Auth check needs to support sub-resources

[jinnovation]

To check if, say, user has permission to get logs (#155), one would do the following w/ kubectl:

kubectl auth can-i get pods --subresource=log

There is, of course, an analogous field in SelfSubjectAccessReview, which we can use.

kele--can-i does not support this currently, though it should be perfectly easy to set this up.

Definition of Done

• Kele is able to check can-i permissions for subresources as well as resources