hsfs should properly validate metadata (length/location) on first access if ever possible.
The code as it stands is far too trusting. That leads to hard-to-track-down failures along the lines of #6244328, which there got fixed by putting validation checks into many places of code. Since additional issues keep creeping up as I continue testing, that approach seems insufficient. This should be done in a better way.