Update API to allow event whitelists