Yea I think you have to.
Huh? Calling resource() doesn't actually run the access check.. its run from the ```before()``` function.. so when the controller is initialized.