overlayfs refuse to use R/O upperdir. Since dmroot is properly set already, it's ok to mount it R/W. But remount it later R/O, to not confuse startup scripts. Fixes QubesOS/qubes-issues#5087 (cherry picked from commit 84188910cf)
84188910cf