I think it would be best to put this logic in `Resource#to_text`, that way anyone else using that method gets the extra security, too.