whitelist can now be toggled