Make the list of watched resource kinds configurable

[ash2k]

It is important to be able to selectively enable only certain resource kinds. E.g. what the user does not need/want to grant permissions for all the kinds. We have an option to disable Service Catalog support, this should be generalized to all supported resources.
For CRDs Smith should be looking at an annotation to decide whether to watch resources of this kind or not. Opt in vs always on.