What is a limitation of application whitelisting?