Whitelist appconfig, blacklist secret file