Add the ability to whitelist fields that look like foreign keys

This is needed so we can continue to block fields that end with "_id", but allow "netsuite_id" as an exception to that rule.

- [ ] notice how all the _id fields don't show up in reports. Put one in this whilelist, and it will show up. ka-bam!