Is the domain whitelist an and feature to the individual whitelist or is it an or feature?