disallow users to delete / update annotations.  This resolves #178