added ability to peek into whitelist data for authorized clients, added config option to allow whitelist requests even for un-authorized clients