That’s what I do, but callers only have to validate once, and then they’re whitelisted: Of Robocalls and Whitelists