[SECURITY] Add an extra sanity check for hash values in the `files` tree.