Consolidated functions so `transferSiteResource` always bypasses security. Also updated these content copying functions to use the non-deprecated version of SecurityService.pop