Is there any way to update an existing resource without having Pulumi own it? I am trying to create an Azure App Service certificate, which requires adding an entry to a TXT record in DNS, however this TXT record already exists, with entries added already, and will continue to be updated outside of Pulumi so it's not practical to have this managed in Pulumi state