add basic device whitelisting