bypass should be a per-file option

You should be able to tag just certain files to be bypassed. For example, get some input files via bypass, while getting the container image once and staged normally.