verify-transfer does not detect differences in metadata

[redbmk]

If a file has different read/write permissions or different timestamps it will still count as a verified transfer.

This should catch errors like the file creating time being different.

There could be options for different level of scrictness as well - e.g. you may want permissions to be the same, or you may not care.