A filtered read-only filesystem for FUSE