Changing how the env whitelist works

so that multiple places can add and remove without knowing the full contents of the whitelist.
Is this just to get the benefit of indexing?