use user preferences for whitelist