don't offer read-only flag in the initial user creation page