I would be a nice addition to the software if there was an option that you could enable which would allow a workstation to run anything that didn't get flagged by X number of engines on Virus total, Maybe 3.
With that option on and If an executable gets flagged by 3 or more engines there isn't even option to run the file.