client whitelist