Whitelist things *not* on Melpa

Melpa is pretty quick and stable these days, makes more sense to get
most of my things from there and only list a few things I require
specific older/stable versions of.