Over time a blacklist is potentially unbounded. Better a whitelist, I think.