Define readonly/mask paths in spec Upstream-commit: c7cf2450537cf5f5f6d24067447376402ddf2680 Component: engine