make sure every script mounts /system as read-only after being executed