whitelist fits better than blacklist; turn small off by default