use nested url-encoding and satisfy strict TargetResource validation