Add validation to ReplicationControllers

Also validate Services on Update.

Addresses half of #556
I was going to use it in the test cases but didn't do it in this pull.  Will remove