more debug; enable whitelist