Add whitelist attribs

Recreating a request for changes from the previous request that were not committed

Should this be a separate PR? Seems distinct in function from the whitelist meta attribs