add docker --read-only flag

[Azleal]

adding docker --read-only flag to avoid keys being deleted in container by accident

[CLAassistant]

All committers have signed the CLA.

[akim-bow]

But :ro at the end of -v arg already does the thing you're proposing.