Do we actually need this line? I'd construct a default whitelist out of the table schema if none was provided