CloudFormation has support for setting [stack policies](http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html) to prevent updates to protected resources. We should support this within stacker.