Thanks.
My adaptation ( https://github.com/norovid/haven-with-sw2-whitelist ) use your whitelist functions, and apply them with the RejectFilter or RejectEvent "methods/functions" (https://github.com/fiatjaf/khatru/blob/master/docs/core/auth.md#signaling-to-the-client-that-a-specific-query-requires-an-authenticated-user)