Do a better job rescuing on an empty auth_whitelist