chmod 444 for read-only generated files instead of -w.