Let's go with the whitelist option, I think it is the safest and most straight forward to understand/override. Maybe we could use the whitelist information to build dynamic table headers and sorters?