Unplug whitelist

Creating for code review.
ditto - also - should we check for null here? also also - make sense to make a helper for combining default logic with pluginManager result?