If an instructor writes a configuration with a command using a non whitelist program, they get a cryptic error message.

Improve the error messages.
Also let's maybe test for the whitelist at configuration (rather than waiting for the first upload to find out you have a problem).