Don't send og secure_url if not in whitelist