whitelist: drop openssl, ca-certificates