How to prevent any SURROGAT access from undefined SURROGAT resources?