added support for Docker's '--volumes ...:ro' readonly suffix