would also make it possible to externaly sign the whitelist, which could be checked upon request.