master: call validate_resource in cb_accounts instead