I was sceptical at first, but the "small whitelist" concept really does provide a clear, fair and easily enforced delineation.