when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.