It is consistent with how restlet resources are protected.
In siesta resources case is not actually any protection, as we are filtering just in order to be consistent with how Nexus behaves for restlet resources. The resource calls are always protected due to AOP.