Make filesystem read only for fuzz targets

[oliverchang]

We lost this when we replaced minijail with the newer sandboxing mechanism. This leads to a lot of noise when bad behaving targets overwrite parts of the filesystem.