doc/client_api.txt: Add note about incomplete whitelist