LIVEOAK-386: Ability to define security on all resources, not just collections