Add documentation for app whitelisting