What I'd really like is a fs with checksums. Once you know the checksum of the 'clean' file,
just check that of the one you're opening.
That would also help my backup, subversion, scons... which use checksums to detect file
Another way is to provide a user-space open() which loads the data, checks it, then makes it
available to the original caller I suppose.