Explicitly deny insert, update, remove actions on Photoset collection
Update README with screenshot and link to blog post