Conditional disclosure of encrypted whitelists for DDoS attack mitigation