It is currently impossible for an outbound connection to be whitelisted; this should be available, either explicitly or implicitly, to prevent situations like a node DoS-banning its sole connect= node.
Should the whitebind/whitelist criteria be applied to outgoing connections?