Support for resources that are backed by data bags

This will be used by things like the load balancer/image specs, AWS resources, anything else that needs to persist a little bit of state data in a data bag. 
This is truth: data_bag_item uses :delete.  The :destroy is for things like machines that you almost never want to destroy.