If the RESTlet is using a dedicated user or role to log in you could add that as a condition. You can also restrict the context to eliminate changes made by the UI from consideration @larry