I get the impression that the

file_accesses

is designed to do what you're wanting, but I haven't configured this before so I could be missing something