CB-5367 reject non-whitelisted org.apache.cordova plugins