Need to look at old gist option #3 for some inspiration.

something like guard_resource attribute that lets you specify an interpreter and block
default for Chef 11 is keep all behavior same as today, but warn
inheritance off in Chef 11 unless they actually specify a guard_resource 
in Chef 12 we can change inheritance and interpreter for select resources
anonymous_resource concept goes away. :)

something like guard_script, script_guard...
guard_interpreter?