mac: mmap file as PROT_READ only