You probably would have to go full blown Keep an list of "allowed" MD5/SHA256 hashes for each hook file