really readonly /usr and /app