add hostname whitelisting