set the sas of a container readonly.