Detect and remove embedded subresources

[matthchr]

For example, on VNET there are subnets and virtualNetworkPeerings, which currently show up as properties in the spec which can be set. In reality these are subresources which shouldn't be set in the spec.

It's possible that we don't need automatic handling of these and we can just exclude them using the filters that we already have.