This plugs any possible future leaks by restricting child objects to URI except for Create objects.
Create