Replaced blacklists with access lists.
Not fully implemented yet, but documented, specified and started. Padded out
package.json.