Allow setting OAuth to Read Only

To allow admins to update / migrate the database without affecting
current authorizations, allow putting the extension into a read-only
mode with a config flag.

Bug: 63434
Change-Id: Ie990b0be175fc90540923b8d7c524e651ab4945d