Tool to detect userspace-visible changes to  (supposedly) at-rest data