Reverse most of the checks from previous commit; check for `PrivilegeMixin` before calling `validate` in `resource.validate`.