@dumpsterqueer@ondergrond.org best you can do is just re-encoding the actual image data it seems oof, and/or leaving it partly to the client (double layers of security)