default to empty whitelist