This guarantees that the images pulled by users are the same as those shipped in a bundle.
The replacement mechanism discussed in #30 needs to be considered here as usages of images added using sheaf add-image should also be resolved to digested form.
