FEATURE: add readonly mode CLI