knetworkmanagerrc sections: whitelisting works better