whitelist app (debug ok, play no)