Ensure whitelist is a hash

The "whitelist" (despite the implication of the name) is a hash,
mapping an easy-t-reference symbolic name to a complete command.

cc: @jtimberman @seth @jkeiser @scarolan