Add read-only mode for puppetdb

Signed-off-by: Ken Barber <ken@bob.sh>