Mark the hash-uri container as a pairtree node, exclude it from Resource...

...#getChildren() requests, and ensure clients can't create 'deep' hash uri resources from a request body

https://www.pivotaltracker.com/story/show/81034970
Sure.