use whitelist instead of blacklist when filtering files to be included in .phar