An amend to NIP-96 could add a query string like `?ref=x` when downloading to only respond succesfully if server has a file with `x` value equal to the hash used to request the file.

For uploads, NIP-96 already has "no_transform" field, which would make  `ox` equal to `x`.