We are maintaining a whitelist of UKM entries managed by the variations service. This is for an extra level of privacy, as we double check all new entries have been approved by privacy.

This bug is for tracking this sytem. 

It's currently a manual process that we may want to deprecate when we're a bit more comfortable with adding UKMs, privacy wise, but we can leave it running for now.