Only allow contacts that are in a certain whitelist.
The associated variant in Access_Control is a list of Contact_Handle representing the whitelist, with signature au.