Move the whitelist to config