Function ensure_clean 

pub async fn ensure_clean(
    config: &ScannerConfig,
    path: &Path,
    size: u64,
) -> AppResult<()>

Scans a file about to enter the vault and refuses infected content (400).