rest: allow to PATCH instance attributes

This adds a generic mechanism to patch any authorized resource type
attribute.

Change-Id: Icd49b51969a44d5d8c7cb01e546a348f10a5c2ad