don't use a reference to rewriten payload
trigger builds for users in whitelist