I had a hard time finding where I can configure the secure whitelist plugin.
A small hint in the wiki and/or the Readme on Github would help:

For anyone looking for a solution:
It can be found in 'Manage Jenkins -> Global Security'