Merging a base allowlist with extra entries