after creating a resource, can set its state to be "draft" so that nobody except creator can read this resouce?
or is where anyother API can make this resource unreadable although its cm_state property is undefined or released.
Thanks!