fstab-generator: set "ro" as default for sysroot.mount