now supports just hash and size checks, or full fstat check