Is there any good way to add new resources created by pulumi to existing resources that are managed in other ways? As a concrete example, say I wanted to add an allow rule for a new subnet I've created to an existing security group for an RDS database