a whitelist seems to work best in ~