SSP-803 Make EA Responses read-only after create at API layer.

I.e. POSTs are OK. PUTs are not.