Do not blacklist. Whitelist instead. By default they should touch nothing at all.