ima: detect changes to the backing overlay file