Add a --read-only parameter for the services

[addshore]

Certain use cases want read only access, ie, not let people using the API to subscribe / unsubscribe people and send emails.

The easiest way to implement this in my opinion would be a --read-only parameter that then disables the changing methods when set!