+ if the resourceId is not specified it will try to do `AuthzUtil.getResourceFromId(ShortId.generate()).resourceId` which will be the empty string.