Didn't we discuss that the module shouldn't be Tribe-specific, and that the ideal solution would be allowing this version to be a default if the whitelist wasn't provided elsewhere, then providing the Tribe-whitelist in our own bootstrap or config files?