Yes. Whitelisting by user pubkey.
Don't worry, as it was signed, It could not be easily tampered.