Making deploy keys read-only