remove defaults for whitelist. this will be moved to 4.x