We need to clone resources borrowed from another role

E.g. if I 

* set up a `guest` and a `member` role 
* and configures (outside of Hugo) some auth scheme below `/members`
* and I e.g. have a gallery bundle that shares some images, we cannot have URL on the form `/members/mypage/sunrise.jpg` in the guest section as that would typically lead to 403 or similar HTTP error.