Check that resource is registered.
Derive ACL resources from services, not configuration.