Add whitelist support for settable config variables

Minor nit: I don't like this name because it sounds like it will return a list of keys.

How about `all_keys_in_whitelist`?

I'm also unenthused by getting an `error` tuple from effectively a true/false question. Just for semantics, mind making that be `{false, ...}`?