whitelist the config