exempt whitelisted api's from rule requirements