rogue clients will be treated as regular clients even if in trustedClients
rename downloadAuth config

 * trustedClients -> whitelistClients
 * rogueClients -> blacklistClients