turn off whitelist in prod (bug 889056)

Not ready to merge yet