Check resource/stonith options on create/update

- Don't allow creation/updating of resources/stonith agents with
  unrecognized options (unless using --force)