Bot refunds non whitelisted

I know it is working as intended, but it is problematic in case of donations.

Also on first run 

A work around might be to have a non refund (allow_refunds: True/False) setting as a whitelist of potential donators would be impossible to make/maintain.
