Bottom line: Its an impossible job. Another reason, for now, to just refuse all but the most obviously "safe". However THAT is defined.
https://www.nytimes.com/2017/04/10/opinion/the-extreme-foolishness-in-extreme-vetting-proposals.html?ref=todayspaper&_r=0