Implement downgrade & duplicate whitelists

Ultimately, we hope to remove these lists (or significantly reduce them).

At the least, this will keep the current duplicate & downgrade rules from growing without us noticing.

(The two .txt files just whitelist the current rulesets.)

Want to take a look, @jsha?