Make IdentityCache return only readonly records