note that my commits changed the design from no whitelist = all requires are allowed to no whitelist = no requires are allowed. I think it is a saner default, but I don’t feel strongly :)