added note that /mail/lib/whitelist must be append only

-Steve