followon to previous commit: actually use whitelist instead of blacklist for package name contents.