support special resource operation mode in Omni which doesn't give full access to the user

[Unix4ever]

The resource might have an annotation which can not be added or removed by the user, and if it exists the resource should be readonly/partially writable.

Users with godmode access should be able to modify these resources, shouldn't be able to add or remove the annotations.