If there's an editable whitelist, wouldn't that be a better option for end-users? Better to break each app's lock individually, than globally remove all of them...