oh nice. a pluginsync whitelist as part of the control repo which is read by pluginsync api?