reporting: all cookie keys need to be whitelisted explictly