restrict more access to read-write services in read-only mode