Mod Authenticator itself needs to be inside the whitelist folder, whitelisting itself :D
This is what players see if they try to login with unauthorized files.