make whitelist optional