implement a whitelist