add optional whitelisting of fingerprints for connecting

btw, please feel free to lambast this code for style or non-idiomatic stuff.. i'm still learning go...
Rather than requiring an optional field, how about adding a call onto Server that adds an entry to the whitelist and call that after constructing?