The current POST and DELETE are already intrinsically account-scoped, so why change the URL to GET what you've created/might delete?