fabfile: add setup_readonly_host