fix brace expansion for whitelist