Make Btrfs snapshots readonly