[fix] pass in user instead of data to _restricted as it expects a resourceful instance
[dist] Version bump. 0.6.1