separated diskimage finalization from the rest (so the we can add icons and stuff before making it read-only)