resolve KAZOO-774: allow local resources to be optionally restricted