This should not be read-only, as the affiliation can't always be pulled from LDAP. In that case, the form can't be used, because affiliation would be nil, failing validations.