add specs that mark the cloned BOM file as readonly