implement linux font whitelist as defense-in-depth

For the fonts, I think it might be time to customize font.system.whitelist also for Linux, at least as a defense-in-depth

But then we never know if the font config is correct? Does that matter, as long as we test e.g. resistor