Suppress write-only attributes until properly supported

[mjeffryes]

AWS provider is adding write-only attributes (hashicorp/terraform-provider-aws#41314)

• These are not supposed to persist in state anywhere
• We can't quite match the contract until [Epic] Run program during refresh and destroy· pulumi/16600 is finished:
  • We could just store the value as a secret, but users will be surprised when we use the old value in a refresh or destroy
  • We could not store anything, but then the value will be missing for refresh & destroy
• In the short term, we should suppress these attributes (there are normal versions of these on the resources), to avoid this confusion.
• After [Epic] Run program during refresh and destroy· pulumi/16600 is finished, it should be straightforward to support them.