whitelist keys for settings_json
Merge remote-tracking branch 'origin/topic/whistelist_settings_json'
--noSettingsJson tag, steroids.config.drawers support