build-whitelist: do not add new options to whitelist when update