require ServiceToken in custom resource types