Add metadata with a checksum of the og one with signature and let each client check that up.