Changing how the env whitelist works

so that multiple places can add and remove without knowing the full contents of the whitelist.