Fix reading whitelist from environment

Restores the ability to provide a `WHITELIST` environment variable, which was accidentally broken in #6.