All this `dup`ing makes me feel bad. But I couldn't think of another way to avoid modifying the `WHITELIST` constant (or similar constants that users might be passing in via `:whitelist`). Suggestions?