client: added a hardcoded whitelist for the 'clean' command, refs #53