Add test code for 'whitelist' option.
Remove option from CLI
Add "jekyll_test_plugin_malicious" as gem dep
The whitelist should be an array (not a file)

Default to `[]` if the key’s value is falsey