CEO 2021 requiring proof of vaccination or negative test res