readonly installation

This implements #622 and #289

As described in #622 I simply added a check in nearly everything below `lib.auth`. That worked quite well. I noticed few issues and fixed them.

I also include the option to set a warning message.