Enforce __acl__ on traversal. Disable User __acl__ restriction as they are transcluded into other docs.
DB roundtrips are bad, don't load the Resource sqlalchemy model unnecessarily.