I'm writing a plugin that expose a custom resource via WordPress API's. Now the resource is public so anyone k