Mark the hash-uri container as a pairtree node, exclude it from Resource#getChildren() requests, and ensure clients can't create 'deep' hash uri resources from a request body