sms and email whitelist for non-public env