I feel `whitelist` is a bit of a misnomer here... I know you're using this as a counterpart of `blacklist`, but `whitelist` is usually optional stuff imho, not mandatory stuff.
I would keep using `MANDATORY`, with a side-note that blacklisted stuff overrules the mandatory spec (in which case you're doing something stupid anyway in your version format anyway imho)