add a whitelist