it is nice to see that they post hash values of what was audited, but how do I prevent the steam client from automatically updating the mods I have to a newer n

it is nice to see that they post hash values of what was audited, but how do I prevent the steam client from automatically updating the mods I have to a newer non-audited version? how can you compute a checksum of the module before downloading it? it seems the steam client only allows you to 'subscribe' to a mod, not to download/check/install it