FIXME comment for securehash
metadata persistence decided to be done with JSON