improved ``get_config_allow_list()``: using ``ifilter()``