I guess you could have something that makes it still successfully retrieve a working image, just not the actual ad maybe? I guess then an ad-versary could check

I guess you could have something that makes it still successfully retrieve a working image, just not the actual ad maybe? I guess then an ad-versary could check if the images are signed or w/e?