Currently the IP white/black list policies only support a static set of IP addresses. The list of valid/invalid IPs should optionally be pulled from a web service or a database.

Additionally, regex patterns should be supported as well.