- compile: VREF/ is special, like NAME/ - update hook: use a new "check_vrefs" sub to - spawn helpers for each vref in @allowed_refs - for each vref returned by the helper, call check_ref
