require event notification endpoints and whitelist (bug 866939)