keep to_sym for whitelist association option