Combine to one rule for cs whitelisting

Test Plan:
- None

Auditors: john