Update dsl, add RuleDsl#whitelist