Couldn't you set up a proxy and just whitelist that? Excellent piece of work btw.