[FEAT] allow setting up one whitelist rule for all methods