(#2458) - explicitly mark idb changes as readonly

I had to Google for awhile before I figured out that
the default is readonly. This is the only case where
we're not being explicit.