Changing how the env whitelist works

so that multiple places can add and remove without knowing the full contents of the whitelist.
You could do this with variadic parameters if you chose (then you would only need one function).