If we move to server-generated filenames (see #1), then we can be smarter about not storing duplicate images, involving checksums or the like.