clean up the task validation logic in worker a little
use a whitelist instead of allowing sysops