attribute whitelists; versioned