yeah I can see that, what if someone ends up being smart and re-using the verification procedure for a file that does have security impact, DRY right?