add a basic whitelist