allow configuration of whitelist