Better sanity checks for the tarball... the old ones would fail on legitimate files