change puppetci to read only