Use root host as the default whitelist