helper/schema: properly validate sub-resources