I think the reverse is better, meaning relays want to accept only from whitelisted mints.

Otherwise, I can spin up a new mint , print tokens and DoS attack Keychat since any new mint by definition can't be in the blacklist.