btrup: make backups read-only