open up whitelist to *