Does removing `school` from`read_only_fields` break stuff? I'd prefer it to be read-only as well, indicating that you can't edit a school from the user API.