whitelist cached to RAM instead of reading from disk, user-prefs defaults to empty, privileged pages are exempted from permission checks