Why do we need to iterate over hosted/proxy and group repositories separately here? doInitializeWhitelistOnStartup only loads existing prefix file and does not depend on group repository members as far as I can tell.