add dotfiles support

#492 with whitelist support
Yup, that’s OK. It doesn’t make sense to use `#concat` when appending only a single element.