App access whitelist now global