This manifest had 'rw' here from the very first version. If you believe we should lock it down please raise a separate ticket.