Add support for read-only bind-mounts (fixes #175)