This call is invoked before serving change resources and hence should be authorative and audit-logged. Change-Id: Ie28dcf0fd9c91cdc2305c3b5cecfa9c7262df0fc