Expose whitelisting to VFS API
Expose whitelisting API to engine