[whitelist] load whitelist from url if present in config