Allow USB device, but only in ro mode

[zemzema]

There are also should be an option to allow-all devices, but when they mount to be only in read-only mode. That you can copy from them, and read, but not to write.