I kind of like having in the root because it's really easy to talk about `.jshintwhitelist` as opposed to `build/linters/jshint-whitelist` - but I'm up for putting it wherever we think is best.