Filter nested unwritable attributes from updates

[andrus]

Even though nested updates are not yet processed, they are still exposed in the update model. So let's apply writable attribute filters to them, and exclude those that are not writable