Mount new image readonly when updating.  That is our intention
anyway, and with squashfs that is going to happen, but this
suppresses a warning about that.