Add _cat, _snapshot control for restrict writes

Change-Id: I435fc83b17e134d76af0f8c33cd0ae18e539d9f6