fixes #1646, #3103 - enable cloning for templates, and add read-only options

Locker sounds good to me. That reminds me, I need to add controller tests now.