allow x-register to privilege whitelist to prevent registration requests