workaround whitelisting problem in devpi>=2.0.0