currently, if a user tries to update a files md5 or size, it automatically unpublishes it.
instead, if the file is published and an md5 or size field is changed, then a 409 conflict is returned, indicating that you cannot update those fields without calling the unpublish endpoint explicitly, which is already implemented.