add clarification comment for whitelist hack