lookup needs size of file now when not specifying sha1