[fix] Actually check the whitelist. Fixes #3