HOW DOES THE ALLOWLIST WORK?