Configurable SA access permissions for VO mapfiles

This commit enables configurable VO map permissions derived
from VO map files. It is now possible to enable/disable VO map files per
storage area, and decide whether the map file should grant readonly or
write access to storage area files.
The default is to grant read-only permissions.