Support spoofing_whitelist and submission_disabled in the basic json api