services:
  foo:
    read_only: true