Added support for optional resource references
updated rbac diagnostics to reflect optional resources
Fix HAL-233
HAL-216: Part one, still has serve side dependencies (see issue description)