* add rpc whitelist
* use bind for acceptor.on('connection', ...)