add passwordlib to whitelist