Support a configuration-driven whitelist of ids that can be teed off for ucsf participants

@kentquirk Can you have a look at this.  I just verified that it appears to be working so I think I'm ready to call it done.
I should get into this habit. Sorry.