Ensure whitelist is a hash

The "whitelist" (despite the implication of the name) is a hash,
mapping an easy-to-reference symbolic name to a complete command.
Merge branch 'cm/whitelist-enforce'