put the whitelist per-device if youre concerned about ISP privacy