Correct use of pypi_whitelist