone();
@@ -160,97 +152,6 @@ mod compat {
         }
     }
 
-    /// Enforce any defined access controls for the zone being requested.
-    fn is_permitted<V>(
-        request: &Request<Vec<u8>, Option<Arc<tsig::Key>>>,
-        zone: &ServedZone<V>,
-    ) -> bool
-    where
-        V: Viewer + Send + Sync + 'static,
-    {
-        // IP address/CIDR based access control:
-        // TODO
-
-        // TSIG access control:
-        // If the request was TSIG authenticated it would only be passed to
-        // our service if the TsigMiddlewareSvc verified that the key used
-        // exists in our key store, so that it can sign the response that we
-        // generate.
-        //
-        // However, having used a known TSIG key is not enough, the key used
-        // must also have been permitted by the operator for the zone being
-        // queried.
-        //
-        // The TSIG key(s) permitted to sign a zone are defined in policy
-        // so we have to look that up.
-        let zone_state = zone.handle.state.lock().unwrap();
-
-        let policy = zone_state
-            .policy
-            .as_ref()
-            .expect("A zone must always have an associated policy");
-
-        let outbound_policy = &policy.server.outbound;
-
-        debug!(
-            "Checking access to zone {} from {} with TSIG key {:?} due to policy '{}'",
-            zone.handle.name,
-            request.client_addr(),
-            request.metadata(),
-            policy.name
-        );
-        trace!("Policy: {policy:?}");
-
-        // If no rules are defined, allow the request.
-        if outbound_policy.accept_xfr_requests_from.is_empty() {
-            return true;
-        }
-
-        // At least one access control rule must match in order for the
-        // request to be accepted.
-
-        for rule in &outbound_policy.accept_xfr_requests_from {
-            match (rule.addr, &rule.tsig_key_name, request.metadata()) {
-                // Allow all
-                (None, None, None) => return true,
-
-                // TSIG key match required
-                (None, Some(wanted_key), Some(actual_key)) if wanted_key == actual_key.name() => {
-                    // Allow the request.
-                    return true;
-                }
-
-                // IP address match required
-                (Some(wanted_addr), None, None) if wanted_addr == request.client_addr() => {
-                    // Allow the request.
-                    return true;
-                }
-
-                // IP address *and* TSIG key match required
-                (Some(wanted_addr), Some(wanted_key), Some(actual_key))
-                    if wanted_addr == request.client_addr() && wanted_key == actual_key.name() =>
-                {
-                    // Allow the request.
-                    return true;
-                }
-
-                _ => {
-                    // Rule not matched, see if another rule matches
-                }
-            }
-        }
-
-        // Deny the request.
-        debug!(
-            "Denying request to zone {} from {} with TSIG key {:?} due to policy '{}'",
-            zone.handle.name,
-            request.client_addr(),
-            request.metadata(),
-            policy.name
-        );
-        false
-    }
-
     fn soa<V: Viewer>(request: &Message<Vec<u8>>, viewer: &V) -> ResponseStream {
         if viewer.is_empty() {
             // The zone is known to exist, but we don't have any data for it.
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index 1ac980e3f..bf6e34eae 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -916,18 +916,12 @@ impl HttpServer {
                 accept_xfr_requests_from: p_outbound
                     .accept_xfr_requests_from
                     .iter()
-                    .map(|v| NameserverCommsPolicyInfo {
-                        addr: v.addr,
-                        tsig_key_name: v.tsig_key_name.clone(),
-                    })
+                    .map(|v| NameserverCommsPolicyInfo { addr: v.addr })
                     .collect(),
                 send_notify_to: p_outbound
                     .send_notify_to
                     .iter()
-                    .map(|v| NameserverCommsPolicyInfo {
-                        addr: v.addr,
-                        tsig_key_name: v.tsig_key_name.clone(),
-                    })
+                    .map(|v| NameserverCommsPolicyInfo { addr: v.addr })
                     .collect(),
             },
         };
diff --git a/src/units/zone_server.rs b/src/units/zone_server.rs
index 1bf7cee76..779aed87d 100644
--- a/src/units/zone_server.rs
+++ b/src/units/zone_server.rs
@@ -243,7 +243,13 @@ impl ZoneServer {
                     .outbound
                     .send_notify_to
                     .iter()
-                    .filter_map(|s| s.addr.filter(|addr| addr.port() != 0));
+                    .filter_map(|s| {
+                        if s.addr.port() != 0 {
+                            Some(s.addr)
+                        } else {
+                            None
+                        }
+                    });
 
                 send_notify_to_addrs(zone_name.clone(), addrs, center);
             }

From 7228b833fccef768b9c8ef6c1292bd1edaac7668 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 23:30:42 +0200
Subject: [PATCH 058/113] Additional comments on the NOTIFY handler re: ACL
 enforcement.

---
 src/units/zone_server.rs | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/src/units/zone_server.rs b/src/units/zone_server.rs
index 779aed87d..815637a2f 100644
--- a/src/units/zone_server.rs
+++ b/src/units/zone_server.rs
@@ -690,8 +690,23 @@ impl Notifiable for LoaderNotifier {
         // Don't do anything if the notifier is disabled.
         if self.enabled && class == Class::IN {
             // Propagate a request for the zone refresh.
-            // This request ignores the serial and source because we will just
-            // do a SOA query to our configured upstreams.
+            // 
+            // We ignore the serial because we will just do a SOA query to our
+            // configured upstream.
+            //
+            // TODO: Do we want to try enforcing IP address based access
+            // control at this point? Would we want CIDR matching support?
+            // Would we want to require a DNS COOKIE if the transport is UDP?
+            //
+            // TODO: Do we want to try enforcing TSIG key based access control
+            // at this point? We can determine the key that the zone source
+            // is configured to use but we can't actually verify that that key
+            // was used. The TsigMiddlewareSvc will have ensured that the a
+            // valid key present in our key store was used, but that may not
+            // be the actual key configured on the zone source. We cannot test
+            // for the actual correct key because NotifyMiddlewareSvc that
+            // invokes us doesn't pass us the Request from which we would be
+            // able to learn the used TSIG key.
             let center = &self.center;
             if let Some(zone) = crate::center::get_zone(center, apex_name) {
                 info!("Instructing zone loader to refresh zone '{apex_name}");

From 9bc4f47028fa07af8bca99c5037c0d92ae8e0d84 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 23:33:12 +0200
Subject: [PATCH 059/113] Remove policy comments that relate to downstream
 TSIG.

---
 etc/policy.template.toml | 23 +----------------------
 1 file changed, 1 insertion(+), 22 deletions(-)

diff --git a/etc/policy.template.toml b/etc/policy.template.toml
index 70e67ae35..9fcf406df 100644
--- a/etc/policy.template.toml
+++ b/etc/policy.template.toml
@@ -376,26 +376,5 @@ required = false
 
 # The set of nameservers to which NOTIFY messages should be sent.
 #
-# If empty, no NOTIFY messages will be sent.
-# 
-# Each nameserver must be specifeid as a string in the form `"<IP
-# address>:[<port>][^<TSIG key name>]"`.
-#
-# A TSIG key name can optionally be specified in order to sign the NOTIFY
-# message using the specified TSIG key. The TSIG key must already have been
-# added to the Cascade TSIG key store with the `cascade tsig add` CLI command.
-#
-# Examples:
-#
-#   send-notify-to = [ "127.0.0.1"]
-#   send-notify-to = [ "127.0.0.1:53"]
-#   send-notify-to = [ "127.0.0.1:53^my_tsig_key"]
-#   send-notify-to = [ "127.0.0.1^my_tsig_key"]
-#   send-notify-to = [ { addr = "127.0.0.1:49", tsig-key-name = "my_tsig_key" } ]
-#
-# You can also use the TOML array of tables syntax like so:
-# 
-#   [[server.outbound.send-notify-to]]
-#   addr = "127.0.0.1:53"
-#   tsig-key-name = "my_tsig_key"
+# A collection of IP:[port], defaulting to port 53 when not specified.
 send-notify-to = []

From 773369a1d72cf93292bb182515a7be76c910d0bc Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 23:42:38 +0200
Subject: [PATCH 060/113] Restore missing line.

---
 etc/policy.template.toml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/etc/policy.template.toml b/etc/policy.template.toml
index 9fcf406df..7f19a5585 100644
--- a/etc/policy.template.toml
+++ b/etc/policy.template.toml
@@ -375,6 +375,8 @@ required = false
 [server.outbound]
 
 # The set of nameservers to which NOTIFY messages should be sent.
+# 
+# If empty, no NOTIFY messages will be sent.
 #
 # A collection of IP:[port], defaulting to port 53 when not specified.
 send-notify-to = []

From 0fa77c82b078f5faacff58ea6acf4c159b6cabf9 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 23:43:35 +0200
Subject: [PATCH 061/113] Restore missing line exactly.

---
 etc/policy.template.toml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/etc/policy.template.toml b/etc/policy.template.toml
index 7f19a5585..f2ef3e706 100644
--- a/etc/policy.template.toml
+++ b/etc/policy.template.toml
@@ -375,8 +375,8 @@ required = false
 [server.outbound]
 
 # The set of nameservers to which NOTIFY messages should be sent.
-# 
-# If empty, no NOTIFY messages will be sent.
 #
+# If empty, no NOTIFY messages will be sent.
+# 
 # A collection of IP:[port], defaulting to port 53 when not specified.
 send-notify-to = []

From 1cdf7b0592203fd547713e8333f6db8ada94a9f2 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Mon, 20 Apr 2026 23:54:18 +0200
Subject: [PATCH 062/113] Add a note about how adding a TSIG key has an effect,
 even without specifying a use for it.

---
 doc/manual/source/man/cascade-tsig.rst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index 43509add9..7798492ee 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -38,6 +38,9 @@ Commands
 
    Register a new TSIG key.
 
+   Incoming DNS messages that are TSIG signed will be rejected if the key used
+   to sign the message is not registered with Cascade.
+
 .. subcmd:: list
 
    List registered TSIG keys and the zones that use them.

From d466f35b8f9d02bd5f6a503b320fb90f7a8920d7 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Tue, 21 Apr 2026 00:05:28 +0200
Subject: [PATCH 063/113] Document the new policy publication-nameservers
 setting.

---
 doc/manual/source/man/cascaded-policy.toml.rst | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/doc/manual/source/man/cascaded-policy.toml.rst b/doc/manual/source/man/cascaded-policy.toml.rst
index 6057b9fc8..bb60fd9e9 100644
--- a/doc/manual/source/man/cascaded-policy.toml.rst
+++ b/doc/manual/source/man/cascaded-policy.toml.rst
@@ -62,6 +62,7 @@ Example
     algorithm.auto-done = true
     ds-algorithm = "SHA256"
     auto-remove = true
+    publication-nameservers = []
 
     [key-manager.records]
     ttl = "1h"
@@ -257,6 +258,17 @@ The ``[key-manager]`` section.
    If this is set, expired keys will be removed automatically (by deleting the
    files for on-disk keys or removing it from the HSM).
 
+.. option:: publication-nameservers = []
+
+   A set of nameservers to use when checking for rrsiG propagation during a
+   key roll.
+
+   Each nameserver is specified as a string with the syntax:
+
+     ``<IP-Address>:<Port>[^[TSIG-Key-Name]]``
+
+   If not specified then the nameserver specified in the zone apex SOA MNAME
+   field will be queried.
 
 The management of DNS records by the key manager.
 +++++++++++++++++++++++++++++++++++++++++++++++++

From b08bc846fc17a2c7b525459c61af9e440ab7c624 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Tue, 21 Apr 2026 00:06:20 +0200
Subject: [PATCH 064/113] Re-generate rendered man pages.

---
 doc/manual/build/man/cascade-debug.1        |  2 +-
 doc/manual/build/man/cascade-health.1       |  2 +-
 doc/manual/build/man/cascade-hsm.1          |  2 +-
 doc/manual/build/man/cascade-keyset.1       |  2 +-
 doc/manual/build/man/cascade-policy.1       |  2 +-
 doc/manual/build/man/cascade-status.1       |  2 +-
 doc/manual/build/man/cascade-template.1     |  2 +-
 doc/manual/build/man/cascade-tsig.1         |  5 ++++-
 doc/manual/build/man/cascade-zone.1         |  2 +-
 doc/manual/build/man/cascade.1              |  2 +-
 doc/manual/build/man/cascaded-config.toml.5 |  2 +-
 doc/manual/build/man/cascaded-policy.toml.5 | 19 ++++++++++++++++++-
 doc/manual/build/man/cascaded.1             |  2 +-
 13 files changed, 33 insertions(+), 13 deletions(-)

diff --git a/doc/manual/build/man/cascade-debug.1 b/doc/manual/build/man/cascade-debug.1
index f0bde6cda..a058a215b 100644
--- a/doc/manual/build/man/cascade-debug.1
+++ b/doc/manual/build/man/cascade-debug.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-DEBUG" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-DEBUG" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-debug \- Debug / troubleshoot Cascade
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-health.1 b/doc/manual/build/man/cascade-health.1
index 7f988c582..a219ff50c 100644
--- a/doc/manual/build/man/cascade-health.1
+++ b/doc/manual/build/man/cascade-health.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HEALTH" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HEALTH" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-health \- Check the health of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-hsm.1 b/doc/manual/build/man/cascade-hsm.1
index 00bfd2801..3830445b4 100644
--- a/doc/manual/build/man/cascade-hsm.1
+++ b/doc/manual/build/man/cascade-hsm.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HSM" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HSM" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-hsm \- Manage HSMs
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-keyset.1 b/doc/manual/build/man/cascade-keyset.1
index c91927b83..9e31e41ec 100644
--- a/doc/manual/build/man/cascade-keyset.1
+++ b/doc/manual/build/man/cascade-keyset.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-KEYSET" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-KEYSET" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-keyset \- Execute manual key roll or key removal commands
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-policy.1 b/doc/manual/build/man/cascade-policy.1
index fb2500d39..553fe6b32 100644
--- a/doc/manual/build/man/cascade-policy.1
+++ b/doc/manual/build/man/cascade-policy.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-POLICY" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-POLICY" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-policy \- Manage policies
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-status.1 b/doc/manual/build/man/cascade-status.1
index 2848fbc84..70c9649e0 100644
--- a/doc/manual/build/man/cascade-status.1
+++ b/doc/manual/build/man/cascade-status.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-STATUS" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-STATUS" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-status \- Show the status of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-template.1 b/doc/manual/build/man/cascade-template.1
index f2fe0e0b5..7820a9874 100644
--- a/doc/manual/build/man/cascade-template.1
+++ b/doc/manual/build/man/cascade-template.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-TEMPLATE" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-TEMPLATE" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-template \- Print example config or policy files
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-tsig.1 b/doc/manual/build/man/cascade-tsig.1
index b26f4429a..78d132985 100644
--- a/doc/manual/build/man/cascade-tsig.1
+++ b/doc/manual/build/man/cascade-tsig.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-TSIG" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-TSIG" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-tsig \- Manage TSIG keys
 .sp
@@ -63,6 +63,9 @@ command.
 .TP
 .B add
 Register a new TSIG key.
+.sp
+Incoming DNS messages that are TSIG signed will be rejected if the key used
+to sign the message is not registered with Cascade.
 .UNINDENT
 .INDENT 0.0
 .TP
diff --git a/doc/manual/build/man/cascade-zone.1 b/doc/manual/build/man/cascade-zone.1
index ee5e12175..daa6c6799 100644
--- a/doc/manual/build/man/cascade-zone.1
+++ b/doc/manual/build/man/cascade-zone.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-ZONE" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-ZONE" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-zone \- Manage zones
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade.1 b/doc/manual/build/man/cascade.1
index f6e4db446..3f77a7fa0 100644
--- a/doc/manual/build/man/cascade.1
+++ b/doc/manual/build/man/cascade.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade \- Cascade CLI
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascaded-config.toml.5 b/doc/manual/build/man/cascaded-config.toml.5
index 0aa89e11c..bddf152ae 100644
--- a/doc/manual/build/man/cascaded-config.toml.5
+++ b/doc/manual/build/man/cascaded-config.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-CONFIG.TOML" "5" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-CONFIG.TOML" "5" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-config.toml \- Cascade configuration file
 .sp
diff --git a/doc/manual/build/man/cascaded-policy.toml.5 b/doc/manual/build/man/cascaded-policy.toml.5
index 3aa149021..11989d680 100644
--- a/doc/manual/build/man/cascaded-policy.toml.5
+++ b/doc/manual/build/man/cascaded-policy.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-POLICY.TOML" "5" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-POLICY.TOML" "5" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-policy.toml \- Cascade policy file format
 .sp
@@ -96,6 +96,7 @@ csk.auto\-done = true
 algorithm.auto\-done = true
 ds\-algorithm = \(dqSHA256\(dq
 auto\-remove = true
+publication\-nameservers = []
 
 [key\-manager.records]
 ttl = \(dq1h\(dq
@@ -338,6 +339,22 @@ Whether to automatically remove expired keys.
 If this is set, expired keys will be removed automatically (by deleting the
 files for on\-disk keys or removing it from the HSM).
 .UNINDENT
+.INDENT 0.0
+.TP
+.B publication\-nameservers = []
+A set of nameservers to use when checking for rrsiG propagation during a
+key roll.
+.sp
+Each nameserver is specified as a string with the syntax:
+.INDENT 7.0
+.INDENT 3.5
+\fB<IP\-Address>:<Port>[^[TSIG\-Key\-Name]]\fP
+.UNINDENT
+.UNINDENT
+.sp
+If not specified then the nameserver specified in the zone apex SOA MNAME
+field will be queried.
+.UNINDENT
 .SS The management of DNS records by the key manager.
 .sp
 The \fB[key\-manager.records]\fP section.
diff --git a/doc/manual/build/man/cascaded.1 b/doc/manual/build/man/cascaded.1
index a46dcba00..59d33333a 100644
--- a/doc/manual/build/man/cascaded.1
+++ b/doc/manual/build/man/cascaded.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED" "1" "Apr 17, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded \- DNSSEC signer
 .SH SYNOPSIS

From e2c46813e57559eb93bc971f5fdb9ebf5a5717a7 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Tue, 21 Apr 2026 00:18:14 +0200
Subject: [PATCH 065/113] cargo fmt.

---
 src/units/zone_server.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/units/zone_server.rs b/src/units/zone_server.rs
index 815637a2f..12970da78 100644
--- a/src/units/zone_server.rs
+++ b/src/units/zone_server.rs
@@ -690,7 +690,7 @@ impl Notifiable for LoaderNotifier {
         // Don't do anything if the notifier is disabled.
         if self.enabled && class == Class::IN {
             // Propagate a request for the zone refresh.
-            // 
+            //
             // We ignore the serial because we will just do a SOA query to our
             // configured upstream.
             //

From a8ff50c47550e80b5faf0ae417efd88ce8f4d0b3 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 16:21:57 +0200
Subject: [PATCH 066/113] Various review feedback updates.

---
 crates/api/src/lib.rs                         |  4 +--
 doc/manual/source/man/cascade-tsig.rst        |  5 ++-
 doc/manual/source/man/cascade-zone.rst        |  2 +-
 .../source/man/cascaded-policy.toml.rst       |  2 +-
 doc/manual/source/nsd.rst                     |  4 +--
 doc/manual/source/zone-transfers.rst          | 33 +++++++++----------
 etc/policy.template.toml                      |  4 +--
 src/loader/mod.rs                             |  2 +-
 src/tsig/mod.rs                               |  2 +-
 9 files changed, 28 insertions(+), 30 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 27fb202f0..33dd86db9 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -387,8 +387,8 @@ impl Display for ZoneSource {
 /// Support parsing of ``-source`` command line arguments.
 ///
 /// Supported forms:
-///   - `<IP_ADDRESS>[:<PORT>][^<TSIG_KEY_NAME>]`
-///   - `</PATH/TO/ZONE/FILE/TO/LOAD>`
+///   - `<IP>[:<PORT>][^<TSIG_KEY_NAME>]`
+///   - `<PATH/TO/ZONE/FILE/TO/LOAD>`
 impl From<&str> for ZoneSource {
     fn from(mut s: &str) -> Self {
         // Split out any provided TSIG key from the rest of the
diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index 7798492ee..2ecbfc7df 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -49,9 +49,8 @@ Commands
 
    Remove a registered TSIG key.
 
-   .. note:: Returns an error if the key does not exist in the TSIG key store
-             or if any zone exists that is configured to authenticate with an
-			 upstream source using the specified TSIG key.
+   .. note:: Returns an error if the key does not exist in the TSIG key store,
+             or if the key is still referenced by other configuration.
 
 Arguments for :subcmd:`tsig add`
 --------------------------------
diff --git a/doc/manual/source/man/cascade-zone.rst b/doc/manual/source/man/cascade-zone.rst
index 034d51926..7bcead194 100644
--- a/doc/manual/source/man/cascade-zone.rst
+++ b/doc/manual/source/man/cascade-zone.rst
@@ -48,7 +48,7 @@ Commands
 
    Remove a zone.
 
-   .. note:: Once removed downstream servers will no longer be able to fetch
+   .. note:: Once removed, downstream servers will no longer be able to fetch
              the zone!
 
 .. subcmd:: list
diff --git a/doc/manual/source/man/cascaded-policy.toml.rst b/doc/manual/source/man/cascaded-policy.toml.rst
index bb60fd9e9..0eac8ee8d 100644
--- a/doc/manual/source/man/cascaded-policy.toml.rst
+++ b/doc/manual/source/man/cascaded-policy.toml.rst
@@ -265,7 +265,7 @@ The ``[key-manager]`` section.
 
    Each nameserver is specified as a string with the syntax:
 
-     ``<IP-Address>:<Port>[^[TSIG-Key-Name]]``
+     ``<IP>[:<PORT>][^[TSIG_KEY_NAME]``
 
    If not specified then the nameserver specified in the zone apex SOA MNAME
    field will be queried.
diff --git a/doc/manual/source/nsd.rst b/doc/manual/source/nsd.rst
index 35f1e8f6f..be80a54bc 100644
--- a/doc/manual/source/nsd.rst
+++ b/doc/manual/source/nsd.rst
@@ -59,7 +59,7 @@ example\:
   key:
     name: "sec1_key"
     algorithm: hmac-sha256
-    secret: "...=="
+    secret: "..."
 
    zone:
      name: example.com
@@ -83,7 +83,7 @@ command, e.g. like so:
    $ cascade tsig add --name sec1_key --alg hmac-sha256 --secret "...=="
 
 To use the new TSIG key it must be specified when adding a zone to
-Cascade. Assuming that NSD is running on host 192.168.0.1 on port 53
+Cascade. Assuming that NSD is running on host 192.168.0.1 on port 53,
 the following command instructs Cascade to add the ``example.com``
 zone sourced from the NSD server using the ``sec1_key`` TSIG key to
 authenticate with NSD:
diff --git a/doc/manual/source/zone-transfers.rst b/doc/manual/source/zone-transfers.rst
index 9017f27f5..089fb63ec 100644
--- a/doc/manual/source/zone-transfers.rst
+++ b/doc/manual/source/zone-transfers.rst
@@ -3,7 +3,7 @@ Zone Transfers
 
 Cascade is designed to be deployed between a hidden upstream nameserver and
 public downstream nameservers. The hidden upstream serves the unsigned zone,
-Cascade signs it and passes it to the downstream nameservers for publication
+Cascade signs it, and passes it to the downstream nameservers for publication
 to consumers.
 
 Communication of changed zone records from upstream to downstream should be
@@ -14,19 +14,18 @@ Securing the transferred data can be done using RFC 8945 Secret Key
 Authentication for DNS (TSIG) keys, using a shared secret communicated out of
 band to the nameservers sending and receiving the zone records.
 
-Cascade supports timely discovery of zone changes via RFC 1996 A Mechanism
-for Prompt Notification of Zone Changes (DNS NOTIFY). If no NOTIFY message
-is received by Cascade, Cascade will instead discover new versions of the
-zone by sending SOA queries periodically to the upstream, the frequency of
-which is determined by the timers on the SOA apex record in the zone.
+Cascade supports timely discovery of zone changes via RFC 1996 (DNS NOTIFY).
+If no NOTIFY message is received by Cascade, Cascade will instead discover
+new versions of the zone by sending SOA queries periodically to the upstream,
+the frequency of which is determined by the timers on the zone's SOA record.
 
-.. note:: Cascade also supports loading zone records from a file. However,
-          if only a small fraction of the records in the zone change from
-          one version to the next, loading the entire zone zone every time
-          the zone changes will require more time, CPU and memory compared
-          to processing only the differences when using IXFR. Additionally,
-          Cascade has no built-in support for writing signed zone files to
-          disk, if needed this could be done by a signed review hook.
+.. note:: Cascade also supports loading the zone from a file. However, if only
+          a small fraction of the records in the zone change from one version
+          to the next, loading the entire zone every time the zone changes
+          will require more time, CPU and memory compared to processing
+          only the differences when using IXFR. Additionally, Cascade has no
+          built-in support for writing signed zone files to disk, if needed
+          this could be done by a signed review hook.
 
 Using zone transfers with an upstream nameserver
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -60,16 +59,16 @@ When adding a zone the TSIG key name can then be referred to like so:
 
 .. code-block:: bash
 
-   $ cascade zone add --source <IP_OR_NAME>[:<PORT>]^<TSIG KEY NAME>
+   $ cascade zone add --source <IP>[:<PORT>]^<TSIG KEY NAME>
 
 Using zone transfers with a downstream server
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 Cascade permits zone transfers by default, no configuration is required.
 
-To ensure timely update by secondaries Cascade can be configured to send
-RFC 1996 DNS NOTIFY messages to specified secondaries. This is done via
-the policy setting ``server.outbound.send-notify-to``.
+To ensure timely update by secondaries, Cascade can be configured to send RFC
+1996 DNS NOTIFY messages to specified secondaries. This is done via the policy
+setting ``server.outbound.send-notify-to``.
 
 .. note:: The policy file will need to be reloaded via ``cascade policy
           reload`` before adding the zone. Also, when adding the zone you
diff --git a/etc/policy.template.toml b/etc/policy.template.toml
index f2ef3e706..0af41f893 100644
--- a/etc/policy.template.toml
+++ b/etc/policy.template.toml
@@ -159,8 +159,8 @@ auto-remove = true
 # The upstream nameservers to use when checking for RRSIG propagation during
 # a key roll.
 # 
-# Each nameserver must be specifeid as a string in the form `"<IP
-# address>:[<port>][^<TSIG key name>]"`.
+# Each nameserver must be specifeid as a string in the form
+# `"<IP>:[<PORT>][^<TSIG_KEY_NAME>]"`.
 #
 # If not specified, the nameserver specified by the SOA MNAME field will be
 # checked.
diff --git a/src/loader/mod.rs b/src/loader/mod.rs
index 5c0bc1dbc..3f9a90ff7 100644
--- a/src/loader/mod.rs
+++ b/src/loader/mod.rs
@@ -307,7 +307,7 @@ impl std::fmt::Display for Source {
     fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
         match self {
             Source::None => f.write_str("none"),
-            Source::Zonefile { path } => write!(f, "zone file '{}'", path.as_std_path().display()),
+            Source::Zonefile { path } => write!(f, "zone file '{path}'"),
             Source::Server { addr, tsig_key } => {
                 write!(f, "{addr}")?;
                 if let Some(tsig_key) = &tsig_key {
diff --git a/src/tsig/mod.rs b/src/tsig/mod.rs
index 0592827eb..bc05bb23b 100644
--- a/src/tsig/mod.rs
+++ b/src/tsig/mod.rs
@@ -259,7 +259,7 @@ pub fn remove_key(center: &Arc<Center>, name: &tsig::KeyName) -> Result<(), Remo
     let mut state = center.state.lock().unwrap();
 
     // Currently if a zone was added with `--source
-    // ip[:port]^<TSIG_KEY_NAME>` that would cause the TSIG key to be used
+    // <IP>[:<PORT>]^<TSIG_KEY_NAME>` that would cause the TSIG key to be used
     // by the loader when refreshing the zone.
     //
     // In future policies may refer to TSIG keys in a couple of places:

From 342cbfd46dde33b472389f200fffe6729b9fc955 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 16:23:03 +0200
Subject: [PATCH 067/113] Use NameserverCommsSpec instead of String following
 internal discussion.

---
 src/policy/file/v1.rs    | 66 +++++++++++++++++++++++++++++++++-------
 src/policy/mod.rs        | 44 ++++++++++++++++++---------
 src/state/v1.rs          | 15 +++++++--
 src/tsig/mod.rs          | 46 ++++++++++++----------------
 src/units/key_manager.rs | 14 +++++++--
 src/zone/state/v1.rs     | 16 +++++++---
 6 files changed, 140 insertions(+), 61 deletions(-)

diff --git a/src/policy/file/v1.rs b/src/policy/file/v1.rs
index 64c37f357..9dc76e105 100644
--- a/src/policy/file/v1.rs
+++ b/src/policy/file/v1.rs
@@ -2,10 +2,11 @@
 
 use std::{
     fmt::{self, Display},
-    net::{AddrParseError, IpAddr, SocketAddr},
+    net::{IpAddr, SocketAddr},
     str::FromStr,
 };
 
+use domain::tsig::KeyName;
 use serde::{
     Deserialize, Serialize,
     de::{self, Visitor},
@@ -150,7 +151,7 @@ pub struct KeyManagerSpec {
     /// syntax: `<IP-address>:<port>[^<tsig-key-name>].`
     /// The port is mandatory. The TSIG key name is optional and the name
     /// of the key is preceded by a caret character (`^`).
-    pub publication_nameservers: Vec<String>,
+    pub publication_nameservers: Vec<NameserverCommsSpec>,
 }
 
 //--- Conversion
@@ -246,7 +247,11 @@ impl KeyManagerSpec {
             default_ttl: self.records.ttl.as_ttl(),
             ds_algorithm: self.ds_algorithm,
             auto_remove: self.auto_remove,
-            publication_nameservers: self.publication_nameservers,
+            publication_nameservers: self
+                .publication_nameservers
+                .into_iter()
+                .map(|v| v.parse())
+                .collect(),
         }
     }
 
@@ -278,7 +283,11 @@ impl KeyManagerSpec {
 
             ds_algorithm: policy.ds_algorithm.clone(),
             auto_remove: policy.auto_remove,
-            publication_nameservers: policy.publication_nameservers.clone(),
+            publication_nameservers: policy
+                .publication_nameservers
+                .iter()
+                .map(NameserverCommsSpec::build)
+                .collect(),
 
             records: KeyManagerRecordsSpec {
                 ttl: TimeSpan::from_ttl(policy.default_ttl),
@@ -899,7 +908,10 @@ impl OutboundSpec {
 
 /// Policy for communicating with another namesever.
 #[derive(Clone, Debug, Deserialize, Serialize)]
-#[serde(untagged, expecting = "a string ('<IP>[:<PORT>]') or an inline table")]
+#[serde(
+    untagged,
+    expecting = "a string ('<IP>[:<PORT>][^<TSIG_KEY_NAME>]') or an inline table"
+)]
 pub enum NameserverCommsSpec {
     /// A simple notify specification.
     Simple(SimpleNameserverCommsSpec),
@@ -914,6 +926,9 @@ pub enum NameserverCommsSpec {
 pub struct ComplexNameserverCommsSpec {
     /// The address to send NOTIFYs to.
     pub addr: SocketAddr,
+
+    /// An optional TSIG key to sign and authenticate messages with.
+    tsig_key_name: Option<KeyName>,
 }
 
 /// Policy for communicating with another namesever.
@@ -922,6 +937,9 @@ pub struct ComplexNameserverCommsSpec {
 pub struct SimpleNameserverCommsSpec {
     /// The address to send NOTIFYs to.
     pub addr: SocketAddr,
+
+    /// An optional TSIG key to sign and authenticate messages with.
+    tsig_key_name: Option<KeyName>,
 }
 
 //--- Conversion
@@ -937,33 +955,59 @@ impl NameserverCommsSpec {
 
     /// Build into this specification.
     pub fn build(policy: &NameserverCommsPolicy) -> Self {
-        Self::Complex(ComplexNameserverCommsSpec { addr: policy.addr })
+        Self::Complex(ComplexNameserverCommsSpec {
+            addr: policy.addr,
+            tsig_key_name: policy.tsig_key_name.clone(),
+        })
     }
 }
 
 impl SimpleNameserverCommsSpec {
     /// Parse from this specification.
     pub fn parse(self) -> NameserverCommsPolicy {
-        NameserverCommsPolicy { addr: self.addr }
+        NameserverCommsPolicy {
+            addr: self.addr,
+            tsig_key_name: self.tsig_key_name,
+        }
     }
 }
 
 impl ComplexNameserverCommsSpec {
     /// Parse from this specification.
     pub fn parse(self) -> NameserverCommsPolicy {
-        NameserverCommsPolicy { addr: self.addr }
+        NameserverCommsPolicy {
+            addr: self.addr,
+            tsig_key_name: self.tsig_key_name,
+        }
     }
 }
 
 /// Parse`<IP_ADDRESS>[:<PORT>]`
 impl FromStr for SimpleNameserverCommsSpec {
-    type Err = AddrParseError;
+    type Err = String;
 
     fn from_str(s: &str) -> Result<Self, Self::Err> {
+        let (tsig_key_name, s) = s.split_once('^').unwrap_or(("", s));
+
+        let tsig_key_name = if !tsig_key_name.is_empty() {
+            Some(
+                KeyName::from_str(tsig_key_name)
+                    .map_err(|err| format!("Invalid TSIG key name '{tsig_key_name}': {err}"))?,
+            )
+        } else {
+            None
+        };
+
         let addr = IpAddr::from_str(s)
             .map(|ip| SocketAddr::new(ip, 53))
-            .or_else(|_| SocketAddr::from_str(s))?;
-        Ok(SimpleNameserverCommsSpec { addr })
+            .or_else(|_| {
+                SocketAddr::from_str(s)
+                    .map_err(|err| format!("Invalid socket address '{s}': {err}"))
+            })?;
+        Ok(SimpleNameserverCommsSpec {
+            addr,
+            tsig_key_name,
+        })
     }
 }
 
diff --git a/src/policy/mod.rs b/src/policy/mod.rs
index e02b29877..4614ffedb 100644
--- a/src/policy/mod.rs
+++ b/src/policy/mod.rs
@@ -2,13 +2,13 @@
 
 use std::fmt::{Display, Formatter};
 use std::net::SocketAddr;
-use std::str::FromStr;
 use std::{fs, io, sync::Arc};
 
 use bytes::Bytes;
 use camino::Utf8PathBuf;
 use domain::base::Name;
 use domain::base::Ttl;
+use domain::tsig::KeyName;
 use serde::{Deserialize, Serialize};
 use tracing::{debug, error, info, warn};
 
@@ -201,19 +201,20 @@ pub fn load_all(
 fn check_policy(policy: &PolicyVersion, tsig_store: &TsigStore) -> Result<(), PolicyReloadError> {
     // Check the publication nameservers for the key manager. Any TSIG key
     // that is part of those nameservers has to exist in the TSIG key store.
-    for n in &policy.key_manager.publication_nameservers {
-        if let Some((_, tsig_name)) = n.split_once('^') {
-            let tsig_name = Name::from_str(tsig_name).map_err(|e| {
-                PolicyReloadError::Check(format!(
-                    "unable to convert TSIG key name {tsig_name} to DNS name: {e}"
-                ))
-            })?;
-            tsig_store
-                .get(&tsig_name)
-                .ok_or(PolicyReloadError::Check(format!(
-                    "TSIG key {tsig_name} not found in TSIG store"
-                )))?;
-        }
+    let tsig_names = policy
+        .key_manager
+        .publication_nameservers
+        .iter()
+        .chain(policy.server.outbound.accept_xfr_requests_from.iter())
+        .chain(policy.server.outbound.send_notify_to.iter())
+        .filter_map(|ns| ns.tsig_key_name.as_ref());
+
+    for tsig_name in tsig_names {
+        tsig_store
+            .get(tsig_name)
+            .ok_or(PolicyReloadError::Check(format!(
+                "unknown TSIG key '{tsig_name}'"
+            )))?;
     }
     Ok(())
 }
@@ -307,7 +308,7 @@ pub struct KeyManagerPolicy {
     pub auto_remove: bool,
 
     /// Nameservers to check for RRSIG propagation during a key roll.
-    pub publication_nameservers: Vec<String>,
+    pub publication_nameservers: Vec<NameserverCommsPolicy>,
 }
 
 //----------- SignerPolicy -----------------------------------------------------
@@ -476,6 +477,19 @@ pub struct NameserverCommsPolicy {
     ///
     /// TODO: Support IP prefixes?
     pub addr: SocketAddr,
+
+    /// An optional TSIG key to sign and authenticate messages with.
+    pub tsig_key_name: Option<KeyName>,
+}
+
+impl Display for NameserverCommsPolicy {
+    fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result {
+        write!(f, "{}", self.addr)?;
+        if let Some(tsig_key_name) = &self.tsig_key_name {
+            write!(f, "^{tsig_key_name}")?;
+        }
+        Ok(())
+    }
 }
 
 //----------- KeyParameters ---------------------------------------------------
diff --git a/src/state/v1.rs b/src/state/v1.rs
index a2781a756..36a67e3d4 100644
--- a/src/state/v1.rs
+++ b/src/state/v1.rs
@@ -8,6 +8,7 @@ use domain::base::Ttl;
 use serde::{Deserialize, Serialize};
 use tracing::info;
 
+use crate::policy::file::v1::NameserverCommsSpec;
 use crate::policy::file::v1::OutboundSpec;
 use crate::policy::{AutoConfig, DsAlgorithm, KeyParameters};
 use crate::tsig::TsigStore;
@@ -257,7 +258,7 @@ pub struct KeyManagerPolicySpec {
     auto_remove: bool,
 
     /// Nameservers to check for RRSIG propagation during a key roll.
-    pub publication_nameservers: Vec<String>,
+    pub publication_nameservers: Vec<NameserverCommsSpec>,
 }
 
 //--- Conversion
@@ -285,7 +286,11 @@ impl KeyManagerPolicySpec {
             ds_algorithm: self.ds_algorithm,
             default_ttl: self.default_ttl,
             auto_remove: self.auto_remove,
-            publication_nameservers: self.publication_nameservers,
+            publication_nameservers: self
+                .publication_nameservers
+                .into_iter()
+                .map(|v| v.parse())
+                .collect(),
         }
     }
 
@@ -311,7 +316,11 @@ impl KeyManagerPolicySpec {
             ds_algorithm: policy.ds_algorithm.clone(),
             default_ttl: policy.default_ttl,
             auto_remove: policy.auto_remove,
-            publication_nameservers: policy.publication_nameservers.clone(),
+            publication_nameservers: policy
+                .publication_nameservers
+                .iter()
+                .map(NameserverCommsSpec::build)
+                .collect(),
         }
     }
 }
diff --git a/src/tsig/mod.rs b/src/tsig/mod.rs
index bc05bb23b..870dbe51c 100644
--- a/src/tsig/mod.rs
+++ b/src/tsig/mod.rs
@@ -1,9 +1,7 @@
 //! Managing TSIG keys.
 
-use std::str::FromStr;
 use std::{collections::hash_map, fmt, io, sync::Arc, time::Duration};
 
-use domain::base::Name;
 use domain::tsig;
 use tracing::{debug, error, trace};
 
@@ -286,32 +284,28 @@ pub fn remove_key(center: &Arc<Center>, name: &tsig::KeyName) -> Result<(), Remo
     }
 
     // Is the TSIG key referenced by any active (not being deleted) policy?
-    if state
+    let tsig_key_found = state
         .policies
         .values()
-        .filter(|p| !p.mid_deletion)
-        .flat_map(|p| &p.latest.key_manager.publication_nameservers)
-        .filter_map(|n| n.split_once("^").map(|v| v.1))
-        .any(|k| {
-            let nk = Name::<Vec<u8>>::from_str(k);
-            if let Ok(n) = nk {
-                n == name
-            } else {
-                // Just ignore TSIG key names that cannot be parsed as a
-                // DNS name. It should not have been possible to add them
-                // into the policy in the first place so this should never
-                // happen.
-                //
-                // TODO: "update" from using a String type for
-                // publication_nameservers to a type that actually uses
-                // TsigKeyName, like NameserverCommsPolicy does, so that at
-                // this point we don't need to care about valid or invalid
-                // TSIG key names? That would also have the benefit of not
-                // having to parse the nameserver string format here again.
-                false
-            }
-        })
-    {
+        .filter_map(|p| (!p.mid_deletion).then_some(&p.latest))
+        .any(|p| {
+            p.key_manager
+                .publication_nameservers
+                .iter()
+                .any(|ns| ns.tsig_key_name.as_ref() == Some(name))
+                || p.server
+                    .outbound
+                    .accept_xfr_requests_from
+                    .iter()
+                    .any(|acl| acl.tsig_key_name.as_ref() == Some(name))
+                || p.server
+                    .outbound
+                    .send_notify_to
+                    .iter()
+                    .any(|acl| acl.tsig_key_name.as_ref() == Some(name))
+        });
+
+    if tsig_key_found {
         return Err(RemoveError::Used);
     }
 
diff --git a/src/units/key_manager.rs b/src/units/key_manager.rs
index 04226fca0..cdfa5df95 100644
--- a/src/units/key_manager.rs
+++ b/src/units/key_manager.rs
@@ -712,7 +712,11 @@ fn policy_to_commands(center: &Arc<Center>, policy: &PolicyVersion) -> Vec<Vec<S
 
     let mut cmds = vec![];
 
-    if km.publication_nameservers.iter().any(|n| n.contains("^")) {
+    if km
+        .publication_nameservers
+        .iter()
+        .any(|ns| ns.tsig_key_name.is_some())
+    {
         let tsig_store_cmd = vec![
             "tsig-store-path".to_string(),
             center.config.tsig_store_path.as_str().to_string(),
@@ -721,7 +725,13 @@ fn policy_to_commands(center: &Arc<Center>, policy: &PolicyVersion) -> Vec<Vec<S
     }
 
     let mut publication_nameservers_cmd = vec!["publication-nameservers".to_string()];
-    publication_nameservers_cmd.append(&mut km.publication_nameservers.clone());
+    publication_nameservers_cmd.append(
+        &mut km
+            .publication_nameservers
+            .iter()
+            .map(ToString::to_string)
+            .collect(),
+    );
 
     cmds.append(&mut vec![
         strs!["use-csk", km.use_csk],
diff --git a/src/zone/state/v1.rs b/src/zone/state/v1.rs
index fd643e619..a888d0411 100644
--- a/src/zone/state/v1.rs
+++ b/src/zone/state/v1.rs
@@ -9,7 +9,7 @@ use domain::{base::Name, rdata::dnssec::Timestamp};
 use serde::{Deserialize, Serialize};
 
 use crate::loader::Source;
-use crate::policy::file::v1::OutboundSpec;
+use crate::policy::file::v1::{NameserverCommsSpec, OutboundSpec};
 use crate::policy::{AutoConfig, DsAlgorithm, KeyParameters};
 use crate::zone::HistoryItem;
 use crate::{
@@ -199,7 +199,7 @@ pub struct KeyManagerPolicySpec {
     auto_remove: bool,
 
     /// Nameservers to check for RRSIG propagation during a key roll.
-    publication_nameservers: Vec<String>,
+    publication_nameservers: Vec<NameserverCommsSpec>,
 }
 
 //--- Conversion
@@ -227,7 +227,11 @@ impl KeyManagerPolicySpec {
             ds_algorithm: self.ds_algorithm,
             default_ttl: self.default_ttl,
             auto_remove: self.auto_remove,
-            publication_nameservers: self.publication_nameservers,
+            publication_nameservers: self
+                .publication_nameservers
+                .into_iter()
+                .map(|v| v.parse())
+                .collect(),
         }
     }
 
@@ -253,7 +257,11 @@ impl KeyManagerPolicySpec {
             ds_algorithm: policy.ds_algorithm.clone(),
             default_ttl: policy.default_ttl,
             auto_remove: policy.auto_remove,
-            publication_nameservers: policy.publication_nameservers.clone(),
+            publication_nameservers: policy
+                .publication_nameservers
+                .iter()
+                .map(NameserverCommsSpec::build)
+                .collect(),
         }
     }
 }

From 42f554d996f85592afc5301d82fd5a48f2f85c60 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 22:21:06 +0200
Subject: [PATCH 068/113] Various review feedback changes.

- Remove unnecessary InvalidTsigKeyName error.
- Take a strongly typed key name as API input, not a string.
- Move FromStr parsing of ZoneSource to the CLI where it is used.
- Use dash separator not underscore for publication-servers policy
field.

Also:
- Remove unused field ZoneSource::xfr_status.
---
 crates/api/src/lib.rs           | 45 +---------------
 crates/cli/src/commands/zone.rs | 91 ++++++++++++++++++++++++++++++++-
 etc/policy.template.toml        |  2 +-
 src/center.rs                   | 15 +-----
 src/units/http_server.rs        |  1 -
 5 files changed, 93 insertions(+), 61 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 33dd86db9..7270a0349 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -1,6 +1,6 @@
 use std::collections::HashMap;
 use std::fmt::{self, Display};
-use std::net::{IpAddr, SocketAddr};
+use std::net::SocketAddr;
 use std::time::{Duration, SystemTime};
 
 use camino::{Utf8Path, Utf8PathBuf};
@@ -11,8 +11,6 @@ pub use domain::base::Serial;
 
 pub mod dep;
 
-const DEFAULT_AXFR_PORT: u16 = 53;
-
 //----------- ZoneName ---------------------------------------------------------
 
 /// The name of a zone.
@@ -296,7 +294,6 @@ pub enum ZoneAddError {
     AlreadyExists,
     NoSuchPolicy,
     PolicyMidDeletion,
-    InvalidTsigKeyName(String),
     NoSuchTsigKey,
     Other(String),
 }
@@ -307,7 +304,6 @@ impl fmt::Display for ZoneAddError {
             Self::AlreadyExists => "a zone of this name already exists",
             Self::NoSuchPolicy => "no policy with that name exists",
             Self::PolicyMidDeletion => "the specified policy is being deleted",
-            Self::InvalidTsigKeyName(reason) => reason,
             Self::NoSuchTsigKey => "no TSIG key with that name exists",
             Self::Other(reason) => reason,
         })
@@ -350,10 +346,7 @@ pub enum ZoneSource {
         addr: SocketAddr,
 
         /// The name of a TSIG key, if any.
-        tsig_key: Option<String>,
-
-        /// The XFR status of the zone.
-        xfr_status: ZoneRefreshStatus,
+        tsig_key: Option<TsigKeyName>,
     },
 }
 
@@ -384,40 +377,6 @@ impl Display for ZoneSource {
     }
 }
 
-/// Support parsing of ``-source`` command line arguments.
-///
-/// Supported forms:
-///   - `<IP>[:<PORT>][^<TSIG_KEY_NAME>]`
-///   - `<PATH/TO/ZONE/FILE/TO/LOAD>`
-impl From<&str> for ZoneSource {
-    fn from(mut s: &str) -> Self {
-        // Split out any provided TSIG key from the rest of the
-        // source argument.
-        let tsig_key = s.split_once('^').map(|(new_s, k)| {
-            s = new_s;
-            k.to_string()
-        });
-
-        if let Ok(addr) = s.parse::<SocketAddr>() {
-            ZoneSource::Server {
-                addr,
-                tsig_key,
-                xfr_status: Default::default(),
-            }
-        } else if let Ok(addr) = s.parse::<IpAddr>() {
-            ZoneSource::Server {
-                addr: SocketAddr::new(addr, DEFAULT_AXFR_PORT),
-                tsig_key,
-                xfr_status: Default::default(),
-            }
-        } else {
-            ZoneSource::Zonefile {
-                path: Utf8PathBuf::from(s).into_boxed_path(),
-            }
-        }
-    }
-}
-
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct ZonesListResult {
     pub zones: Vec<ZoneName>,
diff --git a/crates/cli/src/commands/zone.rs b/crates/cli/src/commands/zone.rs
index d1cbaef54..04bad570e 100644
--- a/crates/cli/src/commands/zone.rs
+++ b/crates/cli/src/commands/zone.rs
@@ -1,6 +1,8 @@
+use std::net::{IpAddr, SocketAddr};
+use std::str::FromStr;
 use std::time::{Duration, SystemTime};
 
-use camino::Utf8PathBuf;
+use camino::{Utf8Path, Utf8PathBuf};
 
 use crate::ansi;
 use crate::api::*;
@@ -219,7 +221,7 @@ impl Zone {
                         "zone/add",
                         &ZoneAdd {
                             name,
-                            source,
+                            source: source.try_into()?,
                             policy,
                             key_imports,
                         },
@@ -884,3 +886,88 @@ fn kmip_imports(key_type: KeyType, x: &[String]) -> Vec<KeyImport> {
         })
         .collect()
 }
+
+//------------ ZoneSource ----------------------------------------------------
+
+const DEFAULT_NS_PORT: u16 = 53;
+
+/// How to load the contents of a zone.
+#[derive(Debug, Clone)]
+pub enum ZoneSource {
+    /// Don't load the zone at all.
+    None,
+
+    /// From a zonefile on disk.
+    Zonefile {
+        /// The path to the zonefile.
+        path: Box<Utf8Path>,
+    },
+
+    /// From a DNS server via XFR.
+    Server {
+        /// The address of the server.
+        addr: SocketAddr,
+
+        /// The name of a TSIG key, if any.
+        tsig_key: Option<String>,
+    },
+}
+
+/// Support parsing of ``-source`` command line arguments.
+///
+/// Supported forms:
+///   - `<IP>[:<PORT>][^<TSIG_KEY_NAME>]`
+///   - `<PATH/TO/ZONE/FILE/TO/LOAD>`
+impl From<&str> for ZoneSource {
+    fn from(s: &str) -> Self {
+        // Split out any provided TSIG key from the rest of the
+        // source argument.
+        let (s, tsig_key) = s.split_once('^').unwrap_or((s, ""));
+
+        let tsig_key = if !tsig_key.is_empty() {
+            Some(tsig_key.to_string())
+        } else {
+            None
+        };
+
+        if let Ok(addr) = s.parse::<SocketAddr>() {
+            eprintln!(
+                "SocketAddr: {addr} (port={}, ipv6={})",
+                addr.port(),
+                addr.is_ipv6()
+            );
+            ZoneSource::Server { addr, tsig_key }
+        } else if let Ok(addr) = s.parse::<IpAddr>() {
+            eprintln!("IpAddr: {addr} (ipv6={})", addr.is_ipv6());
+            ZoneSource::Server {
+                addr: SocketAddr::new(addr, DEFAULT_NS_PORT),
+                tsig_key,
+            }
+        } else {
+            ZoneSource::Zonefile {
+                path: Utf8PathBuf::from(s).into_boxed_path(),
+            }
+        }
+    }
+}
+
+impl TryFrom<ZoneSource> for cascade_api::ZoneSource {
+    type Error = String;
+
+    fn try_from(source: ZoneSource) -> Result<Self, Self::Error> {
+        Ok(match source {
+            ZoneSource::None => cascade_api::ZoneSource::None,
+            ZoneSource::Zonefile { path } => cascade_api::ZoneSource::Zonefile { path },
+            ZoneSource::Server { addr, tsig_key } => {
+                let tsig_key = if let Some(tsig_key) = tsig_key {
+                    Some(TsigKeyName::from_str(&tsig_key).map_err(|err| {
+                        format!("TSIG key name '{tsig_key}' is not a valid domain name: {err}")
+                    })?)
+                } else {
+                    None
+                };
+                cascade_api::ZoneSource::Server { addr, tsig_key }
+            }
+        })
+    }
+}
diff --git a/etc/policy.template.toml b/etc/policy.template.toml
index 0af41f893..d94b04fe2 100644
--- a/etc/policy.template.toml
+++ b/etc/policy.template.toml
@@ -165,7 +165,7 @@ auto-remove = true
 # If not specified, the nameserver specified by the SOA MNAME field will be
 # checked.
 # 
-# publication_nameservers = []
+# publication-nameservers = []
 
 # The management of DNS records by the key manager.
 # 
diff --git a/src/center.rs b/src/center.rs
index 6c5d3d9c3..0fc6aeaab 100644
--- a/src/center.rs
+++ b/src/center.rs
@@ -1,7 +1,6 @@
 //! Cascade's central command.
 
 use std::collections::HashMap;
-use std::str::FromStr;
 use std::{
     fmt, io,
     sync::{Arc, Mutex},
@@ -94,16 +93,8 @@ pub async fn add_zone(
         source = match api_source {
             cascade_api::ZoneSource::None => crate::loader::Source::None,
             cascade_api::ZoneSource::Zonefile { path } => crate::loader::Source::Zonefile { path },
-            cascade_api::ZoneSource::Server {
-                addr,
-                tsig_key,
-                xfr_status: _,
-            } => {
+            cascade_api::ZoneSource::Server { addr, tsig_key } => {
                 let tsig_key = if let Some(key_name) = tsig_key {
-                    // Verify that the key name is syntactically valid.
-                    let key_name = Name::from_str(&key_name)
-                        .map_err(|err| ZoneAddError::InvalidTsigKeyName(err.to_string()))?;
-
                     // Lookup the key in the TSIG key store.
                     let key = state
                         .tsig_store
@@ -372,8 +363,6 @@ pub enum ZoneAddError {
     NoSuchPolicy,
     /// The specified policy is being deleted.
     PolicyMidDeletion,
-    /// The specified TSIG key name is invalid.
-    InvalidTsigKeyName(String),
     /// No TSIG key with that name exists.
     NoSuchTsigKey,
     /// Some other error occurred.
@@ -388,7 +377,6 @@ impl fmt::Display for ZoneAddError {
             Self::AlreadyExists => "a zone of this name already exists",
             Self::NoSuchPolicy => "no policy with that name exists",
             Self::PolicyMidDeletion => "the specified policy is being deleted",
-            Self::InvalidTsigKeyName(reason) => reason,
             Self::NoSuchTsigKey => "no TSIG key with that name exists",
             Self::Other(reason) => reason,
         })
@@ -401,7 +389,6 @@ impl From<ZoneAddError> for api::ZoneAddError {
             ZoneAddError::AlreadyExists => Self::AlreadyExists,
             ZoneAddError::NoSuchPolicy => Self::NoSuchPolicy,
             ZoneAddError::PolicyMidDeletion => Self::PolicyMidDeletion,
-            ZoneAddError::InvalidTsigKeyName(reason) => Self::InvalidTsigKeyName(reason),
             ZoneAddError::NoSuchTsigKey => Self::NoSuchTsigKey,
             ZoneAddError::Other(reason) => Self::Other(reason),
         }
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index bf6e34eae..816a67dfe 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -384,7 +384,6 @@ impl HttpServer {
                 loader::Source::Server { addr, tsig_key: _ } => api::ZoneSource::Server {
                     addr,
                     tsig_key: None,
-                    xfr_status: Default::default(),
                 },
             };
             unsigned_review_addr = state

From 5f449991f3518f1ee8cc2fcb43d0d9491ed12eaf Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 22:27:07 +0200
Subject: [PATCH 069/113] Review feedback: Remove unnecesary 'tsig' feature
 dependency.

---
 crates/api/Cargo.toml | 2 +-
 crates/api/src/lib.rs | 6 +++++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/crates/api/Cargo.toml b/crates/api/Cargo.toml
index a7d799bd6..70f7cb4d5 100644
--- a/crates/api/Cargo.toml
+++ b/crates/api/Cargo.toml
@@ -32,7 +32,7 @@ features = ["serde1"]
 [dependencies.domain]
 workspace = true
 # TODO: Enable and use 'new::base'?
-features = ["bytes", "serde", "tsig"]
+features = ["bytes", "serde"]
 
 # The API uses 'serde' for transforming high-level types to and from the
 # underlying wire format.
diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 7270a0349..377d61918 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -190,7 +190,7 @@ pub struct KmipKeyImport {
 //----------- TsigKeyName -----------------------------------------------------
 
 /// The name of a TSIG key.
-pub type TsigKeyName = domain::tsig::KeyName;
+pub type TsigKeyName = domain::base::Name<domain::dep::octseq::Array<255>>;
 
 //----------- TsigAdd ---------------------------------------------------------
 
@@ -330,6 +330,10 @@ impl fmt::Display for ZoneRemoveError {
 
 /// How to load the contents of a zone.
 #[derive(Deserialize, Serialize, Debug, Clone)]
+// Allow the large enum variant caused by TsigKeyName using Name<Array<255>>
+// to avoid the conversions that would be needed if Name<Bytes> were to be
+// used instead.
+#[allow(clippy::large_enum_variant)]
 pub enum ZoneSource {
     /// Don't load the zone at all.
     None,

From 5ab8b6ac96b61f61acb579201c5ce6282ebc2de1 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 22:27:16 +0200
Subject: [PATCH 070/113] Remove left in debug statements.

---
 crates/cli/src/commands/zone.rs | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/crates/cli/src/commands/zone.rs b/crates/cli/src/commands/zone.rs
index 04bad570e..e98fd7433 100644
--- a/crates/cli/src/commands/zone.rs
+++ b/crates/cli/src/commands/zone.rs
@@ -931,14 +931,8 @@ impl From<&str> for ZoneSource {
         };
 
         if let Ok(addr) = s.parse::<SocketAddr>() {
-            eprintln!(
-                "SocketAddr: {addr} (port={}, ipv6={})",
-                addr.port(),
-                addr.is_ipv6()
-            );
             ZoneSource::Server { addr, tsig_key }
         } else if let Ok(addr) = s.parse::<IpAddr>() {
-            eprintln!("IpAddr: {addr} (ipv6={})", addr.is_ipv6());
             ZoneSource::Server {
                 addr: SocketAddr::new(addr, DEFAULT_NS_PORT),
                 tsig_key,

From 8354c5b1f7a3313450b8bcf24687de582fa62755 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 22:45:25 +0200
Subject: [PATCH 071/113] Review feedback: use explicit error variant.

---
 crates/api/src/lib.rs | 6 +++---
 src/policy/mod.rs     | 4 +---
 2 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 377d61918..3459f9fff 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -760,14 +760,14 @@ pub struct KeyMsg {
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub enum PolicyReloadError {
     Io(Utf8PathBuf, String),
-    Check(String),
+    NoSuchTsigKey(TsigKeyName),
 }
 
 impl Display for PolicyReloadError {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
         match self {
-            PolicyReloadError::Io(p, e) => format!("{p}: {e}").fmt(f),
-            PolicyReloadError::Check(e) => e.to_string().fmt(f),
+            PolicyReloadError::Io(p, e) => write!(f, "{p}: {e}"),
+            PolicyReloadError::NoSuchTsigKey(k) => write!(f, "no TSIG key with name '{k}' exists"),
         }
     }
 }
diff --git a/src/policy/mod.rs b/src/policy/mod.rs
index 4614ffedb..d2cdc98c7 100644
--- a/src/policy/mod.rs
+++ b/src/policy/mod.rs
@@ -212,9 +212,7 @@ fn check_policy(policy: &PolicyVersion, tsig_store: &TsigStore) -> Result<(), Po
     for tsig_name in tsig_names {
         tsig_store
             .get(tsig_name)
-            .ok_or(PolicyReloadError::Check(format!(
-                "unknown TSIG key '{tsig_name}'"
-            )))?;
+            .ok_or(PolicyReloadError::NoSuchTsigKey(tsig_name.clone()))?;
     }
     Ok(())
 }

From c5f781976454de09c79f831d8a0d2cce8d014ac4 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:02:00 +0200
Subject: [PATCH 072/113] Review feedback: be more specific about the arguments
 to be supplied to the `tsig add` subcommand.

---
 doc/manual/source/man/cascade-tsig.rst | 23 +++++++++++++++--------
 1 file changed, 15 insertions(+), 8 deletions(-)

diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index 2ecbfc7df..015ea7fd9 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -56,22 +56,29 @@ Arguments for :subcmd:`tsig add`
 --------------------------------
 
 .. option:: <TSIG_KEY_NAME>
+.. option:: [<ALGORITHM>]:<TSIG_KEY_NAME>:<SECRET>
 
-   The name of the TSIG key to add.
+   The name of the TSIG key to add, or a complete TSIG key specification.
 
-   Alternatively this argument also supports dig syntax for specifying all of
-   the TSIG properties at once in colon separated form. The colon separated
-   syntax cannot be used in combination with the ``--alg`` and ``--secret``
-   options. If ``<ALGORITHM>`` is not specified it defaults to SHA256.
+   TSIG key names must be valid domain names.
+
+   A complete TSIG key specification consists of an optional algorithm
+   (default ``hmac-sha256``), a key name and the secret key material. When a
+   complete TSIG key specification is supplied, supplying the ``<ALGORITHM>``
+   and ``<SECRET>`` arguments as well will result in an error.
+
+   Secret key material must be the correct length for the specified algorithm
+   and must be encoded using the RFC 4648 Base64 encoding.
 
 .. option:: <ALGORITHM>
 
-   The TSIG algorithm of the specified TSIG key. Can be one of: hmac-sha1,
-   hmac-sha256, hmac-sha384 or hmac-sha512.
+   The TSIG algorithm of the specified TSIG key. Can be one of: ``hmac-sha1``,
+   ``hmac-sha256``, ``hmac-sha384`` or ``hmac-sha512``.
 
 .. option:: <SECRET>
 
-   A base64 encoded string defining the actual TSIG key material bytes.
+   RFC 4648 Base64 encoded secret key material. The number of bytes prior to
+   encoding must be correct for the specified ``<ALGORITHM>``.
 
 See Also
 --------

From 8cdaa29b4d2f895486bf28dcb11f0a54994d3f9b Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:09:30 +0200
Subject: [PATCH 073/113] Review feedback: Note the insecure nature of using a
 command-line argument to supply a secret.

---
 doc/manual/source/man/cascade-tsig.rst | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index 015ea7fd9..44c799a71 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -70,6 +70,10 @@ Arguments for :subcmd:`tsig add`
    Secret key material must be the correct length for the specified algorithm
    and must be encoded using the RFC 4648 Base64 encoding.
 
+   .. note:: Secret key material supplied via a command-line argument may be
+             visible to other processes running on the same computer as the
+             Cascade CLI.
+
 .. option:: <ALGORITHM>
 
    The TSIG algorithm of the specified TSIG key. Can be one of: ``hmac-sha1``,
@@ -80,6 +84,10 @@ Arguments for :subcmd:`tsig add`
    RFC 4648 Base64 encoded secret key material. The number of bytes prior to
    encoding must be correct for the specified ``<ALGORITHM>``.
 
+   .. note:: Secret key material supplied via a command-line argument may be
+             visible to other processes running on the same computer as the
+             Cascade CLI.
+
 See Also
 --------
 

From 5da60cb6e4268d69e5c55b66b294e0491b23f5b8 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:23:47 +0200
Subject: [PATCH 074/113] Review feedback: improvements to the `zone add`
 documentation.

---
 doc/manual/source/man/cascade-zone.rst | 29 +++++++++++++-------------
 1 file changed, 14 insertions(+), 15 deletions(-)

diff --git a/doc/manual/source/man/cascade-zone.rst b/doc/manual/source/man/cascade-zone.rst
index 7bcead194..8d3cb89d2 100644
--- a/doc/manual/source/man/cascade-zone.rst
+++ b/doc/manual/source/man/cascade-zone.rst
@@ -86,34 +86,33 @@ Commands
 Options for :subcmd:`zone add`
 ------------------------------
 
-.. option:: --source <SOURCE>
+.. option:: --source <IP>[:<PORT>][^<TSIG_KEY_NAME>]
 
    The zone source can be the IP address of an upstream nameserver (with
    or without port, defaults to port 53) or the path to a zone file locally
    available to the ``cascaded`` daemon.`
 
-   When specifying an upstream nameserver you may also optionally suffix it with
-   ``^<TSIG_KEY_NAME>`` to indicate that the specified RFC 8945 TSIG key should
-   be used to sign any SOA, AXFR and IXFR queries that will be sent to the
-   upstream source.
+   When specifying an upstream nameserver you may also optionally specify
+   the name of an :rfc:8945 TSIG key that should be used to authenticate
+   communication with the upstream.
 
    Zones sourced from an upstream nameserver will be automatically updated if
-   a new version is detected. This can happen if the upstream nameserver sends
-   an RFC 1996 NOTIFY message to Cascade, or if a via an IXFR or SOA query it
-   is discovered that the SOA SERIAL at the upstream nameserver is "higher" [1]
-   than the last version that Cascade loaded, or due to an operator issuing a
-   `zone reload` command.
+   a new version is detected via a SOA query, either based on the zone's SOA
+   record timers, or in response to an :rfc:1996 NOTIFY message from the upstream.
+
+   Zones can also be manualy updated via :program:`cascade` :subcmd:`reload`.
 
    For zones that have already been retrieved at least once via AXFR, subsequent
    refreshes will attempt to use IXFR and fallback to AXFR if IXFR is not
    available.
 
-   .. note:: When providing the path to a zone file to load, if :subcmd:`zone
-             add` is executed on a different host than where the ``cascaded``
-             daemon is running the path must be valid on the **daemon** host.
+   .. note:: When running :program:`cascade` :subcmd:`zone add` from a
+             different host than where the Cascade daemon is running, make
+             sure that the source (whether filesystem path or IP address) is
+             reachable by the Cascade daemon.
 
-   .. note:: Note: In order to use a TSIG key you MUST also supply the key to
-             Cascade via :subcmd:`tsig add`.
+   .. note:: If using a TSIG key the key must first be added to Cascade via
+             :program:`cascade` :subcmd:`tsig add`.
 
    [1]: https://www.rfc-editor.org/rfc/rfc1982#section-3.2
 

From 555b728650dc0b1e2dd38b55205eb00a1968a10f Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:29:26 +0200
Subject: [PATCH 075/113] Consistently use the :RFC:`NNN` linking mechanism in
 the docs.

---
 doc/manual/source/faq.rst                     |  2 +-
 doc/manual/source/limitations.rst             |  2 +-
 doc/manual/source/man/cascade-tsig.rst        |  8 ++++----
 .../source/man/cascaded-policy.toml.rst       |  4 ++--
 doc/manual/source/nsd.rst                     |  2 +-
 doc/manual/source/zone-transfers.rst          | 20 +++++++++----------
 6 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/doc/manual/source/faq.rst b/doc/manual/source/faq.rst
index 2c2e59cf0..03dc0549f 100644
--- a/doc/manual/source/faq.rst
+++ b/doc/manual/source/faq.rst
@@ -57,7 +57,7 @@ Key rolls should be automatic and frequent.
 Frequent key rolls help to ensure that they become normal operational
 practice and not an exception.
 Key rolls should be automated as much as possible to avoid mistakes.
-Unfortunately, the standard for updating DS records (CDS, RFC 8078) is not
+Unfortunately, the standard for updating DS records (CDS, :RFC:`8078`) is not
 widely implemented so in many cases a KSK roll has to have a manual component,
 namely submitting and updating the DS record at the parent.
 
diff --git a/doc/manual/source/limitations.rst b/doc/manual/source/limitations.rst
index ecda1e88f..6c6535427 100644
--- a/doc/manual/source/limitations.rst
+++ b/doc/manual/source/limitations.rst
@@ -82,7 +82,7 @@ Other known limitations
 -----------------------
 
 - No NOTIFY retry support.
-- No NOTIFY "Notify Set" (RFC 1996) discovery.
+- No NOTIFY "Notify Set" (:RFC:`1996`) discovery.
 - No KMIP batching support.
 - No DNS UPDATE support.
 - HSM algorithm support is limited to RSASHA256 and ECDSAP256SHA256.
diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index 44c799a71..8de5e7f80 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -17,7 +17,7 @@ Synopsis
 Description
 -----------
 
-Manage RFC 8945 TSIG keys for authenticating zone transfer (AXFR, IXFR) and
+Manage :RFC:`8945` (TSIG) keys for authenticating zone transfer (AXFR, IXFR) and
 related messages (SOA and NOTIFY).
 
 .. tip:: Cascade isn't currently able to generate TSIG keys itself.
@@ -68,7 +68,7 @@ Arguments for :subcmd:`tsig add`
    and ``<SECRET>`` arguments as well will result in an error.
 
    Secret key material must be the correct length for the specified algorithm
-   and must be encoded using the RFC 4648 Base64 encoding.
+   and must be encoded using the :RFC:`4648` Base64 encoding.
 
    .. note:: Secret key material supplied via a command-line argument may be
              visible to other processes running on the same computer as the
@@ -81,8 +81,8 @@ Arguments for :subcmd:`tsig add`
 
 .. option:: <SECRET>
 
-   RFC 4648 Base64 encoded secret key material. The number of bytes prior to
-   encoding must be correct for the specified ``<ALGORITHM>``.
+   :RFC:`4648` Base64 encoded secret key material. The number of bytes prior
+   to encoding must be correct for the specified ``<ALGORITHM>``.
 
    .. note:: Secret key material supplied via a command-line argument may be
              visible to other processes running on the same computer as the
diff --git a/doc/manual/source/man/cascaded-policy.toml.rst b/doc/manual/source/man/cascaded-policy.toml.rst
index 0eac8ee8d..00fbc2788 100644
--- a/doc/manual/source/man/cascaded-policy.toml.rst
+++ b/doc/manual/source/man/cascaded-policy.toml.rst
@@ -456,8 +456,8 @@ The ``[signer.denial]`` section.
 
    Supported options:
 
-   - ``nsec``: Use NSEC records (RFC 4034).
-   - ``nsec3``: Use NSEC3 records (RFC 5155).
+   - ``nsec``: Use NSEC records (:RFC:`4034`).
+   - ``nsec3``: Use NSEC3 records (:RFC:`5155`).
 
 .. option:: opt-out = false
 
diff --git a/doc/manual/source/nsd.rst b/doc/manual/source/nsd.rst
index be80a54bc..78be699d9 100644
--- a/doc/manual/source/nsd.rst
+++ b/doc/manual/source/nsd.rst
@@ -18,7 +18,7 @@ Using NSD as a primary to Cascade
 
 To use NSD as an upstream name server of Cascade you must add a zone to NSD
 that refers to Cascade as a secondary name server. If enabled in NSD, NSD will
-send an RFC 1996 DNS NOTIFY message to Cascade notifying it when changes to
+send an :RFC:`1996` DNS NOTIFY message to Cascade notifying it when changes to
 the zone occur.
 
 The NOTIFY message will trigger Cascade to perform an AXFR transfer to fetch
diff --git a/doc/manual/source/zone-transfers.rst b/doc/manual/source/zone-transfers.rst
index 089fb63ec..8dfa9765c 100644
--- a/doc/manual/source/zone-transfers.rst
+++ b/doc/manual/source/zone-transfers.rst
@@ -6,15 +6,15 @@ public downstream nameservers. The hidden upstream serves the unsigned zone,
 Cascade signs it, and passes it to the downstream nameservers for publication
 to consumers.
 
-Communication of changed zone records from upstream to downstream should be
-done via the network using the RFC 5936 DNS Zone Transfer Protocol (AXFR) and
-RFC 1995 Incremental Zone Transfer (IXFR) protocols.
+Communication of changed zone records from upstream to downstream should
+be done via the network using the :RFC:`5936` (AXFR) and :RFC:`1995` (IXFR)
+protocols.
 
-Securing the transferred data can be done using RFC 8945 Secret Key
-Authentication for DNS (TSIG) keys, using a shared secret communicated out of
-band to the nameservers sending and receiving the zone records.
+Securing the transferred data can be done using :RFC:`8945` (TSIG) keys,
+using a shared secret communicated out of band to the nameservers sending and
+receiving the zone records.
 
-Cascade supports timely discovery of zone changes via RFC 1996 (DNS NOTIFY).
+Cascade supports timely discovery of zone changes via :RFC:`1996` (NOTIFY).
 If no NOTIFY message is received by Cascade, Cascade will instead discover
 new versions of the zone by sending SOA queries periodically to the upstream,
 the frequency of which is determined by the timers on the zone's SOA record.
@@ -66,9 +66,9 @@ Using zone transfers with a downstream server
 
 Cascade permits zone transfers by default, no configuration is required.
 
-To ensure timely update by secondaries, Cascade can be configured to send RFC
-1996 DNS NOTIFY messages to specified secondaries. This is done via the policy
-setting ``server.outbound.send-notify-to``.
+To ensure timely update by secondaries, Cascade can be configured to send
+:RFC:`1996` (NOTIFY) messages to specified secondaries. This is done via the
+policy setting ``server.outbound.send-notify-to``.
 
 .. note:: The policy file will need to be reloaded via ``cascade policy
           reload`` before adding the zone. Also, when adding the zone you

From f61ccb7b74b0e8fecd59d9a0d3283f08ebc8070f Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:30:07 +0200
Subject: [PATCH 076/113] Regenerate man pages.

---
 doc/manual/build/man/cascade-debug.1        |  2 +-
 doc/manual/build/man/cascade-health.1       |  2 +-
 doc/manual/build/man/cascade-hsm.1          |  2 +-
 doc/manual/build/man/cascade-keyset.1       |  2 +-
 doc/manual/build/man/cascade-policy.1       |  2 +-
 doc/manual/build/man/cascade-status.1       |  2 +-
 doc/manual/build/man/cascade-template.1     |  2 +-
 doc/manual/build/man/cascade-tsig.1         | 57 +++++++++++++++------
 doc/manual/build/man/cascade-zone.1         | 33 ++++++------
 doc/manual/build/man/cascade.1              |  2 +-
 doc/manual/build/man/cascaded-config.toml.5 |  2 +-
 doc/manual/build/man/cascaded-policy.toml.5 |  8 +--
 doc/manual/build/man/cascaded.1             |  2 +-
 13 files changed, 70 insertions(+), 48 deletions(-)

diff --git a/doc/manual/build/man/cascade-debug.1 b/doc/manual/build/man/cascade-debug.1
index a058a215b..32a72ad4c 100644
--- a/doc/manual/build/man/cascade-debug.1
+++ b/doc/manual/build/man/cascade-debug.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-DEBUG" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-DEBUG" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-debug \- Debug / troubleshoot Cascade
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-health.1 b/doc/manual/build/man/cascade-health.1
index a219ff50c..369f67f71 100644
--- a/doc/manual/build/man/cascade-health.1
+++ b/doc/manual/build/man/cascade-health.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HEALTH" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HEALTH" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-health \- Check the health of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-hsm.1 b/doc/manual/build/man/cascade-hsm.1
index 3830445b4..ab0fa0f58 100644
--- a/doc/manual/build/man/cascade-hsm.1
+++ b/doc/manual/build/man/cascade-hsm.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HSM" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HSM" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-hsm \- Manage HSMs
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-keyset.1 b/doc/manual/build/man/cascade-keyset.1
index 9e31e41ec..6fbbac550 100644
--- a/doc/manual/build/man/cascade-keyset.1
+++ b/doc/manual/build/man/cascade-keyset.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-KEYSET" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-KEYSET" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-keyset \- Execute manual key roll or key removal commands
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-policy.1 b/doc/manual/build/man/cascade-policy.1
index 553fe6b32..6ab41c8ce 100644
--- a/doc/manual/build/man/cascade-policy.1
+++ b/doc/manual/build/man/cascade-policy.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-POLICY" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-POLICY" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-policy \- Manage policies
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-status.1 b/doc/manual/build/man/cascade-status.1
index 70c9649e0..848edcc9a 100644
--- a/doc/manual/build/man/cascade-status.1
+++ b/doc/manual/build/man/cascade-status.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-STATUS" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-STATUS" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-status \- Show the status of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-template.1 b/doc/manual/build/man/cascade-template.1
index 7820a9874..eff0f3296 100644
--- a/doc/manual/build/man/cascade-template.1
+++ b/doc/manual/build/man/cascade-template.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-TEMPLATE" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-TEMPLATE" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-template \- Print example config or policy files
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-tsig.1 b/doc/manual/build/man/cascade-tsig.1
index 78d132985..db8c5c293 100644
--- a/doc/manual/build/man/cascade-tsig.1
+++ b/doc/manual/build/man/cascade-tsig.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-TSIG" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-TSIG" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-tsig \- Manage TSIG keys
 .sp
@@ -44,7 +44,7 @@ Added in version 0.1.0\-beta1.
 \fBcascade\fP \fB[GLOBAL OPTIONS]\fP tsig \fI\%remove\fP \fB<TSIG_KEY_NAME>\fP
 .SH DESCRIPTION
 .sp
-Manage RFC 8945 TSIG keys for authenticating zone transfer (AXFR, IXFR) and
+Manage \X'tty: link https://datatracker.ietf.org/doc/html/rfc8945.html'\fI\%RFC 8945\fP\X'tty: link' (TSIG) keys for authenticating zone transfer (AXFR, IXFR) and
 related messages (SOA and NOTIFY).
 .sp
 \fBTIP:\fP
@@ -80,13 +80,8 @@ Remove a registered TSIG key.
 \fBNOTE:\fP
 .INDENT 7.0
 .INDENT 3.5
-Returns an error if the key does not exist in the TSIG key store
-or if any zone exists that is configured to authenticate with an
-.INDENT 0.0
-.INDENT 3.5
-upstream source using the specified TSIG key.
-.UNINDENT
-.UNINDENT
+Returns an error if the key does not exist in the TSIG key store,
+or if the key is still referenced by other configuration.
 .UNINDENT
 .UNINDENT
 .UNINDENT
@@ -94,23 +89,51 @@ upstream source using the specified TSIG key.
 .INDENT 0.0
 .TP
 .B <TSIG_KEY_NAME>
-The name of the TSIG key to add.
+.UNINDENT
+.INDENT 0.0
+.TP
+.B [<ALGORITHM>]:<TSIG_KEY_NAME>:<SECRET>
+The name of the TSIG key to add, or a complete TSIG key specification.
+.sp
+TSIG key names must be valid domain names.
+.sp
+A complete TSIG key specification consists of an optional algorithm
+(default \fBhmac\-sha256\fP), a key name and the secret key material. When a
+complete TSIG key specification is supplied, supplying the \fB<ALGORITHM>\fP
+and \fB<SECRET>\fP arguments as well will result in an error.
 .sp
-Alternatively this argument also supports dig syntax for specifying all of
-the TSIG properties at once in colon separated form. The colon separated
-syntax cannot be used in combination with the \fB\-\-alg\fP and \fB\-\-secret\fP
-options. If \fB<ALGORITHM>\fP is not specified it defaults to SHA256.
+Secret key material must be the correct length for the specified algorithm
+and must be encoded using the \X'tty: link https://datatracker.ietf.org/doc/html/rfc4648.html'\fI\%RFC 4648\fP\X'tty: link' Base64 encoding.
+.sp
+\fBNOTE:\fP
+.INDENT 7.0
+.INDENT 3.5
+Secret key material supplied via a command\-line argument may be
+visible to other processes running on the same computer as the
+Cascade CLI.
+.UNINDENT
+.UNINDENT
 .UNINDENT
 .INDENT 0.0
 .TP
 .B <ALGORITHM>
-The TSIG algorithm of the specified TSIG key. Can be one of: hmac\-sha1,
-hmac\-sha256, hmac\-sha384 or hmac\-sha512.
+The TSIG algorithm of the specified TSIG key. Can be one of: \fBhmac\-sha1\fP,
+\fBhmac\-sha256\fP, \fBhmac\-sha384\fP or \fBhmac\-sha512\fP\&.
 .UNINDENT
 .INDENT 0.0
 .TP
 .B <SECRET>
-A base64 encoded string defining the actual TSIG key material bytes.
+\X'tty: link https://datatracker.ietf.org/doc/html/rfc4648.html'\fI\%RFC 4648\fP\X'tty: link' Base64 encoded secret key material. The number of bytes prior
+to encoding must be correct for the specified \fB<ALGORITHM>\fP\&.
+.sp
+\fBNOTE:\fP
+.INDENT 7.0
+.INDENT 3.5
+Secret key material supplied via a command\-line argument may be
+visible to other processes running on the same computer as the
+Cascade CLI.
+.UNINDENT
+.UNINDENT
 .UNINDENT
 .SH SEE ALSO
 .INDENT 0.0
diff --git a/doc/manual/build/man/cascade-zone.1 b/doc/manual/build/man/cascade-zone.1
index daa6c6799..bc73c4c52 100644
--- a/doc/manual/build/man/cascade-zone.1
+++ b/doc/manual/build/man/cascade-zone.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-ZONE" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-ZONE" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-zone \- Manage zones
 .SH SYNOPSIS
@@ -74,7 +74,7 @@ Remove a zone.
 \fBNOTE:\fP
 .INDENT 7.0
 .INDENT 3.5
-Once removed downstream servers will no longer be able to fetch
+Once removed, downstream servers will no longer be able to fetch
 the zone!
 .UNINDENT
 .UNINDENT
@@ -122,22 +122,20 @@ Get the history of a single zone.
 .SH OPTIONS FOR ZONE ADD
 .INDENT 0.0
 .TP
-.B \-\-source <SOURCE>
+.B \-\-source <IP>[:<PORT>][^<TSIG_KEY_NAME>]
 The zone source can be the IP address of an upstream nameserver (with
 or without port, defaults to port 53) or the path to a zone file locally
 available to the \fBcascaded\fP daemon.\(ga
 .sp
-When specifying an upstream nameserver you may also optionally suffix it with
-\fB^<TSIG_KEY_NAME>\fP to indicate that the specified RFC 8945 TSIG key should
-be used to sign any SOA, AXFR and IXFR queries that will be sent to the
-upstream source.
+When specifying an upstream nameserver you may also optionally specify
+the name of an :rfc:8945 TSIG key that should be used to authenticate
+communication with the upstream.
 .sp
 Zones sourced from an upstream nameserver will be automatically updated if
-a new version is detected. This can happen if the upstream nameserver sends
-an RFC 1996 NOTIFY message to Cascade, or if a via an IXFR or SOA query it
-is discovered that the SOA SERIAL at the upstream nameserver is \(dqhigher\(dq [1]
-than the last version that Cascade loaded, or due to an operator issuing a
-\fIzone reload\fP command.
+a new version is detected via a SOA query, either based on the zone\(aqs SOA
+record timers, or in response to an :rfc:1996 NOTIFY message from the upstream.
+.sp
+Zones can also be manualy updated via \fBcascade\fP \fI\%reload\fP\&.
 .sp
 For zones that have already been retrieved at least once via AXFR, subsequent
 refreshes will attempt to use IXFR and fallback to AXFR if IXFR is not
@@ -146,17 +144,18 @@ available.
 \fBNOTE:\fP
 .INDENT 7.0
 .INDENT 3.5
-When providing the path to a zone file to load, if \fBzone
-add\fP is executed on a different host than where the \fBcascaded\fP
-daemon is running the path must be valid on the \fBdaemon\fP host.
+When running \fBcascade\fP \fBzone add\fP from a
+different host than where the Cascade daemon is running, make
+sure that the source (whether filesystem path or IP address) is
+reachable by the Cascade daemon.
 .UNINDENT
 .UNINDENT
 .sp
 \fBNOTE:\fP
 .INDENT 7.0
 .INDENT 3.5
-Note: In order to use a TSIG key you MUST also supply the key to
-Cascade via \fBtsig add\fP\&.
+If using a TSIG key the key must first be added to Cascade via
+\fBcascade\fP \fBtsig add\fP\&.
 .UNINDENT
 .UNINDENT
 .sp
diff --git a/doc/manual/build/man/cascade.1 b/doc/manual/build/man/cascade.1
index 3f77a7fa0..5317c1944 100644
--- a/doc/manual/build/man/cascade.1
+++ b/doc/manual/build/man/cascade.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade \- Cascade CLI
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascaded-config.toml.5 b/doc/manual/build/man/cascaded-config.toml.5
index bddf152ae..41318719c 100644
--- a/doc/manual/build/man/cascaded-config.toml.5
+++ b/doc/manual/build/man/cascaded-config.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-CONFIG.TOML" "5" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-CONFIG.TOML" "5" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-config.toml \- Cascade configuration file
 .sp
diff --git a/doc/manual/build/man/cascaded-policy.toml.5 b/doc/manual/build/man/cascaded-policy.toml.5
index 11989d680..7a39b4aa2 100644
--- a/doc/manual/build/man/cascaded-policy.toml.5
+++ b/doc/manual/build/man/cascaded-policy.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-POLICY.TOML" "5" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-POLICY.TOML" "5" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-policy.toml \- Cascade policy file format
 .sp
@@ -348,7 +348,7 @@ key roll.
 Each nameserver is specified as a string with the syntax:
 .INDENT 7.0
 .INDENT 3.5
-\fB<IP\-Address>:<Port>[^[TSIG\-Key\-Name]]\fP
+\fB<IP>[:<PORT>][^[TSIG_KEY_NAME]\fP
 .UNINDENT
 .UNINDENT
 .sp
@@ -571,9 +571,9 @@ The type of denial\-of\-existence records to generate.
 Supported options:
 .INDENT 7.0
 .IP \(bu 2
-\fBnsec\fP: Use NSEC records (RFC 4034).
+\fBnsec\fP: Use NSEC records (\X'tty: link https://datatracker.ietf.org/doc/html/rfc4034.html'\fI\%RFC 4034\fP\X'tty: link').
 .IP \(bu 2
-\fBnsec3\fP: Use NSEC3 records (RFC 5155).
+\fBnsec3\fP: Use NSEC3 records (\X'tty: link https://datatracker.ietf.org/doc/html/rfc5155.html'\fI\%RFC 5155\fP\X'tty: link').
 .UNINDENT
 .UNINDENT
 .INDENT 0.0
diff --git a/doc/manual/build/man/cascaded.1 b/doc/manual/build/man/cascaded.1
index 59d33333a..0360020df 100644
--- a/doc/manual/build/man/cascaded.1
+++ b/doc/manual/build/man/cascaded.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED" "1" "Apr 20, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded \- DNSSEC signer
 .SH SYNOPSIS

From bc7db248c7408235ac8a19bceb61c4721c0b293a Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:32:41 +0200
Subject: [PATCH 077/113] Review feedback.

---
 doc/manual/source/man/cascaded-policy.toml.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/doc/manual/source/man/cascaded-policy.toml.rst b/doc/manual/source/man/cascaded-policy.toml.rst
index 00fbc2788..8bb3cac3f 100644
--- a/doc/manual/source/man/cascaded-policy.toml.rst
+++ b/doc/manual/source/man/cascaded-policy.toml.rst
@@ -255,8 +255,8 @@ The ``[key-manager]`` section.
 
    Whether to automatically remove expired keys.
 
-   If this is set, expired keys will be removed automatically (by deleting the
-   files for on-disk keys or removing it from the HSM).
+   If this option is set, expired keys will be removed automatically (by
+   deleting the files for on-disk keys or removing it from the HSM).
 
 .. option:: publication-nameservers = []
 
@@ -267,8 +267,8 @@ The ``[key-manager]`` section.
 
      ``<IP>[:<PORT>][^[TSIG_KEY_NAME]``
 
-   If not specified then the nameserver specified in the zone apex SOA MNAME
-   field will be queried.
+   If this option is not set, the nameserver specified in the zone apex SOA
+   MNAME field will be queried.
 
 The management of DNS records by the key manager.
 +++++++++++++++++++++++++++++++++++++++++++++++++

From ef966b4eb09a8c5e4fbd62a1fd874ea4d30356c2 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:34:06 +0200
Subject: [PATCH 078/113] Review feedback: Link to man page.

---
 doc/manual/source/nsd.rst | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/doc/manual/source/nsd.rst b/doc/manual/source/nsd.rst
index 78be699d9..d8d0bf916 100644
--- a/doc/manual/source/nsd.rst
+++ b/doc/manual/source/nsd.rst
@@ -75,8 +75,7 @@ information.
 .. tip:: Remember to reload the NSD configuration or restart NSD so that
          changes to the configuration take effect.
 
-Adding the TSIG key to Cascade is done using the ``cascade tsig add`` CLI
-command, e.g. like so:
+To add the TSIG key to Cascade use :program:`cascade` :subcmd:`tsig add`:
 
 .. code-block:: bash
 

From 3056a48c7da060e5528ed0bc0804dd2e1db557c5 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:37:45 +0200
Subject: [PATCH 079/113] Review feedback.

---
 doc/manual/source/zone-transfers.rst | 21 +++++++++------------
 1 file changed, 9 insertions(+), 12 deletions(-)

diff --git a/doc/manual/source/zone-transfers.rst b/doc/manual/source/zone-transfers.rst
index 8dfa9765c..02bb7fab0 100644
--- a/doc/manual/source/zone-transfers.rst
+++ b/doc/manual/source/zone-transfers.rst
@@ -14,18 +14,15 @@ Securing the transferred data can be done using :RFC:`8945` (TSIG) keys,
 using a shared secret communicated out of band to the nameservers sending and
 receiving the zone records.
 
-Cascade supports timely discovery of zone changes via :RFC:`1996` (NOTIFY).
-If no NOTIFY message is received by Cascade, Cascade will instead discover
-new versions of the zone by sending SOA queries periodically to the upstream,
-the frequency of which is determined by the timers on the zone's SOA record.
-
-.. note:: Cascade also supports loading the zone from a file. However, if only
-          a small fraction of the records in the zone change from one version
-          to the next, loading the entire zone every time the zone changes
-          will require more time, CPU and memory compared to processing
-          only the differences when using IXFR. Additionally, Cascade has no
-          built-in support for writing signed zone files to disk, if needed
-          this could be done by a signed review hook.
+Cascade supports timely discovery of zone changes by sending SOA queries to
+the upsream nameserver, either in response to an :RFC:`1996` NOTIFY message or
+based on the zone's SOA timers.
+
+.. note:: Cascade also supports loading the zone from a file. However, if
+          only a small fraction of the records in the zone change from one
+          version to the next, loading the entire file every time the zone
+          file changes will require more time, CPU and memory compared to
+          processing only the differences when using IXFR.
 
 Using zone transfers with an upstream nameserver
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

From 838b6758795213794088dd1bbfd30cbe99f39f71 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:39:56 +0200
Subject: [PATCH 080/113] Review feedback.

---
 doc/manual/source/zone-transfers.rst | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/doc/manual/source/zone-transfers.rst b/doc/manual/source/zone-transfers.rst
index 02bb7fab0..334e3adce 100644
--- a/doc/manual/source/zone-transfers.rst
+++ b/doc/manual/source/zone-transfers.rst
@@ -35,11 +35,8 @@ adding the zone.
 
    $ cascade zone add --source <IP_OR_NAME>[:<PORT>] ...
 
-Cascade will then attempt to fetch the zone from the specified name or IP
-address using AXFR. Subsequent fetches will attempt to use IXFR to transfer
-only the differences, falling back to AXFR when needed. Subsequent fetches
-will be triggered by NOTIFY messages received from the upstream nameserver or
-expiry of the SOA REFRESH or RETRY timers.
+Cascade will then attempt to fetch the zone. Where possible it will fetch
+newer versions of the zone incrementally, as this is more efficient.
 
 Securing zone transfers with an upstream nameserver
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

From ed68983aad30a43269227884082cee714a9acf4c Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:41:27 +0200
Subject: [PATCH 081/113] Minor tweak.

---
 doc/manual/source/zone-transfers.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/manual/source/zone-transfers.rst b/doc/manual/source/zone-transfers.rst
index 334e3adce..e9036bb94 100644
--- a/doc/manual/source/zone-transfers.rst
+++ b/doc/manual/source/zone-transfers.rst
@@ -53,7 +53,7 @@ When adding a zone the TSIG key name can then be referred to like so:
 
 .. code-block:: bash
 
-   $ cascade zone add --source <IP>[:<PORT>]^<TSIG KEY NAME>
+   $ cascade zone add --source <IP>[:<PORT>][^<TSIG KEY NAME>]
 
 Using zone transfers with a downstream server
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

From 399b3840b522f0bc7aed447f6c9a8f88cf2bd6e8 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:43:37 +0200
Subject: [PATCH 082/113] More review feedback.

---
 doc/manual/source/zone-transfers.rst | 24 +++++-------------------
 1 file changed, 5 insertions(+), 19 deletions(-)

diff --git a/doc/manual/source/zone-transfers.rst b/doc/manual/source/zone-transfers.rst
index e9036bb94..59f5c9a7a 100644
--- a/doc/manual/source/zone-transfers.rst
+++ b/doc/manual/source/zone-transfers.rst
@@ -28,12 +28,8 @@ Using zone transfers with an upstream nameserver
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 To instruct Cascade to transfer a zone via the network instead of loading
-it from a file you must supply an upstream nameserver name or address when
-adding the zone.
-
-.. code-block:: bash
-
-   $ cascade zone add --source <IP_OR_NAME>[:<PORT>] ...
+it from a file you must supply an upstream nameserver IP address when
+adding the zone. See :program:`cascade` :subcmd:`zone add`.
 
 Cascade will then attempt to fetch the zone. Where possible it will fetch
 newer versions of the zone incrementally, as this is more efficient.
@@ -41,19 +37,9 @@ newer versions of the zone incrementally, as this is more efficient.
 Securing zone transfers with an upstream nameserver
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-Cascade can be instructed to authenticate the upstream nameserver by use of
-a TSIG key. The TSIG key to use must be provided to Cascade _before_ adding
-the zone:
-
-.. code-block:: bash
-
-   $ cascade tsig add <TSIG KEY NAME, ALGORITHM AND SECRET BYTES>
-
-When adding a zone the TSIG key name can then be referred to like so:
-
-.. code-block:: bash
-
-   $ cascade zone add --source <IP>[:<PORT>][^<TSIG KEY NAME>]
+Cascade can be instructed to authenticate the upstream nameserver by use of a
+TSIG key. The TSIG key to use must be provided to Cascade _before_ adding the
+zone. See :program:`cascade` :subcmd:`tsig add`.
 
 Using zone transfers with a downstream server
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

From f7529db569f3c4e32e3ce7e509a7ff167a0716e6 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:48:56 +0200
Subject: [PATCH 083/113] More review feedback and tweaks.

---
 doc/manual/source/zone-transfers.rst | 21 +++++++++------------
 1 file changed, 9 insertions(+), 12 deletions(-)

diff --git a/doc/manual/source/zone-transfers.rst b/doc/manual/source/zone-transfers.rst
index 59f5c9a7a..cd47d1a4f 100644
--- a/doc/manual/source/zone-transfers.rst
+++ b/doc/manual/source/zone-transfers.rst
@@ -47,18 +47,15 @@ Using zone transfers with a downstream server
 Cascade permits zone transfers by default, no configuration is required.
 
 To ensure timely update by secondaries, Cascade can be configured to send
-:RFC:`1996` (NOTIFY) messages to specified secondaries. This is done via the
-policy setting ``server.outbound.send-notify-to``.
-
-.. note:: The policy file will need to be reloaded via ``cascade policy
-          reload`` before adding the zone. Also, when adding the zone you
-          will need to pass the `--policy` argument specifying the relevant
-          policy to apply to the zone.
-
-.. tip:: If a TSIG key has been added to Cascade via ``cascade tsig add``,
-         you can instruct Cascade to authentiate itself to downstreams
-         using a specified TSIG key by adding `^<TSIG_KEY_NAME>` to the
-         ``server.outbound.send-notify-to`` value.
+:RFC:`1996` NOTIFY messages to specified secondaries. This is done via the
+policy setting ``server.outbound.send-notify-to``, optionally specifying an
+:RFC:8945` TSIG key to use to authenticate communication.
+
+.. tip:: Remember to reload the policy file after changing it. See
+         :program:`cascade` :subcmd:`policy reload`.
+
+.. tip:: Use :program:`cascade` :subcmd:`tsig add` to add a TSIG key to
+         Cascade _before_ reloading policy file changes.
 
 Controlling automatic key rollover zone transfer settings
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

From 4c6c181688d60c7a813323335e083631ca154fac Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:50:42 +0200
Subject: [PATCH 084/113] Regenerate man pages.

---
 doc/manual/build/man/cascaded-policy.toml.5 | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/doc/manual/build/man/cascaded-policy.toml.5 b/doc/manual/build/man/cascaded-policy.toml.5
index 7a39b4aa2..79838d5d4 100644
--- a/doc/manual/build/man/cascaded-policy.toml.5
+++ b/doc/manual/build/man/cascaded-policy.toml.5
@@ -336,8 +336,8 @@ Supported options:
 .B auto\-remove = true
 Whether to automatically remove expired keys.
 .sp
-If this is set, expired keys will be removed automatically (by deleting the
-files for on\-disk keys or removing it from the HSM).
+If this option is set, expired keys will be removed automatically (by
+deleting the files for on\-disk keys or removing it from the HSM).
 .UNINDENT
 .INDENT 0.0
 .TP
@@ -352,8 +352,8 @@ Each nameserver is specified as a string with the syntax:
 .UNINDENT
 .UNINDENT
 .sp
-If not specified then the nameserver specified in the zone apex SOA MNAME
-field will be queried.
+If this option is not set, the nameserver specified in the zone apex SOA
+MNAME field will be queried.
 .UNINDENT
 .SS The management of DNS records by the key manager.
 .sp

From a822c42eef76cdc3b854f5bc66d181513dfc12f4 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:54:24 +0200
Subject: [PATCH 085/113] Clippy.

---
 crates/api/src/lib.rs |  4 ++++
 src/policy/mod.rs     | 12 ++++++++++++
 2 files changed, 16 insertions(+)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 3459f9fff..11553425f 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -758,6 +758,10 @@ pub struct KeyMsg {
 }
 
 #[derive(Deserialize, Serialize, Debug, Clone)]
+// Allow the large enum variant caused by TsigKeyName using Name<Array<255>>
+// to avoid the conversions that would be needed if Name<Bytes> were to be
+// used instead.
+#[allow(clippy::large_enum_variant)]
 pub enum PolicyReloadError {
     Io(Utf8PathBuf, String),
     NoSuchTsigKey(TsigKeyName),
diff --git a/src/policy/mod.rs b/src/policy/mod.rs
index d2cdc98c7..f1128376e 100644
--- a/src/policy/mod.rs
+++ b/src/policy/mod.rs
@@ -50,6 +50,10 @@ pub enum PolicyChange {
 /// Reload all policies.
 ///
 /// Any changes are reported via the `on_change` callback.
+// Allow the large enum variant caused by TsigKeyName using Name<Array<255>>
+// to avoid the conversions that would be needed if Name<Bytes> were to be
+// used instead.
+#[allow(clippy::result_large_err)]
 pub fn reload_all(
     policies: &mut foldhash::HashMap<Box<str>, Policy>,
     config: &Config,
@@ -117,6 +121,10 @@ pub fn reload_all(
 ///
 /// The current policies are used for logging purposes so we can log whether
 /// a policy is new, updated, unchanged or removed.
+// Allow the large enum variant caused by TsigKeyName using Name<Array<255>>
+// to avoid the conversions that would be needed if Name<Bytes> were to be
+// used instead.
+#[allow(clippy::result_large_err)]
 pub fn load_all(
     policies: &foldhash::HashMap<Box<str>, Policy>,
     config: &Config,
@@ -198,6 +206,10 @@ pub fn load_all(
 }
 
 /// Perform a semantic check on the loaded policy.
+// Allow the large enum variant caused by TsigKeyName using Name<Array<255>>
+// to avoid the conversions that would be needed if Name<Bytes> were to be
+// used instead.
+#[allow(clippy::result_large_err)]
 fn check_policy(policy: &PolicyVersion, tsig_store: &TsigStore) -> Result<(), PolicyReloadError> {
     // Check the publication nameservers for the key manager. Any TSIG key
     // that is part of those nameservers has to exist in the TSIG key store.

From 880cc3fc30d64fb4924ad3e7b73bb4534f12764b Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:59:17 +0200
Subject: [PATCH 086/113] Increase note to warning.

---
 doc/manual/source/man/cascade-tsig.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index 8de5e7f80..113cc007b 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -70,9 +70,9 @@ Arguments for :subcmd:`tsig add`
    Secret key material must be the correct length for the specified algorithm
    and must be encoded using the :RFC:`4648` Base64 encoding.
 
-   .. note:: Secret key material supplied via a command-line argument may be
-             visible to other processes running on the same computer as the
-             Cascade CLI.
+   .. warning:: Secret key material supplied via a command-line argument may
+                be visible to other processes running on the same computer as
+                the Cascade CLI.
 
 .. option:: <ALGORITHM>
 

From 44282b92cd532963a91c9b7c75a1a9975721b6c3 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 22 Apr 2026 23:59:35 +0200
Subject: [PATCH 087/113] Regenerate man pages.

---
 doc/manual/build/man/cascade-tsig.1 | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/doc/manual/build/man/cascade-tsig.1 b/doc/manual/build/man/cascade-tsig.1
index db8c5c293..1fe95733b 100644
--- a/doc/manual/build/man/cascade-tsig.1
+++ b/doc/manual/build/man/cascade-tsig.1
@@ -105,12 +105,12 @@ and \fB<SECRET>\fP arguments as well will result in an error.
 Secret key material must be the correct length for the specified algorithm
 and must be encoded using the \X'tty: link https://datatracker.ietf.org/doc/html/rfc4648.html'\fI\%RFC 4648\fP\X'tty: link' Base64 encoding.
 .sp
-\fBNOTE:\fP
+\fBWARNING:\fP
 .INDENT 7.0
 .INDENT 3.5
-Secret key material supplied via a command\-line argument may be
-visible to other processes running on the same computer as the
-Cascade CLI.
+Secret key material supplied via a command\-line argument may
+be visible to other processes running on the same computer as
+the Cascade CLI.
 .UNINDENT
 .UNINDENT
 .UNINDENT

From ebfc0f3c2f6cd560336f05bf985ad90f44d17ce0 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Thu, 23 Apr 2026 00:03:22 +0200
Subject: [PATCH 088/113] Fix broken RFC links.

---
 doc/manual/build/man/cascade-zone.1    | 11 +++++------
 doc/manual/source/man/cascade-zone.rst | 11 +++++------
 2 files changed, 10 insertions(+), 12 deletions(-)

diff --git a/doc/manual/build/man/cascade-zone.1 b/doc/manual/build/man/cascade-zone.1
index bc73c4c52..209cbbf64 100644
--- a/doc/manual/build/man/cascade-zone.1
+++ b/doc/manual/build/man/cascade-zone.1
@@ -128,12 +128,13 @@ or without port, defaults to port 53) or the path to a zone file locally
 available to the \fBcascaded\fP daemon.\(ga
 .sp
 When specifying an upstream nameserver you may also optionally specify
-the name of an :rfc:8945 TSIG key that should be used to authenticate
+the name of an \X'tty: link https://datatracker.ietf.org/doc/html/rfc8945.html'\fI\%RFC 8945\fP\X'tty: link' TSIG key that should be used to authenticate
 communication with the upstream.
 .sp
-Zones sourced from an upstream nameserver will be automatically updated if
-a new version is detected via a SOA query, either based on the zone\(aqs SOA
-record timers, or in response to an :rfc:1996 NOTIFY message from the upstream.
+Zones sourced from an upstream nameserver will be automatically updated
+if a new version is detected via a SOA query, either based on the zone\(aqs
+SOA record timers, or in response to an \X'tty: link https://datatracker.ietf.org/doc/html/rfc1996.html'\fI\%RFC 1996\fP\X'tty: link' NOTIFY message from
+the upstream.
 .sp
 Zones can also be manualy updated via \fBcascade\fP \fI\%reload\fP\&.
 .sp
@@ -158,8 +159,6 @@ If using a TSIG key the key must first be added to Cascade via
 \fBcascade\fP \fBtsig add\fP\&.
 .UNINDENT
 .UNINDENT
-.sp
-[1]: \X'tty: link https://www.rfc-editor.org/rfc/rfc1982#section-3.2'\fI\%https://www.rfc\-editor.org/rfc/rfc1982#section\-3.2\fP\X'tty: link'
 .UNINDENT
 .INDENT 0.0
 .TP
diff --git a/doc/manual/source/man/cascade-zone.rst b/doc/manual/source/man/cascade-zone.rst
index 8d3cb89d2..cb896cb03 100644
--- a/doc/manual/source/man/cascade-zone.rst
+++ b/doc/manual/source/man/cascade-zone.rst
@@ -93,12 +93,13 @@ Options for :subcmd:`zone add`
    available to the ``cascaded`` daemon.`
 
    When specifying an upstream nameserver you may also optionally specify
-   the name of an :rfc:8945 TSIG key that should be used to authenticate
+   the name of an :RFC:`8945` TSIG key that should be used to authenticate
    communication with the upstream.
 
-   Zones sourced from an upstream nameserver will be automatically updated if
-   a new version is detected via a SOA query, either based on the zone's SOA
-   record timers, or in response to an :rfc:1996 NOTIFY message from the upstream.
+   Zones sourced from an upstream nameserver will be automatically updated
+   if a new version is detected via a SOA query, either based on the zone's
+   SOA record timers, or in response to an :RFC:`1996` NOTIFY message from
+   the upstream.
 
    Zones can also be manualy updated via :program:`cascade` :subcmd:`reload`.
 
@@ -114,8 +115,6 @@ Options for :subcmd:`zone add`
    .. note:: If using a TSIG key the key must first be added to Cascade via
              :program:`cascade` :subcmd:`tsig add`.
 
-   [1]: https://www.rfc-editor.org/rfc/rfc1982#section-3.2
-
 .. option:: --policy <POLICY>
 
    Policy to use for this zone.

From 5198800dd4637c7eb786740d17cab63a85a6c130 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Thu, 23 Apr 2026 00:04:33 +0200
Subject: [PATCH 089/113] Remove errant back-tick character in docs.

---
 doc/manual/build/man/cascade-zone.1    | 2 +-
 doc/manual/source/man/cascade-zone.rst | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/manual/build/man/cascade-zone.1 b/doc/manual/build/man/cascade-zone.1
index 209cbbf64..f6a54cabe 100644
--- a/doc/manual/build/man/cascade-zone.1
+++ b/doc/manual/build/man/cascade-zone.1
@@ -125,7 +125,7 @@ Get the history of a single zone.
 .B \-\-source <IP>[:<PORT>][^<TSIG_KEY_NAME>]
 The zone source can be the IP address of an upstream nameserver (with
 or without port, defaults to port 53) or the path to a zone file locally
-available to the \fBcascaded\fP daemon.\(ga
+available to the \fBcascaded\fP daemon.
 .sp
 When specifying an upstream nameserver you may also optionally specify
 the name of an \X'tty: link https://datatracker.ietf.org/doc/html/rfc8945.html'\fI\%RFC 8945\fP\X'tty: link' TSIG key that should be used to authenticate
diff --git a/doc/manual/source/man/cascade-zone.rst b/doc/manual/source/man/cascade-zone.rst
index cb896cb03..f1a9250aa 100644
--- a/doc/manual/source/man/cascade-zone.rst
+++ b/doc/manual/source/man/cascade-zone.rst
@@ -90,7 +90,7 @@ Options for :subcmd:`zone add`
 
    The zone source can be the IP address of an upstream nameserver (with
    or without port, defaults to port 53) or the path to a zone file locally
-   available to the ``cascaded`` daemon.`
+   available to the ``cascaded`` daemon.
 
    When specifying an upstream nameserver you may also optionally specify
    the name of an :RFC:`8945` TSIG key that should be used to authenticate

From 36f49617dd27c54328b890e22dfad9f119b64d4f Mon Sep 17 00:00:00 2001
From: Terts Diepraam <terts.diepraam@gmail.com>
Date: Wed, 22 Apr 2026 11:00:51 +0200
Subject: [PATCH 090/113] Add last error to zone status

---
 crates/api/src/lib.rs           |  6 ++++++
 crates/cli/src/commands/zone.rs | 15 +++++++++++++++
 src/loader/mod.rs               |  4 +++-
 src/units/http_server.rs        | 19 +++++++++++++++++++
 src/zone/machine.rs             |  4 ++++
 src/zone/mod.rs                 | 12 ++++++++++++
 6 files changed, 59 insertions(+), 1 deletion(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 5e26081ab..b60b0bf75 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -353,6 +353,7 @@ pub struct ZoneStatus {
     pub progress: Progress,
     pub keys: Vec<KeyInfo>,
     pub key_status: String,
+    pub error: Option<String>,
     pub receipt_report: Option<ZoneLoaderReport>,
     pub unsigned_serial: Option<Serial>,
     pub unsigned_review_status: Option<TimestampedZoneReviewStatus>,
@@ -532,6 +533,8 @@ pub struct HistoryItem {
 
 #[derive(Copy, Clone, Debug, PartialEq, Eq)]
 pub enum HistoricalEventType {
+    StartedLoad,
+    StartedResign,
     Added,
     Removed,
     PolicyChanged,
@@ -547,6 +550,8 @@ pub enum HistoricalEventType {
 
 #[derive(Clone, Debug, PartialEq, Eq, Deserialize, Serialize)]
 pub enum HistoricalEvent {
+    StartedLoad,
+    StartedResign,
     Added,
     Removed,
     PolicyChanged,
@@ -575,6 +580,7 @@ pub enum HistoricalEvent {
         err: String,
         elapsed: Duration,
     },
+    Error(String),
 }
 
 /// The trigger for a (re-)signing operation.
diff --git a/crates/cli/src/commands/zone.rs b/crates/cli/src/commands/zone.rs
index cc7b1cc33..40030d569 100644
--- a/crates/cli/src/commands/zone.rs
+++ b/crates/cli/src/commands/zone.rs
@@ -402,6 +402,8 @@ impl Zone {
                                 None => "-".to_string(),
                             };
                             let what = match &history_item.event {
+                                HistoricalEvent::StartedLoad => "Started load".to_string(),
+                                HistoricalEvent::StartedResign => "Started resign".to_string(),
                                 HistoricalEvent::Added => "Zone added".to_string(),
                                 HistoricalEvent::Removed => "Zone removed".to_string(),
                                 HistoricalEvent::PolicyChanged => "Policy changed".to_string(),
@@ -501,6 +503,7 @@ impl Zone {
                                         elapsed.as_secs()
                                     )
                                 }
+                                HistoricalEvent::Error(s) => s.clone(),
                             };
                             println!("{when} {serial:10} {what}");
                         }
@@ -576,6 +579,18 @@ impl Zone {
             println!("Published zone available at {}", zone.publish_addr);
         }
 
+        if let Some(error) = zone.error {
+            println!("");
+            println!("An error occurred during the last operation:");
+            println!("  {}ERROR: {error}{}", ansi::RED, ansi::RESET);
+            println!(
+                "  Run {}`cascade zone history {}`{} for more information.",
+                ansi::BLUE,
+                zone.name,
+                ansi::RESET
+            );
+        }
+
         if detailed {
             println!("");
             println!("DNSSEC keys:");
diff --git a/src/loader/mod.rs b/src/loader/mod.rs
index a80c42d87..364ab0163 100644
--- a/src/loader/mod.rs
+++ b/src/loader/mod.rs
@@ -25,7 +25,7 @@ use crate::{
     common::scheduler::Scheduler,
     loader::zone::EnqueuedRefresh,
     util::AbortOnDrop,
-    zone::{Zone, ZoneByPtr, ZoneHandle},
+    zone::{HistoricalEvent, Zone, ZoneByPtr, ZoneHandle},
 };
 
 mod server;
@@ -260,6 +260,8 @@ async fn refresh(
 
             // Cancel the load
             handle.abandon_load(builder);
+
+            state.record_event(HistoricalEvent::Error(err.to_string()), None);
         }
     }
 }
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index 3fc3e9cac..78a8c5bb2 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -353,6 +353,7 @@ impl HttpServer {
         let signed_serial;
         let published_serial;
         let last_published;
+        let error;
         {
             let locked_state = state.center.state.lock().unwrap();
             let keys_dir = &state.center.config.keys_dir;
@@ -465,6 +466,23 @@ impl HttpServer {
                     loaded_serial: p.loaded_serial,
                     signed_serial: p.signed_serial,
                 });
+
+            let mut found_error = None;
+            for item in zone_state.history.iter().rev() {
+                // TODO: When we have instance IDs we should only look through
+                // history items related to that ID.
+                match &item.event {
+                    HistoricalEvent::StartedLoad | HistoricalEvent::StartedResign => {
+                        break;
+                    }
+                    HistoricalEvent::Error(s) => {
+                        found_error = Some(s);
+                        break;
+                    }
+                    _ => {}
+                }
+            }
+            error = found_error.cloned();
         }
 
         // Query key status
@@ -586,6 +604,7 @@ impl HttpServer {
             published_serial,
             publish_addr,
             halted_reason,
+            error,
         })
     }
 
diff --git a/src/zone/machine.rs b/src/zone/machine.rs
index 0ff3aec31..21cf7cf72 100644
--- a/src/zone/machine.rs
+++ b/src/zone/machine.rs
@@ -120,6 +120,8 @@ impl<'a> ZoneHandle<'a> {
 
         transition.move_to(ZoneStateMachine::Loading(waiting.start_load()));
 
+        self.state.record_event(HistoricalEvent::StartedLoad, None);
+
         Some(builder)
     }
 
@@ -144,6 +146,8 @@ impl<'a> ZoneHandle<'a> {
 
         transition.move_to(ZoneStateMachine::Signing(waiting.start_resign()));
 
+        self.state.record_event(HistoricalEvent::StartedLoad, None);
+
         Some(builder)
     }
 }
diff --git a/src/zone/mod.rs b/src/zone/mod.rs
index c2bf5071f..9521f0174 100644
--- a/src/zone/mod.rs
+++ b/src/zone/mod.rs
@@ -318,6 +318,8 @@ impl HistoryItem {
 
 #[derive(Copy, Clone, Debug, PartialEq, Eq)]
 pub enum HistoricalEventType {
+    StartedLoad,
+    StartedResign,
     Added,
     Removed,
     PolicyChanged,
@@ -329,10 +331,13 @@ pub enum HistoricalEventType {
     SignedZoneReview,
     KeySetCommand,
     KeySetError,
+    Error,
 }
 
 #[derive(Clone, Debug, PartialEq, Eq, Deserialize, Serialize)]
 pub enum HistoricalEvent {
+    StartedLoad,
+    StartedResign,
     Added,
     Removed,
     PolicyChanged,
@@ -370,11 +375,14 @@ pub enum HistoricalEvent {
         )]
         elapsed: Duration,
     },
+    Error(String),
 }
 
 impl HistoricalEvent {
     fn get_type(&self) -> HistoricalEventType {
         match self {
+            HistoricalEvent::StartedLoad => HistoricalEventType::StartedLoad,
+            HistoricalEvent::StartedResign => HistoricalEventType::StartedResign,
             HistoricalEvent::Added => HistoricalEventType::Added,
             HistoricalEvent::Removed => HistoricalEventType::Removed,
             HistoricalEvent::PolicyChanged => HistoricalEventType::PolicyChanged,
@@ -386,6 +394,7 @@ impl HistoricalEvent {
             HistoricalEvent::SignedZoneReview { .. } => HistoricalEventType::SignedZoneReview,
             HistoricalEvent::KeySetCommand { .. } => HistoricalEventType::KeySetCommand,
             HistoricalEvent::KeySetError { .. } => HistoricalEventType::KeySetError,
+            HistoricalEvent::Error { .. } => HistoricalEventType::Error,
         }
     }
 
@@ -397,6 +406,8 @@ impl HistoricalEvent {
 impl From<HistoricalEvent> for api::HistoricalEvent {
     fn from(value: HistoricalEvent) -> Self {
         match value {
+            HistoricalEvent::StartedLoad => Self::StartedLoad,
+            HistoricalEvent::StartedResign => Self::StartedResign,
             HistoricalEvent::Added => Self::Added,
             HistoricalEvent::Removed => Self::Removed,
             HistoricalEvent::PolicyChanged => Self::PolicyChanged,
@@ -420,6 +431,7 @@ impl From<HistoricalEvent> for api::HistoricalEvent {
             HistoricalEvent::KeySetError { cmd, err, elapsed } => {
                 Self::KeySetError { cmd, err, elapsed }
             }
+            HistoricalEvent::Error(s) => Self::Error(s),
         }
     }
 }

From 144363ac7f3eb0327bd092da0ae141d5d634302c Mon Sep 17 00:00:00 2001
From: Terts Diepraam <terts.diepraam@gmail.com>
Date: Wed, 22 Apr 2026 15:15:34 +0200
Subject: [PATCH 091/113] Add more errors to zone status

---
 crates/api/src/lib.rs           | 12 +++++++++++-
 crates/cli/src/commands/zone.rs |  8 +++++++-
 src/loader/mod.rs               |  7 ++++++-
 src/units/http_server.rs        | 30 +++++++++++++++++++++++++++---
 src/units/zone_server.rs        | 12 ++++++++++++
 src/zone/mod.rs                 | 20 +++++++++++++++++---
 6 files changed, 80 insertions(+), 9 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index b60b0bf75..ba80bdf7e 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -544,6 +544,8 @@ pub enum HistoricalEventType {
     SigningFailed,
     UnsignedZoneReview,
     SignedZoneReview,
+    UnsignedHookFailed,
+    SignedHookFailed,
     KeySetCommand,
     KeySetError,
 }
@@ -570,6 +572,12 @@ pub enum HistoricalEvent {
     SignedZoneReview {
         status: ZoneReviewStatus,
     },
+    UnsignedHookFailed {
+        err: String,
+    },
+    SignedHookFailed {
+        err: String,
+    },
     KeySetCommand {
         cmd: String,
         warning: Option<String>,
@@ -580,7 +588,9 @@ pub enum HistoricalEvent {
         err: String,
         elapsed: Duration,
     },
-    Error(String),
+    LoadingFailed {
+        reason: String,
+    },
 }
 
 /// The trigger for a (re-)signing operation.
diff --git a/crates/cli/src/commands/zone.rs b/crates/cli/src/commands/zone.rs
index 40030d569..054ec8f5b 100644
--- a/crates/cli/src/commands/zone.rs
+++ b/crates/cli/src/commands/zone.rs
@@ -477,6 +477,12 @@ impl Zone {
                                         ZoneReviewStatus::Rejected => "rejected",
                                     }
                                 ),
+                                HistoricalEvent::UnsignedHookFailed { err, .. } => {
+                                    format!("Could not execute loaded review hook: {err}",)
+                                }
+                                HistoricalEvent::SignedHookFailed { err, .. } => {
+                                    format!("Could not execute signed review hook: {err}",)
+                                }
                                 HistoricalEvent::KeySetCommand {
                                     cmd,
                                     elapsed,
@@ -503,7 +509,7 @@ impl Zone {
                                         elapsed.as_secs()
                                     )
                                 }
-                                HistoricalEvent::Error(s) => s.clone(),
+                                HistoricalEvent::LoadingFailed { reason } => reason.clone(),
                             };
                             println!("{when} {serial:10} {what}");
                         }
diff --git a/src/loader/mod.rs b/src/loader/mod.rs
index 364ab0163..b6d883ee5 100644
--- a/src/loader/mod.rs
+++ b/src/loader/mod.rs
@@ -261,7 +261,12 @@ async fn refresh(
             // Cancel the load
             handle.abandon_load(builder);
 
-            state.record_event(HistoricalEvent::Error(err.to_string()), None);
+            state.record_event(
+                HistoricalEvent::LoadingFailed {
+                    reason: err.to_string(),
+                },
+                None,
+            );
         }
     }
 }
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index 78a8c5bb2..f9569d87d 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -475,14 +475,38 @@ impl HttpServer {
                     HistoricalEvent::StartedLoad | HistoricalEvent::StartedResign => {
                         break;
                     }
-                    HistoricalEvent::Error(s) => {
-                        found_error = Some(s);
+                    HistoricalEvent::LoadingFailed { reason } => {
+                        found_error = Some(reason.clone());
+                        break;
+                    }
+                    HistoricalEvent::SigningFailed { trigger: _, reason } => {
+                        found_error = Some(format!("signing failed: {reason}"));
+                        break;
+                    }
+                    HistoricalEvent::UnsignedZoneReview {
+                        status: ZoneReviewStatus::Rejected,
+                    } => {
+                        found_error = Some("loaded zone was rejected".into());
+                        break;
+                    }
+                    HistoricalEvent::SignedZoneReview {
+                        status: ZoneReviewStatus::Rejected,
+                    } => {
+                        found_error = Some("signed zone was rejected".into());
+                        break;
+                    }
+                    HistoricalEvent::UnsignedHookFailed { err } => {
+                        found_error = Some(format!("could not execute loaded review hook: {err}"));
+                        break;
+                    }
+                    HistoricalEvent::SignedHookFailed { err } => {
+                        found_error = Some(format!("could not execute signed review hook: {err}"));
                         break;
                     }
                     _ => {}
                 }
             }
-            error = found_error.cloned();
+            error = found_error;
         }
 
         // Query key status
diff --git a/src/units/zone_server.rs b/src/units/zone_server.rs
index 3071fd1c8..792c92526 100644
--- a/src/units/zone_server.rs
+++ b/src/units/zone_server.rs
@@ -455,10 +455,22 @@ impl ZoneServer {
                     let mut zone_state = zone.state.lock().unwrap();
                     match self.source {
                         Source::Unsigned => {
+                            zone_state.record_event(
+                                HistoricalEvent::UnsignedHookFailed {
+                                    err: err.to_string(),
+                                },
+                                Some(zone_serial),
+                            );
                             zone_state.unsigned.get_mut(&zone_serial).unwrap().review =
                                 ZoneVersionReviewState::Rejected;
                         }
                         Source::Signed => {
+                            zone_state.record_event(
+                                HistoricalEvent::SignedHookFailed {
+                                    err: err.to_string(),
+                                },
+                                Some(zone_serial),
+                            );
                             zone_state.signed.get_mut(&zone_serial).unwrap().review =
                                 ZoneVersionReviewState::Rejected;
                         }
diff --git a/src/zone/mod.rs b/src/zone/mod.rs
index 9521f0174..d1ed28d4f 100644
--- a/src/zone/mod.rs
+++ b/src/zone/mod.rs
@@ -329,6 +329,8 @@ pub enum HistoricalEventType {
     SigningFailed,
     UnsignedZoneReview,
     SignedZoneReview,
+    UnsignedHookFailed,
+    SignedHookFailed,
     KeySetCommand,
     KeySetError,
     Error,
@@ -343,6 +345,9 @@ pub enum HistoricalEvent {
     PolicyChanged,
     SourceChanged,
     NewVersionReceived,
+    LoadingFailed {
+        reason: String,
+    },
     SigningSucceeded {
         trigger: cascade_api::SigningTrigger,
     },
@@ -356,6 +361,12 @@ pub enum HistoricalEvent {
     SignedZoneReview {
         status: ZoneReviewStatus,
     },
+    UnsignedHookFailed {
+        err: String,
+    },
+    SignedHookFailed {
+        err: String,
+    },
     KeySetCommand {
         cmd: String,
         #[serde(skip_serializing_if = "Option::is_none")]
@@ -375,7 +386,6 @@ pub enum HistoricalEvent {
         )]
         elapsed: Duration,
     },
-    Error(String),
 }
 
 impl HistoricalEvent {
@@ -392,9 +402,11 @@ impl HistoricalEvent {
             HistoricalEvent::SigningFailed { .. } => HistoricalEventType::SigningFailed,
             HistoricalEvent::UnsignedZoneReview { .. } => HistoricalEventType::UnsignedZoneReview,
             HistoricalEvent::SignedZoneReview { .. } => HistoricalEventType::SignedZoneReview,
+            HistoricalEvent::UnsignedHookFailed { .. } => HistoricalEventType::UnsignedHookFailed,
+            HistoricalEvent::SignedHookFailed { .. } => HistoricalEventType::SignedHookFailed,
             HistoricalEvent::KeySetCommand { .. } => HistoricalEventType::KeySetCommand,
             HistoricalEvent::KeySetError { .. } => HistoricalEventType::KeySetError,
-            HistoricalEvent::Error { .. } => HistoricalEventType::Error,
+            HistoricalEvent::LoadingFailed { .. } => HistoricalEventType::Error,
         }
     }
 
@@ -419,6 +431,8 @@ impl From<HistoricalEvent> for api::HistoricalEvent {
             }
             HistoricalEvent::UnsignedZoneReview { status } => Self::UnsignedZoneReview { status },
             HistoricalEvent::SignedZoneReview { status } => Self::SignedZoneReview { status },
+            HistoricalEvent::UnsignedHookFailed { err } => Self::UnsignedHookFailed { err },
+            HistoricalEvent::SignedHookFailed { err } => Self::SignedHookFailed { err },
             HistoricalEvent::KeySetCommand {
                 cmd,
                 warning,
@@ -431,7 +445,7 @@ impl From<HistoricalEvent> for api::HistoricalEvent {
             HistoricalEvent::KeySetError { cmd, err, elapsed } => {
                 Self::KeySetError { cmd, err, elapsed }
             }
-            HistoricalEvent::Error(s) => Self::Error(s),
+            HistoricalEvent::LoadingFailed { reason } => Self::LoadingFailed { reason },
         }
     }
 }

From d4fc4351f587c1bc00dbf92b236eaf9400aeb0a3 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 24 Apr 2026 08:44:13 +0200
Subject: [PATCH 092/113] Fully remove use of domain::tsig in the api crate.

---
 crates/api/src/lib.rs    | 12 ------------
 src/units/http_server.rs | 10 ++++++++--
 2 files changed, 8 insertions(+), 14 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 5a06fbd8d..24bb68dd2 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -4,7 +4,6 @@ use std::net::SocketAddr;
 use std::time::{Duration, SystemTime};
 
 use camino::{Utf8Path, Utf8PathBuf};
-use domain::tsig::Algorithm;
 use serde::{Deserialize, Serialize};
 
 pub use domain::base::Serial;
@@ -590,17 +589,6 @@ impl Display for TsigAlgorithm {
     }
 }
 
-impl From<TsigAlgorithm> for Algorithm {
-    fn from(alg: TsigAlgorithm) -> Self {
-        match alg {
-            TsigAlgorithm::Sha1 => Algorithm::Sha1,
-            TsigAlgorithm::Sha256 => Algorithm::Sha256,
-            TsigAlgorithm::Sha384 => Algorithm::Sha384,
-            TsigAlgorithm::Sha512 => Algorithm::Sha512,
-        }
-    }
-}
-
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct ZoneHistory {
     pub history: Vec<HistoryItem>,
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index 1799eec7f..d6db0c11e 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -1109,8 +1109,14 @@ impl HttpServer {
             return Json(Err(TsigAddError::InvalidBase64Secret));
         };
 
-        match center::add_tsig_key(&state.center, tsig_add.name, tsig_add.alg.into(), &secret).await
-        {
+        let alg = match tsig_add.alg {
+            TsigAlgorithm::Sha1 => domain::tsig::Algorithm::Sha1,
+            TsigAlgorithm::Sha256 => domain::tsig::Algorithm::Sha256,
+            TsigAlgorithm::Sha384 => domain::tsig::Algorithm::Sha384,
+            TsigAlgorithm::Sha512 => domain::tsig::Algorithm::Sha512,
+        };
+
+        match center::add_tsig_key(&state.center, tsig_add.name, alg, &secret).await {
             Ok(TsigAddResult) => Json(Ok(TsigAddResult)),
             Err(err) => Json(Err(err)),
         }

From b625ff5f0f2e255f3aebb1106632306711d86beb Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 24 Apr 2026 08:45:30 +0200
Subject: [PATCH 093/113] Support reading TSIG secret from a file.

And use add instead of register as we say add in some places and
register in others, and because remove is used as the opposite of add,
we don't say de/unregister.
---
 crates/cli/src/commands/tsig.rs        | 25 +++++++++++++++++++++----
 crates/cli/src/commands/zone.rs        |  2 +-
 doc/manual/source/man/cascade-tsig.rst | 10 ++++++----
 doc/manual/source/man/cascade-zone.rst |  2 +-
 4 files changed, 29 insertions(+), 10 deletions(-)

diff --git a/crates/cli/src/commands/tsig.rs b/crates/cli/src/commands/tsig.rs
index d85b8ee00..4d6442900 100644
--- a/crates/cli/src/commands/tsig.rs
+++ b/crates/cli/src/commands/tsig.rs
@@ -1,5 +1,6 @@
 use std::str::FromStr;
 
+use camino::Utf8PathBuf;
 use cascade_api::{
     TsigAddError, TsigAddResult, TsigKeyName, TsigListResult, TsigRemoveError, TsigRemoveResult,
 };
@@ -16,10 +17,10 @@ pub struct Tsig {
 #[derive(Clone, Debug, clap::Subcommand)]
 #[allow(clippy::large_enum_variant)]
 pub enum TsigCommand {
-    /// Register a TSIG key
+    /// Add a TSIG key
     #[command(name = "add")]
     Add {
-        /// The name of the TSIG key to register.
+        /// The name of the TSIG key to add.
         ///
         /// Can also be in the form `[algorithm]:keyname:secret`.
         name: String,
@@ -37,10 +38,13 @@ pub enum TsigCommand {
         #[arg(requires = "secret")]
         alg: Option<TsigAlgorithm>,
 
-        /// The secret key material in base64 encoded form.
+        /// Base64 encoded secret key material.
         ///
         /// Can be omitted if provided as part of the name.
         /// Required if `[ALG]` is provided.
+        ///
+        /// Can also be a path to a file containing the Base64 encoded secret
+        /// key material.
         #[arg(requires = "alg")]
         secret: Option<String>,
     },
@@ -95,7 +99,20 @@ impl Tsig {
 
                     // Separate name, algorithm and secret argument values
                     // were provided.
-                    (Some(alg), Some(secret)) => (name, alg, secret),
+                    (Some(alg), Some(secret)) => {
+                        let path = Utf8PathBuf::from_str(&secret).unwrap();
+                        if path.exists() {
+                            // Assume that the secret is contained in the
+                            // specified file.
+                            let secret = std::fs::read_to_string(&path).map_err(|err| {
+                                format!("Failed to read TSIG key file '{path}': {err}")
+                            })?;
+                            (name, alg, secret)
+                        } else {
+                            // Assume that the secret was provided directly.
+                            (name, alg, secret)
+                        }
+                    }
 
                     // An unsupported combination of arguments was provided
                     // but this should not be possible due to the Clap
diff --git a/crates/cli/src/commands/zone.rs b/crates/cli/src/commands/zone.rs
index 0cb5720d8..10cc88867 100644
--- a/crates/cli/src/commands/zone.rs
+++ b/crates/cli/src/commands/zone.rs
@@ -18,7 +18,7 @@ pub struct Zone {
 #[allow(clippy::large_enum_variant)]
 #[derive(Clone, Debug, clap::Subcommand)]
 pub enum ZoneCommand {
-    /// Register a new zone
+    /// Add a new zone
     #[command(name = "add")]
     Add {
         name: ZoneName,
diff --git a/doc/manual/source/man/cascade-tsig.rst b/doc/manual/source/man/cascade-tsig.rst
index 113cc007b..2aae53f4e 100644
--- a/doc/manual/source/man/cascade-tsig.rst
+++ b/doc/manual/source/man/cascade-tsig.rst
@@ -36,18 +36,18 @@ Commands
 
 .. subcmd:: add
 
-   Register a new TSIG key.
+   Add a new TSIG key.
 
    Incoming DNS messages that are TSIG signed will be rejected if the key used
    to sign the message is not registered with Cascade.
 
 .. subcmd:: list
 
-   List registered TSIG keys and the zones that use them.
+   List registered TSIG keys.
 
 .. subcmd:: remove
 
-   Remove a registered TSIG key.
+   Remove a TSIG key.
 
    .. note:: Returns an error if the key does not exist in the TSIG key store,
              or if the key is still referenced by other configuration.
@@ -84,9 +84,11 @@ Arguments for :subcmd:`tsig add`
    :RFC:`4648` Base64 encoded secret key material. The number of bytes prior
    to encoding must be correct for the specified ``<ALGORITHM>``.
 
+   Can also be a path to a file containing the Base64 encoded secret material.
+
    .. note:: Secret key material supplied via a command-line argument may be
              visible to other processes running on the same computer as the
-             Cascade CLI.
+             Cascade CLI. Consider supplying a file name instead.
 
 See Also
 --------
diff --git a/doc/manual/source/man/cascade-zone.rst b/doc/manual/source/man/cascade-zone.rst
index f1a9250aa..1716b3bb7 100644
--- a/doc/manual/source/man/cascade-zone.rst
+++ b/doc/manual/source/man/cascade-zone.rst
@@ -42,7 +42,7 @@ Commands
 
 .. subcmd:: add
 
-   Register a new zone.
+   Add a new zone.
 
 .. subcmd:: remove
 

From a2db6be7a48a683e9b568088e48b9fea9b6e7446 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 24 Apr 2026 15:31:10 +0200
Subject: [PATCH 094/113] Also test with TSIG key from file.

---
 integration-tests/system-tests.yml            |  3 ++-
 .../tests/upstream-tsig/action.yml            | 20 ++++++++++++++++++-
 2 files changed, 21 insertions(+), 2 deletions(-)

diff --git a/integration-tests/system-tests.yml b/integration-tests/system-tests.yml
index d9ceb889a..be189554d 100644
--- a/integration-tests/system-tests.yml
+++ b/integration-tests/system-tests.yml
@@ -267,7 +267,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        rust: [stable]
+        key-source: [cmdline, file]
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/set-build-profile
@@ -276,3 +276,4 @@ jobs:
       - uses: ./integration-tests/tests/upstream-tsig
         with:
           log-level: ${{ inputs.log-level }}
+          key-source: ${{ matrix.key-source }}
diff --git a/integration-tests/tests/upstream-tsig/action.yml b/integration-tests/tests/upstream-tsig/action.yml
index a60f67a34..5068b36f3 100644
--- a/integration-tests/tests/upstream-tsig/action.yml
+++ b/integration-tests/tests/upstream-tsig/action.yml
@@ -18,6 +18,14 @@ inputs:
       - info
       - debug
       - trace
+  key-source:
+    description: Where to take the TSIG key from.
+    required: true
+    type: choice
+    options:
+      - cmdline
+      - file
+      - none
 runs:
   using: "composite"
   steps:
@@ -46,7 +54,17 @@ runs:
     - name: Remove and re-add the zone with the required TSIG key.
       run: |
         cascade zone remove example-tsig.test
-        cascade tsig add tsig-key hmac-sha256 "COzoVsYQmXeXiyq1Quhp0bbVnMyxjPxsaGSoIWR98i0="
+        
+        case "${{ inputs.key-source }}" in
+          "cmdline")
+            cascade tsig add tsig-key hmac-sha256 "COzoVsYQmXeXiyq1Quhp0bbVnMyxjPxsaGSoIWR98i0="
+            ;;
+          "file")
+            echo -n "COzoVsYQmXeXiyq1Quhp0bbVnMyxjPxsaGSoIWR98i0=" >/tmp/tsig.key
+            cascade tsig add tsig-key hmac-sha256 /tmp/tsig.key
+            ;;
+        esac
+
         cascade zone add --policy default --source 127.0.0.1:1055^tsig-key example-tsig.test
 
     - name: Check zone status

From 154d923d064236cae8e91331cde06d6b10eabe79 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 24 Apr 2026 15:41:57 +0200
Subject: [PATCH 095/113] Review feedback: Don't wait 10 seconds, detect the
 XFR failure ASAP.

---
 integration-tests/tests/upstream-tsig/action.yml | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/integration-tests/tests/upstream-tsig/action.yml b/integration-tests/tests/upstream-tsig/action.yml
index 5068b36f3..bb9821d1a 100644
--- a/integration-tests/tests/upstream-tsig/action.yml
+++ b/integration-tests/tests/upstream-tsig/action.yml
@@ -42,14 +42,19 @@ runs:
       run: |
         timeout=10 # seconds
         start=$(date +%s)
-        until cascade zone status example-tsig.test | grep -q "Published zone available"; do
+
+        # TODO: The error message we are checking for is the one that Cascade
+        # currently produces, but doesn't seem like the correct error...
+        # See: https://github.com/NLnetLabs/cascade/issues/603
+        until cascade zone status example-tsig.test | grep -q "ERROR: the AXFR failed: the server's response was semantically incorrect: Not a valid XFR response"; do
           if (($(date +%s) > (start + timeout))); then
-            exit 0
+            echo "::error:: zone status failed to report the expected error"
+            cascade zone status example-tsig.test
+            exit 1
           fi
           sleep 1
         done
-        echo "::error:: zone status unexpectedly reports TSIG required zone was retrieved and published without using the TSIG key"
-        exit 1
+        exit 0
 
     - name: Remove and re-add the zone with the required TSIG key.
       run: |

From ee3cb3d5002bb6d1fa0d2a6e14e6f425507dd259 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 24 Apr 2026 15:50:31 +0200
Subject: [PATCH 096/113] Review feedback: Use a better zonefile path in NSD
 examples.

Updated based on the NSD documentation at
https://nsd.docs.nlnetlabs.nl/en/latest/manpages/nsd.conf.html#EXAMPLE.
---
 doc/manual/source/nsd.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/manual/source/nsd.rst b/doc/manual/source/nsd.rst
index d8d0bf916..15922aedc 100644
--- a/doc/manual/source/nsd.rst
+++ b/doc/manual/source/nsd.rst
@@ -45,7 +45,7 @@ running on host 192.168.0.2 listening on the default port 4542:
 
    zone:
      name: example.com
-	 zonefile: "zonefile.name"
+	 zonefile: /etc/nsd/example.com.zone
 	 notify: 192.168.0.2@4542 NOKEY
 	 provide-xfr: 192.168.0.2 NOKEY
 	 store-ixfr: yes
@@ -63,7 +63,7 @@ example\:
 
    zone:
      name: example.com
-	 zonefile: "zonefile.name"
+	 zonefile: /etc/nsd/example.com.zone
 	 notify: 192.168.0.2@4542 sec1_key
 	 provide-xfr: 192.168.0.2 sec1_key
 	 store-ixfr: yes

From aab66bf120392b6fc09d13621e394c89858689f0 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 24 Apr 2026 15:55:41 +0200
Subject: [PATCH 097/113] Review feedback: Use RustDoc markdown, not reST
 markdown.

---
 crates/cli/src/commands/zone.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/crates/cli/src/commands/zone.rs b/crates/cli/src/commands/zone.rs
index 10cc88867..2494d3646 100644
--- a/crates/cli/src/commands/zone.rs
+++ b/crates/cli/src/commands/zone.rs
@@ -913,7 +913,7 @@ pub enum ZoneSource {
     },
 }
 
-/// Support parsing of ``-source`` command line arguments.
+/// Support parsing of `-source` command line arguments.
 ///
 /// Supported forms:
 ///   - `<IP>[:<PORT>][^<TSIG_KEY_NAME>]`

From b851e8128c2376497daf4a007b5ea864015449d8 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 24 Apr 2026 16:14:46 +0200
Subject: [PATCH 098/113] Minor correction.

---
 doc/manual/source/zone-transfers.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/manual/source/zone-transfers.rst b/doc/manual/source/zone-transfers.rst
index cd47d1a4f..8426d509f 100644
--- a/doc/manual/source/zone-transfers.rst
+++ b/doc/manual/source/zone-transfers.rst
@@ -3,7 +3,7 @@ Zone Transfers
 
 Cascade is designed to be deployed between a hidden upstream nameserver and
 public downstream nameservers. The hidden upstream serves the unsigned zone,
-Cascade signs it, and passes it to the downstream nameservers for publication
+Cascade signs it, and serves it to downstream nameservers for publication
 to consumers.
 
 Communication of changed zone records from upstream to downstream should

From 078436e02554474c749d7bbca0ea71cfaeec2b6d Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 24 Apr 2026 16:15:16 +0200
Subject: [PATCH 099/113] Review feedback: Refer to authenticating
 communication in general.

---
 doc/manual/source/zone-transfers.rst | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/doc/manual/source/zone-transfers.rst b/doc/manual/source/zone-transfers.rst
index 8426d509f..8f5019175 100644
--- a/doc/manual/source/zone-transfers.rst
+++ b/doc/manual/source/zone-transfers.rst
@@ -10,9 +10,9 @@ Communication of changed zone records from upstream to downstream should
 be done via the network using the :RFC:`5936` (AXFR) and :RFC:`1995` (IXFR)
 protocols.
 
-Securing the transferred data can be done using :RFC:`8945` (TSIG) keys,
-using a shared secret communicated out of band to the nameservers sending and
-receiving the zone records.
+Authentication of transfering parties can be done using :RFC:`8945` (TSIG)
+keys, using a shared secret communicated out of band to the nameservers
+sending and receiving the zone records.
 
 Cascade supports timely discovery of zone changes by sending SOA queries to
 the upsream nameserver, either in response to an :RFC:`1996` NOTIFY message or
@@ -29,14 +29,12 @@ Using zone transfers with an upstream nameserver
 
 To instruct Cascade to transfer a zone via the network instead of loading
 it from a file you must supply an upstream nameserver IP address when
-adding the zone. See :program:`cascade` :subcmd:`zone add`.
+adding the zone. See :program:`cascade` :subcmd:`zone add`, and optionally
+a TSIG key to use to authenticate communication.
 
 Cascade will then attempt to fetch the zone. Where possible it will fetch
 newer versions of the zone incrementally, as this is more efficient.
 
-Securing zone transfers with an upstream nameserver
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
 Cascade can be instructed to authenticate the upstream nameserver by use of a
 TSIG key. The TSIG key to use must be provided to Cascade _before_ adding the
 zone. See :program:`cascade` :subcmd:`tsig add`.

From 106094b6da8f55864074b3d2c4b1f738e1d75463 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 24 Apr 2026 16:28:41 +0200
Subject: [PATCH 100/113] Review feedback.

---
 doc/manual/source/zone-transfers.rst | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/doc/manual/source/zone-transfers.rst b/doc/manual/source/zone-transfers.rst
index 8f5019175..823bd0c84 100644
--- a/doc/manual/source/zone-transfers.rst
+++ b/doc/manual/source/zone-transfers.rst
@@ -42,7 +42,8 @@ zone. See :program:`cascade` :subcmd:`tsig add`.
 Using zone transfers with a downstream server
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-Cascade permits zone transfers by default, no configuration is required.
+By default, Cascade allows downstream servers to access published zones by
+zone transfer, no configuration is needed.
 
 To ensure timely update by secondaries, Cascade can be configured to send
 :RFC:`1996` NOTIFY messages to specified secondaries. This is done via the

From 239a92adc53928b61fbe181bc9c89f95833ff548 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 24 Apr 2026 16:44:51 +0200
Subject: [PATCH 101/113] Review feedback: consistent Display styling.

---
 src/loader/mod.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/loader/mod.rs b/src/loader/mod.rs
index 3f9a90ff7..57ad177c2 100644
--- a/src/loader/mod.rs
+++ b/src/loader/mod.rs
@@ -311,7 +311,7 @@ impl std::fmt::Display for Source {
             Source::Server { addr, tsig_key } => {
                 write!(f, "{addr}")?;
                 if let Some(tsig_key) = &tsig_key {
-                    write!(f, "^{}", tsig_key.name())?;
+                    write!(f, " with  TSIG key '{}'", tsig_key.name())?;
                 }
                 Ok(())
             }

From 982274ec8590eeab4a209aebfbf0e04df778fa64 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 24 Apr 2026 17:24:13 +0200
Subject: [PATCH 102/113] Review feedback: Note that we might want a more
 useful error in future.

---
 src/tsig/mod.rs | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/tsig/mod.rs b/src/tsig/mod.rs
index 870dbe51c..e89233854 100644
--- a/src/tsig/mod.rs
+++ b/src/tsig/mod.rs
@@ -306,6 +306,7 @@ pub fn remove_key(center: &Arc<Center>, name: &tsig::KeyName) -> Result<(), Remo
         });
 
     if tsig_key_found {
+        // TODO: Indicate to the operator where the key is in use.
         return Err(RemoveError::Used);
     }
 
@@ -319,6 +320,7 @@ pub fn remove_key(center: &Arc<Center>, name: &tsig::KeyName) -> Result<(), Remo
     match state.tsig_store.map.entry(name.clone()) {
         hash_map::Entry::Occupied(entry) => {
             if !entry.get().zones.is_empty() {
+                // TODO: Indicate to the operator where the key is in use.
                 return Err(RemoveError::Used);
             }
             entry.remove_entry();

From 27bdc149e78fa854fced380dfaca63c1333bf62c Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Fri, 24 Apr 2026 22:58:44 +0200
Subject: [PATCH 103/113] Update policy docs and regenerate man pages.

---
 doc/manual/build/man/cascade-debug.1          |  2 +-
 doc/manual/build/man/cascade-health.1         |  2 +-
 doc/manual/build/man/cascade-hsm.1            |  2 +-
 doc/manual/build/man/cascade-keyset.1         |  2 +-
 doc/manual/build/man/cascade-policy.1         |  2 +-
 doc/manual/build/man/cascade-status.1         |  2 +-
 doc/manual/build/man/cascade-template.1       |  2 +-
 doc/manual/build/man/cascade-tsig.1           | 12 ++++----
 doc/manual/build/man/cascade-zone.1           |  4 +--
 doc/manual/build/man/cascade.1                |  2 +-
 doc/manual/build/man/cascaded-config.toml.5   |  2 +-
 doc/manual/build/man/cascaded-policy.toml.5   | 29 +++++++++++-------
 doc/manual/build/man/cascaded.1               |  2 +-
 .../source/man/cascaded-policy.toml.rst       | 30 ++++++++++++-------
 etc/policy.template.toml                      | 29 ++++++++++++------
 15 files changed, 77 insertions(+), 47 deletions(-)

diff --git a/doc/manual/build/man/cascade-debug.1 b/doc/manual/build/man/cascade-debug.1
index 32a72ad4c..fa379a47b 100644
--- a/doc/manual/build/man/cascade-debug.1
+++ b/doc/manual/build/man/cascade-debug.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-DEBUG" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-DEBUG" "1" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-debug \- Debug / troubleshoot Cascade
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-health.1 b/doc/manual/build/man/cascade-health.1
index 369f67f71..85821acb5 100644
--- a/doc/manual/build/man/cascade-health.1
+++ b/doc/manual/build/man/cascade-health.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HEALTH" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HEALTH" "1" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-health \- Check the health of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-hsm.1 b/doc/manual/build/man/cascade-hsm.1
index ab0fa0f58..62ab56db8 100644
--- a/doc/manual/build/man/cascade-hsm.1
+++ b/doc/manual/build/man/cascade-hsm.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-HSM" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-HSM" "1" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-hsm \- Manage HSMs
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-keyset.1 b/doc/manual/build/man/cascade-keyset.1
index 6fbbac550..fb0f43cf1 100644
--- a/doc/manual/build/man/cascade-keyset.1
+++ b/doc/manual/build/man/cascade-keyset.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-KEYSET" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-KEYSET" "1" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-keyset \- Execute manual key roll or key removal commands
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-policy.1 b/doc/manual/build/man/cascade-policy.1
index 6ab41c8ce..0b5ad6a69 100644
--- a/doc/manual/build/man/cascade-policy.1
+++ b/doc/manual/build/man/cascade-policy.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-POLICY" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-POLICY" "1" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-policy \- Manage policies
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-status.1 b/doc/manual/build/man/cascade-status.1
index 848edcc9a..8de2073be 100644
--- a/doc/manual/build/man/cascade-status.1
+++ b/doc/manual/build/man/cascade-status.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-STATUS" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-STATUS" "1" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-status \- Show the status of Cascade
 .sp
diff --git a/doc/manual/build/man/cascade-template.1 b/doc/manual/build/man/cascade-template.1
index eff0f3296..6f96a458c 100644
--- a/doc/manual/build/man/cascade-template.1
+++ b/doc/manual/build/man/cascade-template.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-TEMPLATE" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-TEMPLATE" "1" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-template \- Print example config or policy files
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascade-tsig.1 b/doc/manual/build/man/cascade-tsig.1
index 1fe95733b..4ec29e03f 100644
--- a/doc/manual/build/man/cascade-tsig.1
+++ b/doc/manual/build/man/cascade-tsig.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-TSIG" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-TSIG" "1" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-tsig \- Manage TSIG keys
 .sp
@@ -62,7 +62,7 @@ command.
 .INDENT 0.0
 .TP
 .B add
-Register a new TSIG key.
+Add a new TSIG key.
 .sp
 Incoming DNS messages that are TSIG signed will be rejected if the key used
 to sign the message is not registered with Cascade.
@@ -70,12 +70,12 @@ to sign the message is not registered with Cascade.
 .INDENT 0.0
 .TP
 .B list
-List registered TSIG keys and the zones that use them.
+List registered TSIG keys.
 .UNINDENT
 .INDENT 0.0
 .TP
 .B remove
-Remove a registered TSIG key.
+Remove a TSIG key.
 .sp
 \fBNOTE:\fP
 .INDENT 7.0
@@ -126,12 +126,14 @@ The TSIG algorithm of the specified TSIG key. Can be one of: \fBhmac\-sha1\fP,
 \X'tty: link https://datatracker.ietf.org/doc/html/rfc4648.html'\fI\%RFC 4648\fP\X'tty: link' Base64 encoded secret key material. The number of bytes prior
 to encoding must be correct for the specified \fB<ALGORITHM>\fP\&.
 .sp
+Can also be a path to a file containing the Base64 encoded secret material.
+.sp
 \fBNOTE:\fP
 .INDENT 7.0
 .INDENT 3.5
 Secret key material supplied via a command\-line argument may be
 visible to other processes running on the same computer as the
-Cascade CLI.
+Cascade CLI. Consider supplying a file name instead.
 .UNINDENT
 .UNINDENT
 .UNINDENT
diff --git a/doc/manual/build/man/cascade-zone.1 b/doc/manual/build/man/cascade-zone.1
index f6a54cabe..e1923b128 100644
--- a/doc/manual/build/man/cascade-zone.1
+++ b/doc/manual/build/man/cascade-zone.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE-ZONE" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE-ZONE" "1" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade-zone \- Manage zones
 .SH SYNOPSIS
@@ -64,7 +64,7 @@ command.
 .INDENT 0.0
 .TP
 .B add
-Register a new zone.
+Add a new zone.
 .UNINDENT
 .INDENT 0.0
 .TP
diff --git a/doc/manual/build/man/cascade.1 b/doc/manual/build/man/cascade.1
index 5317c1944..1c68e3994 100644
--- a/doc/manual/build/man/cascade.1
+++ b/doc/manual/build/man/cascade.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADE" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADE" "1" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascade \- Cascade CLI
 .SH SYNOPSIS
diff --git a/doc/manual/build/man/cascaded-config.toml.5 b/doc/manual/build/man/cascaded-config.toml.5
index 41318719c..e9d409acf 100644
--- a/doc/manual/build/man/cascaded-config.toml.5
+++ b/doc/manual/build/man/cascaded-config.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-CONFIG.TOML" "5" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-CONFIG.TOML" "5" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-config.toml \- Cascade configuration file
 .sp
diff --git a/doc/manual/build/man/cascaded-policy.toml.5 b/doc/manual/build/man/cascaded-policy.toml.5
index 79838d5d4..e12339485 100644
--- a/doc/manual/build/man/cascaded-policy.toml.5
+++ b/doc/manual/build/man/cascaded-policy.toml.5
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED-POLICY.TOML" "5" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED-POLICY.TOML" "5" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded-policy.toml \- Cascade policy file format
 .sp
@@ -342,18 +342,22 @@ deleting the files for on\-disk keys or removing it from the HSM).
 .INDENT 0.0
 .TP
 .B publication\-nameservers = []
-A set of nameservers to use when checking for rrsiG propagation during a
+The set of nameservers to use when checking for RRSIG propagation during a
 key roll.
 .sp
-Each nameserver is specified as a string with the syntax:
+Each nameserver must be specified as a string in the form:
 .INDENT 7.0
 .INDENT 3.5
-\fB<IP>[:<PORT>][^[TSIG_KEY_NAME]\fP
+\fB\(dq<IP>:[<PORT>][^<TSIG_KEY_NAME>]\(dq\fP
 .UNINDENT
 .UNINDENT
 .sp
-If this option is not set, the nameserver specified in the zone apex SOA
-MNAME field will be queried.
+If a TSIG key name is specified, a key by that name must exist in the
+Cascade TSIG key store and will be used to authenticate communication with
+the nameserver.
+.sp
+If no nameservers are specified, the nameserver specified by the SOA MNAME
+field will be checked.
 .UNINDENT
 .SS The management of DNS records by the key manager.
 .sp
@@ -637,12 +641,17 @@ The \fB[server.outbound]\fP section.
 .INDENT 0.0
 .TP
 .B send\-notify\-to = []
-The set of nameservers to which NOTIFY messages should be sent.
+The set of nameservers to which NOTIFY messages should be sent
+.sp
+Each nameserver must be specified as a string in the form:
+.sp
+\fI\(dq<IP>:[<PORT>][^<TSIG_KEY_NAME>]\(dq\fP
 .sp
-If empty, no NOTIFY messages will be sent.
+If a TSIG key name is specified, a key by that name must exist in the
+Cascade TSIG key store and will be used to authenticate communication with
+the nameserver.
 .sp
-A collection of \fBIP:[port]\fP, defaulting to port 53 when not specified, e.g.:
-\fBsend\-notify\-to = [\(dq[::1]:53\(dq]\fP
+If not specified, no NOTIFY messages will be sent.
 .UNINDENT
 .SH FILES
 .INDENT 0.0
diff --git a/doc/manual/build/man/cascaded.1 b/doc/manual/build/man/cascaded.1
index 0360020df..e4a58dd89 100644
--- a/doc/manual/build/man/cascaded.1
+++ b/doc/manual/build/man/cascaded.1
@@ -27,7 +27,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "CASCADED" "1" "Apr 22, 2026" "0.1.0-alpha5" "Cascade"
+.TH "CASCADED" "1" "Apr 24, 2026" "0.1.0-alpha5" "Cascade"
 .SH NAME
 cascaded \- DNSSEC signer
 .SH SYNOPSIS
diff --git a/doc/manual/source/man/cascaded-policy.toml.rst b/doc/manual/source/man/cascaded-policy.toml.rst
index 8bb3cac3f..171395aad 100644
--- a/doc/manual/source/man/cascaded-policy.toml.rst
+++ b/doc/manual/source/man/cascaded-policy.toml.rst
@@ -260,15 +260,19 @@ The ``[key-manager]`` section.
 
 .. option:: publication-nameservers = []
 
-   A set of nameservers to use when checking for rrsiG propagation during a
+   The set of nameservers to use when checking for RRSIG propagation during a
    key roll.
 
-   Each nameserver is specified as a string with the syntax:
-
-     ``<IP>[:<PORT>][^[TSIG_KEY_NAME]``
-
-   If this option is not set, the nameserver specified in the zone apex SOA
-   MNAME field will be queried.
+   Each nameserver must be specified as a string in the form:
+  
+     ``"<IP>:[<PORT>][^<TSIG_KEY_NAME>]"``
+  
+   If a TSIG key name is specified, a key by that name must exist in the
+   Cascade TSIG key store and will be used to authenticate communication with
+   the nameserver.
+  
+   If no nameservers are specified, the nameserver specified by the SOA MNAME
+   field will be checked.
 
 The management of DNS records by the key manager.
 +++++++++++++++++++++++++++++++++++++++++++++++++
@@ -516,13 +520,17 @@ The ``[server.outbound]`` section.
 
 .. option:: send-notify-to = []
 
-   The set of nameservers to which NOTIFY messages should be sent.
+   The set of nameservers to which NOTIFY messages should be sent
+
+   Each nameserver must be specified as a string in the form:
 
-   If empty, no NOTIFY messages will be sent.
+   `"<IP>:[<PORT>][^<TSIG_KEY_NAME>]"`
 
-   A collection of ``IP:[port]``, defaulting to port 53 when not specified, e.g.:
-   ``send-notify-to = ["[::1]:53"]``
+   If a TSIG key name is specified, a key by that name must exist in the
+   Cascade TSIG key store and will be used to authenticate communication with
+   the nameserver.
 
+   If not specified, no NOTIFY messages will be sent.
 
 Files
 -----
diff --git a/etc/policy.template.toml b/etc/policy.template.toml
index d94b04fe2..0beaea885 100644
--- a/etc/policy.template.toml
+++ b/etc/policy.template.toml
@@ -156,14 +156,19 @@ ds-algorithm = "SHA-256"
 # TODO: Perhaps support removing keys after a certain delay?
 auto-remove = true
 
-# The upstream nameservers to use when checking for RRSIG propagation during
-# a key roll.
+# The set of nameservers to use when checking for RRSIG propagation during a
+# key roll.
 # 
-# Each nameserver must be specifeid as a string in the form
-# `"<IP>:[<PORT>][^<TSIG_KEY_NAME>]"`.
+# Each nameserver must be specified as a string in the form:
 #
-# If not specified, the nameserver specified by the SOA MNAME field will be
-# checked.
+# `"<IP>:[<PORT>][^<TSIG_KEY_NAME>]"`
+#
+# If a TSIG key name is specified, a key by that name must exist in the
+# Cascade TSIG key store and will be used to authenticate communication with
+# the nameserver.
+#
+# If no nameservers are specified, the nameserver specified by the SOA MNAME
+# field will be checked.
 # 
 # publication-nameservers = []
 
@@ -375,8 +380,14 @@ required = false
 [server.outbound]
 
 # The set of nameservers to which NOTIFY messages should be sent.
-#
-# If empty, no NOTIFY messages will be sent.
 # 
-# A collection of IP:[port], defaulting to port 53 when not specified.
+# Each nameserver must be specified as a string in the form:
+#
+# `"<IP>:[<PORT>][^<TSIG_KEY_NAME>]"`
+#
+# If a TSIG key name is specified, a key by that name must exist in the
+# Cascade TSIG key store and will be used to authenticate communication with
+# the nameserver.
+#
+# If not specified, no NOTIFY messages will be sent.
 send-notify-to = []

From 49043f89ae2f121dfe58becbeff7279c699f373e Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Tue, 28 Apr 2026 10:28:13 +0200
Subject: [PATCH 104/113] Record that a zone uses a TSIG key when adding the
 zone.

Also, reverse the change on failure to register the zone.
Also, add some missing zone server updates and failure to mark state as
dirty.
---
 src/center.rs   | 80 +++++++++++++++++++++++++++++++++++++++----------
 src/tsig/mod.rs |  4 +++
 2 files changed, 68 insertions(+), 16 deletions(-)

diff --git a/src/center.rs b/src/center.rs
index 58a654250..1e94861b0 100644
--- a/src/center.rs
+++ b/src/center.rs
@@ -21,7 +21,7 @@ use crate::server::{LoadedReviewServer, PublicationServer, SignedReviewServer};
 use crate::tsig::ImportError;
 use crate::units::key_manager::KeyManager;
 use crate::units::zone_signer::ZoneSigner;
-use crate::zone::{HistoricalEvent, ZoneHandle};
+use crate::zone::{HistoricalEvent, ZoneByPtr, ZoneHandle};
 use crate::{
     api,
     config::Config,
@@ -90,6 +90,20 @@ pub async fn add_zone(
             return Err(ZoneAddError::AlreadyExists);
         }
 
+        // Look up the requested policy.
+        {
+            let policy = state
+                .policies
+                .get(&policy_name)
+                .ok_or(ZoneAddError::NoSuchPolicy)?;
+            if policy.mid_deletion {
+                return Err(ZoneAddError::PolicyMidDeletion);
+            }
+        }
+
+        // Create the zone and initialize its state.
+        zone = Arc::new(Zone::new(name));
+
         source = match api_source {
             cascade_api::ZoneSource::None => crate::loader::Source::None,
             cascade_api::ZoneSource::Zonefile { path } => crate::loader::Source::Zonefile { path },
@@ -98,10 +112,15 @@ pub async fn add_zone(
                     // Lookup the key in the TSIG key store.
                     let key = state
                         .tsig_store
-                        .get(&key_name)
-                        .ok_or(ZoneAddError::NoSuchTsigKey)?
-                        .inner
-                        .clone();
+                        .get_mut(&key_name)
+                        .ok_or(ZoneAddError::NoSuchTsigKey)?;
+
+                    // Record that this zone uses this key.
+                    key.zones.insert(ZoneByPtr(zone.clone()));
+
+                    let key = key.inner.clone();
+
+                    state.tsig_store.mark_dirty(center);
 
                     // Use the found key.
                     Some(key)
@@ -113,20 +132,10 @@ pub async fn add_zone(
             }
         };
 
-        // Look up the requested policy.
-        let policy = state
-            .policies
-            .get_mut(&policy_name)
-            .ok_or(ZoneAddError::NoSuchPolicy)?;
-        if policy.mid_deletion {
-            return Err(ZoneAddError::PolicyMidDeletion);
-        }
-
-        // Create the zone and initialize its state.
-        zone = Arc::new(Zone::new(name));
         let (loaded_reviewer, signed_reviewer, viewer);
         {
             let mut zone_state = zone.state.lock().unwrap();
+            let policy = state.policies.get_mut(&policy_name).unwrap();
             zone_state.policy = Some(policy.latest.clone());
             policy.zones.insert(zone.name.clone());
             loaded_reviewer = zone_state.storage.loaded_reviewer.take().unwrap();
@@ -156,11 +165,35 @@ pub async fn add_zone(
         register_zone(center, zone.name.clone(), policy_name.clone(), key_imports).await
     {
         // Remove in reverse order what was added above.
+        LoadedReviewServer::remove_zone(center, &zone);
+        SignedReviewServer::remove_zone(center, &zone);
+        PublicationServer::remove_zone(center, &zone);
+
         let mut state = center.state.lock().unwrap();
+
         state.zones.remove(&zone.name);
+
         if let Some(policy) = state.policies.get_mut(&policy_name) {
             policy.zones.remove(&zone.name);
         }
+
+        state.mark_dirty(center);
+
+        if let crate::loader::Source::Server {
+            tsig_key: Some(key_name),
+            ..
+        } = &source
+        {
+            state
+                .tsig_store
+                .get_mut(key_name.name())
+                .unwrap()
+                .zones
+                .remove(&ZoneByPtr(zone));
+
+            state.tsig_store.mark_dirty(center);
+        }
+
         return Err(err);
     }
 
@@ -231,6 +264,21 @@ pub fn remove_zone(center: &Arc<Center>, name: Name<Bytes>) -> Result<(), ZoneRe
         state.mark_dirty(center);
     }
 
+    // Update the TSIG key's referenced zones.
+    if let crate::loader::Source::Server {
+        tsig_key: Some(key_name),
+        ..
+    } = &zone_state.loader.source
+    {
+        state
+            .tsig_store
+            .get_mut(key_name.name())
+            .unwrap()
+            .zones
+            .remove(&ZoneByPtr(zone.clone()));
+        state.tsig_store.mark_dirty(center);
+    }
+
     info!("Removed zone '{name}'");
     zone_state.record_event(HistoricalEvent::Removed, None);
     zone.mark_dirty(&mut zone_state, center);
diff --git a/src/tsig/mod.rs b/src/tsig/mod.rs
index e89233854..b83771d53 100644
--- a/src/tsig/mod.rs
+++ b/src/tsig/mod.rs
@@ -85,6 +85,10 @@ impl TsigStore {
     pub fn get(&self, key_name: &tsig::KeyName) -> Option<&TsigKey> {
         self.map.get(key_name)
     }
+
+    pub fn get_mut(&mut self, key_name: &tsig::KeyName) -> Option<&mut TsigKey> {
+        self.map.get_mut(key_name)
+    }
 }
 
 //----------- Actions ----------------------------------------------------------

From 5acd00bab09b3a74ba71465da40c309a0245f34e Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 29 Apr 2026 00:36:49 +0200
Subject: [PATCH 105/113] Review feedback: Document why save_now() is invoked.

---
 src/tsig/mod.rs | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/tsig/mod.rs b/src/tsig/mod.rs
index b83771d53..ace134997 100644
--- a/src/tsig/mod.rs
+++ b/src/tsig/mod.rs
@@ -208,8 +208,16 @@ pub fn import_key(
             });
         }
     }
+
+    // Release the lock before calling save_now() as it will  attempt to
+    // acquire the same lock.
     drop(state);
+
+    // Ensure that the TSIG key store is persisted to disk before a zone add
+    // causes `dnst keyset` to attempt to read the added TSIG key from the
+    // on-disk copy of the key store.
     save_now(center);
+
     Ok(())
 }
 

From 1453aa62541329d13b585761b16c65201374cb25 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 29 Apr 2026 00:45:08 +0200
Subject: [PATCH 106/113] Review feedback: Use the Hmac prefix consistently.

---
 crates/api/src/lib.rs           | 16 ++++++++--------
 crates/cli/src/commands/tsig.rs |  8 ++++----
 src/units/http_server.rs        |  8 ++++----
 3 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 24bb68dd2..4c9b55b79 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -571,19 +571,19 @@ impl Display for KeyType {
 
 #[derive(Copy, Clone, Debug, PartialEq, Eq, Deserialize, Serialize)]
 pub enum TsigAlgorithm {
-    Sha1,
-    Sha256,
-    Sha384,
-    Sha512,
+    HmacSha1,
+    HmacSha256,
+    HmacSha384,
+    HmacSha512,
 }
 
 impl Display for TsigAlgorithm {
     fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
         match self {
-            TsigAlgorithm::Sha1 => "hmac-sha1",
-            TsigAlgorithm::Sha256 => "hmac-sha256",
-            TsigAlgorithm::Sha384 => "hmac-sha384",
-            TsigAlgorithm::Sha512 => "hmac-sha512",
+            TsigAlgorithm::HmacSha1 => "hmac-sha1",
+            TsigAlgorithm::HmacSha256 => "hmac-sha256",
+            TsigAlgorithm::HmacSha384 => "hmac-sha384",
+            TsigAlgorithm::HmacSha512 => "hmac-sha512",
         }
         .fmt(f)
     }
diff --git a/crates/cli/src/commands/tsig.rs b/crates/cli/src/commands/tsig.rs
index 4d6442900..6a97ef4df 100644
--- a/crates/cli/src/commands/tsig.rs
+++ b/crates/cli/src/commands/tsig.rs
@@ -220,10 +220,10 @@ impl FromStr for TsigAlgorithm {
 impl From<TsigAlgorithm> for crate::api::TsigAlgorithm {
     fn from(alg: TsigAlgorithm) -> Self {
         match alg {
-            TsigAlgorithm::HmacSha1 => cascade_api::TsigAlgorithm::Sha1,
-            TsigAlgorithm::HmacSha256 => cascade_api::TsigAlgorithm::Sha256,
-            TsigAlgorithm::HmacSha384 => cascade_api::TsigAlgorithm::Sha384,
-            TsigAlgorithm::HmacSha512 => cascade_api::TsigAlgorithm::Sha512,
+            TsigAlgorithm::HmacSha1 => cascade_api::TsigAlgorithm::HmacSha1,
+            TsigAlgorithm::HmacSha256 => cascade_api::TsigAlgorithm::HmacSha256,
+            TsigAlgorithm::HmacSha384 => cascade_api::TsigAlgorithm::HmacSha384,
+            TsigAlgorithm::HmacSha512 => cascade_api::TsigAlgorithm::HmacSha512,
         }
     }
 }
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index d6db0c11e..d2dc59d87 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -1110,10 +1110,10 @@ impl HttpServer {
         };
 
         let alg = match tsig_add.alg {
-            TsigAlgorithm::Sha1 => domain::tsig::Algorithm::Sha1,
-            TsigAlgorithm::Sha256 => domain::tsig::Algorithm::Sha256,
-            TsigAlgorithm::Sha384 => domain::tsig::Algorithm::Sha384,
-            TsigAlgorithm::Sha512 => domain::tsig::Algorithm::Sha512,
+            TsigAlgorithm::HmacSha1 => domain::tsig::Algorithm::Sha1,
+            TsigAlgorithm::HmacSha256 => domain::tsig::Algorithm::Sha256,
+            TsigAlgorithm::HmacSha384 => domain::tsig::Algorithm::Sha384,
+            TsigAlgorithm::HmacSha512 => domain::tsig::Algorithm::Sha512,
         };
 
         match center::add_tsig_key(&state.center, tsig_add.name, alg, &secret).await {

From a82b8a073e490db70fe7d4808789e9056b226f8e Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 29 Apr 2026 00:46:46 +0200
Subject: [PATCH 107/113] Review feedback: Better naming.

---
 crates/api/src/lib.rs    | 4 ++--
 src/units/http_server.rs | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/crates/api/src/lib.rs b/crates/api/src/lib.rs
index 4c9b55b79..617590bb5 100644
--- a/crates/api/src/lib.rs
+++ b/crates/api/src/lib.rs
@@ -262,12 +262,12 @@ impl fmt::Display for TsigRemoveError {
 #[derive(Deserialize, Serialize, Debug, Clone)]
 pub struct TsigListResult {
     /// The set of TSIG keys known to Cascade plus information about each key.
-    pub tsig_keys: HashMap<TsigKeyName, TsigListResultItem>,
+    pub tsig_keys: HashMap<TsigKeyName, TsigKeyInfo>,
 }
 
 /// Information about a single listed TSIG key.
 #[derive(Deserialize, Serialize, Debug, Clone)]
-pub struct TsigListResultItem {
+pub struct TsigKeyInfo {
     /// The set of zones with which this TSIG key is used.
     pub zones: Vec<ZoneName>,
 }
diff --git a/src/units/http_server.rs b/src/units/http_server.rs
index d2dc59d87..72e4a9712 100644
--- a/src/units/http_server.rs
+++ b/src/units/http_server.rs
@@ -1158,7 +1158,7 @@ impl HttpServer {
                     }
                 })
                 .collect::<Vec<ZoneName>>();
-            tsig_keys.insert(tsig_key_name.clone(), TsigListResultItem { zones });
+            tsig_keys.insert(tsig_key_name.clone(), TsigKeyInfo { zones });
         }
         Json(TsigListResult { tsig_keys })
     }

From df1cfa238f63d80ccbd15faf47369e23f5ae6740 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 29 Apr 2026 00:49:18 +0200
Subject: [PATCH 108/113] Review feedback: Trim whitespace from TSIG secret
 value read from file.

---
 crates/cli/src/commands/tsig.rs | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/crates/cli/src/commands/tsig.rs b/crates/cli/src/commands/tsig.rs
index 6a97ef4df..93b85ac76 100644
--- a/crates/cli/src/commands/tsig.rs
+++ b/crates/cli/src/commands/tsig.rs
@@ -104,9 +104,12 @@ impl Tsig {
                         if path.exists() {
                             // Assume that the secret is contained in the
                             // specified file.
-                            let secret = std::fs::read_to_string(&path).map_err(|err| {
-                                format!("Failed to read TSIG key file '{path}': {err}")
-                            })?;
+                            let secret = std::fs::read_to_string(&path)
+                                .map_err(|err| {
+                                    format!("Failed to read TSIG key file '{path}': {err}")
+                                })?
+                                .trim()
+                                .to_string();
                             (name, alg, secret)
                         } else {
                             // Assume that the secret was provided directly.

From 52a919c4e585c1e34eb0b1e0604ea5b588459623 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 29 Apr 2026 00:51:39 +0200
Subject: [PATCH 109/113] Review feedback: Errant colon position in docs.

---
 doc/manual/source/man/cascaded-policy.toml.rst | 2 +-
 etc/policy.template.toml                       | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/doc/manual/source/man/cascaded-policy.toml.rst b/doc/manual/source/man/cascaded-policy.toml.rst
index 171395aad..66cf95db1 100644
--- a/doc/manual/source/man/cascaded-policy.toml.rst
+++ b/doc/manual/source/man/cascaded-policy.toml.rst
@@ -265,7 +265,7 @@ The ``[key-manager]`` section.
 
    Each nameserver must be specified as a string in the form:
   
-     ``"<IP>:[<PORT>][^<TSIG_KEY_NAME>]"``
+     ``"<IP>[:<PORT>][^<TSIG_KEY_NAME>]"``
   
    If a TSIG key name is specified, a key by that name must exist in the
    Cascade TSIG key store and will be used to authenticate communication with
diff --git a/etc/policy.template.toml b/etc/policy.template.toml
index 0beaea885..80a434c3a 100644
--- a/etc/policy.template.toml
+++ b/etc/policy.template.toml
@@ -161,7 +161,7 @@ auto-remove = true
 # 
 # Each nameserver must be specified as a string in the form:
 #
-# `"<IP>:[<PORT>][^<TSIG_KEY_NAME>]"`
+# `"<IP>[:<PORT>][^<TSIG_KEY_NAME>]"`
 #
 # If a TSIG key name is specified, a key by that name must exist in the
 # Cascade TSIG key store and will be used to authenticate communication with
@@ -383,7 +383,7 @@ required = false
 # 
 # Each nameserver must be specified as a string in the form:
 #
-# `"<IP>:[<PORT>][^<TSIG_KEY_NAME>]"`
+# `"<IP>[:<PORT>][^<TSIG_KEY_NAME>]"`
 #
 # If a TSIG key name is specified, a key by that name must exist in the
 # Cascade TSIG key store and will be used to authenticate communication with

From 79559a79a08011eb74040d22b2989db8a1b59c68 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 29 Apr 2026 00:53:15 +0200
Subject: [PATCH 110/113] Review feedback: Quote to prevent special treatment
 of '^'.

---
 doc/manual/source/nsd.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/manual/source/nsd.rst b/doc/manual/source/nsd.rst
index 15922aedc..8834355e4 100644
--- a/doc/manual/source/nsd.rst
+++ b/doc/manual/source/nsd.rst
@@ -89,7 +89,7 @@ authenticate with NSD:
 
 .. code-block:: bash
 
-   $ cascade zone add --source 192.168.0.1^sec1_key --policy default example.com
+   $ cascade zone add --source "192.168.0.1^sec1_key" --policy default example.com
 
 Using NSD as a secondary to Cascade
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

From 8be30fb03ffd2863dadac27fa83cfc6702c264c5 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 29 Apr 2026 00:53:42 +0200
Subject: [PATCH 111/113] Indent consistent with the other similar example like
 this.

---
 doc/manual/source/man/cascaded-policy.toml.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/manual/source/man/cascaded-policy.toml.rst b/doc/manual/source/man/cascaded-policy.toml.rst
index 66cf95db1..a876c73e9 100644
--- a/doc/manual/source/man/cascaded-policy.toml.rst
+++ b/doc/manual/source/man/cascaded-policy.toml.rst
@@ -524,7 +524,7 @@ The ``[server.outbound]`` section.
 
    Each nameserver must be specified as a string in the form:
 
-   `"<IP>:[<PORT>][^<TSIG_KEY_NAME>]"`
+     `"<IP>[:<PORT>][^<TSIG_KEY_NAME>]"`
 
    If a TSIG key name is specified, a key by that name must exist in the
    Cascade TSIG key store and will be used to authenticate communication with

From 3130f6263b8c7cfe3cafba9027a511273cb9c9fb Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Wed, 29 Apr 2026 00:55:32 +0200
Subject: [PATCH 112/113] Review feedback: Avoid unnecessary Vec.

---
 src/units/key_manager.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/units/key_manager.rs b/src/units/key_manager.rs
index cdfa5df95..752320552 100644
--- a/src/units/key_manager.rs
+++ b/src/units/key_manager.rs
@@ -733,7 +733,7 @@ fn policy_to_commands(center: &Arc<Center>, policy: &PolicyVersion) -> Vec<Vec<S
             .collect(),
     );
 
-    cmds.append(&mut vec![
+    cmds.extend([
         strs!["use-csk", km.use_csk],
         algorithm_cmd,
         strs!["ksk-validity", validity(km.ksk_validity)],

From aecc2579b1e2dec1de94bdc9c10150420b091983 Mon Sep 17 00:00:00 2001
From: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
Date: Thu, 30 Apr 2026 11:56:30 +0200
Subject: [PATCH 113/113] Review feedback: Be less strict about Cascade not
 supporting zone files.

---
 doc/manual/source/zone-transfers.rst | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/doc/manual/source/zone-transfers.rst b/doc/manual/source/zone-transfers.rst
index 823bd0c84..738930123 100644
--- a/doc/manual/source/zone-transfers.rst
+++ b/doc/manual/source/zone-transfers.rst
@@ -1,7 +1,7 @@
 Zone Transfers
 ==============
 
-Cascade is designed to be deployed between a hidden upstream nameserver and
+Cascade is expected to be deployed between a hidden upstream nameserver and
 public downstream nameservers. The hidden upstream serves the unsigned zone,
 Cascade signs it, and serves it to downstream nameservers for publication
 to consumers.
@@ -22,7 +22,10 @@ based on the zone's SOA timers.
           only a small fraction of the records in the zone change from one
           version to the next, loading the entire file every time the zone
           file changes will require more time, CPU and memory compared to
-          processing only the differences when using IXFR.
+          processing only the differences when using IXFR. Cascade doesn't
+          yet support direct writing of signed zones to a file, though a
+          signed zone review hook could be used to AXFR the signed zone to
+          a file on disk to achieve this.
 
 Using zone transfers with an upstream nameserver
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~