make primary keys read-only