Only allow files in whitelist

I don't want to gimp the module because I want to be able to e.g. make a
toybox with it
But random clients shouldn't be able to load whatever they feel like
onto every client with vfs, so only allow certain filetypes when loading
through pac