You shouldnt be whitelisting those. Instead the user should be checking their quarantine and reporting any blocked as a false positive. If that fails, then you as an admin can submit these
Thats the way to allow these and to better protect the account